Found 1 record.
Status: Held for Document Update (1)
RFC 6819, "OAuth 2.0 Threat Model and Security Considerations", January 2013Source of RFC: oauth (sec)
Errata ID: 4267
Status: Held for Document Update
Reported By: David Gladstone
Date Reported: 2015-02-09
Held for Document Update by: Kathleen Moriarty
Date Held: 2015-12-08
Section 220.127.116.11 says:
If an authorization server includes a nontrivial amount of entropy
It should say:
If an authorization server includes a trivial amount of entropy
The threat being described outlines a scenario where too little entropy is involved; countermeasures include using non-trivial amounts of entropy.