Re: [OAUTH-WG] MAC Token Comments

2011-11-19 Thread Eran Hammer-Lahav
Thanks. > -Original Message- > From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf > Of Justin Richer > Sent: Friday, August 12, 2011 11:44 AM > To: oauth@ietf.org > Cc: Anganes, Amanda L > Subject: [OAUTH-WG] MAC Token Comments > > 2: MA

Re: [OAUTH-WG] MAC Token Comments

2011-08-12 Thread William Mills
k. -bill From: Justin Richer To: "oauth@ietf.org" Cc: "Anganes, Amanda L" Sent: Friday, August 12, 2011 11:43 AM Subject: [OAUTH-WG] MAC Token Comments 2: MAC Key: "The server MUST NOT reissue a previously issued MAC key and MAC key id

Re: [OAUTH-WG] MAC Token Comments

2011-08-12 Thread William J. Mills
k. -bill From: Justin Richer To: "oauth@ietf.org" Cc: "Anganes, Amanda L" Sent: Friday, August 12, 2011 11:43 AM Subject: [OAUTH-WG] MAC Token Comments 2: MAC Key: "The server MUST NOT reissue a previously issued MAC key and MAC key id

[OAUTH-WG] MAC Token Comments

2011-08-12 Thread Justin Richer
2: MAC Key: "The server MUST NOT reissue a previously issued MAC key and MAC key identifier combination." 3: I would still like to see a binding for post body and url parameters. This could be as simple as defining a set of parameter names for everything used in the auth header, but I'm still giv