[oauth-ext-review] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

Amanda Baber via RT <drafts-expert-review-comment@iana.org> Mon, 24 January 2022 23:00 UTC

Return-Path: <iana-shared@icann.org>
X-Original-To: oauth-ext-review@ietfa.amsl.com
Delivered-To: oauth-ext-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 548AA3A1587; Mon, 24 Jan 2022 15:00:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.626
X-Spam-Level:
X-Spam-Status: No, score=-0.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MISSING_HEADERS=1.021, RCVD_IN_MSPIKE_BL=0.001, RCVD_IN_MSPIKE_L3=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PNUvKxmT-JHW; Mon, 24 Jan 2022 14:59:59 -0800 (PST)
Received: from smtp.lax.icann.org (smtp.lax.icann.org [192.0.33.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA57E3A1585; Mon, 24 Jan 2022 14:59:59 -0800 (PST)
Received: from request4.lax.icann.org (request1.lax.icann.org [10.32.11.221]) by smtp.lax.icann.org (Postfix) with ESMTP id 36A8EE0B18; Mon, 24 Jan 2022 22:59:59 +0000 (UTC)
Received: by request4.lax.icann.org (Postfix, from userid 48) id 39A89204EF; Mon, 24 Jan 2022 22:59:59 +0000 (UTC)
RT-Owner: amanda.baber
From: Amanda Baber via RT <drafts-expert-review-comment@iana.org>
Reply-To: drafts-expert-review-comment@iana.org
In-Reply-To: <rt-4.4.3-11879-1643063819-1207.1216704-9-0@icann.org>
References: <RT-Ticket-1216704@icann.org> <rt-4.4.3-1775-1637091070-1032.1216704-9-0@icann.org> <rt-4.4.3-11855-1643062131-945.1216704-9-0@icann.org> <CAJot-L240tpminfPUdAbyZXKp5z-t-2MsK=t7g1+0TTDh8rtrQ@mail.gmail.com> <rt-4.4.3-11879-1643063819-1207.1216704-9-0@icann.org>
Message-ID: <rt-4.4.3-11879-1643065199-1843.1216704-9-0@icann.org>
X-RT-Loop-Prevention: IANA
X-RT-Ticket: IANA #1216704
X-Managed-BY: RT 4.4.3 (http://www.bestpractical.com/rt/)
X-RT-Originator: amanda.baber@icann.org
CC: oauth@ietf.org, oauth-ext-review@ietf.org, hannes.tschofenig@arm.com, rdd@cert.org
Content-Type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Precedence: bulk
Date: Mon, 24 Jan 2022 22:59:59 +0000
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth-ext-review/voJzIUj54BzhlBegLVHBF9JBASs>
Subject: [oauth-ext-review] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
X-BeenThere: oauth-ext-review@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "Review of proposed IANA registrations for OAuth." <oauth-ext-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth-ext-review/>
List-Post: <mailto:oauth-ext-review@ietf.org>
List-Help: <mailto:oauth-ext-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Jan 2022 23:00:04 -0000

Hi Roman,

We've received a request to move ahead with this OAuth Parameter registration without approval from Hannes (see below). As the AD for this document, can you approve? 

The document: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-iss-auth-resp

thanks,
Amanda

On Mon Jan 24 22:36:59 2022, wparad@rhosys.ch wrote:
> Maybe we should come up with an alternative process that doesn't involve a
> single person sign-off. Is there a reason we need a "designated expert"?
> 
> Since no one on this thread has objected, I think it is fair to say, we
> don't need Hannes to sign-off. We should get this added.
> 
> Amanda, please complete the registration.
> 
> - Warren
> 
> Warren Parad
> 
> Founder, CTO
> Secure your user data with IAM authorization as a service. Implement
> Authress <https://authress.io/>.
> 
> 
> On Mon, Jan 24, 2022 at 11:09 PM Amanda Baber via RT <
> drafts-expert-review-comment@iana.org> wrote:
> 
> > Hi Hannes,
> >
> > As the designated expert for OAuth Parameters, can you sign off on this
> > registration?
> >
> > thanks,
> > Amanda
> >
> > On Thu Jan 13 21:29:54 2022, bcampbell@pingidentity.com wrote:
> > > Indeed, I believe that is exactly what the registration request in the
> > > draft asks to do
> > > https://www.ietf.org/archive/id/draft-ietf-oauth-iss-auth-resp-
> > > 05.html#name-oauth-parameters-registrati
> > >
> > > 5.2.  OAuth Parameters Registration
> > >
> > > This specification updates the "iss" entry in the IANA "OAuth
> > > Parameters" registry of [IANA.OAuth.Parameters] established by
> > > [RFC6749].
> > >
> > > Parameter name:  "iss"
> > > Parameter usage location:  authorization request, authorization
> > >    response
> > > Change Controller:  IETF
> > > Specification Document(s):  Section 2 of [[ this document ]],
> > >    [RFC9101], and Section 4.1.1 of [RFC7519].
> > >
> > > On Wed, Jan 12, 2022 at 7:29 PM Mike Jones <Michael.Jones=
> > > 40microsoft.com@dmarc.ietf.org> wrote:
> > >
> > > > Note that the requested OAuth parameter to be registered "iss" has
> > > > already
> > > > been registered by RFC 9101 (The OAuth 2.0 Authorization Framework:
> > > > JWT-Secured Authorization Request (JAR)) for Parameter Usage Location
> > > > "authorization request".  Fortunately, this use is compatible with
> > > > that in
> > > > draft-ietf-oauth-iss-auth-resp.
> > > >
> > > > I would be OK with draft-ietf-oauth-iss-auth-resp also registering it
> > > > for
> > > > usage "authorization response", as proposed in the draft, but the
> > > > original
> > > > registration for use "authorization request" by RFC 9191 should
> > > > remain.
> > > >
> > > > -- Mike
> > > >
> > > > P.S.  No, I'm not a designated expert for this registry.  Hannes is
> > > > the
> > > > only DE currently appointed by the IESG.
> > > >
> > > > -----Original Message-----
> > > > From: oauth-ext-review <oauth-ext-review-bounces@ietf.org> On Behalf
> > > > Of
> > > > Amanda Baber via RT
> > > > Sent: Thursday, January 6, 2022 4:50 PM
> > > > Cc: oauth-ext-review@ietf.org; Hannes Tschofenig <
> > > > hannes.tschofenig@arm.com>; oauth@ietf.org
> > > > Subject: [oauth-ext-review] [IANA #1216704] Expert Review for
> > > > draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
> > > >
> > > > Hi Hannes,
> > > >
> > > > Although the IESG has approved the document, we need expert approval
> > > > in
> > > > order to move forward with the registration, unless the ADs
> > > > specifically
> > > > tell us to move ahead without it. Can you approve the OAuth Parameter
> > > > registration in this document?
> > > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >
> > > > thanks,
> > > > Amanda
> > > >
> > > > On Tue Jan 04 13:21:14 2022, rifaat.s.ietf@gmail.com wrote:
> > > > > Hannes,
> > > > >
> > > > > Can you please take a look at this request to allow us to make
> > > > > progress with this document?
> > > > >
> > > > > Thanks,
> > > > >  Rifaat
> > > > >
> > > > >
> > > > > On Mon, Jan 3, 2022 at 8:58 PM Amanda Baber via RT <
> > > > > drafts-expert-review-comment@iana.org> wrote:
> > > > >
> > > > > > Hi Hannes,
> > > > > >
> > > > > > Have you had a chance to review the OAuth Parameters request in
> > > > > > this
> > > > > > document?
> > > > > >
> > > > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > > > >
> > > > > > thanks,
> > > > > >
> > > > > > Amanda Baber
> > > > > > IANA Operations Manager
> > > > > >
> > > > > > On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> > > > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > > > >
> > > > > > > I'm resending a review request for a document that's listed on
> > > > > > > the
> > > > > > > next IESG telechat. Can you get to this before 12/2?
> > > > > > >
> > > > > > > thanks,
> > > > > > >
> > > > > > > Amanda Baber
> > > > > > > IANA Operations Manager
> > > > > > >
> > > > > > > On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > > > > > > > Mailing List/Expert Review requested
> > > > > > > >
> > > > > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > > > > >
> > > > > > > > As the designated expert for the OAuth Parameters registry,
> > > > > > > > can
> > > > > > > > you review the proposed registration in draft-oauth-iss-auth-
> > > > > > > > resp
> > > > for us?
> > > > > > > > Please see:
> > > > > > > >
> > > > > > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-
> > > > > > > > resp/
> > > > > > > >
> > > > > > > > A single, new registration is being requested:
> > > > > > > >
> > > > > > > > Name: iss
> > > > > > > > Parameter Usage Location: authorization response Change
> > > > > > > > Controller: IESG
> > > > > > > > Reference: [ RFC-to-be; Section 2 ]
> > > > > > > >
> > > > > > > > If this is request is OK, when the IESG approves the document
> > > > > > > > for publication, we'll make the registration at
> > > > > > > >
> > > > > > > > https://www.iana.org/assignments/oauth-parameters/
> > > > > > > >
> > > > > > > > The IESG has asked us to set a two-week deadline for
> > > > > > > > registration reviews. The due date for this request is 2021-
> > > > > > > > 11-30.
> > > > > > > >
> > > > > > > > Thank you,
> > > > > > > >
> > > > > > > > Michelle Cotton
> > > > > > > > IANA Services
> > > > > >
> > > > > > _______________________________________________
> > > > > > oauth-ext-review mailing list
> > > > > > oauth-ext-review@ietf.org
> > > > > > https://www.ietf.org/mailman/listinfo/oauth-ext-review
> > > > > >
> > > >
> > > > _______________________________________________
> > > > oauth-ext-review mailing list
> > > > oauth-ext-review@ietf.org
> > > > https://www.ietf.org/mailman/listinfo/oauth-ext-review
> > > >
> > > > _______________________________________________
> > > > oauth-ext-review mailing list
> > > > oauth-ext-review@ietf.org
> > > > https://www.ietf.org/mailman/listinfo/oauth-ext-review
> > > >
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >