I am creating a REST API that should be safe enough - payment data is not transmitted, but I want the accounts not to be captured, for example.
I looked at the implementation of 2 Legged Oauth, but I donβt see the real benefit of just using basic auth over SSL (with a high API key with entropy software created as a password)
Are they any scenarios where 2 Legged Oauth is more secure than HTTP basic auth over SSL?
source share