Dear all,
At IETF 126, we presented a new section in the draft updating the
Security BCP, covering shared consent in brokered OAuth. [1]
We discussed whether brokered OAuth architectures, including common
deployment patterns and their security considerations should be
addressed in a separate document. The current Section 2.4 of the BCP
Update draft [2] could be moved to the new document.
Would there be interest in creating such a document?
Best,
Pedram
[1]
https://datatracker.ietf.org/meeting/126/materials/slides-126-oauth-sessa-updates-to-oauth-20-security-best-current-practice-00
[2]
https://datatracker.ietf.org/doc/draft-ietf-oauth-security-topics-update/03/
--
Dr. Pedram Hosseyni
Institute of Information Security - SEC
Universität Stuttgart
Universitätsstraße 38
D-70569 Stuttgart
Germany
https://sec.uni-stuttgart.de
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]
