Re: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values

Mike Schwartz <mike@gluu.org> Thu, 03 March 2016 16:58 UTC

Return-Path: <mike@gluu.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4F901A886B for <oauth@ietfa.amsl.com>; Thu, 3 Mar 2016 08:58:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.904
X-Spam-Level:
X-Spam-Status: No, score=0.904 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.006, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kKhJaGiGSTM7 for <oauth@ietfa.amsl.com>; Thu, 3 Mar 2016 08:58:00 -0800 (PST)
Received: from webmail.gluu.org (webmail.gluu.org [104.130.217.77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3ED31A87A4 for <oauth@ietf.org>; Thu, 3 Mar 2016 08:58:00 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by webmail.gluu.org (Postfix) with ESMTP id 8CF9EB4137 for <oauth@ietf.org>; Thu, 3 Mar 2016 16:57:47 +0000 (UTC)
Authentication-Results: webmail.gluu.org (amavisd-new); dkim=pass reason="pass (just generated, assumed good)" header.d=gluu.org
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gluu.org; h= user-agent:message-id:references:in-reply-to:organization :subject:subject:to:from:from:date:date :content-transfer-encoding:content-type:content-type :mime-version; s=dkim; t=1457024267; x=1457888268; bh=inJMueW1LO YMcWXmJqq8/I43X4ryb57WuxJWDBHxjF4=; b=Fpb9rVguZqpTOluohSzddfQlK6 KO7SOY9SgDdHs3pMD1AEANkvOPX+NRQkMduFs9BVcWgtUJISa6sA9gKE1vij/yMQ 5syUQhs2SiCWM7/oEF1tGASb0f1yPTx8MTC5sW7vOZwh9IK5vMNvozCciclfxSUp 6sbF2cKPr001zLgc8=
Received: from webmail.gluu.org ([127.0.0.1]) by localhost (webmail.gluu.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GAVH28m8dNIa for <oauth@ietf.org>; Thu, 3 Mar 2016 16:57:47 +0000 (UTC)
Received: from webmail.gluu.org (localhost [127.0.0.1]) by webmail.gluu.org (Postfix) with ESMTPSA id 578ECB40E6 for <oauth@ietf.org>; Thu, 3 Mar 2016 16:57:47 +0000 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Content-Transfer-Encoding: 7bit
Date: Thu, 03 Mar 2016 08:57:47 -0800
From: Mike Schwartz <mike@gluu.org>
To: oauth@ietf.org
Organization: Gluu
In-Reply-To: <mailman.4327.1457002049.3232.oauth@ietf.org>
References: <mailman.4327.1457002049.3232.oauth@ietf.org>
Message-ID: <1cb334e5c012f6d4cbdeaaf4b843f2b7@gluu.org>
X-Sender: mike@gluu.org
User-Agent: Roundcube Webmail
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/-JD4SnCGhdDf8iAjggPq2VO9LB8>
Subject: Re: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Mar 2016 16:58:01 -0000

OAuth Guru's,

I know you are all going to approve this AMR spec anyway, but I'd just 
like to dissent. I think this specification is useless, and potentially 
harmful.

Just as an example--two domains that use "face" as the amr probably have 
totally different algorithms, sensitivities, training, and identity 
management processes that contribute to the significance of this value. 
So rather than interoperability, this standard just sets up domains for 
miscommunication.

If it doesn't serve interoperabilty, what use case does this standard 
solve?

I think a bad quick and dirty solution is worse than no solution at all. 
If I had a vote, I'd definitely vote against this one.

- Mike


-------------------------------------
Michael Schwartz
Gluu
Founder / CEO