Re: [oauth-ext-review] Registration of the new OAuth client registration parameter

Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> Thu, 11 April 2024 12:51 UTC

Return-Path: <rifaat.s.ietf@gmail.com>
X-Original-To: oauth-ext-review@ietfa.amsl.com
Delivered-To: oauth-ext-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E940C14F691 for <oauth-ext-review@ietfa.amsl.com>; Thu, 11 Apr 2024 05:51:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HFp9rl7Y5XTo for <oauth-ext-review@ietfa.amsl.com>; Thu, 11 Apr 2024 05:51:52 -0700 (PDT)
Received: from mail-wr1-x42c.google.com (mail-wr1-x42c.google.com [IPv6:2a00:1450:4864:20::42c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B6A5C14F6FC for <oauth-ext-review@ietf.org>; Thu, 11 Apr 2024 05:51:39 -0700 (PDT)
Received: by mail-wr1-x42c.google.com with SMTP id ffacd0b85a97d-344047ac7e4so511960f8f.0 for <oauth-ext-review@ietf.org>; Thu, 11 Apr 2024 05:51:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1712839897; x=1713444697; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=mNqGNJ9+gKpydfPcH6dQEBSZopKlnhTUVfEKc+9X3iI=; b=ZuKMaFp1GTjthbYRRNeYpT2/6fpLESrlVNdYue+8+5m1R3iiatXfSkueI+U417VRKn OSQnDfi7jMkACzDQUBW/ynDCcvVK5idLjwt/WNzeZHw4IAwYQwETvT5T7/E4oxhf1D27 GppUNG0HHdpDfZasBqfwByV/QXHdIpzs5kgrEBuqvLCteB2Hfiv/gf19wCgsCvuhWtrO KXGEYqOsFqtLQso1ZnRCPlFSr802aGTZ2TsHQRkUJSZQeViCaeW1Jqa2JVyJibfOMRYB xppRAloGnA9yiM82qHrGbRL/sTWaETKkjQQolGCZ2bdKDFZrzBtWxtqHUPGbS6Zq1K9v jnQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712839897; x=1713444697; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=mNqGNJ9+gKpydfPcH6dQEBSZopKlnhTUVfEKc+9X3iI=; b=RuY9wuvg74HrNTwyMs3CUwLUA+IXkPkM9tnFY2PiNtmHyRgqOjLtzBWRgrotbFrd8V ffpd2qFG8H2TFdr70K3ZpWkXL32kbEax2W5pweajXFFAQZQGA5LVxIXbvMWVPdxzjgJl A6ON47SgfwO+nztYXKxF0qUG3J9riJov7PeWP59vs0idD0Z7yLIzr+orbR9VNq91EFXB 4OFFYanYwujy5+zpS0Omy2Uuk0dogaaXQv34PyppHb4gbISxTcWQkZFFBI5jKyYuc8yU Y/3TI89xKq5FHzo5YbkwIyzvQQz/AvG8x/815KeEoxj3ci+8tgzj249qoXDSEMco3XmV H8yQ==
X-Gm-Message-State: AOJu0YynniEwcfWEF+yWcaUljp5IX9mLusNML8fgPkgbfIJ/N+O1ACWE pmjA+iI77wZYXCYbgq32lFZlAWkZ4UzYbdkC3wOkQoWETPZ4yUldr9bu4t6QFjoEQ2o/MA/6iOp QvXeRrd9b+px87jFTV/H2zrlfRpGS/MQI
X-Google-Smtp-Source: AGHT+IGdxwxwlsiJaAuI8hTtD54dT45bHRRQ3El36W8NDbRV+z3eJaD8duIGA0oV2wNPeSW7B8TVor1GrY7hLNYch5Y=
X-Received: by 2002:a05:6000:4006:b0:346:47a6:e77e with SMTP id cp6-20020a056000400600b0034647a6e77emr2719796wrb.27.1712839896416; Thu, 11 Apr 2024 05:51:36 -0700 (PDT)
MIME-Version: 1.0
References: <CAEMK1uYc4nshaWx7S7sxczyHE9r-_aUu=JHaHr2Kb7_jnwGUKQ@mail.gmail.com>
In-Reply-To: <CAEMK1uYc4nshaWx7S7sxczyHE9r-_aUu=JHaHr2Kb7_jnwGUKQ@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Date: Thu, 11 Apr 2024 08:51:25 -0400
Message-ID: <CADNypP9VZRYsi7THp=6-XFn_VL9q-evJ2FCQhcMEbavH+cGhfw@mail.gmail.com>
To: Dima Postnikov <dima@postnikov.net>
Cc: oauth-ext-review@ietf.org, Dave Tonge <dave.tonge@moneyhub.com>, Nat Sakimura <nat@nat.consulting>
Content-Type: multipart/alternative; boundary="000000000000954bab0615d19d54"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth-ext-review/6MEfsbRmYmzpe5JnRIzgt0YugDM>
Subject: Re: [oauth-ext-review] Registration of the new OAuth client registration parameter
X-BeenThere: oauth-ext-review@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Review of proposed IANA registrations for OAuth." <oauth-ext-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth-ext-review/>
List-Post: <mailto:oauth-ext-review@ietf.org>
List-Help: <mailto:oauth-ext-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Apr 2024 12:51:56 -0000

Hi Dima,

The process is described in the RFC7591 section 4.1:
https://datatracker.ietf.org/doc/html/rfc7591#section-4.1

The following is a link to the registry with the name of the designated
expert:
https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#client-metadata

Regards,
 Rifaat


On Thu, Apr 11, 2024 at 8:42 AM Dima Postnikov <dima@postnikov.net> wrote:

> Hi all
>
> OIDF FAPI WG is planning to publish a final specification of FAPI 2 within
> a few weeks.
>
> Per this specification, the following client metadata definition needs to
> be registered in the IANA "OAuth Dynamic Client Registration Metadata"
> registry established by RFC7591.
>
> **Metadata Name**: `use_mtls_endpoint_aliases`
>
> **Metadata Description**: Indicates the requirement for a client to use mutual TLS endpoint aliases defined by the AS where present.
>
> **Change Controller**: OIDF FAPI WG
>
> **Specification Document(s)**: Section 7 of FAPI 2 security profile
>
>
> Could you please guide us through the process of what needs to be done.
>
> Thanks for your assistance.
>
> Best regards,
>
> Dima Postnikov
>
>
> _______________________________________________
> oauth-ext-review mailing list
> oauth-ext-review@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth-ext-review
>