Post

Logan Magee

@lberrymage.dev

Today I learned that the PKCE extension for OAuth2 is officially pronounced "pixy"

Josh

@sideofburritos.com

That is a pronunciation I NEVER would have guessed correctly.

Logan Magee

@lberrymage.dev

I've always pronounced it my head letter by letter. But it says how to pronounce it right at the beginning of the RFC. datatracker.ietf.org/doc/html/rfc...

datatracker.ietf.orgRFC 7636: Proof Key for Code Exchange by OAuth Public ClientsOAuth 2.0 public clients utilizing the Authorization Code Grant are susceptible to the authorization code interception attack. This specification describes the attack as well as a technique to mitigat...

Josh

@sideofburritos.com

Exact same thing I did. HTTP, PKCE, letter by letter. Interesting they added it to the RFC. I wonder if there are any others that have it.

Logan Magee

@lberrymage.dev

There definitely are. I remember there's at least one other weird one from an IETF RFC for something that's well-known aside from the pronunciation. Looked it up... PNG is "ping" 🙃

Logan Magee

@lberrymage.dev

For fun I decided to look up some others. There are a few, but so far my favorites are ACL (pronounced "ak-uh l", RFC 8519) and, well... you'll just have to read RFC 5513

7/10/26, 3:29 am0 reposts1 like

Josh

@sideofburritos.com

😆RFC 5513 was great