Re: [OAUTH-WG] purpose of client sending bodyhash in mac authorized requests

2011-05-16 Thread Doug Tangren
-Doug Tangren http://lessis.me On Mon, May 16, 2011 at 4:06 AM, Eran Hammer-Lahav wrote: > The attributes serves both as a flag to indicate that a body hash has been > included, but also to allow validation of the request (excluding the body) > before the body is received. > > Makes sense. Thank

Re: [OAUTH-WG] purpose of client sending bodyhash in mac authorized requests

2011-05-16 Thread Eran Hammer-Lahav
The attributes serves both as a flag to indicate that a body hash has been included, but also to allow validation of the request (excluding the body) before the body is received. EHL From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of Doug Tangren Sent: Sunday, May 15, 20