Open Authentication 2.0 - Security Threats

Question

There are several social networking sites that use Open Authentication 2.0. I know that Open Auth is vulnerable to phishing attacks, although SSL makes it unlikely. What are the security risks inherent in using Open Auth 2.0?

Answer 1

This document has some good pointers to how the attack could be and what the counters are.

http://tools.ietf.org/html/rfc6819

Hope this helps