[OAUTH-WG] Re: draft-oauth-browser-based-apps

2025-01-17 Thread Aaron Parecki
Thanks for the review. We've just published draft 22 addressing this feedback. https://www.ietf.org/archive/id/draft-ietf-oauth-browser-based-apps-22.html Comments are inline: > General: There are more than a couple of Normative references that are pointing to 'living documents'. From my readi

[OAUTH-WG] Re: draft-oauth-browser-based-apps

2025-01-16 Thread Aaron Parecki
Thanks, I'm working on tracking down stable references for these and will have a new version published addressing this feedback shortly. Aaron On Thu, Jan 16, 2025 at 6:54 AM Rifaat Shekh-Yusef wrote: > Section 11: RFC6819 is a normative reference, but it is Informational. >> We need to call

[OAUTH-WG] Re: draft-oauth-browser-based-apps

2025-01-16 Thread Rifaat Shekh-Yusef
> > Section 11: RFC6819 is a normative reference, but it is Informational. > We need to call that out in the IETF Last Call, and I have to approve the > downref (which I will do). Looking at the text in the document that references this RFC, it does not look like any of these references are norm