On 2011-10-17 20:53, Eran Hammer-Lahav wrote:
All I agree with is to limit the scope character-set in the v2 spec to the subset of ASCII allowed in HTTP header quoted-string, excluding " and \ so no escaping is needed, ever.
You also need to have one character reserved as delimiter for multiple scopes inside quoted-string, so is SP out?
Best regards, Julian _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
