Re: [Ace] I-D Action: draft-ietf-ace-revoked-token-notification-06.txt

[Daniel Migault <[e-mail]>]

Thanks Goran for the revision and Marco for addressing these comments.

Yours,
Daniel

________________________________________
From: Ace <[e-mail]> on behalf of Marco Tiloca <marco.tiloca=[e-mail]>
Sent: Friday, June 2, 2023 9:59 AM
To: [e-mail]
Subject: Re: [Ace] I-D Action: draft-ietf-ace-revoked-token-notification-06.txt

Hello ACE,

This revision addresses the comments from the Shepherd review [1] - thanks Göran! - about avoiding repetitions in the instructions for the Expert review in the IANA considerations.

Best,
/Marco

[1] https://mailarchive.ietf.org/arch/msg/ace/mHpTsE-lDvzfMSt0cd-j_B-VknM/

On 2023-06-02 15:49, [e-mail]<mailto:[e-mail]> wrote:


A New Internet-Draft is available from the on-line Internet-Drafts
directories. This Internet-Draft is a work item of the Authentication and
Authorization for Constrained Environments (ACE) WG of the IETF.

   Title           : Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
   Authors         : Marco Tiloca
                     Francesca Palombini
                     Sebastian Echeverria
                     Grace Lewis
   Filename        : draft-ietf-ace-revoked-token-notification-06.txt
   Pages           : 59
   Date            : 2023-06-02

Abstract:
   This document specifies a method of the Authentication and
   Authorization for Constrained Environments (ACE) framework, which
   allows an Authorization Server to notify Clients and Resource Servers
   (i.e., registered devices) about revoked access tokens.  As specified
   in this document, the method allows Clients and Resource Servers to
   access a Token Revocation List on the Authorization Server by using
   the Constrained Application Protocol (CoAP), with the possible
   additional use of resource observation.  Resulting (unsolicited)
   notifications of revoked access tokens complement alternative
   approaches such as token introspection, while not requiring
   additional endpoints on Clients and Resource Servers.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ace-revoked-token-notification/<https://datatracker.ietf.org/doc/draft-ietf-ace-revoked-token-notification/>

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-ace-revoked-token-notification-06.html<https://www.ietf.org/archive/id/draft-ietf-ace-revoked-token-notification-06.html>

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-ace-revoked-token-notification-06<https://author-tools.ietf.org/iddiff?url2=draft-ietf-ace-revoked-token-notification-06>

Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts


_______________________________________________
Ace mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/ace<https://www.ietf.org/mailman/listinfo/ace>



--
Marco Tiloca
Ph.D., Senior Researcher

Phone: [phone]

RISE Research Institutes of Sweden AB
Box 1263
164 29 Kista (Sweden)

Division: Digital Systems
Department: Computer Science
Unit: Cybersecurity

https://www.ri.se/<https://protect2.fireeye.com/v1/url?k=31323334-501d5122-313273af-454445555731-3d296ae5721cac2b&q=1&e=47b2bd1c-8e2e-4879-8c2a-e5706e22ae60&u=https%3A%2F%2Fwww.ri.se%2F>