On Mon, May 10, 2010 at 5:31 PM, Manger, James H
<[email protected]> wrote:
> In general, the web is about following links. Clients need to know when
> following a link crosses a security boundary. Cookies provide this; Basic
> provides this; Digest provides this; OAuth needs this too.

Notably absent from the list of protocols that need this:
- AuthSub
- ClientLogin
- BBAuth
- FBAuth
- AOL OpenAuth
- OAuth 1.0

Cheers,
Brian
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to