My point is twofold - a) more about it being a false sense of security (the way it was promoted), and b) there are clearly places that it could be using the tokenauth path (yet the http path is preferred).
Working on a token auth library for @djangoproject's Django-rest-framework. Stay tuned!
The idea is to provide one library that does token auth for multiple web/cli/mobile clients via one interface but allows diff. settings for each client.
#django#djangorestframework#python
Token > Password...so we've been chipping away at scenarios that use embedded passwords in #sccm
In 1806 the NAA is only needed in a few, hopefully edge cases due to #tokenauthdocs.microsoft.com/en-us/scc…