Return-Path: X-Original-To: oauth@ietfa.amsl.com Delivered-To: oauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65AC21A9109 for ; Wed, 3 Feb 2016 22:25:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u_X2dOBhL9Uc for ; Wed, 3 Feb 2016 22:25:40 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0751.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::751]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B28E41A9100 for ; Wed, 3 Feb 2016 22:25:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vx+Az//vsynXeAnKiviACOu+VHsFgmIp+g2EDJNyfRw=; b=SFf5Zu9j3F3g7LWPBIO11hcefSqn3wW8vfaQHT9Z3NPDnzbYsfDwNw7hDMpIcMffsouRISSvgGFpWA+klH6tlO/NCKM3QMHd3jy3lZF42RqkC4kVYzjQdYLgAUQDI3GiUyuvGhG8bYx6lG2Qo43QPY+ZxuB4rMXswdx7t2RJX6Y= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.396.15; Thu, 4 Feb 2016 06:25:18 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0396.020; Thu, 4 Feb 2016 06:25:18 +0000 From: Mike Jones To: Hannes Tschofenig , "oauth@ietf.org" Thread-Topic: [OAUTH-WG] Call for Adoption: OAuth 2.0 Security: OAuth Open Redirector Thread-Index: AQHRUq89SU72pIQFX0SzljfYyrJnBp8bhBng Date: Thu, 4 Feb 2016 06:25:18 +0000 Message-ID: References: <569E2260.4080904@gmx.net> In-Reply-To: <569E2260.4080904@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: gmx.net; dkim=none (message not signed) header.d=none;gmx.net; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [50.47.85.157] x-ms-office365-filtering-correlation-id: 2bc69cb8-ece0-473e-84a5-08d32d2bf3e8 x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:1Ykp1eH4iAFz4ik+jwzSUsk6qgpiiQkC7C4WNHVLj17erdQw+xnwwK4osE5pVqw9e+3jlo4hXqJzEutLHyVw98LzS3ZL0Jcg9FVEjLQNphISeJy8s39Q5hpDamHdEvc4Vn6FwLmAl0eA4ud8hci4bQ==; 24:dkAe5myjCSXeLQMeWHSujq7zu7KBJ4sXciFEknwtgYbqFvmSGnUX4MGL/19GLzaR4yKKContx+eM0TEzT65kD+AmyDLMpeO/L0GbCG41VUc= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(61426038)(61427038); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 084285FC5C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(13464003)(53754006)(10090500001)(19580395003)(5001770100001)(2501003)(5003600100002)(40100003)(66066001)(19580405001)(74316001)(99286002)(33656002)(5004730100002)(5002640100001)(76576001)(106116001)(86612001)(50986999)(586003)(92566002)(2900100001)(3660700001)(11100500001)(76176999)(77096005)(15975445007)(87936001)(5008740100001)(2906002)(1096002)(5005710100001)(107886002)(189998001)(1220700001)(10290500002)(3280700002)(2950100001)(3846002)(86362001)(122556002)(6116002)(102836003)(10400500002)(54356999)(5001960100002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Feb 2016 06:25:18.5817 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: Re: [OAUTH-WG] Call for Adoption: OAuth 2.0 Security: OAuth Open Redirector X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Feb 2016 06:25:42 -0000 SSBzdXBwb3J0IGFkb3B0aW9uIG9mIHRoaXMgZG9jdW1lbnQgYnkgdGhlIHdvcmtpbmcgZ3JvdXAu DQoNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBPQXV0 aCBbbWFpbHRvOm9hdXRoLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBIYW5uZXMgVHNj aG9mZW5pZw0KU2VudDogVHVlc2RheSwgSmFudWFyeSAxOSwgMjAxNiAzOjQ4IEFNDQpUbzogb2F1 dGhAaWV0Zi5vcmcNClN1YmplY3Q6IFtPQVVUSC1XR10gQ2FsbCBmb3IgQWRvcHRpb246IE9BdXRo IDIuMCBTZWN1cml0eTogT0F1dGggT3BlbiBSZWRpcmVjdG9yDQoNCkhpIGFsbCwNCg0KdGhpcyBp cyB0aGUgY2FsbCBmb3IgYWRvcHRpb24gb2YgT0F1dGggMi4wIFNlY3VyaXR5OiBPQXV0aCBPcGVu IFJlZGlyZWN0b3IsIHNlZQ0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJyYWRs ZXktb2F1dGgtb3Blbi1yZWRpcmVjdG9yLTAyDQoNClBsZWFzZSBsZXQgdXMga25vdyBieSBGZWIg Mm5kIHdoZXRoZXIgeW91IGFjY2VwdCAvIG9iamVjdCB0byB0aGUgYWRvcHRpb24gb2YgdGhpcyBk b2N1bWVudCBhcyBhIHN0YXJ0aW5nIHBvaW50IGZvciB3b3JrIGluIHRoZSBPQXV0aCB3b3JraW5n IGdyb3VwLg0KDQpOb3RlOiBBdCB0aGUgSUVURiBZb2tvaGFtYSB3ZSBhc2tlZCBmb3IgZ2VuZXJp YyBmZWVkYmFjayBhYm91dCBkb2luZyBzZWN1cml0eSB3b3JrIGluIHRoZSBPQXV0aCB3b3JraW5n IGdyb3VwIGFuZCB0aGVyZSB3YXMgdmVyeSBwb3NpdGl2ZSBmZWVkYmFjay4gSG93ZXZlciwgZm9y IHRoZSBhZG9wdGlvbiBjYWxsIHdlIG5lZWQgdG8gYXNrIGZvciBpbmRpdmlkdWFsIGRvY3VtZW50 cy4gSGVuY2UsIHlvdSBuZWVkIHRvIHN0YXRlIHlvdXIgdmlldyBhZ2Fpbi4NCg0KQ2lhbw0KSGFu bmVzICYgRGVyZWsNCg0KDQoNCg0K