SIG Security Meeting : Nov 5th

[isamauny]

Attendees: Phil (42Crunch ) / Peter Davis (Chief Architect / AirsideMobile)
Discussion :

• From Jeremy’s proposal, specifying where the token must be is a great idea
  We must enrich the proposal so that :
• What the token is about (client, Resource Owner, exchanged data, operation invocation context -like HTTP-Signature, etc…)
• Which information the token should contain
• Where to obtain a token

can be described

• How to describe Certificate pinning