Subject: [OAUTH-WG] Updated version of our paper (IdP Mix-Up and other attacks)

From: Daniel Fett <[email-masked]>
Date: Mon, 27 Jun 2016 14:18:12 +0200

Hi all,

we released an updated version of our paper
"A Comprehensive Formal Security Analysis of OAuth 2.0"
in which we present the IdP Mix-Up attack. In this update, we clarified
some of the assumptions for the IdP Mix-Up attack.

We now also analyzed the resistance of OAuth against cross-site request
forgery and found some new attacks. (We at least briefly described the
attacks in separate posts here on the mailinglist over the last months.)

Please find the updated paper here:
https://arxiv.org/abs/1601.01229

Cheers,
Daniel
-- 
Informationssicherheit und Kryptografie
UniversitÃ€t Trier - Tel. 0651 201 2847 - H436