[OAUTH-WG] Re: OAuth WG Rechartering

Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> Sun, 10 May 2026 17:06 UTC

Return-Path: <rifaat.s.ietf@gmail.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0A651EC1CB31 for <oauth@mail2.ietf.org>; Sun, 10 May 2026 10:06:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778432813; bh=impCS7Zqh7yqsqdeArcN6GLpoSWbChe1mBnKknuA7vI=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=uiYU33tp0tQzyVh+dbX02NTGgT4Fxutedyc8hlaDvL27JFKKTzbOpZFewmmqCGw3H XjOYgYwwwE4xQSjsHDzH4Im0fJsM4xAUjT1U3JF/MITSZqAT2Pr4t007CrpBdCofxH gpDHqxoJhEdH/TAFTDY8KOUFVNytOQigx3VHtBvA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g8GIvY4LhZUL for <oauth@mail2.ietf.org>; Sun, 10 May 2026 10:06:49 -0700 (PDT)
Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 21249EC1CB25 for <oauth@ietf.org>; Sun, 10 May 2026 10:06:49 -0700 (PDT)
Received: by mail-lf1-x12b.google.com with SMTP id 2adb3069b0e04-59dea72099eso3422886e87.0 for <oauth@ietf.org>; Sun, 10 May 2026 10:06:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1778432808; cv=none; d=google.com; s=arc-20240605; b=Xcdnv884Fzh1kMOOgHC5LHkYTwcuAJGJ4v6Vd5u0jkYC5SIyqKnaAKqG9iNm1AU4kb QD3nBlXPXQynzPkPKJIIXmm+BS2HV0VEJwZtYIU/Juv6pSQ98gWo9EOHJ3LyNRjhZg7R U/2SN27DjWaJX0mTNecIBy5wH2oeWSLksusMJNV/mIgDQAZC+1zYiFFPPJoH3iZdsg1S 5VmPhTPVh5U8SN2gycRlp0nNBVmtVR8X+DSLT/KzSvCxVJG2r6h8dxqoLaKMZLwdxrai ZpriIizicKRissreflauc1bh+HyMHE9p4tPV7jSXHcnbYXrRhUC8KJ7KFOjCyvPByv4i tt+w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=qXfSpAgdJx2Hu/Qwp+F62BGUwmJrMdZYQRx0isChCuA=; fh=wkShS2A+NKzouhAkvMNSeJehgy+kH73XgzZZTYzRa2Q=; b=NVR3yyK2N/Umz9SyahFfO8/mkv1PEo1Lf5tzADGXZ6oQhHBJRm9NAQSqm97M8p799M WOxeQdleDUa3GMTvRchDgxVkqH9hC8+hCDKubVP926pAo5JbcMjx4Knh8cdZjNWEAW7I +BiaPhQ3KhGah4ZGejsGhT5uIEiB+TZwCm7+uYzI8Og08AntpfDKdByS4IRQX4cyHWXm QgyqoOAnFxmBRD/wEA0dJkIl0u/H1r/q2F6SibUFbpvdQu56d6b9Tyxuks3bF8RqBkS2 n1UtpishL0xeqCUbzDLwyKHvRDjUrjlnaPUrCm68aDcrn3RIkPJ3RXrGNnYEEZLBgpbx pTVg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1778432808; x=1779037608; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=qXfSpAgdJx2Hu/Qwp+F62BGUwmJrMdZYQRx0isChCuA=; b=JRHWXqx2bLTiRDkjVP3OJH9petd1Hi+NgFNuBCTRWyRdRcPO8mB5bCgGNUQUlc2r2f HuMlrShh7dO2T0L1Gln0cKHa2G3IRJq//7In6sOQubqc/7EDanRuqkiq3B8la5xeN1Cx xX/taQeF7GZrxFNv7PFKivhniostaou/6TSj3Z92BtjGbupi2Xx3G0IGgoErPFKnI5FS lHPSokkmIfit1miMMzaPLUBHclh2KInz5Z4fI6LnbS0E5znz/oXOwd6I12abDoL442JH 8mk4gmTI/vOUPp2RRmO8FGGsvX0x69cWuG31lPHcMAidNqaGf/+PK0rXNDC5ciUC+sRi 27sA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778432808; x=1779037608; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=qXfSpAgdJx2Hu/Qwp+F62BGUwmJrMdZYQRx0isChCuA=; b=mrwrDvS9R3Scm842BwNF31CpPg23oBV0EzeYMWHOtghUmECGZffY/5d2s4/pZwmNFe nbPKwnRnCtjVslHZE/CTjc69fxHSXxhgoepDwg5G1TUkAszD+D/7o8nlV0U6fHD7HEkX ev9aZpuKokxCgWA1TfB82voLBBuwnqeykyRPc4avQcNB4UyLJ+wRMXkZMqg+5JyKSFd/ Kymciyr+iM1IKklI3XDOmH6nS/z5mKQUqfaEymTS10UbuJl+avlA5vfAA9UNVBjS4I0h bicPSLwjP+RgXSrCzXqwz0yI7dyQYP35ocEA+S7OQgIsVR6KiGhW1RXauILmsZI1kyRN 0h1w==
X-Gm-Message-State: AOJu0YwBCtmnXjwggh38zI5nX1TIvdBGwGNpXqQw9huywwF3kx+iUmHP j7OEJBn7OEm7w2tUREBsEVgaJRWQmNKYJOlHCgehPiNW3J3FbkrIDG+heuyhqwswsjnGDvGViip OffVlfMH68aA8voJs1/2SyUTrLnucqgzFrtOV
X-Gm-Gg: Acq92OHCBeKeOqd+UTlYSy24A8Tu8mZzaTMeC3JOhtGPA9rcGs0aL1XJtMCKIfto2hd PkGDkTcHZemt2Pz8uA4Ff6OYA/NNwfHbRVsR3fgF8ehDhqdumch9CJmgahvRu24LjrUvfDlh2Hx k/OWvpYKJ0pHTb30or9TjEfkAKxE9kcVb7fijpyDpBjJ6fGeaNWlW4pv1LdMiQ9riL18c3vclRr XCJXMgXZ++19YjKRHtl/onnPVFcS1RE6ixsYWu2+eHHs1E5ahZVMGt2KyUU5YgNOKUBs/HCAEeG 0TScyvNEvKM4arFTr9cfB5sh5v7jcWWdhfUd34YuTgRTzBGXUlAStT/8f/qHMpuTpwjaBRDKlo0 Y4+iCPI3UHXhYdq9N71N3B5XKTeUuywc/Mbd4MQ==
X-Received: by 2002:a05:6512:3f2a:b0:5a8:7f74:8184 with SMTP id 2adb3069b0e04-5a887ceb4fcmr7299417e87.35.1778432807371; Sun, 10 May 2026 10:06:47 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP8hgBo9_d5qaM9E0LZmMKhCcr3=PNW+XyXV3FbATVGcNQ@mail.gmail.com> <CAF+PL0HBQAH=tTHjwdUT+X3Pgs8+fajbzYdWyn_TR6CuMd3yfA@mail.gmail.com>
In-Reply-To: <CAF+PL0HBQAH=tTHjwdUT+X3Pgs8+fajbzYdWyn_TR6CuMd3yfA@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Date: Sun, 10 May 2026 13:06:35 -0400
X-Gm-Features: AVHnY4Ivaz4XTsCsolU1WDbN9MRMsszZGlikh05wcDr8vFbyYrwvjVSGKpNmksI
Message-ID: <CADNypP_AQZyeXHUyHyGqn-RgESqO+=VxJLAZNq=fHwvhbcyNgg@mail.gmail.com>
To: אלעזר פוקס <a0504108486@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000bd85f5065179a740"
Message-ID-Hash: VSKZT3YA6KFCS4MBRYPTTWIP37LOGCAW
X-Message-ID-Hash: VSKZT3YA6KFCS4MBRYPTTWIP37LOGCAW
X-MailFrom: rifaat.s.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: OAuth WG Rechartering
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/9lTpLhztxPK97Z_O6rrz718Ya_c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

