[Gen-art] draft-ietf-oauth-rfc8725bis-09 ietf last call Genart review

Sue Hares via Datatracker <noreply@ietf.org> Mon, 17 August 2026 22:36 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: gen-art@ietf.org
Delivered-To: gen-art@mail2.ietf.org
Received: from [10.244.8.14] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id B48AA12B4B96F; Mon, 17 Aug 2026 15:36:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787006174; bh=mQEyPavIR01nY45k7ulnJY9wlZ2w/jnmi2BEzPUYRSE=; h=From:To:Cc:Subject:Reply-To:Date; b=Jbfz2udIt22n1oi3Zcmip57JN6REx0+Y1ZKNGCwSrEPbJf6hqIbtogY7mNeFo3ic9 QslEwhSKSzAuz4zNUPkxU1C6bdDEvlXXXOJVU6gvGPMLq3TKoIaRyDZl0uCVhTL+OD cwj1XdSba1/FEiLFGovYOJFgj361AOc6qBuN4jhY=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Sue Hares via Datatracker <noreply@ietf.org>
To: gen-art@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.71.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178700617462.561801.11247822658041818742@dt-datatracker-7c6ddbc678-86d5j>
Date: Mon, 17 Aug 2026 15:36:14 -0700
Message-ID-Hash: 65NOIYUARVSWY3NLM6CXSTXGHIZSDWQJ
X-Message-ID-Hash: 65NOIYUARVSWY3NLM6CXSTXGHIZSDWQJ
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-gen-art.ietf.org-0; header-match-gen-art.ietf.org-1; header-match-gen-art.ietf.org-2; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-oauth-rfc8725bis.all@ietf.org, last-call@ietf.org, oauth@ietf.org
X-Mailman-Version: 3.3.9rc6
Reply-To: Sue Hares <shares@ndzh.com>
Subject: [Gen-art] draft-ietf-oauth-rfc8725bis-09 ietf last call Genart review
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/nSQBAm56sk0UaCzx5n1E3yZWhpg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Owner: <mailto:gen-art-owner@ietf.org>
List-Post: <mailto:gen-art@ietf.org>
List-Subscribe: <mailto:gen-art-join@ietf.org>
List-Unsubscribe: <mailto:gen-art-leave@ietf.org>

Document: draft-ietf-oauth-rfc8725bis
Title: JSON Web Token Best Current Practices
Reviewer: Sue Hares
Review result: Ready

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.  Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at

<https://wiki.ietf.org/en/group/gen/GenArtFAQ>.

Document: draft-ietf-oauth-rfc8725bis-09
Reviewer: Sue Hares
Review Date: 2026-08-17
IETF LC End Date: 2026-07-06
IESG Telechat date: 2026-08-20

Summary: Document is clear, concise, and carefully thought out.
It is even easy to read for the non-expert (me!).  I'm not a security expert,
so I appreciate a BCP that is carefully written and easy to understand for the
non-expert.

My thanks to the authors for an outstanding work.

Major issues:

Minor issues:

Nits/editorial comments: