I have some discussions with my work mates about how safe is SharePoint Online login. I think it is just as DropBox, FaceBook or any other application with a form. I know that Office 365 uses OAuth2 and that means a separation between the application and the provider and that solves one part of the problem. But, what about the client side?
Always I've been asked about this I say that having a SharePoint farm in Azure VM and connected via VPN is more secure than SharePoint Online (IaaS vs SaaS) because I understand that SharePoint Online is not safer.
- Could we have some leves of security?
- How can we measure that?
- How can we take a decision knowing the weak points?
Please, could you throw some light on this issue?