Re: [OAUTH-WG] Call for adoption - TMI BFF

Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> Wed, 12 May 2021 19:14 UTC

Return-Path: <rifaat.s.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D56543A0D96 for <oauth@ietfa.amsl.com>; Wed, 12 May 2021 12:14:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hxGrQUzAxlb3 for <oauth@ietfa.amsl.com>; Wed, 12 May 2021 12:14:31 -0700 (PDT)
Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73F0D3A0D91 for <oauth@ietf.org>; Wed, 12 May 2021 12:14:31 -0700 (PDT)
Received: by mail-lj1-x22e.google.com with SMTP id v5so30963121ljg.12 for <oauth@ietf.org>; Wed, 12 May 2021 12:14:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ncJ0XiS+Hp2/IN5uZYjco91uBvhF6zRkS2V00xdG6Ac=; b=tyQJqOvL4AXNBzAZmfuZSmTTQxNRNEpauihx8hz/OTOh6VtPh7MTt2oUmHVjA7i6D0 YDtpWRMQ3hcv3XlZ+ewGUPZ5yohEKakRvPf4/VONuPSdMfy7kEqN92ryuXWOVAWbLJi+ SExxkQbn78nY06yTosIJrFMo6LMbBelC5awhZyi61SuV0plpPbQYWteswPIwEPub2LsJ yzhR8VEVoOlDPl3x78UOL4hpo0E2VUzYN1rwxb2XsyAJt/pJJGv1l940fTnUN08rkHRA EUyC6+cIqgXOh17tzuwbh1yec0KXcCRSHenshW1SZqv5MmB5/oCV7GIfRqhYI4bP23zq eftQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ncJ0XiS+Hp2/IN5uZYjco91uBvhF6zRkS2V00xdG6Ac=; b=H0F2mxBHz8HnqOWPVV8GOXarXedcDGXMKrXWVFih1n+FgfIkAY4X0P/+NDjLl95GJf 04v6EaIlexZMMtUo7FlSZEjxSAWPtQGy+BXumVj2cbtzp8nNwhIS0v+s0bc/p5HxQDDu FTTlAh5seCy7Li3r6uufmF6OjnDi5nawI/6XS5w9/OoM0AimAmvXTRgpihmn6/DFMeOe dY5ywZ4BknOU2FKF7JDwIMkIVr+b5VI5ZguQ1t03crfDvfKIypUie3IAlFEdY6INzXW0 l81giexkDfzkJ9E/qMX/g+t83aPDLhcFLA/bDPCge5US6t2bHkdlqvN41bGZi87yiURu JCKA==
X-Gm-Message-State: AOAM532Mz6aiPZJW0BYB74V0leIcq0Pym9L9NwwSrDU8olp3f/akIYsI +pihaDl63FdIE59MqXS0DgTaYJ5EQea5hTJIhxRnmvaO
X-Google-Smtp-Source: ABdhPJwuwsvFMNd/ly0bVFEVgBFJimxSJlTEwwgMQo7/oeXOuHXdxptDa/vYA9179E82SBEnShktAcdkGyil/BF5F1w=
X-Received: by 2002:a05:651c:318:: with SMTP id a24mr30738392ljp.381.1620846869561; Wed, 12 May 2021 12:14:29 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP9wV6=T-AU+j_hrXT7zH9c8OdKone_0Arq+yPu+aAupNQ@mail.gmail.com> <CAD9ie-uhLf_d0=GpftqoRAZ7_=wEBLBHyUjkR1bomz6xcM_dzQ@mail.gmail.com> <CAGBSGjo=fko9Tc+fbcA3P74xH9bZbg6t6x__-KR7XSfh6A5Evg@mail.gmail.com> <CAD9ie-uBK8yhXY1a8nW1Q=62guk_hjJv8WCzzSKrn3MiwWKVqQ@mail.gmail.com> <09226cd8-8880-4906-f745-98780d0d1bef@manicode.com> <CAGBSGjrfiK=efSTc6Ho7v1sfa0oa-==Jh7XTYpb_QpC=CVHv4Q@mail.gmail.com> <CA+k3eCRwzt8Lfa7PExUtiT_mA3Yim7Powh=vmSOoMgoLyofkHg@mail.gmail.com>
In-Reply-To: <CA+k3eCRwzt8Lfa7PExUtiT_mA3Yim7Powh=vmSOoMgoLyofkHg@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Date: Wed, 12 May 2021 15:14:17 -0400
Message-ID: <CADNypP9AtT3sKSKUpwu4nFxrh14ffn6NPK_UAVSds-Msv3jNMA@mail.gmail.com>
To: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>
Cc: Aaron Parecki <aaron@parecki.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e545ed05c226d136"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/0uWQhXPS0VGy4wu-3f-ZDSSt1zw>
Subject: Re: [OAUTH-WG] Call for adoption - TMI BFF
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 May 2021 19:14:37 -0000

Thanks, Brian!

