Thanks for the useful review, Eric. I’ll work with Brian and the crew to
incorporate this feedback.
-- Mike
From: OAuth [mailto:oauth-boun...@ietf.org] On Behalf Of Eric Rescorla
Sent: Friday, December 29, 2017 8:41 AM
To: oauth@ietf.org; d
Full-featured review at:
https://mozphab-ietf.devsvcdev.mozaws.net/D4278
As noted in inline comments, some additional words about the security model
in which this document is embedded seem like they are needed. In
particular, it's pretty unclear to me what checks the STS is supposed to do
on a giv
