On Thu, Jul 1, 2010 at 11:42 AM, William Mills <[email protected]> wrote:
>
>
>> -----Original Message-----
>> From: Marius Scurtescu [mailto:[email protected]]
>> Sent: Thursday, July 01, 2010 11:36 AM
>> To: Eran Hammer-Lahav
>> Cc: William Mills; Rob Richards; [email protected]
>> Subject: Re: [OAUTH-WG] Versioning
>>
>> On Thu, Jul 1, 2010 at 11:24 AM, Eran Hammer-Lahav
>> <[email protected]> wrote:
>> >
>> > If you would like to discuss a version for the header,
>> please provide examples and requirements for what changes in
>> the future you would like to support.
>>
>> Not sure about the future, but looking at OAuth 1 vs OAuth 2.
>> A protected resource request filter may want to decide early
>> what protocol it deals with so it can call the appropriate
>> handler, or to enforce HTTPS for OAuth 2 for example. Sure,
>> it can apply heuristics right now, but it would be nice to
>> have a more deterministic way which can also be extended in
>> the future. You can always embed the protocol version inside
>> the token I guess, so I don't think this is a huge issue.
>
> Yeah, unfortunately early selection of a handler might require peeking into 
> the post body.

Is anybody really using or needing this feature? Can we drop this option?

Marius
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to