Re: [OAUTH-WG] Channel binding and OAuth profiles

2011-04-05 Thread Eran Hammer-Lahav
f.org [mailto:oauth-boun...@ietf.org] On Behalf Of William J. Mills Sent: Tuesday, April 05, 2011 5:45 PM To: OAuth WG Subject: [OAUTH-WG] Channel binding and OAuth profiles In working on the SASL mechanism spec for OAuth we have to deal with Channel Binding. Sparing you the gory details there I believe

[OAUTH-WG] Channel binding and OAuth profiles

2011-04-05 Thread William J. Mills
In working on the SASL mechanism spec for OAuth we have to deal with Channel Binding.  Sparing you the gory details there I believe that the right thing to do is to add the channel binding information into the tunneled HTTP/OAuth  authentication.  For those OAuth profiles like MAC and SAML that