Comment 5 for bug 381133

Revision history for this message
Ryan Paul (segphault) wrote :

After conducting a careful reading of the OAuth specification and studying various implementations, I have concluded that the standard itself is fundamentally defective. It simply cannot be supported in desktop applications because there is no way to guarantee the security of the application secret key. As such, I have decided to remove plans for OAuth support from the roadmap until this issue is adequately addressed.