Fix: #21. Reorganize TLS parts.

oauth-wg / oauth-v2-1

OAuth 2.1 is a consolidation of the core OAuth 2.0 specs

https://oauth.net/2.1/

Other

53 stars 27 forks source link

Fix: #21. Reorganize TLS parts. #30

Closed ioggstream closed 3 years ago

ioggstream commented 3 years ago

This PR

Reorganize TLS parts:

move all references to TLS usage to a separate section
mention "https" scheme

ioggstream commented 3 years ago

@aaronpk I tried to reorganize the TLS parts in a single section. As a first-time reader, I found the continuous reminders to TLS confusing and inherently suggesting that TLS was only required for some flows.

aaronpk commented 3 years ago

Thanks, this is great, I'll discuss this with the other editors next time we talk!

ioggstream commented 3 years ago

Thanks @aaronpk As this is a draft PR I'm really open to improvements.

ioggstream commented 3 years ago

cc: @peppelinux

ioggstream commented 3 years ago

@aaronpk the IETF Using TLS in Applications wg is working on that https://tools.ietf.org/html/draft-ietf-uta-rfc7525bis-00 we could ping them too. In the meanwhile I think this PR improves the readability of the current document.

aaronpk commented 3 years ago

I like the editorial improvements. Since this contains normative changes in #40 it is pending that discussion.

ioggstream commented 3 years ago

@aaronpk let me know if/when you need a rebase.

aaronpk commented 3 years ago

@ioggstream the group agreed to the normative change of requiring HTTPS for redirect URIs so I would like to merge this PR. Could you rebase it to fix the merge conflicts? Thanks!

ioggstream commented 3 years ago

@aaronpk sure, but it will take some days :P hope it's not an issue...

aaronpk commented 3 years ago

No problem, thanks!

aaronpk commented 3 years ago

Closing in favor of #98