IETF Logo Mail Archive

Re: [OAUTH-WG] Decentralized OAuth2.0 -- FW: New Version Notification for draft-hardjono-oauth-decentralized-00.txt

Thomas Hardjono <hardjono@mit.edu> Thu, 02 February 2017 13:32 UTC

Return-Path: <hardjono@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 276CE129449; Thu, 2 Feb 2017 05:32:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.4
X-Spam-Level:
X-Spam-Status: No, score=-7.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hdMHVVaKGowe; Thu, 2 Feb 2017 05:32:14 -0800 (PST)
Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B81C129442; Thu, 2 Feb 2017 05:32:14 -0800 (PST)
X-AuditID: 1209190f-3a3ff700000038d4-e9-589334dcc122
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id B6.32.14548.CD433985; Thu, 2 Feb 2017 08:32:13 -0500 (EST)
Received: from outgoing-exchange-1.mit.edu (outgoing-exchange-1.mit.edu [18.9.28.15]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id v12DWCtN015875; Thu, 2 Feb 2017 08:32:12 -0500
Received: from W92EXEDGE5.EXCHANGE.MIT.EDU (w92exedge5.exchange.mit.edu [18.7.73.22]) by outgoing-exchange-1.mit.edu (8.13.8/8.12.4) with ESMTP id v12DWBec013409; Thu, 2 Feb 2017 08:32:11 -0500
Received: from W92EXHUB12.exchange.mit.edu (18.7.73.21) by W92EXEDGE5.EXCHANGE.MIT.EDU (18.7.73.22) with Microsoft SMTP Server (TLS) id 14.3.339.0; Thu, 2 Feb 2017 08:31:26 -0500
Received: from OC11EXPO33.exchange.mit.edu ([169.254.1.80]) by W92EXHUB12.exchange.mit.edu ([18.7.73.21]) with mapi id 14.03.0339.000; Thu, 2 Feb 2017 08:32:10 -0500
From: Thomas Hardjono <hardjono@mit.edu>
To: Aaron Parecki <aaron@parecki.com>
Thread-Topic: [OAUTH-WG] Decentralized OAuth2.0 -- FW: New Version Notification for draft-hardjono-oauth-decentralized-00.txt
Thread-Index: AQHSfOVlyUPOs0QsG0eqL+eCJmsJw6FVMCIAgACGjGQ=
Date: Thu, 02 Feb 2017 13:32:10 +0000
Message-ID: <5E393DF26B791A428E5F003BB6C5342AC1CD85BE@OC11EXPO33.exchange.mit.edu>
References: <5E393DF26B791A428E5F003BB6C5342AC1CD7488@OC11EXPO33.exchange.mit.edu>, <CAGBSGjoc_85h7-tgDW7H0qjE_KZ284tmYyxv5MsjQduOOnsE+A@mail.gmail.com>
In-Reply-To: <CAGBSGjoc_85h7-tgDW7H0qjE_KZ284tmYyxv5MsjQduOOnsE+A@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [173.38.117.89]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrPKsWRmVeSWpSXmKPExsUixCmqrHvXZHKEwf9DAhbnVrlZ3J67ks3i 5NtXbA7MHkuW/GTyaJiZFsAUxWWTkpqTWZZapG+XwJXR1vCHueC9dMWkmyvZGxjfinUxcnJI CJhILG/Zx9zFyMUhJNDGJPG44xwbhLOfUaJn1g5GCOcoo8Tl5ZNYIZxtjBKPfs9nh3BWMkpM ndDKBDKMTUBDou1HLzuILSKgKnGtsY0RxGYWSJSY9HsaWFxYoE7i6KRXzBA19RJTu/+yQdhW Er3/rrCA2CwCKhJrJt0Fq+EVCJJov3wbatl0Ronrm3eCFXEKBEp0bDgOtoBRQEzi+6k1TBDL xCVuPZnPBPGdoMSi2XuYIWwxiX+7HrJB2IoSDX83sELU60gs2P2JDcLWlli28DXUYkGJkzOf sExglJiFZOwsJC2zkLTMQtKygJFlFaNsSm6Vbm5iZk5xarJucXJiXl5qka6JXm5miV5qSukm RnA8SvLvYJzT4H2IUYCDUYmHN0NsUoQQa2JZcWXuIUZJDiYlUd4pWpMjhPiS8lMqMxKLM+KL SnNSiw8xSnAwK4nw3tEDyvGmJFZWpRblw6SkOViUxHnFNRojhATSE0tSs1NTC1KLYLIyHBxK ErzbjYEaBYtS01Mr0jJzShDSTBycIMN5gIZngdTwFhck5hZnpkPkTzEqSonzWoIkBEASGaV5 cL3gdMnuKfaKURzoFWHeGyBVPMBUC9f9CmgwE9Dgn48ngQwuSURISTUwrvILmblv20Y5udi5 N/Rd7c+4z790+K7pcXup6qapFw5GJU/gO6a+eXfKszzBFap1cw6auUnuc8kv2bsym3e1LFOm n0lMabj49ItWDTen7Un62HfkbNsqHb7GlyfM17ww+ZBqb1f1bdJ0W853gk9++Un/rdjkeVrs 4O1L9WX93OsXWPp3Mp6+rsRSnJFoqMVcVJwIAHGi/P5yAwAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/2TOdR82pIULaNQvsiVymt3ET3C8>
Cc: "oauth@ietf.org" <oauth@ietf.org>, "oauth-chairs@ietf.org" <oauth-chairs@ietf.org>
Subject: Re: [OAUTH-WG] Decentralized OAuth2.0 -- FW: New Version Notification for draft-hardjono-oauth-decentralized-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Feb 2017 13:32:16 -0000

