Re: [OAUTH-WG] AD Review: draft-ietf-oauth-discovery-06

2017-09-11 Thread Mike Jones
Eric, I believe that https://tools.ietf.org/html/draft-ietf-oauth-discovery-07 addresses all your comments. Thanks for them again. If you agree, can you please progress the document to the next step? Thanks, -- Mike -Original

Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-security-topics-03.txt

2017-09-11 Thread Denis
Hi Torsten, Hereafter is my feedback. There are related to two separate concerns :     a) the Alice and Bob Collusion attack" (ABC attack), and     b) privacy issues with the audience parameter. *Alice and Bob Collusion attack" (ABC attack)* The text states in section 4.4.1.2 : A typical