Re: [OAUTH-WG] Agenda for IETF#87 Meeting

Hannes - you wrote "Goal: Get draft-ietf-oauth-v2-http-mac to WGLC".  I believe that there are questions we need to answer as a working group before assuming that that's our goal.  Previously, for instance, we'd discussed that it might be appropriate to replace the MAC draft with work on a holder-of-key token type.  There's also a question of whether it's even needed, given OAuth 1.0 fulfills the same requirements.

Therefore, if the MAC draft is discussed at all, I believe that these are some of the questions we need to address:

(1)  Should the working group recommend the use of OAuth 1.0 when a body signature is wanted, and explicitly stop the work on v2-http-mac?

(2)  (If the answer to (1) is "no")  Should the working group focus its resources on a holder-of-key specification, instead of v2-http-mac?

(3)  (If the answers to (1) and (2) are all "no")  Should we hold the v2-http-mac work until the shape of the holder-of-key work is known, so we know whether v2-http-mac should use the holder-of-key work or not?

(4) (Only if the answers to (1), (2), and (3) are all "no")  What needs to happen for v2-http-mac to progress to WGLC?

				Thanks,
				-- Mike

-----Original Message-----
From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of Hannes Tschofenig
Sent: Wednesday, July 17, 2013 10:38 AM
To: oauth@ietf.org WG
Subject: [OAUTH-WG] Agenda for IETF#87 Meeting

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all, 

it is time to discuss the agenda for the meeting. Here is a strawman proposal. Let us know if you would like to add a topic to the agenda:

- --------

Web Authorization Protocol (OAuth)
==================================

Date: WEDNESDAY, July 31, 2013
Time: 0900-1130 CEST
Room: Tiergarten 1/2

Agenda:

 * Dynamic Client Registration (TBD)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
 https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/

 Goal: Discuss open issues with the WG document and determine  whether there is interest to adopt the SCIM proposal in the WG.  

 * JWT (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/

 Background: This work depends on the progress in the JOSE WG. 
 JOSE made some progress and so the question is whether this  document can enter WGLC (soon). What are the open issues? 

 * Assertions (Mike Jones) -- if necessary  https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

 Goal: If there are still open issues we should discuss them. 
 Expectation is that the documents are back with the IESG  the week before the IETF meeting. 

 * Security (Hannes Tschofenig)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/
 https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/

 Goal: Get draft-ietf-oauth-v2-http-mac to WGLC. 

 * Other items? Rechartering? 

- --------

The latest version of the agenda can be found here: 
http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth

Ciao
Hannes & Derek

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=
=rsLq
-----END PGP SIGNATURE-----
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth