NIST SP 800-63-1 obsoleted

[ioggstream]

I expect

An updated ref to NIST SP publication.

Instead

The I-D cites NIST SP 800-63-1 withdrawn in 2013
Note: 800-63-2 was Withdrawn on June 22, 2017. Superseded by SP 800-63-3; SP 800-63C; SP 800-63A; SP 800-63B

[aaronpk]

@ioggstream Can you confirm that the current list of threats in the doc are still included in the latest set of NIST documents? What I'm looking for is whether the list in the OAuth draft needs to be updated with more/less items based on the latest NIST docs.

[ioggstream]

Good question :)

I need to work on it.