Re: [OAUTH-WG] Typos and language in -21

2011-09-20 Thread Eran Hammer-Lahav
Thanks. EHL > -Original Message- > From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf > Of Niv Steingarten > Sent: Monday, September 12, 2011 2:01 PM > To: OAuth WG > Subject: [OAUTH-WG] Typos and language in -21 > > In section 10.12 (CSRF)

[OAUTH-WG] Typos and language in -21

2011-09-12 Thread Niv Steingarten
In section 10.12 (CSRF): 5th paragraph: "A CSRF attack against the against the authorization server's authorization endpoint" One "against the" is redundant. 4th paragraph: "The binding value enables the client to validate the validity of the request by matching the binding value to the user