IETF Logo Mail Archive

[OAUTH-WG] Deferred Key Binding / TMB

Justin Richer <jricher@MIT.EDU> Thu, 05 June 2025 16:45 UTC

Return-Path: <jricher@MIT.EDU>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 57F97315E5E4 for <oauth@mail2.ietf.org>; Thu, 5 Jun 2025 09:45:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mi-A-25Y6aOW for <oauth@mail2.ietf.org>; Thu, 5 Jun 2025 09:45:19 -0700 (PDT)
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10on2086.outbound.protection.outlook.com [40.107.94.86]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C5A03315E5D3 for <oauth@ietf.org>; Thu, 5 Jun 2025 09:45:19 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=uUDj6xegKtKSf2txMyzt5oGR0mEPV8FTLm5Ot/P/ZJ14xJSuEgekZGGs5PiqKIJR+UDvjvHQnVbwzxT9jOa2Wbd8Sl+RPYb3HyRs0dv7GZc15YODYeN1hgfNSWZ9I/j0tTowOQ7jzVTMYIymv9ZmW0wCF2VmrRiMoKi94njjiw5MoTMXNT/AoxS0KX7Ky3ABpZNT90OhYkBie5/byjilEvNLUpqaqqlNRPIsXUPaS5eBapHU5buqlEql6eSAiU/6Tcl8k5N55H9QrB9ZSq7Tghk/F6+AuhL7MD0f8OwkOFEqOVdtfgnsW3cXM/qdLBhBtzMVzytRT5EzwlpUyCBqww==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lJDiH4HLpHgAslqk3sKuCw44d0PxTVNP5w9domOPA0I=; b=ZT2fhcDVwUDhrga95ANX0vMceo4KVZBg7MBEHXN3TzxbA3snjHAN4yGgx6mtUUxYGqz/H196uFDfOq2bxmZnFCOqvG9va9CcbgbMxA3V04BI5J8oZOrU4g/85NyCJbHGHZ+rukkztXYaCtovbzzsKfk+SrZLmIRwl8FcgcoBjo57XYjazh9EY+IHzxX51Gt3Oa9bASTuehYZCnd3LlSbc7kbLXk+qoYC2mSlu1a2rN3YEWqa2hTBtNSSmspACv4ZltSgtdctxlOrKC0CCm7paeJq+RgcFGmVjhp50MwoLqKrXpeMWTCiMe11D3OFTfTyvcJOBJUN1Cw4P5piOee3/g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lJDiH4HLpHgAslqk3sKuCw44d0PxTVNP5w9domOPA0I=; b=PnIqZZB+BbAkPOsPOyF8zEbaJHcn/OCOoaX5AOcm64Yl7lJgvtiT5JCo2ckpsEfojEWcq3OC46eA8jY9FDc/n6CguwIYtGJLlJOEsIfFJNR+H8DiE3OXd9zZ38CjynXaymagOE3ndld/C3edkTyyze6VAgJ2NF6UY1NnYO87BsE=
Received: from LV8PR01MB8677.prod.exchangelabs.com (2603:10b6:408:1e8::20) by PH7PR01MB8513.prod.exchangelabs.com (2603:10b6:510:2ee::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8769.26; Thu, 5 Jun 2025 16:45:17 +0000
Received: from LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820]) by LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820%3]) with mapi id 15.20.8813.020; Thu, 5 Jun 2025 16:45:17 +0000
From: Justin Richer <jricher@MIT.EDU>
To: oauth <oauth@ietf.org>
Thread-Topic: Deferred Key Binding / TMB
Thread-Index: AQHb1jk3MfCFSmf7iUqzN4BbN6bpRA==
Date: Thu, 05 Jun 2025 16:45:17 +0000
Message-ID: <E40270D7-F032-49B1-9B10-87167331EA3C@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=MIT.EDU;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: LV8PR01MB8677:EE_|PH7PR01MB8513:EE_
x-ms-office365-filtering-correlation-id: 34e0488c-b596-447f-cab3-08dda4505a03
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|38070700018;
