Subject: [OAUTH-WG] Questions regarding OAuth

From: "Zeltsan, Zachary (Zachary)" <[email-masked]>
Date: Wed, 6 Jan 2010 18:46:18 -0600

I am trying to get a better understanding of Oauth and need answers to the following questions:

* Why is there a need for a token secret given that there is a client secret?
* How is the token secret protected when is transmitted from Server to Client as part of the temporary credentials?
* Why is there a need for temporary credentials?

Could you please help with the answers?

With thanks and best wishes for the New Year,

Zachary Zeltsan