Re: [OAUTH-WG] single use authorization codes

[William Mills]

If I can see things go by on the fly I can submit the token late and
mess with the user by revoking their session.
> 
> > It closes one door but opens a DOS attack.
> 
> What's the DOS attack?
> 
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth