Comment

Comment by alanfranz

I’m not sure about how this is happening. Transmit is a desktop app - or does it have a cloud hosted component?

If it’s a desktop app, it should be possible to generate an api key and pass it to the desktop app, that’s it. Google doesn’t know or care about who’s using it at that point.

The security flow being discussed should impact cloud-hosted applications.

What am I missing?

parent alanfranz 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton