Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params
Brian Campbell <bcampbell@pingidentity.com> Fri, 10 January 2020 20:16 UTC
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DCDD120052 for <ace@ietfa.amsl.com>; Fri, 10 Jan 2020 12:16:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y6et-iaWIzgl for <ace@ietfa.amsl.com>; Fri, 10 Jan 2020 12:16:34 -0800 (PST)
Received: from mail-lj1-x241.google.com (mail-lj1-x241.google.com [IPv6:2a00:1450:4864:20::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A9351200DB for <ace@ietf.org>; Fri, 10 Jan 2020 12:16:33 -0800 (PST)
Received: by mail-lj1-x241.google.com with SMTP id j1so3413095lja.2 for <ace@ietf.org>; Fri, 10 Jan 2020 12:16:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cSkYyVX1FsV5mHagG2cEgfRLsc7a00l4yr6Es6a3yNI=; b=UpxNAhBB1pXqW/xUqY/r1ZDXRdvKndC0w1dX6Ihp9r9nIM3DqXp6Y8MOPVCJIUu62V b2UnJCoxrIjYdS3ukzpJkFFUMu1u3raTdisXOnpmynSTAV9zHU9HER1mfDPBcunJPODf 1lPJmw6SjT3nPHdGIdowMCHIaHL5lCwfmMc9sxH3VwUMDyRE3XDUqHlhlc8Y078BPfyD veWVzYzyPG15tPYEO7R42UkSb7P4iKrLCqYpfeXzyWa+uCc2nH7ZC9YmpJ8sTLvRAazZ 7/UufqW+zxLWAtASFdxn5b9RmVQ8pFIETcPMSr8o4Iu78ix144QXyFY6NhADu4IuVvoo Llwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cSkYyVX1FsV5mHagG2cEgfRLsc7a00l4yr6Es6a3yNI=; b=ev3+04fdjn10dINX98QhMLI5blZ8wIZ7qK/vBzWNyT4V1rPEC3EL8aUBf+C0RcYBMc dIzUAbAfUmunzNm9XYYOxH7L74DJW+meBY7wI2Xu6AHXROC9Pi4TA2hpEqjcbx4aFzTP Tua3ma8DW/wjLN+JTk2KJgHhbg3bGmm7fwD6NSSi0hsoXaKGC1/KASLWcREtvGkWaRf0 ZeE9N+YwUp5jJOsP3Mug9LxQ5079P8GiCP3KNDHKdiGg/P0IMEM0HSbVm2tWHZ55fU8/ WykZWFKFPfHd9qdfR5bPvOC1YMlJ19Pqlcv1qtk2NnnXdIMm8hUqjUSHJj3/ndPev3DL kqtA==
X-Gm-Message-State: APjAAAW2pcFkoVp1H+A/ZBfKR+FAzkywe6wT5AhujoFcJC5oVKv/p0WT 3z/6rQm3jdUQpStFg6At7hUgfdzTbc0uC2milcufpmzBdCNrgJCcZTQ5HTWPPllPshL/ecGUIh5 g8asNtoFCKOU=
X-Google-Smtp-Source: APXvYqxBCeG5dJMFLRuEOGIz/IL6IKZo6/ybyOGMOjBeLVkzZNdZjXQYhVQX1uLcsY9xdwRmQWnqlMcp6bAtW5rXbQc=
X-Received: by 2002:a2e:94c8:: with SMTP id r8mr3716097ljh.28.1578687391671; Fri, 10 Jan 2020 12:16:31 -0800 (PST)
MIME-Version: 1.0
References: <4a5177af-a442-f109-f620-0ae91953eb63@gmx.de> <CA+k3eCSG3m8=DTnNX-xa2ydaKzHU5WUC5JaWH9vbcMN2XcPnZw@mail.gmail.com> <acc7f28a-fc79-bd44-f228-f8e722415c2b@gmx.de>
In-Reply-To: <acc7f28a-fc79-bd44-f228-f8e722415c2b@gmx.de>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 10 Jan 2020 13:16:05 -0700
Message-ID: <CA+k3eCRJkQz2x_kKxQHoD7vtv9BkgsWFfGPJKwXdW3pjJhjBow@mail.gmail.com>
To: Ludwig Seitz <ludwig_seitz@gmx.de>
Cc: Roman Danyliw <rdd@cert.org>, oauth-ext-review@ietf.org, Daniel Migault <daniel.migault@ericsson.com>, Jim Schaad <ietf@augustcellars.com>, Benjamin Kaduk <kaduk@mit.edu>, "ace@ietf.org" <ace@ietf.org>, drafts-lastcall@iana.org
Content-Type: multipart/alternative; boundary="000000000000314267059bcecdb3"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/RQrCMT7Exz8bN4VHFx7kbfSCFBA>
Subject: Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Jan 2020 20:16:37 -0000
That certainly takes care of the registry conflict problem, thanks. I'm a little confused, however, and uncertain if that changes the syntax in a way that maybe wasn't intended? -09 had: cnf OPTIONAL. This field contains information about the proof-of- possession key that binds the client to the access token. Values of this parameter follow the syntax of the "cnf" claim from section 3.1 of [I-D.ietf-ace-cwt-proof-of-possession]. See Section 5 for additional discussion of the usage of this parameter. while -10 has: Furthermore the AS can use the "cnf" parameter specified in section 9.4 of [I-D.ietf-oauth-mtls] in an introspection response. For CBOR- based interactions the AS MUST use the parameter mapping specified in Figure 5. So in -09 the "cnf" Introspection Response Parameter was the following the syntax of the "cnf" claim from PoP Key Semantics for CWTs [ID.ietf-ace-cwt-proof-of-possession] and in -10 it's following the syntax of PoP Key Semantics for JWTs [RFC7800] transitively via [I-D.ietf-oauth-mtls] reference. I think I understand that the two PoP key semantics documents are conceptually the same or similar. But I don't know that the syntax is the same? Figure 5 <https://tools.ietf.org/html/draft-ietf-ace-oauth-params-10#section-6> is pointed to for mapping between CBOR and JSON but it only has mappings for the main top level parameters. Maybe I just don't get it or am missing something... On Tue, Jan 7, 2020 at 12:46 PM Ludwig Seitz <ludwig_seitz@gmx.de> wrote: > On 2019-12-23 22:32, Brian Campbell wrote: > > The OAuth Token Introspection Response registry > > < > https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#token-introspection-response > > > > already has an entry for "cnf", which makes the first request in > > https://tools.ietf.org/html/draft-ietf-ace-oauth-params-07#section-9.4 > > rather problematic. > > > > OAuth beats us on the finish line again :-( > > I have updated the draft to remove the registration and refer to the > MTLS draft. > > /Ludwig > > -- _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you._
- [Ace] Requested review for IANA registration in d… Ludwig Seitz
- Re: [Ace] Requested review for IANA registration … Brian Campbell
- Re: [Ace] Requested review for IANA registration … Benjamin Kaduk
- Re: [Ace] Requested review for IANA registration … Ludwig Seitz
- Re: [Ace] Requested review for IANA registration … Brian Campbell
- Re: [Ace] Requested review for IANA registration … Seitz Ludwig
- Re: [Ace] Requested review for IANA registration … Brian Campbell
- Re: [Ace] Requested review for IANA registration … Jim Schaad
- Re: [Ace] Requested review for IANA registration … Jim Schaad
- Re: [Ace] Requested review for IANA registration … Jim Schaad
- Re: [Ace] Requested review for IANA registration … Benjamin Kaduk