IETF Logo Mail Archive

[OAUTH-WG] Re: Call for adoption - OAuth 2.0 RAR Metadata and Error Remediation

"Lombardo, Jeff" <jeffsec@amazon.com> Tue, 11 August 2026 09:42 UTC

Return-Path: <prvs=676bc76e5=jeffsec@amazon.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 73527127AB59B for <oauth@mail2.ietf.org>; Tue, 11 Aug 2026 02:42:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786441337; bh=YPntlc7z8mnH5BtjWKQdZCFMH/okMapVwx8jeo3Q3S8=; h=Subject:From:To:CC:Date:References:In-Reply-To; b=MPQ1Z8KRwq1r8gQhaOpSbRA1dbaE+DDXK2yX3s5zOA+/IXD7Rt9pr0xsfnvy+P7s2 rMWnYjy6cnX4NUbDMrm3Cm7c7ShofEU1rAS13oqS3ivjo6mfdria1mSuka+a4k2KPH evNvkz6kSvxs8ceEQ75NkxYP9m7b1hbZ54B/mXpU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.795
X-Spam-Level:
X-Spam-Status: No, score=-2.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=amazon.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vEQANVO5MDk for <oauth@mail2.ietf.org>; Tue, 11 Aug 2026 02:42:16 -0700 (PDT)
Received: from pdx-out-006.esa.us-west-2.outbound.mail-perimeter.amazon.com (pdx-out-006.esa.us-west-2.outbound.mail-perimeter.amazon.com [52.26.1.71]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 17FD6127AB43A for <oauth@ietf.org>; Tue, 11 Aug 2026 02:42:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazoncorp2; t=1786441334; x=1817977334; h=from:to:cc:date:message-id:references:in-reply-to: mime-version:subject; bh=YPntlc7z8mnH5BtjWKQdZCFMH/okMapVwx8jeo3Q3S8=; b=BTMKWqu827QWAZ4K4ar6b5DmSVxNoZm4jqLaVGBRbeoTOrSACkhd1cNZ 68T+UMa5pVMBmtaQbEcI74xIdKCyAwHtlJYwRjw9jyaPyeqMoL8DaGT5G W0sGX+9HhZLH8bUl3LOMb47gKjfVB6eXYmRca9u9eLlSjLSGn4sCmmVDz lZJ7xplS1Lyi8msw2NVnol4Oy9Pi4Fa+8wKWE14M8Z2HnIJ1K7cO/KuJT UBHUsm1q4Wai5s37IEvY6gpnVNUwMzQ70hAG5ecVAXy2nO2EIUCQLwwE2 QiLbACfDamdf9OYwwhdQ8uD4ZGMDxXz3QBGJJjU0MycHrhPhRkrdxd2zl A==;
X-CSE-ConnectionGUID: Bki9QuvwTH6Rgi9rq6cMSA==
X-CSE-MsgGUID: TZTh6tBCSauGNYUedKf+Gg==
X-IronPort-AV: E=Sophos;i="6.25,217,1779148800"; d="scan'208,217";a="25688456"
Thread-Topic: [OAUTH-WG] Call for adoption - OAuth 2.0 RAR Metadata and Error Remediation
Received: from ip-10-5-0-115.us-west-2.compute.internal (HELO smtpout.naws.us-west-2.prod.farcaster.email.amazon.dev) ([10.5.0.115]) by internal-pdx-out-006.esa.us-west-2.outbound.mail-perimeter.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 11 Aug 2026 09:42:07 +0000
Received: from EX19MTAUWB001.ant.amazon.com [205.251.233.104:26040] by smtpin.naws.us-west-2.prod.farcaster.email.amazon.dev [10.0.25.208:2525] with esmtp (Farcaster) id 6af814b6-7ca9-4788-80f8-45b7aa5e8dd5; Tue, 11 Aug 2026 09:42:06 +0000 (UTC)
X-Farcaster-Flow-ID: 6af814b6-7ca9-4788-80f8-45b7aa5e8dd5
Received: from EX19EXOUWC001.ant.amazon.com (10.250.64.135) by EX19MTAUWB001.ant.amazon.com (10.250.64.248) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.45; Tue, 11 Aug 2026 09:42:06 +0000
Received: from EX19EXOUWB002.ant.amazon.com (10.250.64.247) by EX19EXOUWC001.ant.amazon.com (10.250.64.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.45; Tue, 11 Aug 2026 09:42:06 +0000
Received: from SJ0PR08CU001.outbound.protection.outlook.com (10.250.64.168) by EX19EXOUWB002.ant.amazon.com (10.250.64.247) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.45 via Frontend Transport; Tue, 11 Aug 2026 09:42:06 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=JpgKH87oNWDIRV18KVr5uijqV2SHonDfZJOzZCG7RsHsX7NNucR1lZybfaZNd74eiQwmTjW+wWtJlR5erfJ4I221wsG1ImGGEspg+6X1rwxSfSnWFVymClKd4V+OsUeHbXP30PYM+isFr9J/FSP8DTkuavIMbhi4KSNwH1CtlFcg0fUOfpNRIFW6omAkx6BCY2iw8k1rPnzJx4fb1NeKA2f9MtYv8yLpUFgBL2Gf+nBJ95/jNm4Gv79BMDcx0nvvvPcU3V2+Z4zrWCXPYZvn2eLEB4j6Tl5KclO4Y2Fld83X7bYiY64W9kK/OMxjG7zMOa47YqzLCA4jh33bwIspRQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=YPntlc7z8mnH5BtjWKQdZCFMH/okMapVwx8jeo3Q3S8=; b=Q7YMJ4jVlnJlN3Cf9B1xJslDL5WwA8/q+9JMisT4VAIiJ7zf3WAYUMWTlDzNiAPTKo87tV0o6QqWX0chXTP1HuVCxOk6iwU6k+MN3fNqzUCpH3RouZ7X5XyKYRJM32GtPDpunSfuPtoIyCP+kcIN06G6Ba5KY907vicqvsk3aBnanZStUN9qMJpjfBhSxGyVrF69LvGn1R+w4SM74QO3IowC2Vapt9xWcryeTVTjE9INybelWZW1IztWeBZqOublFCYjyYitvAMqwPgjIU3Q8KZ4+7WY6sih/X25wjuBKeUGs48JxOFUOb4xwSvxGTy2D5ipKRYyHQ5Kc/aLBaVArg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=amazon.com; dmarc=pass action=none header.from=amazon.com; dkim=pass header.d=amazon.com; arc=none
Received: from CO1PR18MB4684.namprd18.prod.outlook.com (2603:10b6:303:e7::5) by DM8PR18MB4503.namprd18.prod.outlook.com (2603:10b6:8:3e::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Tue, 11 Aug 2026 09:42:04 +0000
Received: from CO1PR18MB4684.namprd18.prod.outlook.com ([fe80::ee52:1b11:6a4a:d106]) by CO1PR18MB4684.namprd18.prod.outlook.com ([fe80::ee52:1b11:6a4a:d106%6]) with mapi id 15.21.0315.008; Tue, 11 Aug 2026 09:42:04 +0000
From: "Lombardo, Jeff" <jeffsec@amazon.com>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, oauth <oauth@ietf.org>
Thread-Index: AQHdJ2DIy7xNWdSdYkO/swPnzzCh9raYnIdw
Date: Tue, 11 Aug 2026 09:42:04 +0000
Message-ID: <CO1PR18MB4684CF63B8991E99544DF452D9DD2@CO1PR18MB4684.namprd18.prod.outlook.com>
References: <CADNypP9-g3Znr3qe0VtBLg_tMcuk=yhVk=fmZVueD=Bz2JFHDw@mail.gmail.com>
In-Reply-To: <CADNypP9-g3Znr3qe0VtBLg_tMcuk=yhVk=fmZVueD=Bz2JFHDw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=amazon.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CO1PR18MB4684:EE_|DM8PR18MB4503:EE_
x-ms-office365-filtering-correlation-id: 4c63f61a-389e-4aed-9fed-08def78ccd6b
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|23010399003|18002099003|22082099003|13003099007|38070700021|8096899003|10067099003|11063799006|56012099006;
x-microsoft-antispam-message-info: XeQuDIOIgaHpOjM5kegvbJmeAGDPOivoEtIf0GzJlmkO0vyC3VsRAWea4hG5jWat6VQeBL6rHkJgCeyso5qbnzh05CaYEzJXv5zjF3chkUJOlgBnDJANoUj+fsG94JhbW/akNhHm4VhnKnKXUhc2kwDwrjVoShe/pttZoGgdvq0V5qfBb5QbEOv4rRf82SShf5Afa6UVeRTq1XpvAC/E3XY2VhAYy9XmA2X075TVhbSX1UaHpWuj8/vxt9dgIqfZDB47jg1gmiOb7lNjmSATSu3hr22S/Zy0qybR93ica12vqTaPsYQ9uT57YJj/bOnlH8qk2akVeu+QVgHzCYJgcrLW4oAixjd37gYTQMqjWh2FZx0ICuZFCEM0gcMrWFMN9LYXavLbVZ0ktwFhjQmJa+zqfGWCk9b0g9WxaSoOQSFrHSezdK9ZDiYVhcuRG3B9UwbWdKhqeS07GPfbGBHQcisgH8gyDTwt9ry2KX4j+7nIA4X3ifyL1JxJXnAbxHp4BVbyGM8A6a1XQCyi1D3XLrsZBogW7AfwVOGw4uZRjDIt7PTCq7lgwl2p7iZm5ASNY/I63dKqfIyP93Wu9syWWdILB5RBfBcv+gDmr8eSOQ6kkuOGtirjumuAzfjAZxSDXH/Pyq1hqLIe0M9n1iMM8VT1s16q4Xh5kaWR+hijYNwwnilgPtTAT7t+HvzKaHqc9mxNh9sE0AiWiMXT9xqfoExzHuTFUxvJuVPdtkhlITY=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR18MB4684.namprd18.