Yes, host-meta is definitely in play.  I do want the SASL profile to be able to 
specify discovery info in-band too though.  So the discovery returned in the 
SASL profile might be a host-meta indication or it might be the relevant 
contents if the SASL profile wants to override what might be normal for the 
domain.

-bill

> -----Original Message-----
> From: Marius Scurtescu [mailto:mscurte...@google.com]
> Sent: Wednesday, January 19, 2011 9:59 AM
> To: William Mills
> Cc: Eran Hammer-Lahav; OAuth WG
> Subject: Re: [OAUTH-WG] Removal: 'OAuth2' HTTP Authentication Scheme
> 
> On Wed, Jan 19, 2011 at 9:50 AM, William Mills <wmi...@yahoo-inc.com>
> wrote:
> > Yes it's old, 1 week form expiring too.  The specs seem to be
> stabilizing
> > now so it's worth updating.   Has there been any other discovery
> proposal
> > yet?
> 
> Nothing concrete AFAIK, but for SASL we also discussed using host-meta
> style discovery. Somehow this approach seemed cleaner to me, but of
> course it needs work (to define file location/format/content).
> 
> Marius
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to