Re: [OAUTH-WG] Review of OAuth 2.0 for Browser-Based Apps

Thank you for the thorough review! My responses and feedback is below. I've gone ahead and published a new draft based on this feedback so that the edits can be read in context. It is now available here: https://tools.ietf.org/html/draft-ietf-oauth-browser-based-apps-05 I've made all "EDITORIAL"

[OAUTH-WG] Review of OAuth 2.0 for Browser-Based Apps

I did a cover-to-cover read of draft-ietf-oauth-browser-based-apps-04. My review comments follow in three sections: substantive comments on the text, substantive overall issues to consider (provided by Microsoft product engin