Re: [OAUTH-WG] problem statement

I'm gonna ditch the (lengthy) reply I was drafting and agree with the below.

Personally, my communication with the OAuth WG has been spot on. Warm
welcome, open minds
and a very good process to getting my requirements/concerns heard and
pragmatic change enacted.

All I saw here was foot stomping and a counter-productive approach to
communicating by those
not getting their way.

On 7 September 2011 20:12, Eran Hammer-Lahav <eran@hueniverse.com> wrote:

> Michael,
>
> I suggest you go back and read the entire thread again:
>
> http://www.ietf.org/mail-archive/web/oauth/current/maillist.html
>
> I don't think you have been listening to the 11 (!) people who all
> completely disagree with you and dismiss your suggestions (on technical
> grounds). The one person who supported your plea didn't actually make any
> technical contribution.
>
> If anyone wants to make accusations about behaving like adults, that should
> be the 11 people who tried to explain why you are simply wrong and were
> completely ignored by you. Any perceived hostility is easily justified by
> having to explain the same thing over and over again to someone who refuses
> to list and insists on labeling this work as lacking and insecure. We take
> real security pretty seriously here.
>
> You asked a question as someone "very new to thinking about this problem
> space" and was answered by experts. The fact that you refuse to accept their
> answers is while being , at this point, your problem. You were given
> multiple opportunities to present an alternative text and technical
> justification to support it, but refused to do so.
>
> You might not like my tone, but I consider making a statement like this:
>
> > In fact, you guys have convinced me that OAuth gives inferior protection
> at
> > considerable expense for all concerned.
>
> an irresponsible and serious offense - the kind of baseless FUD that can
> cause real damage to important work.
>
> EHL
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

-- 
------------------------------------------------------------------
Never send sensitive or private information via email unless it is
encrypted. http://www.gnupg.org