Re: [OAUTH-WG] Small error in OAuth BCP and new 2.1 draft...

2020-03-12 Thread Daniel Fett
Hi Peter, thanks, this is fixed in the (yet unpublished) version of the Security BCP. -Daniel Am 12.03.20 um 14:35 schrieb Pieter Philippaerts: > Hi everyone, > > I hope this is the right mailing list to submit mistakes in the OAuth > specifications... > > I was reading through the latest versio

[OAUTH-WG] Small error in OAuth BCP and new 2.1 draft...

2020-03-12 Thread Pieter Philippaerts
Hi everyone, I hope this is the right mailing list to submit mistakes in the OAuth specifications... I was reading through the latest version of the OAuth 2.0 Security Best Current Practice (version 14) and noticed a very small error. Section 2.1.1 reads: "To this end, they MUST either (a) pub