Minor language change request. We have seen much more demand for use of the user-agent flow in mobile apps than in desktop apps in the past month. I think that the spec should address that.
Instead of this: 1.4.3. Native Application Native application are clients running as native code on the end- user's computer or device (i.e. executing outside a user-agent or as a desktop program). These clients are often capable of interacting with (or embedding) the end-user's user-agent but are limited in how such interaction affects their end-user experience. In many cases, native applications are incapable of receiving direct callback requests from the server (e.g. firewall, operating system restrictions). The spec should mention that mobile applications typically qualify as operating entirely in the user-agent. Going forward I think those are going to be way more popular and widespread than desktop apps (well, the whole concept of the two is blurring). _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth