Errata

Status:

Verified

Type:

Editorial

Reported By:

David Piggott

Date Reported:

2020-01-23

Verified by:

Benjamin Kaduk

Date Verified:

2020-01-30

Section 4.4.1.2 says:

Store access token hashes only (Section 5.1.4.1.3).

It should say:

Store authorization code hashes only (Section 5.1.4.1.3).

Status:

Held for Document Update

Type:

Editorial

Reported By:

David Gladstone

Date Reported:

2015-02-09

Held for Document Update by:

Kathleen Moriarty

Date Held for Document Update:

2015-12-08

Section 4.4.1.11 says:

If an authorization server includes a nontrivial amount of entropy

It should say:

If an authorization server includes a trivial amount of entropy

Notes:

The threat being described outlines a scenario where too little entropy is involved; countermeasures include using non-trivial amounts of entropy.