I haven't read the MAC spec recently enough, did you already deal with the
character set issue (if there was one) comparable to the ones in the Bearer
spec?
I am +1 on the -body_hash +ext change.
________________________________
From: Eran Hammer-Lahav <e...@hueniverse.com>
To: OAuth WG <oauth@ietf.org>
Sent: Saturday, November 19, 2011 7:39 AM
Subject: [OAUTH-WG] MAC: body-hash
I want to reaffirm our previous consensus to drop the body-hash parameter and
leave the ext parameter. Body-hash as currently specified is going to cause
significant interop issues due to character (and other) encoding issues.
Providers who desire to MAC the body can define their own ext use case.
Let me know if you have an objection to this change.
EHL
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
