Re: [Ace] Using Problem Details (RFC 9290) in draft-ietf-ace-revoked-token-notification

Paul Wouters <paul.wouters@aiven.io> Tue, 09 April 2024 12:30 UTC

Return-Path: <paul.wouters@aiven.io>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8033C14F695 for <ace@ietfa.amsl.com>; Tue, 9 Apr 2024 05:30:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.204
X-Spam-Level:
X-Spam-Status: No, score=-1.204 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MIME_HTML_ONLY_MULTI=0.001, MIME_QP_LONG_LINE=0.001, MPART_ALT_DIFF=0.79, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=aiven.io
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BLo0B7TxDk_V for <ace@ietfa.amsl.com>; Tue, 9 Apr 2024 05:30:39 -0700 (PDT)
Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 782FFC14F617 for <ace@ietf.org>; Tue, 9 Apr 2024 05:30:30 -0700 (PDT)
Received: by mail-lj1-x235.google.com with SMTP id 38308e7fff4ca-2d476d7972aso71163841fa.1 for <ace@ietf.org>; Tue, 09 Apr 2024 05:30:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aiven.io; s=google; t=1712665828; x=1713270628; darn=ietf.org; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:from:to:cc:subject:date:message-id :reply-to; bh=skrQ7vEsWH2b7wKhTExnZPeh8da3z+YgZO32TLshgis=; b=ekJo7nxcAgI9B1HlWNDv7DpcT4lK9Oa8C+dQWbyLRJ9Qieyz83Gmo5N85BaUg3q2CX YKsI0kx6itZi3vUOEx1xa5t3k32lm7VZqS77ZYr9sJMPv1cE7pN+JhXlDWza+5vj5cu6 x7QNo6hyZZGhnjRTpcS9N1KcZh68uczEk6fQ4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712665828; x=1713270628; h=to:in-reply-to:cc:references:message-id:date:subject:mime-version :from:content-transfer-encoding:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=skrQ7vEsWH2b7wKhTExnZPeh8da3z+YgZO32TLshgis=; b=EU4329DRrT1zJ0tbgStyVUCpUDhH8zJQ5P3CR9Ct2R9oxzxhUO+RXQCvQimlfZLsXb KBr1aikxQe0eKc3uvbe4wLxf0si2+RWsCgiQw+BWMZKT4IWPfQfDZGE1+EaFGPAHtJwC yucc/lBrkOcb857sI1Ve6HBfkd7Z5N/8cZHDj60E53KymIl2uGmmqezM/r7DMyJTqr3Y Revqzp9gFUMR0IsZepN/mW3A+3mvigGlA1byCxHf1Xud8EyTtrznLabKWVnHeBvzVxoX DPagzdy7MhmMPhP2TA87VGyijpUPptJ7oznUBhkanafgxgekLKghV0yGPpOWGEGttwcH mONA==
X-Gm-Message-State: AOJu0Yzc+rJtr0gz7eCI5D7JRZOQexXNQGo5wrUZlxo3SUi/ZRnB4aFe itT9qnW26XJkgVnsVtA/34tpLAMdN8caCb/MMHcnGk+xLzOuwrXEfIfxTeHyYVA=
X-Google-Smtp-Source: AGHT+IHiAocUeBfxsX2rN97UibUHE1+LIKGL6uJ1ZVji5Yb9xMrgZHmVVFhmSLB1vAFuzbtzb0qziw==
X-Received: by 2002:a19:ca1e:0:b0:516:a213:46d2 with SMTP id a30-20020a19ca1e000000b00516a21346d2mr8447657lfg.69.1712665828073; Tue, 09 Apr 2024 05:30:28 -0700 (PDT)
Received: from smtpclient.apple ([74.122.52.94]) by smtp.gmail.com with ESMTPSA id l13-20020a170906794d00b00a46a2779475sm5593728ejo.101.2024.04.09.05.30.27 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 09 Apr 2024 05:30:27 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail-03B27482-9C51-4440-BE90-24D1C9CD75C6"
Content-Transfer-Encoding: 7bit
From: Paul Wouters <paul.wouters@aiven.io>
Mime-Version: 1.0 (1.0)
Date: Tue, 09 Apr 2024 08:30:16 -0400
Message-Id: <29CBC469-65A9-496E-8497-6E47A9D88B6A@aiven.io>
References: <b2af82fa-735b-4673-b067-71f1e620e79e@ri.se>
Cc: Ace Wg <ace@ietf.org>
In-Reply-To: <b2af82fa-735b-4673-b067-71f1e620e79e@ri.se>
To: Marco Tiloca <marco.tiloca@ri.se>
X-Mailer: iPhone Mail (21D61)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/IwYVGKf7I510Ass2rDnp1z53q6U>
Subject: Re: [Ace] Using Problem Details (RFC 9290) in draft-ietf-ace-revoked-token-notification
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2024 12:30:43 -0000

On Apr 8, 2024, at 09:23, Marco Tiloca <marco.tiloca@ri.se> wrote:

 Hello Paul and ACE,

In its current version -06, the document draft-ietf-ace-revoked-token-notification [0] uses a custom payload format for error responses.

While addressing the received IETF Last Call comments, the authors would also like to make a change for using Problem Details (RFC 9290 [1]) as payload format for error responses.

I have no objections to this. If anyone in the WG objects, please speak soon.

Paul



Other than being appropriate per se, the same change:

* has recently happened in draft-ietf-ace-key-groupcomm and draft-ietf-ace-oscore-gm-admin

* has happened in draft-ietf-ace-workflow-and-params as part of updating RFC 9200; and

* is planned for draft-ietf-ace-key-groupcomm-oscore, also consistent and aligned with draft-ietf-ace-key-groupcomm

Absent objections, the authors plan to make this change and use the Problem Details format, when addressing the comments received during the IETF Last Call and producing version -07 of the draft.

Thanks,
/Marco

[0] https://datatracker.ietf.org/doc/draft-ietf-ace-revoked-token-notification/" rel="nofollow">https://datatracker.ietf.org/doc/draft-ietf-ace-revoked-token-notification/

[1] https://www.rfc-editor.org/rfc/rfc9290.html" rel="nofollow">https://www.rfc-editor.org/rfc/rfc9290.html

-- 
Marco Tiloca
Ph.D., Senior Researcher

Phone: +46 (0)70 60 46 501

RISE Research Institutes of Sweden AB
Box 1263
164 29 Kista (Sweden)

Division: Digital Systems
Department: Computer Science
Unit: Cybersecurity

https://www.ri.se" rel="nofollow">https://www.ri.se
<OpenPGP_0xEE2664B40E58DA43.asc>