Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm slightly confused, is it going to be called xyz? Or OAuth XYZ, or Oauth 3?

In either case, I am excited about it, I do hope it will be easier to use as well.



I think it's called XYZ until it's ready to be called Oauth 3.


It's called GNAP: https://datatracker.ietf.org/wg/gnap/documents/

The "Grant Negotiation and Authorization Protocol"


As Justin Richer writes [1]:

And to be clear, I don’t actually care if the new work is called OAuth 3.0 or TxAuth or some other name, but I do think that it’s a fitting change set for a major revision of a powerful and successful protocol. We need something new, while we patch what we have, and now’s the time to build it. Come join the conversation in TxAuth, play with XYZ, and let’s start building the future.

--------------------

[1] https://medium.com/@justinsecurity/the-case-for-oauth-3-0-5c...


Same here.

If anyone from the workgroup is reading this: please clarify in the first paragraph that XYZ is like a 'working title' for OAuth 3.


XYZ was a title of some early drafts. The current working title is GNAT. It might stay with that name, it might be decided that it'll be called "OAuth 3", it might be abandoned




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: