OAuth and Security

Events happening in the community are now at Drupal community events on www.drupal.org.

Posted by robloach on March 26, 2008 at 5:16am

One issue with the Services API is its weak implementation of API keys. Although it does work, it could be better. It is probably worth it to investigate OAuth, an open protocol to "allow secure API authentication in a simple and standard method from desktop and web applications". Some of you got the chance to see Boris' talk on this in Boston at Drupalcon, any thoughts? How would it effect Services?