it is relevant — for Stolen Credentials threat. if you have creds you can obtain...

		homakov on March 15, 2013 \| parent \| context \| favorite \| on: Achilles Heel of OAuth or Why Facebook Adds #_=_ it is relevant — for Stolen Credentials threat. if you have creds you can obtain access token for ANY redirect_uri, even for leaking. if it would be static it would not be possible to leak it at all