Re: [OAUTH-WG] Next steps (draft timeline)

2010-09-30 Thread Eran Hammer-Lahav
The chairs sent a longer list of new items to consider. This does not replace that list but only focuses on the immediate next steps. EHL On Sep 30, 2010, at 8:38, "Torsten Lodderstedt" mailto:tors...@lodderstedt.net>> wrote: Bassically, your suggestion sounds reasonable to me. The only thing

Re: [OAUTH-WG] Next steps (draft timeline)

2010-09-30 Thread Torsten Lodderstedt
Bassically, your suggestion sounds reasonable to me. The only thing I'm missing is discovery. As you pointed out in http://hueniverse.com/2010/09/oauth-2-0-without-signatures-is-bad-for-the-web/ this is a major enabler for interoperable APIs and motivates the need for signatures. Shouldn't we

[OAUTH-WG] Next steps (draft timeline)

2010-09-29 Thread Eran Hammer-Lahav
(This is a draft overview of our next steps. Clearly, this can change based on working group consensus.) Proposal discussion The working group is still discussing the compromise proposal for moving section 5 out of the specification. So far there is general support but some have raised concern