@techreport{lodderstedt-oauth-security-01, number = {draft-lodderstedt-oauth-security-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-security/01/}, author = {Torsten Lodderstedt and Mark McGloin and Phil Hunt}, title = {{OAuth 2.0 Threat Model and Security Considerations}}, pagetotal = 51, year = 2011, month = mar, day = 14, abstract = {This document gives security considerations based on a comprehensive threat model for the OAuth 2.0 Protocol.}, }