Re: [OAUTH-WG] Call for adoption: JWT Usage in OAuth2 Access Tokens
Dominick Baier <dbaier@leastprivilege.com> Tue, 09 April 2019 04:44 UTC
Return-Path: <dbaier@leastprivilege.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EA1312039E for <oauth@ietfa.amsl.com>; Mon, 8 Apr 2019 21:44:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=leastprivilege-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YyfaH3UTo9JK for <oauth@ietfa.amsl.com>; Mon, 8 Apr 2019 21:44:54 -0700 (PDT)
Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1595F120314 for <oauth@ietf.org>; Mon, 8 Apr 2019 21:44:54 -0700 (PDT)
Received: by mail-qt1-x82d.google.com with SMTP id w30so18251885qta.8 for <oauth@ietf.org>; Mon, 08 Apr 2019 21:44:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leastprivilege-com.20150623.gappssmtp.com; s=20150623; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=uMC/VIA7U0VxW6Ef4JKCaAhrMCBKE1YERnpwLa4AY5I=; b=l6SSFg27DpD2n6k4YObV/GQg8dO6U9z++tHF4D+c+q/Lv+Rh5GPc+4B+qHCHi3Y+Df N5fk8qny33u+DELomQhhzbj0opkyne1x3XhFehRgubBAsihj3l6JboHQsa6tde63fEQY GDxdmXVdQKT2oNjP7HqGWf8qma6TKGzRTswS2JFfLA0QQcWlHXPJG0bvtdFp1WX0cdqV 9a4Xx+/iOGmLJa7+b19YDywj3JWwmwBYwglLXCIdjgn1bcu6C9J/ltJGxobNV9OR/x6Z HRWdOJTod+OhJ48K87iDopN09mue7Ne6OfN2ixNUkE+FT0QJOjYfKeG+6TiddbbiHhjc LUWw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=uMC/VIA7U0VxW6Ef4JKCaAhrMCBKE1YERnpwLa4AY5I=; b=rHvYF/469Upfvcj/xxlPkiCM7hq9LBjI9sBR1Jqhk8V7EOnNmhyHLJNhuLnYkQ7o2h 4DY0aeQVpHbON9JvfSU5lpSutjiMcCApn2nrEqCKTKu0pNdwJVhvJPTY5RUMxSX9I1pC L0hsMn4l4FW5CnSgndKcx/BrD2ksnUhCBP+wfM3Am6bpQvDwKTInjVT7YqagvDIayvIk wkM8ftqYQc9SfO4pOO9cv1BmEtI05J8k/13nWXo3iV7OJs2uhDjBUEJfy4/6MqjSbOKN Z7w4KkvLdt/gtUGzNYe5sglrQWHSxY0W3U7ZzvvdXpgTFFAr4trSx5kRzDBo/URKTlzE bqtQ==
X-Gm-Message-State: APjAAAUKxjUuS7AzHqLpw8HL2grga2xxgUCcHacY0p/j6/leTxfn5/xV 81GERh1GBqWRSQkxRs1NU6FVs4EhsI5RUhkFCFY+9RAN3dgu
X-Google-Smtp-Source: APXvYqytFp6ibJpyayO3/2exotTgbC/cNY/NtQs3JQUb7peOGfQyI28wgho13HefEXVetjumTjmhKWuLdSHMBnKQvg4=
X-Received: by 2002:a0c:89b5:: with SMTP id 50mr26931612qvr.156.1554785093122; Mon, 08 Apr 2019 21:44:53 -0700 (PDT)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Mon, 8 Apr 2019 21:44:51 -0700
From: Dominick Baier <dbaier@leastprivilege.com>
In-Reply-To: <CAAP42hATBnx_ueMsUydv-e5DytQEwOimz8K8QYEcOuuj3hr48Q@mail.gmail.com>
References: <AM6PR08MB36861CE2351D6922D5F8F91FFA2C0@AM6PR08MB3686.eurprd08.prod.outlook.com> <7caf266b-559b-52dc-e5fd-68d43c827ef8@ve7jtb.com> <CA+iA6ugcKUrJuP7TLWOc20Ke-08bDoqkqZuuwM2gDne5jd_=SA@mail.gmail.com> <81695294-fcde-4501-b520-ae48cd632a56@aol.com> <CAAP42hATBnx_ueMsUydv-e5DytQEwOimz8K8QYEcOuuj3hr48Q@mail.gmail.com>
MIME-Version: 1.0
Date: Mon, 08 Apr 2019 21:44:51 -0700
Message-ID: <CAO7Ng+uGLtjzJz8J2vdD9Je9UdW9J6EnSJDCcDzFeNfG3w0RgQ@mail.gmail.com>
To: William Denniss <wdenniss=40google.com@dmarc.ietf.org>, George Fletcher <gffletch=40aol.com@dmarc.ietf.org>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002d91720586119dcb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/4GRIBe-MSD5X5Kdm7BVJ0pNA06s>
Subject: Re: [OAUTH-WG] Call for adoption: JWT Usage in OAuth2 Access Tokens
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2019 04:44:57 -0000
+1 ——— Dominick On 8. April 2019 at 20:21:21, William Denniss ( wdenniss=40google.com@dmarc.ietf.org) wrote: I support adoption of this draft as a working group document. On Mon, Apr 8, 2019 at 11:11 AM George Fletcher <gffletch= 40aol.com@dmarc.ietf.org> wrote: > +1 for me as well :) > > On 4/8/19 1:38 PM, Hans Zandbelt wrote: > > +1 > > Hans. > > On Mon, Apr 8, 2019, 19:34 John Bradley <ve7jtb@ve7jtb.com> wrote: > >> I agree this should be adopted as a working group document. >> >> >> On 4/8/2019 7:07 PM, Hannes Tschofenig wrote: >> > Hi all, >> > >> > this is the call for adoption of the 'JWT Usage in OAuth2 Access >> Tokens'?? document following the positive feedback at the last IETF meeting >> in Prague. >> > >> > Here is the document: >> > https://tools.ietf.org/html/draft-bertocci-oauth-access-token-jwt-00 >> > >> > Please let us know by April 22nd whether you accept / object to the >> > adoption of this document as a starting point for work in the OAuth >> > working group. >> > >> > Ciao >> > Hannes & Rifaat >> > >> > IMPORTANT NOTICE: The contents of this email and any attachments are >> confidential and may also be privileged. If you are not the intended >> recipient, please notify the sender immediately and do not disclose the >> contents to any other person, use it for any purpose, or store or copy the >> information in any medium. Thank you. >> > >> > _______________________________________________ >> > OAuth mailing list >> > OAuth@ietf.org >> > https://www.ietf.org/mailman/listinfo/oauth >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> > > _______________________________________________ > OAuth mailing listOAuth@ietf.orghttps://www.ietf..org/mailman/listinfo/oauth <https://www.ietf.org/mailman/listinfo/oauth> > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
- [OAUTH-WG] Call for adoption: JWT Usage in OAuth2… Hannes Tschofenig
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Filip Skokan
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… John Bradley
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Hans Zandbelt
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… George Fletcher
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… William Denniss
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Dominick Baier
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Scott Brady
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Neil Madden
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Lars Wilhelmsen
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Anthony Nadalin
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… n-sakimura
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Dick Hardt
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Pedro Igor Silva
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Sascha Preibisch
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Dag Helge Østerhagen
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Schanzenbach, Martin
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Sascha Preibisch
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Schanzenbach, Martin
- Re: [OAUTH-WG] Call for adoption: JWT Usage in OA… Rifaat Shekh-Yusef