IETF Logo Mail Archive

Re: [kitten] Pending draft 15 Re: sasl-oauth "user" as a kvpair or in the gs2 header?

Bill Mills <wmills_92105@yahoo.com> Mon, 17 March 2014 21:56 UTC

Return-Path: <wmills_92105@yahoo.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA661A0314 for <kitten@ietfa.amsl.com>; Mon, 17 Mar 2014 14:56:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.045
X-Spam-Level:
X-Spam-Status: No, score=-2.045 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I-YliQCWClB8 for <kitten@ietfa.amsl.com>; Mon, 17 Mar 2014 14:56:27 -0700 (PDT)
Received: from nm19-vm0.bullet.mail.bf1.yahoo.com (nm19-vm0.bullet.mail.bf1.yahoo.com [98.139.213.162]) by ietfa.amsl.com (Postfix) with ESMTP id 247221A031A for <kitten@ietf.org>; Mon, 17 Mar 2014 14:56:27 -0700 (PDT)
Received: from [66.196.81.170] by nm19.bullet.mail.bf1.yahoo.com with NNFMP; 17 Mar 2014 21:56:19 -0000
Received: from [98.139.212.226] by tm16.bullet.mail.bf1.yahoo.com with NNFMP; 17 Mar 2014 21:56:19 -0000
Received: from [127.0.0.1] by omp1035.mail.bf1.yahoo.com with NNFMP; 17 Mar 2014 21:56:19 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 10761.62925.bm@omp1035.mail.bf1.yahoo.com
Received: (qmail 75513 invoked by uid 60001); 17 Mar 2014 21:56:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1395093378; bh=JJ9WOzingnAAIG8Iv9HA8etur/AVzGWTs1XlRnEhVZM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=ghbe3R09kre2A0eMKbIP/8dSR52hjnD9A/wIIJT2IDav2F8uPsq1uijNPqbxP9G9Anz4Du0Gi0w0BW/c1EGXFgPsYKDgxIfD76/aZtzUEf4xZBzR25G+IuzBKvNVCKLpNGYvzc+xTkqrAoN2Vpkd4DNdBsymxYiaz1CofkubPBc=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=OtDMmVTnj7/Db8edPRNOCjGjp/W9oyb17nHjmwMOK1AkvnpzN9Nk1ilRxknSJM1bg1+EpRe8Qba9TQOeWLQ3qzNRvq73B8B1ceT70ASRw0BfdMdmWJZL1gF5PJqAsKpqBrvMZyAT9pP0VQ9UizwoVbi/omB1cn36eCoaVbVjaik=;
X-YMail-OSG: mmxqdYkVM1mQAL_ICTJhpwIUZRdAhmbqQuzJf6RTzv3Z2nH yCQRwS2P3dp_kemK9MiQTQbbk_bmeFcx5Kwp3oZqHshmQSqxCGNjogmVffLf gtxkdMltQ28zybABzT1Daf9iatI6AO.ODELw_LOe_kEtX9mpzj4Fc1e1hurz kSKx4YdAG7sQgpDU1BfoXSosjGDhs5vQzc8CthHMqYr.YDaGnnsDFHOwEkNu 4zpdFXtK8e8v1lqH5A53HY878kDGBQ_OEW_AQg3w8wzVZFvreaaAWyxqClAM tl5ZuHhbF6CfZ1wCbafhMhL77auUQd2lQaTV13np.hIq_yIIFzvwuC7voG2V bmLmSLkPQH.5__mKmIlgi1ID.3vK_QnmeeQv2iRVWDfyzX5OW.9oHffP1iBj qHOETR0sU.qxCrdMVvo3VzdLt21SPhMVY7UGz12wMK..oaYksqoq4gbnog3K 7DVSzE5cNX7YCLOu29pX2X4JyXlXlC3xIkrrM47UY7kUhMUxmd.XnCB2ENql hTbX4kRgKm61z2NyrkzzWCLNSsyUvqQHn8nbr7DfWzycKjWk8Hrm1omW_1yF RCqFWPY7h7AkNc3v43V3vhZS0tA--
Received: from [66.228.162.52] by web142803.mail.bf1.yahoo.com via HTTP; Mon, 17 Mar 2014 14:56:18 PDT
