On Tue, Dec 24, 2019 at 12:27 AM Brian Campbell <[email protected]> wrote: > > https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.3.2 > has "Replace implicit flow with postmessage communication or ..." but without > a defined and interoperable way of using postmessage communication in place > of the implicit flow that "proposed countermeasure" seems a problematic > suggestion..
The WG could pick up https://datatracker.ietf.org/doc/draft-ideskog-assisted-token/ _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