I agree that this is the best course of action at this point.

Regards,
 Rifaat


On Wed, May 12, 2021 at 3:02 PM Brian Campbell <bcampbell=
40pingidentity.com@dmarc.ietf.org> wrote:

> While I admit to being somewhat partial to the acronym, it's not for any
> sound technical or informational reason. To be honest, before I became
> enamored with my own perceived cleverness of TMI-BFF, I also thought the
> use of "BFF" in the context of the draft wasn't quite appropriate.
>
> At this point, I propose that Vittorio and I step back and rework the
> draft a bit and then resume the call for adoption after we spin a new
> revision. We'll eliminate the problematic use of BFF and address some of
> the more straightforward feedback from the interim.
>
>
>
> On Tue, May 4, 2021 at 3:03 PM Aaron Parecki <aaron@parecki.com> wrote:
>
>> Okay, I have come around to this idea and agree that we shouldn't use
>> "BFF" to refer to this pattern. The only reason I am continuing the
>> discussion in this thread is that if we agree we should avoid the term BFF
>> for this draft, I would like to see it renamed before it is adopted, to
>> avoid any confusion at the start.
>>
>> Aaron
>>
>>
>> On Tue, May 4, 2021 at 10:28 AM Jim Manico <jim@manicode.com> wrote:
>>
>>> +1 Mr. Hardt. BFF aims to avoid access tokens in UA's so TMI-BFF is a
>>> badly branded name that will add confusion.
>>>
>>> - Jim
>>> On 5/4/21 11:25 AM, Dick Hardt wrote:
>>>
>>> My concern with BFF is that the common meaning is what the document
>>> calls Full BFF -- so what many readers will assume is BFF is not what the
>>> document is referring to.
>>> ᐧ
>>>
>>> On Tue, May 4, 2021 at 8:03 AM Aaron Parecki <aaron@parecki.com> wrote:
>>>
>>>> I support adoption. I'm also fine with the BFF acronym since it's
>>>> common in the software development world already. If anything, the TMI
>>>> acronym is the least strong of the two as it's missing a letter from the
>>>> full name of the draft.
>>>>
>>>> Aaron
>>>>
>>>>
>>>>
>>>>
>>>> On Tue, May 4, 2021 at 7:40 AM Dick Hardt <dick.hardt@gmail.com> wrote:
>>>>
>>>>> I'm supportive -- but am concerned with the BFF acronym.
>>>>> ᐧ
>>>>>
>>>>> On Mon, May 3, 2021 at 3:00 PM Rifaat Shekh-Yusef <
>>>>> rifaat.s.ietf@gmail.com> wrote:
>>>>>
>>>>>> All,
>>>>>>
>>>>>> This is a call for adoption for the *Token Mediating and Session
>>>>>> Information Backend for Frontend* as a WG document:
>>>>>> https://datatracker.ietf.org/doc/draft-bertocci-oauth2-tmi-bff/
>>>>>>
>>>>>> Please, provide your feedback on the mailing list by *May 17th*.
>>>>>>
>>>>>> Regards,
>>>>>>  Rifaat & Hannes
>>>>>> _______________________________________________
>>>>>> OAuth mailing list
>>>>>> OAuth@ietf.org
>>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>>
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>
>>>> --
>>>> ---
>>>> Aaron Parecki
>>>> https://aaronparecki.com
>>>>
>>>>
>>> _______________________________________________
>>> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>>>
>>> --
>>> Jim Manico
>>> Manicode Securityhttps://www.manicode.com
>>>
>>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.
> If you have received this communication in error, please notify the sender
> immediately by e-mail and delete the message and any file attachments from
> your computer. Thank you.*_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>