Re: [OAUTH-WG] Downgrade attacks on PKCE

[Gavin Henry]

I note Ory Hydra forces PKCE for all types of clients already.

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth