Looking at draft 20, the public/confidential (replacing private) terms still seem awkward. I still had a "huh" reaction.
It appears that the major qualities are: how wide is the client distributed and shared and how well the client app is controlled. How about widely-distributed vs. controlled-distribution ? Other ideas? Phil @independentid www.independentid.com phil.h...@oracle.com _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth