[Ace] Re: I-D Action: draft-ietf-ace-revoked-token-notification-08.txt

Paul Wouters <paul.wouters@aiven.io> Mon, 24 June 2024 18:22 UTC

Return-Path: <paul.wouters@aiven.io>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E3FFC1CAE82 for <ace@ietfa.amsl.com>; Mon, 24 Jun 2024 11:22:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=aiven.io
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZppB5tNoPaw for <ace@ietfa.amsl.com>; Mon, 24 Jun 2024 11:22:48 -0700 (PDT)
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A275EC19ECB8 for <ace@ietf.org>; Mon, 24 Jun 2024 11:22:48 -0700 (PDT)
Received: by mail-ed1-x52a.google.com with SMTP id 4fb4d7f45d1cf-57d1679ee83so4864307a12.2 for <ace@ietf.org>; Mon, 24 Jun 2024 11:22:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aiven.io; s=google; t=1719253366; x=1719858166; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Gv2OEkd1agLG2o1xDAi6Z4fI1yjgReP+VivFtJrEknI=; b=jeWRx7zTrHZn5VjHSXsbmv0R2w6oLvH+HbWkTXdC9rU/zL7ZniFUq7KBMlr5C2dK3U 1aXcFvI5PjvriB9o5bDVZtHRWKFPov8HOqBBUffpgJ0aptPSJ4i39dJORlGdkHLPDqLw 1r2GrkUU6WoHLzA2f/YgdfBtTAXB5dLOQ3+Lk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719253366; x=1719858166; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Gv2OEkd1agLG2o1xDAi6Z4fI1yjgReP+VivFtJrEknI=; b=DuyoCKyK9fal6wPz/l0132OrKqv3wsAW0r7IC25oDe/U082pv6Me//m93PDqDxMYre IhT6ZKtHCMlrH3fpF7bHUvP+M0+K5jBcBYIe33kP8tl9bsvniZisvbLxAnWOIVaWvtUk gGaPaXEHjIiJ0z5a3PwIbuK+h/hITR6ZEKdGT2jPL7/5wG0g1ZF9Xfe56Uwrzrn05NyB 8hVSigFn+Bh7/ieq4akml449JQMoISAOTSx6yl9KpVghYPmfkVbP2SpYdOzdec4MXBtr sq8enZ8DgoKvIn5155SjgXlqW7NZ2ogMT9lPV6709KyNgweVH71r5I4nWwK32S3/Cg5Y 5CHQ==
X-Gm-Message-State: AOJu0YwHoGlkV+0NOypbV6lhCWuk75iXLiz1uj73R//4kOPE3IuF35Tm NXucBHNBciTRSNWP4+RmxN4t+aSvhWAgJPB5ClLIZUNSUqrbNzCO8BKh2NFhKc556yeVrQRMKRi eeQWf4Bjew/2cgEP0Sn0+UT+TSas+gDe9vtgUMA==
X-Google-Smtp-Source: AGHT+IEAGh4zmFAt3g2F3BZK15XRtPiZsEbgV72LVnfkWTXU/RoFWbR0vEjtacTocL6QF6soFXvIGMzhw4zqZH7Odik=
X-Received: by 2002:a50:8a93:0:b0:57d:2794:76ce with SMTP id 4fb4d7f45d1cf-57d7003f354mr348816a12.15.1719253366467; Mon, 24 Jun 2024 11:22:46 -0700 (PDT)
MIME-Version: 1.0
References: <171923136255.296902.373501397208570663@dt-datatracker-ff65ff8f7-whn7d> <1dabc886-8f6a-4635-b5e7-f2232df399db@ri.se>
In-Reply-To: <1dabc886-8f6a-4635-b5e7-f2232df399db@ri.se>
From: Paul Wouters <paul.wouters@aiven.io>
Date: Mon, 24 Jun 2024 14:22:35 -0400
Message-ID: <CAGL5yWbyRoLzZpYzmBMCYjDEMg2YoCq16TqzBz4XqjsyMY44Ag@mail.gmail.com>
To: Marco Tiloca <marco.tiloca@ri.se>
Content-Type: multipart/alternative; boundary="000000000000304219061ba6de9a"
Message-ID-Hash: QEVCY6RFLKVWVQJCEJMKDMQJWAF5RSS2
X-Message-ID-Hash: QEVCY6RFLKVWVQJCEJMKDMQJWAF5RSS2
X-MailFrom: paul.wouters@aiven.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ace.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: ace@ietf.org
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Ace] Re: I-D Action: draft-ietf-ace-revoked-token-notification-08.txt
List-Id: "Authentication and Authorization for Constrained Environments (ace)" <ace.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/7SYtuq110In03pFEOnnmCpeEvao>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Owner: <mailto:ace-owner@ietf.org>
List-Post: <mailto:ace@ietf.org>
List-Subscribe: <mailto:ace-join@ietf.org>
List-Unsubscribe: <mailto:ace-leave@ietf.org>

On Mon, Jun 24, 2024 at 8:20 AM Marco Tiloca <marco.tiloca@ri.se> wrote:

> Hello ACE and Paul,
>
> This just submitted version -08 addresses the comments from the second WG
> Last Call.
>

Thanks. I've created the IESG ballot.

Paul




>
> Best,
> /Marco
>
> On 2024-06-24 14:16, internet-drafts@ietf.org wrote:
>
> Internet-Draft draft-ietf-ace-revoked-token-notification-08.txt is now
> available. It is a work item of the Authentication and Authorization for
> Constrained Environments (ACE) WG of the IETF.
>
>    Title:   Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
>    Authors: Marco Tiloca
>             Francesca Palombini
>             Sebastian Echeverria
>             Grace Lewis
>    Name:    draft-ietf-ace-revoked-token-notification-08.txt
>    Pages:   75
>    Dates:   2024-06-24
>
> Abstract:
>
>    This document specifies a method of the Authentication and
>    Authorization for Constrained Environments (ACE) framework, which
>    allows an Authorization Server to notify Clients and Resource Servers
>    (i.e., registered devices) about revoked access tokens.  As specified
>    in this document, the method allows Clients and Resource Servers to
>    access a Token Revocation List on the Authorization Server by using
>    the Constrained Application Protocol (CoAP), with the possible
>    additional use of resource observation.  Resulting (unsolicited)
>    notifications of revoked access tokens complement alternative
>    approaches such as token introspection, while not requiring
>    additional endpoints on Clients and Resource Servers.
>
> The IETF datatracker status page for this Internet-Draft is:https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-ace-revoked-token-notification%2F&data=05%7C02%7Cmarco.tiloca%40ri.se%7C0e152f095ebb4e10f40e08dc944796c8%7C5a9809cf0bcb413a838a09ecc40cc9e8%7C0%7C0%7C638548282391605773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=Arush4mjaUtqdknnj7mnT2hPKOJn%2BpKBQjDqI2FENIc%3D&reserved=0
>
> There is also an HTML version available at:https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Farchive%2Fid%2Fdraft-ietf-ace-revoked-token-notification-08.html&data=05%7C02%7Cmarco.tiloca%40ri.se%7C0e152f095ebb4e10f40e08dc944796c8%7C5a9809cf0bcb413a838a09ecc40cc9e8%7C0%7C0%7C638548282391616059%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=Fr8MQB56FwjfYvRvvIS7H9rM9Flh%2FzUxnH37s%2B26%2B44%3D&reserved=0
>
> A diff from the previous version is available at:https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fauthor-tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-ietf-ace-revoked-token-notification-08&data=05%7C02%7Cmarco.tiloca%40ri.se%7C0e152f095ebb4e10f40e08dc944796c8%7C5a9809cf0bcb413a838a09ecc40cc9e8%7C0%7C0%7C638548282391622521%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=TIF%2FDx5Z5is4Oka8FmSJ9yG2WL7i2G8WUUebXqk36y0%3D&reserved=0
>
> Internet-Drafts are also available by rsync at:rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Ace mailing list -- ace@ietf.org
> To unsubscribe send an email to ace-leave@ietf.org
>
>
> --
> Marco Tiloca
> Ph.D., Senior Researcher
>
> Phone: +46 (0)70 60 46 501
>
> RISE Research Institutes of Sweden AB
> Box 1263
> 164 29 Kista (Sweden)
>
> Division: Digital Systems
> Department: Computer Science
> Unit: Cybersecurity
> https://www.ri.se
>
>