Created new comment in Authentication Overview: In "Example: Forming and Sending a Request Token Request", the signature base string has unencoded '&'s in the parameters section:
GET&http%3A%2F%2Fapi.netflix.com%2Foauth%2Frequest_token
&oauth_consumer_key%3D4958gj86hj6g99
&oauth_nonce%3D4572313...