Aaron Parecki on Mythryl: “At long last, the OAuth working group has finished the Best Current…”

At long last, the OAuth working group has finished the Best Current Practice for OAuth 2.0 Security and it was just published as RFC9700! This has been a long time in the works, and I'm very thankful to everyone who has helped out with it over the years! www.rfc-editor.org/rfc/rfc9700....

rfc-editor.orgRFC 9700: Best Current Practice for OAuth 2.0 SecurityThis document describes best current security practice for OAuth 2.0. It updates and extends the threat model and security advice given in RFCs 6749, 6750, and 6819 to incorporate practical experience...

4/2/25, 7:15 pm13 reposts43 likes

Post