Re: [OAUTH-WG] Next Steps

Subbu Allamaraju <subbu@subbu.org> Thu, 25 March 2010 22:26 UTC

Return-Path: <subbu@subbu.org>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 482E83A6BAF for <oauth@core3.amsl.com>; Thu, 25 Mar 2010 15:26:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.469
X-Spam-Level:
X-Spam-Status: No, score=-1.469 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y7af8iT8OuZK for <oauth@core3.amsl.com>; Thu, 25 Mar 2010 15:26:28 -0700 (PDT)
Received: from mail-ww0-f44.google.com (mail-ww0-f44.google.com [74.125.82.44]) by core3.amsl.com (Postfix) with ESMTP id 338213A68CB for <oauth@ietf.org>; Thu, 25 Mar 2010 15:26:28 -0700 (PDT)
Received: by wwb31 with SMTP id 31so486223wwb.31 for <oauth@ietf.org>; Thu, 25 Mar 2010 15:26:47 -0700 (PDT)
Received: by 10.216.179.18 with SMTP id g18mr1607459wem.52.1269556007548; Thu, 25 Mar 2010 15:26:47 -0700 (PDT)
Received: from wlanvpn-mc2e-247-147.corp.yahoo.com (nat-dip10.cfw-b-gci.corp.yahoo.com [209.131.62.145]) by mx.google.com with ESMTPS id u14sm4516555gvf.2.2010.03.25.15.26.45 (version=SSLv3 cipher=RC4-MD5); Thu, 25 Mar 2010 15:26:46 -0700 (PDT)
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
From: Subbu Allamaraju <subbu@subbu.org>
In-Reply-To: <daf5b9571003250955qfc54f91x114b6cc31e7bad65@mail.gmail.com>
Date: Thu, 25 Mar 2010 15:26:43 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <A2C18FBC-131E-4BAE-8BDD-291FE8ED5AF1@subbu.org>
References: <d37b4b431003241011q5783dffel9629b969d56e1212@mail.gmail.com> <23BB5765-A379-4661-A29E-C8DD7E9DDA91@inuus.com> <857B7017-3E7B-4A83-AD46-F449429A8151@facebook.com> <b71cdca91003241826x69a03b2eue999f68bdb5842a@mail.gmail.com> <81A32191-4D98-473F-8DC7-EF02472DD3A5@subbu.org> <daf5b9571003250955qfc54f91x114b6cc31e7bad65@mail.gmail.com>
To: Brian Eaton <beaton@google.com>
X-Mailer: Apple Mail (2.1077)
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Next Steps
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Mar 2010 22:26:29 -0000

On Mar 25, 2010, at 9:55 AM, Brian Eaton wrote:

> On Thu, Mar 25, 2010 at 6:09 AM, Subbu Allamaraju <subbu@subbu.org> wrote:
>> Just curious - why can't the client check the Date header?
> 
> Yes, that works, but lots of clients don't realize it is possible.

In other words, this is part of HTTP, and should not have to be specified in layered protocols like OAuth.

Regards,
Subbu