Snapshot: OAuth 2.0 - 70725

Recently Eran Hammer, one of the – until then – co-authors and editors of the OAuth 2.0 standard which is currently finalized by an IETF (Internet Engineering Task Force) working group, declared that he will withdraw his name from the specification of OAuth 2.0. He posted about this in his blog . In that blog he raised several concerns about OAuth 2.0, ending up in a conclusion that OAuth 2.0 is “more complex, less interoperable, less useful, more incomplete and most importantly, less secure” than OAuth 1.0. However he also states that “OAuth 2.0 at the hand of a developer with deep understanding of web security will likely result is [in] a secure implementation”...