Sorry for jumping into this late. Client <--> proxy <--> backend
The C/P side is protected by TLS. There must be similar protection on the P/B side, such as client-cert, or a signature over the certificate being forwarded, right?
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
