11 Feb
2019
11 Feb
'19
12:55 p.m.
Abhilash wrote:
Having the list customized is actually good for you, since there is some extra configuration required for adding a new provider, so you don't want something to just show up without you knowing.
Stephen wrote:
But the general rule for Internet-facing applications is "shut off all access by default, and explicitly open up only the channels you need." I'm not saying your "subtract the social authentication applications" has a downside in all cases. Just that some of us prefer to expend the effort to (a) follow that general rule, and (b) advise others of its existence :-).
Thanks, this is helpful. I'll stick with the configuration as Abhilash suggested.