Kirsch: Banks using OAuth 2 for APIs have horrible security
Steve Kirsch · 763: He's Raised $18.5m To Help Banks Use Open API's, Makes Money From # of API Calls · Aug 26, 2017 · at 4:26
Steve Kirsch, founder of open banking platform Token, contrasts Token's cryptographic signing with standard bank API security protocols.
0:00 / 0:07exact quote · 7.9s
720p mp4 · rendered on demand · StarZero watermark
“Whereas most banks are using, for their own APIs, they're using OAuth too, which is Just horrible from a security perspective.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Steve Kirsch
Kirsch: Blockchain consensus is inappropriate for low-latency financial systems
“There's no real need for that in a lot of financial applications and for something that needs to perform really quickly meaning super low latency and very high throughput. The technology for blockchain is just not appropriate because you just don't have the ti…”
Kirsch: Most Banks Lack Open APIs for Moving Money
“The problem is that most banks don't have an open API where you can do things like move money.”
Kirsch: Bank of England's Ethereum trial yielded five transactions per second
“The Bank of England did an experiment with Ethereum, and they found that they could get, like, five transactions a second.”
Kirsch predicts US open banking adoption will snowball from European demand
“I think the same thing will happen here is that there's a big stick that causes the European banks to get on board the system. Once that happens, the apps get written and then the apps only work with European banks. Ooh. So if I want to move money instantly fr…”