This wiki is no longer active and is left here for historical purposes. Please visit oauth.net for up-to-date information.

log inhelp

View
 

OAuth Session Fixation Advisory 

This version was saved 8 years, 9 months ago View current version     Page history
Saved by eaton.lists@...
on April 24, 2009 at 6:39:18 pm
 

There is a session fixation attack against OAuth 1.0.  There is a security advisory.

 

Fix proposals:

 

Comparision of proposals:

Comments (0)

You don't have permission to comment on this page.

Printable version