On 06/04/2011 09:03 PM, Scott MacVicar wrote:
> On Jun 4, 2011, at 4:57 PM, Stas Malyshev wrote:
>
>> Hi!
>>
>>> In parallel I'd also see if there are any key extensions which we
>>> think are mainstream, stable and well maintained enough to be
>>> included. For example, http comes to mind.
>>
>> Maybe also oauth? It's getting popular and widely used.
>
> OAuth is basically outdated now, OAuth2 is going through the final IETF certification steps. No
> real technical changes in the last few drafts.
And OAuth2 is simple enough that an extension really isn't needed for
it. OAuth1 was painful and the extension helped a lot. But all the
painful bits that the extension takes care of are gone in OAuth2.
-Rasmus