[Owncloud] WebDAV with OAuth 2.0 support

[Michael Gapczynski]

I don't know if that validates using OAuth 2.0.

http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/


Michael

On Sunday, October 28, 2012 03:17:07 PM fkooman at tuxed.net wrote:
> On Sun, Oct 28, 2012 at 3:11 PM, Michael Gapczynski <mtgap at owncloud.com> 
wrote:
> > We had earlier decided that we needed to implement OAuth 1.0a for the API
> > instead of OAuth 2.0. This is because of the fact that the security in
> > OAuth 2.0 is only done by TLS and we shouldn't force this requirement on
> > users.
> Oh I though we decided that using OAuth 2.0 without TLS is not less
> secure than using Basic Authentication without TLS... Actually using
> OAuth 2.0 without TLS is a little more secure than using Basic Auth.
> 
> Regards,
> François