> -----Original Message-----
> From: Dick Hardt [mailto:[email protected]]
> Sent: Wednesday, February 10, 2010 7:53 PM

> How about using draft-hardt-oauth-wrap and adding a section for how the
> Client can sign?

We might end up with something that looks just like that, but your suggestions 
doesn't help me as an editor because you are offering a place to host the text 
and I am looking for the text itself.

WRAP doesn't have an 'how to use a token' section to build upon - anything that 
might go in there will need to be written from scratch (normalizing, signing, 
header structure, error handling, etc.). The challenge isn't finding a place to 
insert the 'using a token' text, but to find the best text to use as a 
foundation.

Once we figure that out, we will go through the same process for the 'how to 
get a token' text in which WRAP and the OAuth 1.0 text will be compared (along 
with any other proposals people wish to make).

When we have two stable drafts, we will have another discussion about merging 
the two drafts together. If WRAP ends up as the foundation for the other part, 
we will end up with your proposal.

EHL

_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to