[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)

From: John Panzer <jpanzer at google.com>
To: Mark Nottingham <mnot at mnot.net>
Cc: "oauth at ietf.org" <oauth at ietf.org>
Date: Thu, 8 Oct 2009 00:10:35 -0700
In-reply-to: <5BFD6F3E-4A66-4C7B-98FF-8D2C286977B3 at mnot.net>
References: <90C41DD21FB7C64BB94121FBBC2E72343784D58457 at P3PW5EX1MB01.EX1.SECURESERVER.NET> <5BFD6F3E-4A66-4C7B-98FF-8D2C286977B3 at mnot.net>

One minor meta-comment:
--
John Panzer / Google
jpanzer at google.com / abstractioneer.org / @jpanzer

On Wed, Oct 7, 2009 at 9:15 PM, Mark Nottingham <mnot at mnot.net> wrote:

Digging up some feedback I sent privately a long while back WRT problem reporting (so apologies if the drafts have move on since)...
...
* parameter_rejected - Unrecognised parameters should be ignored; see
Postel.

You're probably not advocating this, but: Postel's Law applied blindly to security protocols can lead to disaster.

Follow-Ups:
- Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
  - From: Mark Nottingham

References:
- [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
  - From: Eran Hammer-Lahav
- Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
  - From: Mark Nottingham

Prev by Date: Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
Next by Date: [OAUTH-WG] Working Group Last Call for draft-hammer-oauth-03
Previous by thread: Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
Next by thread: Re: [OAUTH-WG] Request for feedback: OAuth IETF Drafts (Due 10/2)
Index(es):
- Date
- Thread

Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.