Re: [OAUTH-WG] [Editorial Errata Reported] RFC6749 (7642)

[Chris Smiley <[e-mail]>]

Hi Roman,

We are unable to verify this erratum that the submitter marked as editorial. Please note that we have changed the “Type” of the following errata report to “Technical”. As Stream Approver, please review and set the Status and Type accordingly (see the definitions at https://www.rfc-editor.org/errata-definitions/).

You may review the report at: https://www.rfc-editor.org/errata/eid7642

Please see https://www.rfc-editor.org/how-to-verify/ for further information on how to verify errata reports.

Further information on errata can be found at: https://www.rfc-editor.org/errata.php.

Thank you.

RFC Editor/cs


> On Sep 17, 2023, at 2:00 AM, RFC Errata System <[e-mail]> wrote:
> 
> The following errata report has been submitted for RFC6749,
> "The OAuth 2.0 Authorization Framework".
> 
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid7642
> 
> --------------------------------------
> Type: Editorial
> Reported by: Wilhelm Fast <[e-mail]>
> 
> Section: 1
> 
> Original Text
> -------------
> Instead, she authenticates directly with a server trusted by the photo-sharing service (authorization server), which issues the printing service delegation-
> specific credentials (access token).
> 
> Corrected Text
> --------------
> Instead, she directly authenticates with a trusted server, the authorization server, which issues delegation-specific credentials, known as access tokens, to the printing service for controlled and secure access.
> 
> Notes
> -----
> The sentence is confusing, and the reader might confuse the Authorization Server with the Resource Server.
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party  
> can log in to change the status and edit the report, if necessary. 
> 
> --------------------------------------
> RFC6749 (draft-ietf-oauth-v2-31)
> --------------------------------------
> Title               : The OAuth 2.0 Authorization Framework
> Publication Date    : October 2012
> Author(s)           : D. Hardt, Ed.
> Category            : PROPOSED STANDARD
> Source              : Web Authorization Protocol
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG
>