I don't think open vs close has a big impact on design. The issue of state full 
vs stateless are foundational. 

So we need to talk about when and why state full registration is needed. 

Phil

On 2013-08-22, at 12:39, Anthony Nadalin <tony...@microsoft.com> wrote:

> Phil, this just brings me back to the question, "why are we doing this in 
> OAuth" ? Configuration endpoint (nothing to do with OAuth), Registration 
> Endpoint (too complicated, goes beyond the bounds of OAuth), why not just a 
> stateless and state full registration message and that's it?
> 
> -----Original Message-----
> From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of 
> Phil Hunt
> Sent: Thursday, August 22, 2013 12:23 PM
> To: Tschofenig, Hannes (NSN - FI/Espoo)
> Cc: oauth mailing list
> Subject: Re: [OAUTH-WG] Dynamic Client Registration Conference Call: Thu 22 
> Aug, 2pm PDT: Conference Bridge Details -- Correction!
> 
> I have attached a PDF including some of my thoughts, concerns, and 
> suggestions for the upcoming meeting.
> 
> Phil
> 
> @independentid
> www.independentid.com
> phil.h...@oracle.com
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to