What's needed would be (a) contracts servers that can talk to one another, (b) addition of pub-keys to some well known endpoints, and (c) some actual contracts with actual legal prose :-)

The contract server could be treated as a protected endpoint (e.g. at the AS), but since contract agreement is a 2-way handshake we may need to add some new message flows.

/thomas/


________________________________________
From: Aaron Parecki [aaron@parecki.com]
Sent: Wednesday, February 01, 2017 7:26 PM
To: Thomas Hardjono
Cc: oauth@ietf.org; oauth-chairs@ietf.org
Subject: Re: [OAUTH-WG] Decentralized OAuth2.0 -- FW: New Version Notification for draft-hardjono-oauth-decentralized-00.txt

The introduction sounds great, especially acknowledging the problems due to "the predominance of the web single sign-on model as the basis for the user interaction"... but is there a summary of what this actually describes? I see a lot of boilerplate text, and defining some new terms, but I don't actually know what I would implement after reading this.

----
Aaron Parecki
aaronparecki.com<http://aaronparecki.com>
@aaronpk<http://twitter.com/aaronpk>


On Wed, Feb 1, 2017 at 3:48 PM, Thomas Hardjono <hardjono@mit.edu<mailto:hardjono@mit.edu>> wrote:

Folks,

This may be of interest. Its forward-looking, I know. Appreciate any comments on the draft.

Best.

/thomas/

________________________________________
From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org> [internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>]
Sent: Wednesday, February 01, 2017 6:39 PM
To: Thomas Hardjono
Subject: New Version Notification for draft-hardjono-oauth-decentralized-00.txt

A new version of I-D, draft-hardjono-oauth-decentralized-00.txt
has been successfully submitted by Thomas Hardjono and posted to the
IETF repository.

Name:           draft-hardjono-oauth-decentralized
Revision:       00
Title:          Decentralized Service Architecture for OAuth2.0
Document date:  2017-02-01
Group:          Individual Submission
Pages:          21
URL:            https://www.ietf.org/internet-drafts/draft-hardjono-oauth-decentralized-00.txt
Status:         https://datatracker.ietf.org/doc/draft-hardjono-oauth-decentralized/
Htmlized:       https://tools.ietf.org/html/draft-hardjono-oauth-decentralized-00


Abstract:
   This document proposes an alternative service architecture for user-
   centric control of the sharing of resources, such as personal data,
   using the decentralized peer-to-peer computing paradigm.  The term
   'control' is used here to denote the full capacity of the user to
   freely select (i) the entities with whom to share resources (e.g.
   data), and (ii) the entities which provide services implementing
   user-controlled resource sharing.  The peer-to-peer service
   architecture uses a set of computing nodes called OAuth2.0 Nodes (ON)
   that are part of a peer-to-peer network as the basis for the
   decentralized service architecture.  Each OAuth2.0 Nodes is assumed
   to have the capability to provide AS-services, RS-services and
   Client-services.





Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org<http://tools.ietf.org>.

The IETF Secretariat

_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth

v2.23.0 | Report a Bug | By Email