x-microsoft-antispam-message-info: 6UclpXDRhc8jG3T4ec+WZpXLk9ALxx4RR4VpvE69mLhz18nzek/EG++j2/W0yh0orWN0ZNDq2HCokns2vEE5WPb0kwKr8FYuBeunQ/JY+x0n8VVk3QcH6CfuRaz6EeqxTj5PORc1y82gRfdyAm/mt1VCyaAjbiw7f+zAzoq6p4hezuP+4Fimwz3EiE62he7rBIBHqLguw09GO5Kjs4cmal7iRg4J6sfXhLMLA6hYDa3o1Hw48dSmdcD9Ieqt1DPfcopWduMSKpZQzuobf/psSFKhcU3uatyb9XaHK0HcktqBwwEsztggLQwFVDbeZPSeLuZn62PG72+ywsO5oWCMXk2Cb08nfyMLqBxIzV25icfk2t1b8imRXj67FT5+h/7BVtLj1/srVbvhqaGwNqVfLaFTokAUOPQLpAB2pnBYOIBBB8/D+Lm4RBO4MfQipmemVHBo9+QiuDds4s0UMhtPSuaCA3Jdl8VWapDwh47S2xXY9gr52p2poLlDspCbxc/StFF9wYCcAI9NHGnnFhX1Zm8yJ3cYuKnwZY1u3oNif44bWyxCfx6ejrHMJ1wfzv5iUTanFCfAMT+u8gmKD3E4V08DB8ZkH+OJrS7WD6Aii9bdOoiHmbjJUBIR2eviGVeYBSNiHc9LkG3Jd5t0IzLGUtQFeJsylzgrP++GdL+QQ2c3VODBChoAukWwUBAHkkdtz9JUiH7QnZbYR9dZ/sXI3R0QAPLTeqTXo0/KKsZL8m6MQyJNhjNHOhLMbejLovlTz8Tzo2rs44foJ0nbYOoYbN2ye/I2J6tPqGo3HFd1fXPWuFbhh2J7Hcd9XRdpPZMILLoZvMAFpJNMmDh/qdjB3qNVD0w9QBdkdOwSPL9CQ840HXI4ozNwkabzAnZoSLrlsSIAwKKx07dYMkjkwX0Ab4upQNhdglmjq8IdaW7f4/Z6Rh7pZdDJI2wWGHx5nHYfSz3q+3uxsniTtvr2kQGkaCB64kmWnpo31XpzTBsWFgrPpvDPwexELm0K68nhUpMzIcjoV74xsdka5rG8JZK+runJB4QsI4subj/1h9L8PUwGUGMlBoloo6Vhib0zx0zdgaVkaqsG+glruhYRXxiVg0QqxPXHOdHmdVflejprAxj6sqjPY958DE+tp+aKcYWPFKvi9X1hbklHNP4itvkL44sM7hqt2lFvDavXpE1viLwsYmCuGVvhcFkDfcLoqyCi0OjK36r7zccy1QqTSdYB1HC9nhHba7fSWu9eefGAHqAFpe5FQ0p6yohINbbCv38KW9LwcoZqQSjvE1RPkGlVKRQW2VW2RZrP+f1tSVIT/YIUDulT9Bx5fO28jfrvmWaxvyrCPKHZE58Ju298AqxVN8PCxuOK61MIOMvLlMg2ghU1Zw8hbFS+AY+5mlj3a/jLhexZp5/xJEdRqsKRhPXhJOEhyRPXJc4MNzFhjl0g/xAETjwXrQdNndZ16fEQbmDDB/WekSCf4uEAiR1Ugm/m0BQXZYFCKSR7R/Q6ejkbXBk=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV8PR01MB8677.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <EB6C0D10E70FA44E88110F0F59470E25@prod.exchangelabs.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LV8PR01MB8677.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 34e0488c-b596-447f-cab3-08dda4505a03
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2025 16:45:17.0382 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: yuBzxIOoaydVNYm7QKvOt7Y9oWHTyK/tQkruazKkBsDOCSG2UTUOTNsaS/cM/c7W
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR01MB8513
Message-ID-Hash: FVM7W3YD2THPESFJYWPR2VB5VW7YCZHC
X-Message-ID-Hash: FVM7W3YD2THPESFJYWPR2VB5VW7YCZHC
X-MailFrom: jricher@MIT.EDU
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Deferred Key Binding / TMB
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/5ayWASWCMkSqqSJn_Ul6SbgTl9g>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Hi Chairs and WG,

Back in Bangkok, we presented the draft https://datatracker.ietf.org/doc/draft-richer-oauth-tmb-claim/ that introduces, in a concrete way, the notion of getting a token bound to a key that you don’t possess. As we discussed, this is a topic that keeps coming up in the OAuth space and is usually dutifully pushed aside for the sake of simplicity (and some would argue sanity).

The chairs mentioned pulling together an interim meeting for the OAuth WG for us to discuss this topic ahead of Madrid, to see if there was anything more we as a community want to do with it. As we’re now more than halfway between the meetings, we wanted to bring that up again and see if that interim can get scheduled soon. I’d also like to encourage people to read through the draft and open the discussion here on the list more.

 — Justin

v2.31.3 | Report a Bug | By Email | System Status