> Am 08.12.2018 um 16:55 schrieb Nov Matake <mat...@gmail.com>: > > But even using code flow, issuing TB-bound access token has same difficulty, > doesn't it? > I don’t think this issue is relate to implicit flow.
Determining the referred token binding id and proving ownership of the key isn’t easy. Brian is the expert on that topic.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
