[OAUTH-WG] Authentication Method Reference Values spec incorporating adoption feedback

Mike Jones <Michael.Jones@microsoft.com> Fri, 12 February 2016 06:03 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C95D91B4008 for <oauth@ietfa.amsl.com>; Thu, 11 Feb 2016 22:03:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3woWkiImtq5E for <oauth@ietfa.amsl.com>; Thu, 11 Feb 2016 22:03:18 -0800 (PST)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0782.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:782]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71FCB1B3FEE for <oauth@ietf.org>; Thu, 11 Feb 2016 22:03:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eQbeMybSSa1jkGXEHnpBeRQkSsqj39YoWD433OGbKpg=; b=a9sWon1kKqP+5QqJlDWkMeMNHDTAnplG4eDYeua8TDtTmyYK4PsI4beJJcjODfWQxV794DE2kKFyo5eDoswmw+K9WjYU4QwmXtZfPwPBu8skuLzN62+aOYy9ZBtN20Yv7+ho6v6GkYK74lN4b1aivtO0J2YhZUrdvbEHnMwVPkE=
Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.396.15; Fri, 12 Feb 2016 06:02:55 +0000
Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0396.025; Fri, 12 Feb 2016 06:02:55 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Authentication Method Reference Values spec incorporating adoption feedback
Thread-Index: AdFlVTP5TWBUSMtZSvC+K8d5oLcJEA==
Date: Fri, 12 Feb 2016 06:02:55 +0000
Message-ID: <BY2PR03MB442A9083066AB2DD7EA8547F5A90@BY2PR03MB442.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [50.47.85.157]
x-ms-office365-filtering-correlation-id: b66ab580-30a0-4666-fc7d-08d333722660
x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:zF1d8wtEee13M0wzUEOo+K9T0QFSxyfqJ1okcRiwegan2GJeFXLc3idEJcVmsoLJ3CA5fYZwAjpygxIUjqgFTT6lkw8HOqxBcdUYr4QysdGasbUjUFWlOzKi0/9F09DZTsw9HTClJ46ctUlPho4HtQ==; 24:lCCPOT/T1m66IDtJUBuQgP3q5+c0WcoALMWqQQcnVlFScSuojvM1S5ggGulqAd0rntnwHO0bDB4vLkFXAz3V9CuvNXCyAQrVplajJxMjjY4=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442;
x-microsoft-antispam-prvs: <BY2PR03MB44291BA5849EDCA1E491B2FF5A90@BY2PR03MB442.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(61426038)(61427038); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442;
x-forefront-prvs: 0850800A29
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(209900001)(66066001)(5004730100002)(33656002)(189998001)(110136002)(19617315012)(5003600100002)(102836003)(1096002)(92566002)(19300405004)(19625215002)(107886002)(5001960100002)(5008740100001)(5002640100001)(1730700002)(86362001)(5005710100001)(77096005)(15975445007)(229853001)(3280700002)(87936001)(16236675004)(40100003)(74316001)(586003)(3660700001)(2900100001)(122556002)(99286002)(10090500001)(2351001)(2906002)(86612001)(76576001)(11100500001)(3846002)(19580395003)(1220700001)(10290500002)(50986999)(10400500002)(54356999)(6116002)(790700001)(450100001)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442A9083066AB2DD7EA8547F5A90BY2PR03MB442namprd_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Feb 2016 06:02:55.0987 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/DwPl5Zj-J8oJtAcmyAFIvE_FSfQ>
Subject: [OAUTH-WG] Authentication Method Reference Values spec incorporating adoption feedback
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Feb 2016 06:03:22 -0000

This draft of the Authentication Method Reference Values specification incorporates OAuth working group feedback from the call for adoption.  The primary change was to remove the "amr_values" request parameter, so that "amr" values can still be returned as part of an authentication result, but cannot be explicitly requested.  Also, noted that OAuth 2.0 is inadequate for authentication without employing appropriate extensions and changed the IANA registration procedure to no longer require a specification.

The specification is available at:

*       http://tools.ietf.org/html/draft-jones-oauth-amr-values-05

An HTML-formatted version is also available at:

*       http://self-issued.info/docs/draft-jones-oauth-amr-values-05.html

                                                          -- Mike

P.S.  This announcement was also posted at http://self-issued.info/?p=1539 and as @selfissued<https://twitter.com/selfissued>.