Subject: [OAUTH-WG] Looking for feedback on "client-server OAuth" usage

From: Eve Maler <[email-masked]>
Date: Mon, 16 May 2011 10:55:27 -0700

Folks-- Sorry for the intrusion, but this seemed the community best positioned to respond to this query. I'm interested to talk to security architects and application architects in organizations that have informed opinions on the "client-server" pattern of OAuth as an enterprise web services security technique, either because:

- You currently use it with full forethought
- You currently see ad-hoc usage of it in your org
- You are considering using it for some use cases
- You have considered and rejected it

Any or all of the 2.0 MAC pattern, 1.0a usage, plain old app-to-app protection, mobile use cases, etc. are fair game. Feel free to drop me a note at [email-masked] or [email-masked], or ping me on Twitter (use the hashtag #Forr2Legs to catch my attention fastest), or write in here if you like:

http://forr.com/FORRblog_OAuth

Feel free to forward this to folks you know who might be interested to respond. Thanks in advance,

	Eve

Eve Maler                                  http://www.xmlgrrl.com/blog
+1 425 345 6756                         http://www.twitter.com/xmlgrrl