Re: [OAUTH-WG] [apps-discuss] [http-state] HTTP MAC Authentication Scheme

2011-06-13 Thread Bjartur Thorlacius
On 6/13/11, Tim wrote: > Agreed. It is a typical "no one can do it because no one else is > doing it" situation. Not quite, as ad networks are free to support TLS. Embedders simply link to ads using either the http or the https scheme (without breaking anythings as user agents support both alread

Re: [OAUTH-WG] [apps-discuss] [http-state] HTTP MAC Authentication Scheme

2011-06-08 Thread Bjartur Thorlacius
On 6/8/11, Nico Williams wrote: > Sweet! Thanks for confirming my intuition, and then some. I like the > idea that using TLS actually reduces latency -- I'd not have imagined > it. > Well, it's the enforcement of the end-to-end principle that reduces latency, not the TLS protocol per se. You'd g