FWIW, I was okay with the text EHL had originally proposed for 21.
>> > client_secret >> > REQUIRED. The client secret. The client MAY omit the >> > parameter if the client secret >> > is an empty string. >> >> I would suggest rewording the above as follows: >> client_secret >> REQUIRED unless it is an empty string. The client secret. > > "unless its value is an empty string". Do people read this new text to mean > OPTIONAL if not empty? _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth