Message-ID: <54E5A0EE.70309@gmx.net>
Date: Thu, 19 Feb 2015 09:38:06 +0100
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: Security Developer <security.developer22@gmail.com>, oauth@ietf.org, 
 ve7jtb@ve7jtb.com
References: <CAD-drXsWwk_-SH9wsVW7spNWmTzGjja-uhEk8ZYWBZc7Xw7bcw@mail.gmail.com>
In-Reply-To: <CAD-drXsWwk_-SH9wsVW7spNWmTzGjja-uhEk8ZYWBZc7Xw7bcw@mail.gmail.com>
OpenPGP: id=4D776BC9
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="NMROj0iRkM75MwfHJ1DkJaaCfusdlL93f"
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/GvO0Cm4Q1duO0WJrbMo5HxAzA_o>
Subject: Re: [OAUTH-WG] OAuth POP query
Precedence: list

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--NMROj0iRkM75MwfHJ1DkJaaCfusdlL93f
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Sorry for the late reply.

For the PoP architecture document we initiated the WGLC last year and a
new document has to be submitted to address those comments. I believe
then it is ready for the IESG.

The WGLC for the draft-ietf-oauth-proof-of-possession-00 should be
started next. Maybe already this week since we are doing OK with some of
our other documents.

The weakest part of the story at the moment is the
draft-ietf-oauth-signed-http-request-00 document. For this we obviously
need input from the group.

On 02/14/2015 12:40 PM, Security Developer wrote:
> Hi,
>=20
> I have a couple of questions.
>=20
> 1- What is the status of these documents as I am interested in
> implementing POP
>=20
> draft-ietf-oauth-pop-architecture-00.pdf
> draft-ietf-oauth-pop-key-distribution-00.pdf
> draft-ietf-oauth-proof-of-possession-00.pdf
> draft-ietf-oauth-signed-http-request-00.pdf
>=20
> 2- Should Authorization server restrict the number of authorization
> codes issued to a single user after successful authentication and
> authorization in OAuth? also What is the good practice in this case?
>=20
> Thanks for your time.
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20


--NMROj0iRkM75MwfHJ1DkJaaCfusdlL93f
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJU5aDuAAoJEGhJURNOOiAtcBQIAKBCClDghZGFMkoomIxyWeAR
UtnL57JnAfcWEdo2sDYNaBUCsqLWAonpLBqVcyfnVyewU3ETGntYY8DtQpoWPzM5
hMrH9mKi1pFpvBAgFxnDZYwRuVqmxM9f/4UkI+54KuuOmfCE7HFrUW9q5cPdoR1M
n+P45Hfd/cW8X5THoQS0L0ZCGzMZfP2hFYdWzn6JDzA/D764NgXXEYwC5DKUsTxJ
lpiGlrvxY4+XBEuOITLfGxdfA8NvzNz0jtIsAVCAOxiu/Ao7dpHcMkSUQwDo5+va
tSThfwt0Z/RnIoIQFf2UrT+t8eM8lDSVa9fMiXnafLTc9xOH9LYI07U4+XAzBmE=
=bjfp
-----END PGP SIGNATURE-----

--NMROj0iRkM75MwfHJ1DkJaaCfusdlL93f--