[OAUTH-WG] OAuth Authorization Server Metadata spec incorporating Area Director feedback
Mike Jones <Michael.Jones@microsoft.com> Thu, 07 September 2017 21:24 UTC
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2523D132F60 for <oauth@ietfa.amsl.com>; Thu, 7 Sep 2017 14:24:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.799
X-Spam-Level:
X-Spam-Status: No, score=-4.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B9uWNycpr-vF for <oauth@ietfa.amsl.com>; Thu, 7 Sep 2017 14:24:02 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0095.outbound.protection.outlook.com [104.47.32.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C11DD132F5C for <oauth@ietf.org>; Thu, 7 Sep 2017 14:24:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=pqWTmwUrzH3PGuyN07HzT6TlDW6DgL+1B8GPzgfXA7A=; b=JQSn6p3nWC3MVsvPfOVsGS9LgLlGaCnGqEZqtuPqWr+TKjjnF3bF8mAmA0Ri4WU3BEOT/SvxmTPJl0RFM0k7IGlGBrxUpuLEGUfJjjwTyJsT8ZUjuOhYPYpXGvoiUPc4qAnvVhA90QPMtbIlOu8AMgrAZQmzGFC/BoD/IjMjtkc=
Received: from BN6PR21MB0500.namprd21.prod.outlook.com (10.172.112.10) by BN6PR21MB0689.namprd21.prod.outlook.com (10.175.131.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.56.5; Thu, 7 Sep 2017 21:24:01 +0000
Received: from BN6PR21MB0500.namprd21.prod.outlook.com ([10.172.112.10]) by BN6PR21MB0500.namprd21.prod.outlook.com ([10.172.112.10]) with mapi id 15.20.0056.003; Thu, 7 Sep 2017 21:24:01 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: OAuth Authorization Server Metadata spec incorporating Area Director feedback
Thread-Index: AdMoHZsLLZcBirD6T6uXTrkYkOpqCg==
Date: Thu, 07 Sep 2017 21:24:01 +0000
Message-ID: <BN6PR21MB0500E5B00554234ED0597DE6F5940@BN6PR21MB0500.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Ref=https://api.informationprotection.azure.com/api/72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2017-09-07T14:23:59.4694786-07:00; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General
x-originating-ip: [2001:4898:80e8:8::548]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN6PR21MB0689; 6:b7f7rqveaxzqQhWEL5M0tctNYdZdkzci2BPms1TXcgiatz/h8gCUYN+tS4upIiy4Cp6HSl0PVohVMWjroKxisXzPdAvk4NYyMLydf3+ld81gAliR4dnDN6m2g5yVaoK8td/NAKiYAAoOZb1ZKG23lqXYh7VH52fbIlI3R1LF3qi9+s9o3qPjXcmvdnaIcIQh/9UXt8ooODQVVr4PodlpF0eDt6zgAf3fJnjvQZ+pSnwvnzntoEQAjFMAkiYNfyHLg3Y8xtBlhhDfgwvEpykf0m7O0QRda878D3fFblqzl+P4YvCE/ipCCs2WCjTKAOdsr421FR5ufVoN19kA/Y0rgg==; 5:cdCvwtsl+smrstuw7N+W+zDj7P25Uq0NenxfSwb58V+g4a8nzD2F52lqLe32zR2SA/W1xs/kZ1MDb8LeljO+Zgsd4zTRAlTEfWSox4t68771FwG2f8dA4huabAiOd76KVuk+ECbmJxKa5Rmfl3aeUA==; 24:/XFmB3eI+r8R15j68irje2sIlebAF5LoMWa/TT2VDasDDSw4gGgub8fs6eJ41up4JB6SDputiLZWOM9TiksEoAwwdZJ8WlqpCAzdd0obMXE=; 7:qTBW1xBQgUvWriDIjy+aQF7Ym997QFx/VaqtGf7+ljXcI73yLf2xPrKt7Ctns36yQlgk28pwo4D8Snd4uQfaK3j5M5WUtmpwF/s6mmE+9aLntBaYH206Dl26/kRamcjpQ+dledSBZvlcj1+B+xPs4RGii+lNAxk1x0S5Q7cEPaMg3gNqQu/xCkHsfslsFFhVDhF1BqeIaz7u/Ry0Std1/mnBbCiJt9Cl8T1PQGYZT90=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: c11123b0-6ba8-4afb-c8ac-08d4f636c233
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(48565401081)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:BN6PR21MB0689;
x-ms-traffictypediagnostic: BN6PR21MB0689:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com;
x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705)(31418570063057)(21748063052155);
x-microsoft-antispam-prvs: <BN6PR21MB06890B875CEA26910A37B221F5940@BN6PR21MB0689.namprd21.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(61425038)(6040450)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(100000703101)(100105400095)(6055026)(61426038)(61427038)(6041248)(20161123560025)(20161123562025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123555025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BN6PR21MB0689; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BN6PR21MB0689;
x-forefront-prvs: 04238CD941
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(39860400002)(209900001)(47760400005)(189002)(199003)(9686003)(55016002)(68736007)(102836003)(10090500001)(606006)(3280700002)(99286003)(86612001)(5630700001)(86362001)(53376002)(2351001)(14454004)(110136004)(2900100001)(189998001)(22452003)(77096006)(6436002)(2906002)(6116002)(8990500004)(3660700001)(74316002)(6506006)(8936002)(97736004)(25786009)(790700001)(101416001)(5640700003)(50986999)(54356999)(2501003)(6306002)(106356001)(105586002)(236005)(54896002)(6916009)(4326008)(478600001)(53936002)(10290500003)(5660300001)(7736002)(7696004)(8676002)(966005)(33656002)(1730700003)(81156014)(81166006)(72206003)(6606295002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR21MB0689; H:BN6PR21MB0500.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR21MB0500E5B00554234ED0597DE6F5940BN6PR21MB0500namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2017 21:24:01.0941 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR21MB0689
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/FpaVzZ-g38TCZuWtFqzBb8g7s-s>
Subject: [OAUTH-WG] OAuth Authorization Server Metadata spec incorporating Area Director feedback
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Sep 2017 21:24:05 -0000
The OAuth Authorization Server Metadata specification has been updated to incorporate feedback from Security Area Director Eric Rescorla. Thanks to EKR for his useful review. A number of defaults and restrictions are now better specified. The specification is available at: * https://tools.ietf.org/html/draft-ietf-oauth-discovery-07 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-oauth-discovery-07.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=1731 and as @selfissued<https://twitter.com/selfissued>.