I haven't read the MAC spec recently enough, did you already deal with the
character set issue (if there was one) comparable to the ones in the Bearer
spec?
I am +1 on the -body_hash +ext change.
________________________________
From: Eran Hammer-Lahav <[email protected]>
To: OAuth WG <[email protected]>
Sent: Saturday, November 19, 2011 7:39 AM
Subject: [OAUTH-WG] MAC: body-hash
I want to reaffirm our previous consensus to drop the body-hash parameter and
leave the ext parameter. Body-hash as currently specified is going to cause
significant interop issues due to character (and other) encoding issues.
Providers who desire to MAC the body can define their own ext use case.
Let me know if you have an objection to this change.
EHL
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth
