[oauth-ext-review] Registration of the new OAuth client registration parameter

Dima Postnikov <dima@postnikov.net> Thu, 11 April 2024 12:42 UTC

Return-Path: <dima.postnikov@gmail.com>
X-Original-To: oauth-ext-review@ietfa.amsl.com
Delivered-To: oauth-ext-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69FAFC14F691 for <oauth-ext-review@ietfa.amsl.com>; Thu, 11 Apr 2024 05:42:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.648
X-Spam-Level:
X-Spam-Status: No, score=-1.648 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.248, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lcAUR-E4yKcx for <oauth-ext-review@ietfa.amsl.com>; Thu, 11 Apr 2024 05:42:25 -0700 (PDT)
Received: from mail-yw1-x1130.google.com (mail-yw1-x1130.google.com [IPv6:2607:f8b0:4864:20::1130]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF87BC14F680 for <oauth-ext-review@ietf.org>; Thu, 11 Apr 2024 05:42:25 -0700 (PDT)
Received: by mail-yw1-x1130.google.com with SMTP id 00721157ae682-615019cd427so67141247b3.3 for <oauth-ext-review@ietf.org>; Thu, 11 Apr 2024 05:42:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail-com.20230601.gappssmtp.com; s=20230601; t=1712839344; x=1713444144; darn=ietf.org; h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=8kkvaaYh27rFaoevDMSrsedmuptLyEHZOFyAAh5OLkE=; b=ntobXO/hr03KfVhjKXrUaWXcIZPD+wz9Wlvehn1sm9yhHzxcImSckW8NmcfeXZTqMD UP9MPQY/YoCl/07NXFgx3S49ObOjRjCd9yjIKskED4lOMB74NJe7gQGNMA/HZVjIQzqE hpp43VnALsRuRneyf7uZ3+hPoACj+90mMHDwPOjneKekzM7HGlea114ZHhe3rqRQJK0u IxZoQGsPEabfW9FJnEe3YOTCOoxxxJMpqSketU+bJhpWEbD+P+nf9ib1BtzX0ICtVPDN KZKNuWoX2G1oBqzFWYJABh5tdEaRQRXL2totuI6Y/L3X6aA6gsjhyMunPbKNfcIquos3 sklw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712839344; x=1713444144; h=cc:to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=8kkvaaYh27rFaoevDMSrsedmuptLyEHZOFyAAh5OLkE=; b=ex8OSUPdcdtPhy7PFAAIBzz54wizNemIMdcCmRX6WGSvhSPZNK6/HOWGJRui2N6JC5 nDFwreR0HmyViOjhfFNGs01PNRF//uFtsD9lfEH5mK+L9LXdwtKrH1uNYDhiQbD3ugkE Edqd8IJz3VbhReTwl9HSWfJGDuBCaPcVUwLFaWOAUGy2g740bG3jR6Hb8htfFVGoWKyX pEfvQrmy+/SoLztjxfkczKAOqqhq2oWJaG5tnti+DMnQFc8/caiYnHRx3oI76TBZOTcG lTcGU9UXn7apZFKiEsL7o8D4r2tS9otlfkPJ1bhC089ySCvYfuO239WWOIGhKOhxdnuq FIVw==
X-Gm-Message-State: AOJu0Yz4ZhbSzuVxEulXvhET1bhhvyviDLanK8j37nDqjMZBIueNHt0l NAFTnElvKnF1Medzvm9CZMaFyCagWm1QYY/s2LbNIKp8+YRl0Jt3qBgBq3uYNu8xh5R0geEckW3 WZB/EDMVPiaVhpnJ7lyaEeUpyS4J17sejo6Ts9+ti
X-Google-Smtp-Source: AGHT+IEX3ckvyRXvrZUglaUADBh4DdEbYpy3XkK5KpdocjgWqH2ZuWVW5wI79LeExqV5wC9u3AuM84YiJyyEhlnksE0=
X-Received: by 2002:a05:6902:20c5:b0:de1:220c:6b43 with SMTP id dj5-20020a05690220c500b00de1220c6b43mr5052368ybb.33.1712839344500; Thu, 11 Apr 2024 05:42:24 -0700 (PDT)
MIME-Version: 1.0
From: Dima Postnikov <dima@postnikov.net>
Date: Thu, 11 Apr 2024 14:42:13 +0200
Message-ID: <CAEMK1uYc4nshaWx7S7sxczyHE9r-_aUu=JHaHr2Kb7_jnwGUKQ@mail.gmail.com>
To: oauth-ext-review@ietf.org
Cc: Dave Tonge <dave.tonge@moneyhub.com>, Nat Sakimura <nat@nat.consulting>
Content-Type: multipart/alternative; boundary="000000000000afb6a30615d17cd1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth-ext-review/Q8_Y7kWOMz01pzUy-Lg9VK7eJfU>
Subject: [oauth-ext-review] Registration of the new OAuth client registration parameter
X-BeenThere: oauth-ext-review@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Review of proposed IANA registrations for OAuth." <oauth-ext-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth-ext-review/>
List-Post: <mailto:oauth-ext-review@ietf.org>
List-Help: <mailto:oauth-ext-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Apr 2024 12:42:26 -0000

Hi all

OIDF FAPI WG is planning to publish a final specification of FAPI 2 within
a few weeks.

Per this specification, the following client metadata definition needs to
be registered in the IANA "OAuth Dynamic Client Registration Metadata"
registry established by RFC7591.

**Metadata Name**: `use_mtls_endpoint_aliases`

**Metadata Description**: Indicates the requirement for a client to
use mutual TLS endpoint aliases defined by the AS where present.

**Change Controller**: OIDF FAPI WG

**Specification Document(s)**: Section 7 of FAPI 2 security profile


Could you please guide us through the process of what needs to be done.

Thanks for your assistance.

Best regards,

Dima Postnikov