RFC Errata


Errata Search

 
Source of RFC  
Summary Table Full Records

Found 1 record.

Status: Held for Document Update (1)

RFC 6819, "OAuth 2.0 Threat Model and Security Considerations", January 2013

Source of RFC: oauth (sec)

Errata ID: 4267

Status: Held for Document Update
Type: Editorial

Reported By: David Gladstone
Date Reported: 2015-02-09
Held for Document Update by: Kathleen Moriarty
Date Held: 2015-12-08

Section 4.4.1.11 says:

If an authorization server includes a nontrivial amount of entropy

It should say:

If an authorization server includes a trivial amount of entropy

Notes:

The threat being described outlines a scenario where too little entropy is involved; countermeasures include using non-trivial amounts of entropy.

Report New Errata