Re: [OAUTH-WG] Mandatory-to-implement token type

"Bart Wiegmans" <bart@all4students.nl> Fri, 02 December 2011 09:02 UTC

Return-Path: <bart@all4students.nl>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6498521F9383 for <oauth@ietfa.amsl.com>; Fri, 2 Dec 2011 01:02:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.739
X-Spam-Level:
X-Spam-Status: No, score=0.739 tagged_above=-999 required=5 tests=[AWL=0.643, BAYES_00=-2.599, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, J_CHICKENPOX_71=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cVj3rTqZXjGf for <oauth@ietfa.amsl.com>; Fri, 2 Dec 2011 01:02:22 -0800 (PST)
Received: from mx-out14.all4students.nl (mx-out14.all4students.nl [89.188.22.31]) by ietfa.amsl.com (Postfix) with ESMTP id 8FDE821F9935 for <oauth@ietf.org>; Fri, 2 Dec 2011 01:02:22 -0800 (PST)
Received: from mx-out14.all4students.nl (localhost [127.0.0.1]) by mx-out14.all4students.nl (Postfix) with ESMTP id 70FBD94395 for <oauth@ietf.org>; Fri, 2 Dec 2011 10:02:21 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=studenten.net; h= mime-version:content-type:content-transfer-encoding:subject:date :message-id:in-reply-to:references:from:to:cc; s=selector1; bh=9 M6baPErJx9w20a5oeAhwqAUVbE=; b=dvLSgen7PMBGzt5IYN+n9KDkqT8IzIXwW F3DeI/6qeS/bBpfqXJe2cpxTYX+XUdkYzXv6C24IL3ZisOb3oyVN69Zma3tGF9+M mVbLfjdw7qhLYW6aZ6mnzyTMwT3DbQ698pN8X0/LCkBMtXXxUHId03cFQ2SDUnTP cj68kC2+so=
Received: from all4students.nl (ip189-178-172-82.adsl2.static.versatel.nl [82.172.178.189]) by mx-out14.all4students.nl (Postfix) with ESMTP id 4507F94368; Fri, 2 Dec 2011 10:02:21 +0100 (CET)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 02 Dec 2011 10:02:20 +0100
Message-ID: <AEDA1B65E9329448939CEFA895C129E203850B25@studentserver.studentennet.local>
In-Reply-To: <4ED89384.9060603@cs.tcd.ie>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [OAUTH-WG] Mandatory-to-implement token type
Thread-Index: Acyw0MyLpjbFrns8S82UCCxx8V3XmAAAA0KA
References: <CALaySJJ+2au5rxEQmSSpXO42KmgCu=NhiLPBCx-3AH0hud=5CQ@mail.gmail.com><CAH-8B6sjim_tcBkTPFWc1SnjhtHDQTR7sVT+aOjnYv7cs8JssA@mail.gmail.com><4ED82D62.3070800@cs.tcd.ie><CALaySJLKYLpPWc14_GUJKc5j1E3QovKQOx9HsdR-n2YV7kstpQ@mail.gmail.com> <4ED89384.9060603@cs.tcd.ie>
From: Bart Wiegmans <bart@all4students.nl>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Barry Leiba <barryleiba@computer.org>
Cc: oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Mandatory-to-implement token type
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Dec 2011 09:02:23 -0000

Just chipping in: I'd think [X and/or Y] should be Bearer and MAC,
respectively. Between them I think they can cover a lot of use cases.
Regards, Bart

-----Oorspronkelijk bericht-----
Van: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] Namens
Stephen Farrell
Verzonden: vrijdag 2 december 2011 10:00
Aan: Barry Leiba
CC: oauth WG
Onderwerp: Re: [OAUTH-WG] Mandatory-to-implement token type


Hi Barry,

On 12/02/2011 03:20 AM, Barry Leiba wrote:
> Maybe what would work best is some text that suggests what I say
> above: that toolkits intended for use in implementing OAuth services 
> in general... implement [X and/or Y], and that code written for a 
> specific environment implement what makes sense for that environment.
> It seems to me that to require any particular implementation in the 
> latter case is arbitrary and counter-productive, and doesn't help 
> anything interoperate.  Whereas general-purpose toolkits that 
> implement everything DO help interop.j

That'd work just fine for me.

> Barry, as participant

Stephen, as breakfast eater:-)


_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth