On Wed, Sep 23, 2026 at 3:21 PM Paul Bastian <[email protected]> wrote:
> Hi Neil, > > thanks for the detailed review. Here are my thoughts: > > *1.* DPoP exists because TLS alone was judged insufficient to protect > access tokens in real deployments. > > I don't think that's an accurate appraisal. -- _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you._
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
