> Am 08.12.2018 um 16:55 schrieb Nov Matake <mat...@gmail.com>:
> 
> But even using code flow, issuing TB-bound access token has same difficulty, 
> doesn't it?
> I don’t think this issue is relate to implicit flow.

Determining the referred token binding id and proving ownership of the key 
isn’t easy. Brian is the expert on that topic.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to