Yes, host-meta is definitely in play. I do want the SASL profile to be able to specify discovery info in-band too though. So the discovery returned in the SASL profile might be a host-meta indication or it might be the relevant contents if the SASL profile wants to override what might be normal for the domain.
-bill > -----Original Message----- > From: Marius Scurtescu [mailto:[email protected]] > Sent: Wednesday, January 19, 2011 9:59 AM > To: William Mills > Cc: Eran Hammer-Lahav; OAuth WG > Subject: Re: [OAUTH-WG] Removal: 'OAuth2' HTTP Authentication Scheme > > On Wed, Jan 19, 2011 at 9:50 AM, William Mills <[email protected]> > wrote: > > Yes it's old, 1 week form expiring too. The specs seem to be > stabilizing > > now so it's worth updating. Has there been any other discovery > proposal > > yet? > > Nothing concrete AFAIK, but for SASL we also discussed using host-meta > style discovery. Somehow this approach seemed cleaner to me, but of > course it needs work (to define file location/format/content). > > Marius _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
