<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Some more feedback:<br>
<br>
The first sentence in the Abstract should say "describes" instead of
"describe."<br>
<br>
The phrase "OpenID OAuth Extension" is not consistently capitalized in
the spec. For instance, it's capitalized in the first sentence in
section 3, but "extension" is lowercase in section 4. Sections 5 and 8
call it the OAuth extension, rather than the OpenID OAuth Extension.<br>
<br>
The second word in Section 7, "Requesting" should be all lowercase.<br>
<br>
In Section 7, the phrase "this extension can be used to request that
the end user authorize an OAuth token" should probably be clarified to
say that the user is authorizing an OAuth Access token.<br>
<br>
In the last sentence of Section 8, the phrase "SHOULD not" should be in
all caps, "SHOULD NOT."<br>
<br>
I recommend that the phrase "Combined Consumer" be used instead of
simply "Consumer" everywhere in the spec. The third paragraph in
section 9, and the description for OAuth token secret in Section 10
still say Consumer.<br>
<br>
In Section 10, is the Access Token endpoint discoverable? I guess
that's out of scope for this spec.<br>
<br>
In Section 10, and perhaps also in Section 12, the spec should mention
that because the hybrid protocol does not have a request token secret,
and because the user is never required to manually type in the request
token (unlike in OAuth), the hybrid Request Token probably should be
longer and harder to guess than the standard OAuth Request Token. At
least for our implementation, I'm thinking that the hybrid RT ==
OAuth's RT+RTSecret.<br>
<br>
I think the spec is getting pretty close.<br>
<br>
thanks<br>
Allen<br>
<br>
<br>
<br>
<br>
Dirk Balfanz wrote:
<blockquote
cite="mid:60c552b80811241607n7a26d1c7w58d54af1bd7c4104@mail.gmail.com"
type="cite">
<div class="gmail_quote">
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
Otherwise, the spec is looking pretty good!<br>
</blockquote>
<div><br>
</div>
<div>Great! We're officially calling it Draft 1 now :-) (the previous
version was Draft 0).</div>
<div><br>
</div>
</div>
</blockquote>
</body>
</html>