Re: [OAUTH-WG] problem statement

[Eran Hammer-Lahav <[e-mail]>]

Michael,

I suggest you go back and read the entire thread again:

http://www.ietf.org/mail-archive/web/oauth/current/maillist.html

I don't think you have been listening to the 11 (!) people who all completely disagree with you and dismiss your suggestions (on technical grounds). The one person who supported your plea didn't actually make any technical contribution.

If anyone wants to make accusations about behaving like adults, that should be the 11 people who tried to explain why you are simply wrong and were completely ignored by you. Any perceived hostility is easily justified by having to explain the same thing over and over again to someone who refuses to list and insists on labeling this work as lacking and insecure. We take real security pretty seriously here.

You asked a question as someone "very new to thinking about this problem space" and was answered by experts. The fact that you refuse to accept their answers is while being , at this point, your problem. You were given multiple opportunities to present an alternative text and technical justification to support it, but refused to do so.
 
You might not like my tone, but I consider making a statement like this:

> In fact, you guys have convinced me that OAuth gives inferior protection at
> considerable expense for all concerned.

an irresponsible and serious offense - the kind of baseless FUD that can cause real damage to important work.

EHL