Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08

2018-05-29 Thread Eric Rescorla
ng London. > > > > -- Mike > > > > *From:* Eric Rescorla > *Sent:* Friday, April 13, 2018 7:37 PM > *To:* Mike Jones > *Cc:* oauth@ietf.org > *Subject:* Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08 > > > > Thanks for t

Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08

2018-04-23 Thread Mike Jones
:37 PM To: Mike Jones Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08 Thanks for the quick followup. I will take a look at the next version -Ekr On Fri, Apr 13, 2018 at 6:06 PM, Mike Jones mailto:michael.jo...@microsoft.com>> wrote: We still need

Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08

2018-04-13 Thread Eric Rescorla
London. > > > >-- Mike > > > > *From:* OAuth *On Behalf Of * Eric Rescorla > *Sent:* Friday, April 13, 2018 6:00 PM > *To:* oauth@ietf.org > *Subject:* [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08 > > > > Hi folks, > > > >

Re: [OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08

2018-04-13 Thread Mike Jones
] Follow up on draft-ietf-oauth-device-flow-08 Hi folks, I just looked at the -08 diffs and I see a new section on brute forcing the token but not describing the confused deputy attack. Did I miss something, or were you still planning to add more text? Thanks -Ekr

[OAUTH-WG] Follow up on draft-ietf-oauth-device-flow-08

2018-04-13 Thread Eric Rescorla
Hi folks, I just looked at the -08 diffs and I see a new section on brute forcing the token but not describing the confused deputy attack. Did I miss something, or were you still planning to add more text? Thanks -Ekr ___ OAuth mailing list OAuth@ietf.o