‪On Thu, May 7, 2026 at 1:21 PM ‫אלעזר פוקס‬‎ <a0504108486@gmail.com>
wrote:‬

> Hi Rifaat, Hannes, and Deb,
>
> Thanks for sharing the updated charter. I have a few concrete points
> regarding boundaries and future scope that might be worth clarifying before
> the IESG telechat:
>
> 1. Coordination with the SPICE WG: Given that the newly formed SPICE WG is
> also tackling selective disclosure and digital credentials (SD-CWT), it
> would be helpful if the OAuth charter explicitly defined the coordination
> mechanisms. We should ensure there's no overlapping work, especially around
> Metadata and Capability Discovery.
>
> I do not think that this needs to be spelled out in the charter.
We already have people that are active on both WGs, and the chairs of both
working groups contact each other when needed.



> 2. Future of Identity Chaining: With `draft-ietf-oauth-identity-chaining`
> nearing completion, does the new charter keep the door open for further
> Workload Identity standardization and chaining extensions, or is this
> particular scope considered complete for now?
>
> No, this does not close the door for future work on this area, if it makes
sense for that work to be at the OAuth WG.



> 3. Alignment with W3C VCDM 2.0: Since our work on SD-JWT VC is heavily
> tied to ecosystems like the EU Digital Identity Wallet, should the charter
> explicitly mention ongoing alignment and maintenance regarding the W3C VCDM
> 2.0 specifications?
>
> The chairs have close contacts with the EU Wallets initiative with
frequent meetings to keep them up to date on the progress we are making on
this front.
Why do you think we need to explicitly mention the W3C VCDM 2.0
specifications?

Regards,
 Rifaat



> Looking forward to the discussion.
>
> Best regards,
> Elazar.
>
> ‫בתאריך יום ה׳, 7 במאי 2026 ב-19:27 מאת ‪Rifaat Shekh-Yusef‬‏ <‪
> rifaat.s.ietf@gmail.com‬‏>:‬
>
>> All,
>>
>> The OAuth WG chairs and the Security AD (Deb) have been collaborating on
>> a proposal to recharter the OAuth WG.
>> https://datatracker.ietf.org/doc/charter-ietf-oauth/
>>
>> Deb put this on the agenda of the IESG telechat for *My 21st*.
>>
>> Please, take a look and let us know if you have any comments.
>>
>> Regards,
>>  Rifaat & Hannes
>>
>>
>>
>> _______________________________________________
>> OAuth mailing list -- oauth@ietf.org
>> To unsubscribe send an email to oauth-leave@ietf.org
>>
>