Re: [oauth] Is OAuth death?

2012-08-02 Thread Steven WIllmott
d Bearer specs were approved by IESG to be > sent to RFC Editor as of today. > That means, it is essentially done. > > Nat > > On Wed, Aug 1, 2012 at 3:02 PM, Steven WIllmott wrote: > Hi Hannes, > > Thanks for your answer - I can definitely understand the sentiments

Re: [oauth] Is OAuth death?

2012-08-01 Thread Steven WIllmott
gt; I hope that this makes sense to you. If you have any recommendations of what > guidance developers would like to see I am sure we can put some information > together. > > Ciao > Hannes > > On Jul 29, 2012, at 4:31 PM, Steven WIllmott wrote: > >> Hi Hannes, &g

Re: [oauth] Is OAuth death?

2012-07-29 Thread Steven WIllmott
y dies (that is already widely implemented and > deployed). > > I would have liked to get the specification finished earlier myself and, > funny enough, Eran is also responsible for the delay (although not the only > person). > > > On Jul 29, 2012, at 2:38 PM, Steven W

Re: [oauth] Is OAuth death?

2012-07-29 Thread Steven WIllmott
I certainly don't think it's dead - Eran makes some important points and the current 2.0 spec has certainly dragged a long time to get final. The biggest concern is fragmentation between implementations - the suggestion of using a concrete instantiation (e.g. Facebook) only take you so far. T