SIG Security Meeting : Nov 5th - Githubissues

OAI / sig-security

Apache License 2.0

7 stars 1 forks source link

SIG Security Meeting : Nov 5th #5

Open isamauny opened 2 years ago

isamauny commented 2 years ago

Attendees: Phil (42Crunch ) / Peter Davis (Chief Architect / AirsideMobile) Discussion :

From Jeremy’s proposal, specifying where the token must be is a great idea We must enrich the proposal so that :
What the token is about (client, Resource Owner, exchanged data, operation invocation context -like HTTP-Signature, etc…)
Which information the token should contain
Where to obtain a token

can be described

How to describe Certificate pinning