OAuth 2.0 Security Best Current Practice
draft-ietf-oauth-security-topics-15

Approval announcement
Draft of message to be sent after approval: