My group is evaluating OAuth as a possible technology. I need some information though. Some of the questions I think I know the answer to, but I want to hear it from people active in the community.

* Version 1.0a is the current standard. 2.0 is in the wings. When? Will it be backwards compatible to 1.0a?

* Also, from what I gather it will either include WRAP or something like it. Is 2.0 intended to have any compatibility with WRAP at all? Should we ignore WRAP and wait for 2.0?

* The reference implementations we have looked at are Java, Python and Perl. These are used widely and have been adopted by the community at large. Correct?

* If so, these implementations will be maintained for future releases of the OAuth spec., right? If not, what will replace them?

Since this is security, it is always a selling point if we can point to people using the reference impls. in production environments. Any large names that depend on these? If not, again, why not?

Thanks!

JJ

--
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oa...@googlegroups.com.
To unsubscribe from this group, send email to 
oauth+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/oauth?hl=en.

Reply via email to