Re: [OAUTH-WG] client certs and TLS Terminating Reverse Proxies (was Re: I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt)

[Salz, Rich]

  *   Relying on a fixed, random header name for security, even as a “defense 
in depth” measure, is dangerous.

Thank you.  +1

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth