Re: [oauth-ext-review] [IANA #1158951] Requested review for IANA registration in draft-ietf-ace-oauth-authz (oauth-parameters - OAuth Extensions Error, OAuth Access Token Types, OAuth Parameters, OAuth Token Introspection Response)

Justin Richer <jricher@mit.edu> Wed, 08 January 2020 21:16 UTC

Return-Path: <jricher@mit.edu>
X-Original-To: oauth-ext-review@ietfa.amsl.com
Delivered-To: oauth-ext-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4C8212012A for <oauth-ext-review@ietfa.amsl.com>; Wed, 8 Jan 2020 13:16:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9xh-dRAhMrnN for <oauth-ext-review@ietfa.amsl.com>; Wed, 8 Jan 2020 13:16:24 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE7F612003E for <oauth-ext-review@ietf.org>; Wed, 8 Jan 2020 13:16:23 -0800 (PST)
Received: from [192.168.1.16] (static-71-174-62-56.bstnma.fios.verizon.net [71.174.62.56]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 008LFIUU007482 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 8 Jan 2020 16:15:20 -0500
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Justin Richer <jricher@mit.edu>
In-Reply-To: <rt-4.4.3-14492-1578437402-751.1158951-37-0@icann.org>
Date: Wed, 08 Jan 2020 16:15:18 -0500
Cc: "rdd@cert.org" <rdd@cert.org>, oauth-ext-review@ietf.org, daniel.migault@ericsson.com, ietf@augustcellars.com, ludwig_seitz@gmx.de, kaduk@mit.edu
Content-Transfer-Encoding: quoted-printable
Message-Id: <9586C47C-49E4-402F-B07C-CCC64CA6291C@mit.edu>
References: <RT-Ticket-1158951@icann.org> <ef9a0ed1-93cd-1a0e-35d7-95d0710aebc4@gmx.de> <rt-4.4.3-14492-1578437402-751.1158951-37-0@icann.org>
To: drafts-expert-review@iana.org
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth-ext-review/-y6GqfCgvGYjKHRtHVGk9rVOI3Q>
Subject: Re: [oauth-ext-review] [IANA #1158951] Requested review for IANA registration in draft-ietf-ace-oauth-authz (oauth-parameters - OAuth Extensions Error, OAuth Access Token Types, OAuth Parameters, OAuth Token Introspection Response)
X-BeenThere: oauth-ext-review@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Review of proposed IANA registrations for OAuth." <oauth-ext-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth-ext-review/>
List-Post: <mailto:oauth-ext-review@ietf.org>
List-Help: <mailto:oauth-ext-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jan 2020 21:16:26 -0000

The registration request is missing the “cnonce” and “exi" claims, both of which are mentioned in 5.7.2 but aren’t listed in the registry request. If those are added then I think the registration is fine.

 — Justin

> On Jan 7, 2020, at 5:50 PM, Amanda Baber via RT <drafts-expert-review@iana.org> wrote:
> 
> Hi Justin, all,
> 
> Because Hannes is both an author and the sole designated expert for the registries named in Sections 8.2, 8.5, and 8.8, Ben is reviewing those registrations for us. Of the sections listed below, we only need Justin to review this one:
> 
> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-29#section-8.10
> 
> We've sent Ben's questions/comments to the authors and chairs. 
> 
> Best regards,
> 
> Amanda Baber
> Lead IANA Services Specialist
> 
> On Sat Dec 21 11:33:52 2019, ludwig_seitz@gmx.de wrote:
>> Hello OAuth registry reviewers,
>> 
>> the IESG-designated experts for the OAuth parameters registry have asked
>> me to send a review request to you about the OAuth parameters registered
>> here:
>> 
>> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-29#section-8.2
>> 
>> and here:
>> 
>> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-29#section-8.5
>> 
>> and here:
>> 
>> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-29#section-8.8
>> 
>> and here:
>> 
>> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-29#section-8.10
>> 
>> 
>> Thank you in advance for you review comments.
>> 
>> Regards,
>> 
>> Ludwig
>> 
> 
> _______________________________________________
> oauth-ext-review mailing list
> oauth-ext-review@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth-ext-review