I note Ory Hydra forces PKCE for all types of clients already.
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
- [OAUTH-WG] Downgrade attacks on PKCE Daniel Fett
- Re: [OAUTH-WG] Downgrade attacks on PKCE Neil Madden
- Re: [OAUTH-WG] Downgrade attacks on PKCE Dick Hardt
- Re: [OAUTH-WG] Downgrade attacks on PKCE Ryan Kelly
- Re: [OAUTH-WG] Downgrade attacks on PKCE Filip Skokan
- Re: [OAUTH-WG] Downgrade attacks on PKCE Vladimir Dzhuvinov
- Re: [OAUTH-WG] Downgrade attacks on PKCE Gavin Henry
- Re: [OAUTH-WG] Downgrade attacks on PKCE Mike Jones
- Re: [OAUTH-WG] Downgrade attacks on PKCE John Bradley
- Re: [OAUTH-WG] Downgrade attacks on PKCE Kazuki Tsuzuku
