wefwef

4216 readers

1 users here now

wefwef is now Voyager! Subscribe to !voyagerapp@lemmy.world.

founded 1 year ago

MODERATORS

aeharding@lemmy.world

What is the security risk of using wefwef.app? (lemmy.world)

submitted 1 year ago by rylin@lemmy.world to c/wefwef@lemmy.world

3 comments fedilink hide all child comments

See title. When logging into wefwef.app, does the dev have access to my account credentials or session tokens? Should we all self host our own?

you are viewing a single comment's thread
view the rest of the comments

[–] asleepinpairee@sh.itjust.works 1 points 1 year ago (2 children)

No. https://lemmy.world/post/631486

[–] rylin@lemmy.world 2 points 1 year ago (1 children)

Sounds like the session token and credentials pass through wefwef servers but aren't stored locally so theoretically they (the dev or wefwef server owner) could capture that info, correct?

[–] yoichi@lemmy.world 1 points 1 year ago

Looks like that's how it is till they can figure out the CORS issue. The dev does go on to say you are free to self-host if you feel it is a security issue