X-Rocket-MIMEInfo: 002.001, VGhpcyBmZWVscyBsaWtlIHNvZnQtc2VsbGluZyB3aGF0IHRoZSBpbXBsZW1lbnRlciBhY3R1YWxseSBoYXMgdG8gZG8uIMKgSXQncyBsaWtlIGhvdyBIVFRQIGV2b2x2ZWQgdG8gYmUgYnVnLWNvbXBsaWFudCB3aXRoIG1ham9yIGJyb3dzZXIgb3Igc2VydmVyIGJ1Z3MuIMKgTmV2ZXIgYWN0dWFsbHkgZG9jdW1lbnRlZCBidXQgYXJlIHRoZSBkZSBmYWN0byBzdGFuZGFyZCBhbnl3YXkuIMKgV2h5IGxlYXZlIGEgbGFuZG1pbmUgbGlrZSB0aGF0IHVuc3BlY2lmaWVkPwoKCgpPbiBNb25kYXksIE1hcmNoIDE3LCABMAEBAQE-
X-Mailer: YahooMailWebService/0.8.178.641
References: <1393869321.174.YahooMailNeo@web125602.mail.ne1.yahoo.com> <tslr46j2kbm.fsf@mit.edu> <1393875779.29082.YahooMailNeo@web125604.mail.ne1.yahoo.com> <tsld2i21j7u.fsf@mit.edu> <1393926562.54403.YahooMailNeo@web125603.mail.ne1.yahoo.com> <1393948558.69282.YahooMailNeo@web125602.mail.ne1.yahoo.com> <CAPe4Cjoh7n-cQAuy17MWs66wigqTQvGBVVtEJ0_3zjaSg-5JmQ@mail.gmail.com> <1394650561.77489.YahooMailNeo@web142801.mail.bf1.yahoo.com> <1394833947.5753.YahooMailNeo@web142802.mail.bf1.yahoo.com> <CAK3OfOhr0ksktckcBK5UG7OYb4-Z=QP6DXCcyArk6A3qVWK3gA@mail.gmail.com> <53275BC1.50808@cisco.com> <1395090919.78935.YahooMailNeo@web142806.mail.bf1.yahoo.com> <CAK3OfOiQeZXs4iBP2C3WyZ4y69ejA3QG2fv8ne3C99PJNRySNQ@mail.gmail.com>
Message-ID: <1395093378.75479.YahooMailNeo@web142803.mail.bf1.yahoo.com>
Date: Mon, 17 Mar 2014 14:56:18 -0700
From: Bill Mills <wmills_92105@yahoo.com>
To: Nico Williams <nico@cryptonector.com>
In-Reply-To: <CAK3OfOiQeZXs4iBP2C3WyZ4y69ejA3QG2fv8ne3C99PJNRySNQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="905790552-2136928374-1395093378=:75479"
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/7m42QP5IFjx0NJhiXsaVpWezCsM
Cc: "kitten@ietf.org" <kitten@ietf.org>, Bill Mills <wmills@yahoo-inc.com>, Sam Hartman <hartmans-ietf@mit.edu>
Subject: Re: [kitten] Pending draft 15 Re: sasl-oauth "user" as a kvpair or in the gs2 header?
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Mar 2014 21:56:28 -0000

This feels like soft-selling what the implementer actually has to do.  It's like how HTTP evolved to be bug-compliant with major browser or server bugs.  Never actually documented but are the de facto standard anyway.  Why leave a landmine like that unspecified?



On Monday, March 17, 2014 2:27 PM, Nico Williams <nico@cryptonector.com> wrote:
 
On Mon, Mar 17, 2014 at 4:15 PM, Bill Mills <wmills_92105@yahoo.com> wrote:
> OK, so given Google's extant implementation, if we change it to SHOULD the
> MUST is implicit and the de facto standard anyway if you want it to work
> with Google.

No need to say either MUST nor SHOULD.  Instead you might want to note
that in common usage of this mechanism the server tends to require
that the client send an authz-id.


Nico
--

v2.30.2 | Report a Bug | By Email | System Status