Re: Oauth blog post

Hannes Tschofenig <hannes.tschofenig@gmx.net> Sun, 29 July 2012 20:50 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAD5F21F849D for <ietf@ietfa.amsl.com>; Sun, 29 Jul 2012 13:50:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IEzFE0mgtNQI for <ietf@ietfa.amsl.com>; Sun, 29 Jul 2012 13:50:55 -0700 (PDT)
Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23]) by ietfa.amsl.com (Postfix) with SMTP id A1ECD21F84E2 for <ietf@ietf.org>; Sun, 29 Jul 2012 13:50:50 -0700 (PDT)
Received: (qmail invoked by alias); 29 Jul 2012 20:50:48 -0000
Received: from dhcp-172b.meeting.ietf.org (EHLO dhcp-172b.meeting.ietf.org) [130.129.23.43] by mail.gmx.net (mp027) with SMTP; 29 Jul 2012 22:50:48 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/tXuY4Jy7tVn+mxW4e3JXuDZTyCgKVpLPUrJwB58 SWDMHPfXobJkI5
Subject: Re: Oauth blog post
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="us-ascii"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <1876CD0A-DD0A-4253-B559-0A4F041DA3DE@checkpoint.com>
Date: Sun, 29 Jul 2012 13:50:45 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <2A096686-53B2-42C0-8A7B-CEDD691AB2AD@gmx.net>
References: <501531F7.5040404@gmail.com> <6.2.5.6.2.20120729073422.06d8fe10@resistor.net> <39B73AD9-4E8F-4E94-A538-69BE5D8C0E18@gmx.net> <1343593068.9245.0.camel@gwz-laptop> <1876CD0A-DD0A-4253-B559-0A4F041DA3DE@checkpoint.com>
To: Yoav Nir <ynir@checkpoint.com>
X-Mailer: Apple Mail (2.1084)
X-Y-GMX-Trusted: 0
Cc: "ietf@ietf.org" <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 20:50:55 -0000

Hi Yoav, 

> 
> Hi
> 
> Like Dale, I haven't followed the play throughout the life of OAuth (the working group)
> 
Barely anyone has done that. 

> Who are these corporations that dominate the working group?  Are they content providers like Facebook, Twitter, or Disney?  Are they ISPs? Is it General Motors?

Eran claims that enterprise identity management equipment manufacturer dominate the discussion. 

> 
> If they are the people who are supposed to use these standards, their participation is a good thing.

Getting everyone who writes Web applications involved in the standards process is "a bit difficult". 
If you look at the mailing list you see a mixture of small and big companies involved. 

> I wish we had more users (corporate or others) in the Security Area. So who are they?
The OAuth group is more a consumer of security expertise rather than the source. 

Ciao
Hannes

> 
> Yoav