Subject: [Unbearable] [TokenBinding/Internet-Drafts] 0ccb5b: OAuth is authorization protocol and problems have ...

From: balfanz <[email-masked]>
Date: Thu, 26 Jan 2017 11:00:01 -0800

Branch: refs/heads/master
  Home:   https://github.com/TokenBinding/Internet-Drafts
  Commit: 0ccb5b97620f6328b2d3c33893583e982684c6f3
      https://github.com/TokenBinding/Internet-Drafts/commit/0ccb5b97620f6328b2d3c33893583e982684c6f3
  Author: Brian Campbell <[email-masked]>
  Date:   2016-12-19 (Mon, 19 Dec 2016)

  Changed paths:
    M draft-ietf-tokbind-https-08.xml

  Log Message:
  -----------
  OAuth is authorization protocol and problems have arisen from misusing it for authentication (see https://oauth.net/articles/authentication/ for example). While this is a bit of nit, I worry that wording like “... to cryptographically bind authentication tokens (such as cookies and OAuth tokens) to ..." in the HTTPSTB abstract might contribute to the misconception. This commit just adds "or authorization" to the sentence in the abstract.

  Commit: 17f0e80e9659e92fdaa8f57e8733ddc6dd8d2de0
      https://github.com/TokenBinding/Internet-Drafts/commit/17f0e80e9659e92fdaa8f57e8733ddc6dd8d2de0
  Author: balfanz <[email-masked]>
  Date:   2017-01-26 (Thu, 26 Jan 2017)

  Changed paths:
    M draft-ietf-tokbind-https-08.xml

  Log Message:
  -----------
  Merge pull request #89 from b---c/noauth

OAuth is authorization protocol

Compare: https://github.com/TokenBinding/Internet-Drafts/compare/22851cd52266...17f0e80e9659