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(23010399003)(18002099003)(22082099003)(13003099007)(38070700021)(8096899003)(10067099003)(11063799006)(56012099006);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CO1PR18MB4684CF63B8991E99544DF452D9DD2CO1PR18MB4684namp_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: CkA98DC3lLBl5shKaNLU/+7Wx1TbntjNQ6KiaiuMM85KbmR2UbZjBqZsmOdYEoIB/bmJTqrgy1dolp5FRHiJvmgKNmQPEanpHy8veKrJg9gerXyVmFn6SJUY/zvpxSoFUmHP3pXkf8DRhjv914MxwrAt06TQW4Peqi9YnK6Dxw3mCQfD2TzGCFcm7cKnsv9YDAqH0laWGvtgcdbbJkLAb6ifEyAA8s9udElHBLAvU61D9DE4IlRQbe/vzujQA8p6pLKCr33KTBaiQXjQ7iFMtstmls886O+17ekvUgG/xGwJsKGhY4X0PrF0ZI9LZ0XErFJrv2yJh1Fa+QdlF/V7jA==
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CO1PR18MB4684.namprd18.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4c63f61a-389e-4aed-9fed-08def78ccd6b
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2026 09:42:04.6471 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5280104a-472d-4538-9ccf-1e1d0efe8b1b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /TV0Ypek2bcRncX7sNb7W/Xj762pdQeQZrG7kC/nrkNld0ipwgrfs23LJgIig8SVxLO/3CwRdtFfleGmXL0aDA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM8PR18MB4503
X-OriginatorOrg: amazon.com
Message-ID-Hash: WKILMEUZBAVE4EFSBNIPAXWHKXP5YA5I
X-Message-ID-Hash: WKILMEUZBAVE4EFSBNIPAXWHKXP5YA5I
X-MailFrom: prvs=676bc76e5=jeffsec@amazon.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: Call for adoption - OAuth 2.0 RAR Metadata and Error Remediation
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/7u_O4ANUk-YB9jT_FqoPEAOvVMU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

I support adoption.

Jean-François “Jeff” Lombardo | Amazon Web Services

Architecte Principal de Solutions, Stratégie de Sécurité
Principal Solution Architect, Security Strategy
Montréal, Canada

From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Sent: August 8, 2026 8:06 PM
To: oauth <oauth@ietf.org>
Subject: [EXT] [OAUTH-WG] Call for adoption - OAuth 2.0 RAR Metadata and Error Remediation


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.


AVERTISSEMENT: Ce courrier électronique provient d’un expéditeur externe. Ne cliquez sur aucun lien et n’ouvrez aucune pièce jointe si vous ne pouvez pas confirmer l’identité de l’expéditeur et si vous n’êtes pas certain que le contenu ne présente aucun risque.

All,

This is an official call for adoption for the OAuth 2.0 RAR Metadata and Error Remediation draft:
https://datatracker.ietf.org/doc/draft-zehavi-oauth-rar-metadata/

Please, reply on the mailing list, on whether you support or oppose the adoption of this draft as a WG document by August 21st.

Regards,
 Rifaat & Hannes

v2.46.0 | Report a Bug | By Email | System Status