Re: [OAUTH-WG] Agenda Proposal

Eran Hammer-Lahav <eran@hueniverse.com> Thu, 17 March 2011 22:58 UTC

Return-Path: <eran@hueniverse.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 004D43A6A84 for <oauth@core3.amsl.com>; Thu, 17 Mar 2011 15:58:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.564
X-Spam-Level:
X-Spam-Status: No, score=-2.564 tagged_above=-999 required=5 tests=[AWL=0.035, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uQtE5naVaV2O for <oauth@core3.amsl.com>; Thu, 17 Mar 2011 15:58:15 -0700 (PDT)
Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id B09383A69B3 for <oauth@ietf.org>; Thu, 17 Mar 2011 15:58:15 -0700 (PDT)
Received: (qmail 8879 invoked from network); 17 Mar 2011 22:59:42 -0000
Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 17 Mar 2011 22:59:41 -0000
Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.19]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Thu, 17 Mar 2011 15:59:30 -0700
From: Eran Hammer-Lahav <eran@hueniverse.com>
To: Anthony Nadalin <tonynad@microsoft.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org" <oauth@ietf.org>
Date: Thu, 17 Mar 2011 15:57:48 -0700
Thread-Topic: [OAUTH-WG] Agenda Proposal
Thread-Index: AQHL5NFBdQUZ9sYZYkucSI2AqplAT5Qx3X2ggAACdYCAAAGZwIAAQLQQ
Message-ID: <90C41DD21FB7C64BB94121FBBC2E7234464F432958@P3PW5EX1MB01.EX1.SECURESERVER.NET>
References: <4D825300.3060005@gmx.net> <B26C1EF377CB694EAB6BDDC8E624B6E70B6B2520@SN1PRD0302MB100.namprd03.prod.outlook.com> <90C41DD21FB7C64BB94121FBBC2E7234464F4328A9@P3PW5EX1MB01.EX1.SECURESERVER.NET> <B26C1EF377CB694EAB6BDDC8E624B6E70B6B99FF@SN1PRD0302MB097.namprd03.prod.outlook.com>
In-Reply-To: <B26C1EF377CB694EAB6BDDC8E624B6E70B6B99FF@SN1PRD0302MB097.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [OAUTH-WG] Agenda Proposal
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Mar 2011 22:58:17 -0000

This proposal goes far beyond just solving any discovery needs for OAuth. It also directly competes with existing (deployed) proposals. This group is not the right forum to discuss and design a generally applicable discovery solution for the web. Once discovery is added to our charter (any discovery is currently out of scope), we can figure out if there are existing solutions to utilize, if we want to create a specialized solution for OAuth, or if a general purpose solution is needed (and does not already exist in a published standard).

If a general purpose solution is the direction to go, this is not the venue to develop it.

So again, presenting this at the meeting is fine, but beyond that, this working group is not chartered nor equipped to develop this technology for general purpose. In addition, the right way to present SWD to this WG is via an example of how OAuth might be using it, and not any direct discussion of the merits of the actual proposal - that belongs on the Apps-discuss list until another forum is identified or created.

EHL

> -----Original Message-----
> From: Anthony Nadalin [mailto:tonynad@microsoft.com]
> Sent: Thursday, March 17, 2011 3:41 PM
> To: Eran Hammer-Lahav; Hannes Tschofenig; oauth@ietf.org
> Subject: RE: [OAUTH-WG] Agenda Proposal
> 
> I think it does for example how one might discover the authorization service
> and this would be a forum to see if others also do or not.
> 
> -----Original Message-----
> From: Eran Hammer-Lahav [mailto:eran@hueniverse.com]
> Sent: Thursday, March 17, 2011 11:56 AM
> To: Anthony Nadalin; Hannes Tschofenig; oauth@ietf.org
> Subject: RE: [OAUTH-WG] Agenda Proposal
> 
> Re: draft-jones-simple-web-discovery
> 
> While I don't have an objections to this document being presented and
> discussed at the meeting, I want to point that this has absolutely nothing to
> do with this working group and if the IETF community has an interest in
> pursuing it, it does not belong in this working group.
> 
> EHL
> 
> > -----Original Message-----
> > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf
> > Of Anthony Nadalin
> > Sent: Thursday, March 17, 2011 11:54 AM
> > To: Hannes Tschofenig; oauth@ietf.org
> > Subject: Re: [OAUTH-WG] Agenda Proposal
> >
> > Is it possible to add these to the mix?
> >
> > http://www.ietf.org/id/draft-jones-simple-web-discovery-00.txt
> >
> > and also the
> > http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-
> > 00.txt
> >
> > -----Original Message-----
> > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf
> > Of Hannes Tschofenig
> > Sent: Thursday, March 17, 2011 11:29 AM
> > To: oauth@ietf.org
> > Subject: [OAUTH-WG] Agenda Proposal
> >
> > Open Authentication Protocol WG
> > ==============================-
> >
> > FRIDAY, April 1, 2011
> > Vienna/Madrid Room
> >
> > Chairs: Hannes Tschofenig/Blaine Cook
> >
> > Agenda
> > ------
> >
> > 1) Agenda Bashing (Chairs)
> >
> > 2) Discussion of Working Group Last Call Comments (Chairs/Mike Jones)
> > http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/
> > http://datatracker.ietf.org/doc/draft-ietf-oauth-v2-bearer/
> > http://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
> >
> > 3) OAuth Security (Thorsten)
> > http://datatracker.ietf.org/doc/draft-lodderstedt-oauth-security/
> >
> > 4) OAuth JSON Encoding (Mike Jones)
> > http://tools.ietf.org/html/draft-jones-json-web-token-01
> >
> > 5) OAuth Use Cases (Zachary Zeltsan)
> > https://datatracker.ietf.org/doc/draft-zeltsan-oauth-use-cases/
> >
> > 6) Re-Chartering Discussion (Chairs)
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >
> >
> >
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> 
> 
>