Return-Path: <luke.o.synnestvedt@pwc.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
 by ietfa.amsl.com (Postfix) with ESMTP id EC6FE120CCD
 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 10:26:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5
 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
 DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5,
 SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key)
 header.d=pwc.com header.b=oIGSWFLP;
 dkim=fail (2048-bit key)
 reason="fail (body has been altered)" header.d=pwc.com
 header.b=Mxy4S/G4
Received: from mail.ietf.org ([4.31.198.44])
 by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id MKnJE9Xcg6nw for <oauth@ietfa.amsl.com>;
 Mon,  4 Nov 2019 10:26:39 -0800 (PST)
Received: from lxsmpr21.pwc.com (lxsmpr21.pwc.com [155.201.248.113])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by ietfa.amsl.com (Postfix) with ESMTPS id B8200120C50
 for <oauth@ietf.org>; Mon,  4 Nov 2019 10:26:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pwc.com;
 h=mime-version : from :
 date : message-id : subject : to : content-type;
 s=Gtwy1-06072019-H9MsYnooFYIE;
 bh=0CO2BOeZ5bF2rUVVt/EK5FNzVGh+oFmajZ/3nMDrQME=;
 b=oIGSWFLPjfsg8ThDvUJ1huItSlzsxwtC4wmudXxwmErP/+bsOJM6ByzLnBP+qIZ00fBa
 jZgwzfvsVx8b6927Vzs4j98rfa8PvhU+xpFDPYI5C/4dh+W0nuBBnemqTruYVqq/s5lT
 f099WiKuX2isqcc5HjuRHdk+CpV00lcjqhLYuvtXvIUViaA7NNnNTEzCgYyQnWwsu8Sn
 4I/OMIRG3wS6k6YVB5RoyfVAjOkT/ukP7MKNTO75K88nMiTuK7+wtUcGA3DX9vp8KgK8
 r4+lh+FqJ1seJruTTUfthWAAtXWHL3nPVoN4CBTfA8QIUNIOSOY6omDlDG1DweVvWZqm dA== 
Received: from mail-ot1-f71.google.com (mail-ot1-f71.google.com
 [209.85.210.71])
 by lxsmpr21.nam.pwcinternal.com (8.16.0.27/8.16.0.27) with ESMTPS id
 xA4IQbN8092207
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=OK)
 for <oauth@ietf.org>; Mon, 4 Nov 2019 13:26:38 -0500
Received: by mail-ot1-f71.google.com with SMTP id 9so10501541otc.21
 for <oauth@ietf.org>; Mon, 04 Nov 2019 10:26:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pwc.com; s=google;
 h=mime-version:from:date:message-id:subject:to;
 bh=k3crTkI3AbIaoDnfZXi7wc0VSFkBfbBV17HEL0GaY6U=;
 b=Mxy4S/G4zMd/KY+/ce9PASHw+V9a7HG0cZYrTP3y/oghM5uW6hYUv77JERYPY1IMXB
 /4J+M+zAShFsCOMBq+Ys7/ot3NTtO3H5Hqg0Bm+Kal9dCtKEhq6YI/q03P/4ZN1RafDv
 fW8Wu7YJdN1FRDc8BNHHFS1SnDWHujEcqyXWi1ci/DQ6qHksXPzXUzl/MJ4zq3xD5T6u
 iHDPR5nJoHfXptUadJ3pMlTGufRJ7IT2MLiUzXdr1M0rVOYGWX2T3y6aVGyTIX6SyARo
 9U3hNKw31xbdPwMaeR7y45ED4yZSpLT3cuIaPzWeKY8JiLewRnEicf/8rlN4DO5uhJez
 ZrbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=k3crTkI3AbIaoDnfZXi7wc0VSFkBfbBV17HEL0GaY6U=;
 b=NMwTmFs+TQM4ks3p0ravRjuYTQyx6VQNvi968LikV0Cv52WLdnHqIfO+IRm9xsUH6T
 0I/u5ONX/7oYPMtW/7kp3Cii1DNnLFXPidi9zYIgcWBmvULKE8g9YSVcZdaEdRcTYLgw
 zXE/SicSpydoigDpgeFWED5SOc+9RDWR7DzhbvWbjE0l4otUaTrPtfBDYnpdq3TutGJM
 AoxCsgH20UqZIxmkTjH4Xe0w+tAh3c3ReSi8vo3bZVOYDGoSau1D5DkKvXKNGiDb6Wq5
 VHAarkaE9OYSeBa1DehcdJoEEiiy3M7NB9TVfmzawXiBD94aDw0nrbEvU84qkwbnoZPJ
 gIgA==
X-Gm-Message-State: APjAAAXjQeTX/zxASjOd8bK2oCjENnk/ZVYhO20Khev0KWvtNSWc8AAa
 tgfMnLs/cECCjzAqI/L3gtex+wKgFQzAQtD4TdZMCMeac+qKJ7c92ms+5gkCYguJXxIKwhPPJbg
 c7U+u75WqjhdyTrSuzmsUuKmAuZowcXd2bBk=
X-Received: by 2002:a05:6830:1be3:: with SMTP id
 k3mr20095017otb.180.1572891997273; 
 Mon, 04 Nov 2019 10:26:37 -0800 (PST)
X-Google-Smtp-Source: APXvYqyGzQ93TbjcCzSV2zwcyyoMU/o71qTWHgQuidiEhAm01p9AISs/Kxbv6COQMzlKXxQ4O6xN+6+KAKjYvZtjCHI=
X-Received: by 2002:a05:6830:1be3:: with SMTP id
 k3mr20094973otb.180.1572891996139; 
 Mon, 04 Nov 2019 10:26:36 -0800 (PST)
MIME-Version: 1.0
From: "Luke Synnestvedt (US - ADVS)" <luke.o.synnestvedt@pwc.com>
Date: Mon, 4 Nov 2019 12:26:25 -0600
Message-ID: <CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="000000000000b4732f0596897442"
X-Proofpoint-PoS-Virus-Version: PwCProdVirusScanned
X-Proofpoint-Spam-Details: rule=notspam policy=outboundspam score=0
 priorityscore=1501 malwarescore=0
 suspectscore=8 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011
 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=972 adultscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000
 definitions=main-1911040179
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/AJtjADzCGJ1jw0_ttrm9_25yX0Y>
X-Mailman-Approved-At: Mon, 04 Nov 2019 11:58:55 -0800
Subject: [OAUTH-WG] Mail regarding draft-ietf-oauth-token-exchange (version 19)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>,
 <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>,
 <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 19:38:13 -0000

--000000000000b4732f0596897442
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Hello IETF OAuth team,

I'm drafting some internal reference architecture guidance on the topic of
Token Exchange within an OAuth 2.0 authentication/authorization flow and
have relied heavily on the most recent draft
<https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-19> which I
know has since expired. I also see that this document has been sent for
publication approval - is there an update from the team regarding when this
document may be published?

Thanks,
Luke Synnestvedt

-- 
*Luke Owen Synnestvedt*
Cybersecurity Consultant
Philadelphia | +1 (215) 280 6032
PricewaterhouseCoopers Advisory Services LLC

______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.

--000000000000b4732f0596897442
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"

<div dir=3D"ltr">Hello IETF OAuth team,<div><br></div><div>I&#39;m drafting=
 some internal reference architecture guidance on the topic of Token Exchan=
ge within an OAuth 2.0 authentication/authorization flow and have relied he=
avily on the <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-token-=
exchange-19">most recent draft</a> which I know has since expired. I also s=
ee that this document has been sent for publication approval - is there an =
update from the team regarding when this document may be published?</div><d=
iv><br></div><div>Thanks,</div><div>Luke Synnestvedt<br clear=3D"all"><div>=
<br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=
=3D"gmail_signature"><div dir=3D"ltr"><div><span style=3D"color:rgb(0,0,0);=
font-family:georgia,palatino;font-size:9pt;line-height:14pt"><strong><span =
style=3D"color:rgb(0,0,1)">Luke</span> <span style=3D"color:rgb(0,0,1)">Owe=
n</span> <span style=3D"color:rgb(0,0,1)">Synnestvedt</span></strong></span=
><br><span style=3D"color:rgb(0,0,0);font-family:arial,helvetica,sans-serif=
;font-size:9pt;line-height:14pt">Cybersecurity Consultant<br>Philadelphia |=
 <span style=3D"color:rgb(0,0,1)">+1 (215) 280 6032</span><span style=3D"co=
lor:rgb(0,0,1)"></span><br>PricewaterhouseCoopers Advisory Services LLC<br>=
</span></div></div></div></div></div>

<HR>The information transmitted, including any attachments, is intended onl=
y for the person or entity to which it is addressed and may contain confide=
ntial and/or privileged material. Any review, retransmission, dissemination=
 or other use of, or taking of any action in reliance upon, this informatio=
n by persons or entities other than the intended recipient is prohibited, a=
nd all liability arising therefrom is disclaimed. If you received this in e=
rror, please contact the sender and delete the material from any computer. =
PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  Th=
is communication may come from PricewaterhouseCoopers LLP or one of its sub=
sidiaries.<BR>

--000000000000b4732f0596897442--

