Re: [kitten] I-D Action: draft-ietf-kitten-sasl-oauth-23.txt
Bill Mills <wmills_92105@yahoo.com> Fri, 29 May 2015 16:57 UTC
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7086E1ACE45 for <kitten@ietfa.amsl.com>; Fri, 29 May 2015 09:57:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.509
X-Spam-Level:
X-Spam-Status: No, score=-1.509 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XDpytVAB-yy3 for <kitten@ietfa.amsl.com>; Fri, 29 May 2015 09:57:45 -0700 (PDT)
Received: from nm48-vm1.bullet.mail.ne1.yahoo.com (nm48-vm1.bullet.mail.ne1.yahoo.com [98.138.121.113]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24AE41ACE03 for <kitten@ietf.org>; Fri, 29 May 2015 09:57:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1432918639; bh=sGTWYoig8CXWY6H/3WnOrxHix49oWJ77dNKmTY+b/kY=; h=Date:From:Reply-To:To:In-Reply-To:References:Subject:From:Subject; b=BrNNARRpZ2p+QyEBwI/w0npv6RZzE2HAsyL0aGbrRtIortv+FTH48azRTehqsv7A+mqyqSE9jSKMLckIXUsVxdKwVYqnxlcE+DQjXP0bTyUovaKdQTegv/+wkHdwi3DByenzRjEbN9GNnHmUKUq8Ukgcr6xUIaOFJmWBzS7aPHsdf8AavOv8n6+jP0uJKPSkNjD3Mv57Hmj3dTi+3pugKfwW0MpRBHrebvqQrppDgTTtZCbEQkDDgoru3+PU0AzU/L2HRySBtEuo6yaHqRDsSrYMlu+Yrxlo58rusGNdSayTTnm9bDEBKq2qk9nnjjeruC1wbIUG1p7y0RH8ueneIA==
Received: from [127.0.0.1] by nm48.bullet.mail.ne1.yahoo.com with NNFMP; 29 May 2015 16:57:19 -0000
Received: from [98.138.226.176] by nm48.bullet.mail.ne1.yahoo.com with NNFMP; 29 May 2015 16:54:18 -0000
Received: from [66.196.81.170] by tm11.bullet.mail.ne1.yahoo.com with NNFMP; 29 May 2015 16:54:18 -0000
Received: from [98.139.215.229] by tm16.bullet.mail.bf1.yahoo.com with NNFMP; 29 May 2015 16:54:18 -0000
Received: from [127.0.0.1] by omp1069.mail.bf1.yahoo.com with NNFMP; 29 May 2015 16:54:18 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 531439.31983.bm@omp1069.mail.bf1.yahoo.com
X-YMail-OSG: yeEu2osVM1kDttFH0__gn.g.XOhl56bulP.wvSXLvWICTzugfjMwYP.joGzKJTR RnBNAeu2Po8Wk08gXNlsZuHw8KJ_9w5wbDCKEAoOTB_5V2jF8zXeIeadbtxQ.WsngBjudiFgV.hE rSAzxdy._cdEUE.2SBYpAs1bs9dzoQ45sC9586X7FyXYqCicBNrQZhYy_2HtQlwzZ2tx.ankzgc_ KSkJnwjn_k78dhu1xg5tvoUtXfiO7HpS93mau6UzZBbsMqhldebM.f7V86K3CnDwmgFJ9gzdl3tY u9yz1KBSlc92fN21Ep4pvsCBw2iUxaNS0B4Ncef72A_3leoVPXOPo53GVjgTSZWB73LAuRNPHJJI nKQBc_m81io2Il5E54Oi6wmkmzd20xdq0rmWsF8uXrEMY7e9OsK3wL32wudFuWusy3bP74qG0PKR eDyb.pfqYKHZXpOdmSARzEMR1Rp7Gt4Dflp11EKiqKXXT2Drhp6vtZUg3A3LMjSECMBsb6eAsl3w JxniOOQtdxteXJ.h_3e3c
Received: by 76.13.27.134; Fri, 29 May 2015 16:54:18 +0000
Date: Fri, 29 May 2015 16:54:17 +0000
From: Bill Mills <wmills_92105@yahoo.com>
To: "kitten@ietf.org" <kitten@ietf.org>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Message-ID: <1158268268.1500683.1432918457535.JavaMail.yahoo@mail.yahoo.com>
In-Reply-To: <20150529165004.2217.7049.idtracker@ietfa.amsl.com>
References: <20150529165004.2217.7049.idtracker@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_1500681_1641460419.1432918457532"
Archived-At: <http://mailarchive.ietf.org/arch/msg/kitten/vte8Ia2MBJ_3piqOrOruzRjowL8>
Subject: Re: [kitten] I-D Action: draft-ietf-kitten-sasl-oauth-23.txt
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 May 2015 16:57:46 -0000
Incorporates IESG all pending review feedback.
-bill
On Friday, May 29, 2015 9:50 AM, "internet-drafts@ietf.org" <internet-drafts@ietf.org> wrote:
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Common Authentication Technology Next Generation Working Group of the IETF.
Title : A set of SASL Mechanisms for OAuth
Authors : William Mills
Tim Showalter
Hannes Tschofenig
Filename : draft-ietf-kitten-sasl-oauth-23.txt
Pages : 24
Date : 2015-05-29
Abstract:
OAuth enables a third-party application to obtain limited access to a
protected resource, either on behalf of a resource owner by
orchestrating an approval interaction, or by allowing the third-party
application to obtain access on its own behalf.
This document defines how an application client uses credentials
obtained via OAuth over the Simple Authentication and Security Layer
(SASL) to access a protected resource at a resource serve. Thereby,
it enables schemes defined within the OAuth framework for non-HTTP-
based application protocols.
Clients typically store the user's long-term credential. This does,
however, lead to significant security vulnerabilities, for example,
when such a credential leaks. A significant benefit of OAuth for
usage in those clients is that the password is replaced by a shared
secret with higher entropy, i.e., the token. Tokens typically
provide limited access rights and can be managed and revoked
separately from the user's long-term password.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-kitten-sasl-oauth/
There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-kitten-sasl-oauth-23
A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-kitten-sasl-oauth-23
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
Kitten mailing list
Kitten@ietf.org
https://www.ietf.org/mailman/listinfo/kitten
- [kitten] I-D Action: draft-ietf-kitten-sasl-oauth… internet-drafts
- Re: [kitten] I-D Action: draft-ietf-kitten-sasl-o… Bill Mills
- Re: [kitten] I-D Action: draft-ietf-kitten-sasl-o… Benjamin Kaduk