Re: [OAUTH-WG] Meeting Minutes

Dominick Baier <dbaier@leastprivilege.com> Tue, 17 December 2019 07:43 UTC

Return-Path: <dbaier@leastprivilege.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E5D3120972 for <oauth@ietfa.amsl.com>; Mon, 16 Dec 2019 23:43:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=leastprivilege-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y34_tDuVFfma for <oauth@ietfa.amsl.com>; Mon, 16 Dec 2019 23:43:08 -0800 (PST)
Received: from mail-qk1-x733.google.com (mail-qk1-x733.google.com [IPv6:2607:f8b0:4864:20::733]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42A6E1200CC for <oauth@ietf.org>; Mon, 16 Dec 2019 23:43:08 -0800 (PST)
Received: by mail-qk1-x733.google.com with SMTP id t129so1292190qke.10 for <oauth@ietf.org>; Mon, 16 Dec 2019 23:43:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leastprivilege-com.20150623.gappssmtp.com; s=20150623; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=aDqFpFlN9zdj6ElALcvD3i0natrAWo0rGRNMX+W9BkM=; b=QBcJy332XVg4XhrrqpE45tsw22676Q3ufn64/H6PHvD2VlaYqMkJHoj6t84pSAb1Yz QTOq1HBLEY8e/MFd7Mpo6iIjk4+js//sSSmC77Ee0tq3MECErBQOvGtoDm5MO8dY96n0 jwqY/QK7Pf644qwLZgp/8B36jr8r3H3dt7yHZQnkEJZ4hVyB6WY4DkJtrONT+EhKeQJA kEGgXarzv6QNVyLG63BT1fGSIhCb6Gyh/1ycaxMqAIzIQAZYLIsXTikEozW+X/XQp8E4 6JgLnB7HtmYqDoMFB0Z6EqRsgZFDmIO1pc+BU7VvY7FB9GQCVVu6bNxsabbp1q+JD7UG dx4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=aDqFpFlN9zdj6ElALcvD3i0natrAWo0rGRNMX+W9BkM=; b=nG3lxMbImUwY1ypwf/Vof9CJFjF2mBVflEMyBs4rh2tbMX8QmUEx7iU6r9GZvIHh7c 2MUv0k7RG8h9ASDLwcq5O97Y4oWuJKNSP9py5JpHiRKfASAdi9kJ4Q+iw6Yuc76jbvDa tUqTmK/OhZtKCbxASFil8KN0BYgZtVq8iTHXSVWV9aHQectAWzZXx9+NiQGHIEyWij69 daRc209mtsSkQ0T6q05Rr0te8uhA8Bifbi1NbSYziyemWdZ2LLHsEiRHiCtc85QdWQEa TTPUqdWGYCrQbc487BGrs8oednadYYoBWffY3H7Bznwii5y+m9yAy2sJiiKvyOANtKVo PP5g==
X-Gm-Message-State: APjAAAVpHYWciouamaPrzU6zy+mRm8oc1coyLx2ydtRUYZcXbPX74qFT SYTGMWyVkIVVHanOVu0SYY2o/aevsyACOGYQvQTGljMgiA==
X-Google-Smtp-Source: APXvYqxykTQDl/m/VcGjYAco432Tc4XduKh4IaQ/IrfkxaBDPhfY2xc5MG1CUWB212whH13n4Ixrx6TGzGpwfNaDdB8=
X-Received: by 2002:a05:620a:48e:: with SMTP id 14mr3581592qkr.292.1576568587146; Mon, 16 Dec 2019 23:43:07 -0800 (PST)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 17 Dec 2019 02:43:06 -0500
From: Dominick Baier <dbaier@leastprivilege.com>
In-Reply-To: <CABh6VRH9uCiRBEhnTbm30W6N4NdCZmmJ1e2QJuOoe-ZGyOGiHg@mail.gmail.com>
References: <VI1PR08MB53603D167B53065E04A6C621FA420@VI1PR08MB5360.eurprd08.prod.outlook.com> <CA+k3eCSLmj6M=qeDJPTEDBpD5T5rC55wqGiTeuB7u8KzMsJZ-g@mail.gmail.com> <4FD03604-C0A3-4A0A-9598-8ECD8137581F@mit.edu> <B0F399FA-250A-4648-B347-40E07DBBC95F@amazon.com> <CABh6VRH9uCiRBEhnTbm30W6N4NdCZmmJ1e2QJuOoe-ZGyOGiHg@mail.gmail.com>
MIME-Version: 1.0
Date: Tue, 17 Dec 2019 02:43:06 -0500
Message-ID: <CAO7Ng+vsJGuv8t4Zj4ME88xGr=yBgCu5VQvbAZRjAbzvgSDiQw@mail.gmail.com>
To: Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>, "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
Cc: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000099eebb0599e17a84"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/IKRudU-K1K5oxkgLbixla98fkM0>
Subject: Re: [OAUTH-WG] Meeting Minutes
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Dec 2019 07:43:12 -0000

I’d support adoption of both PAR and RAR.

———
Dominick Baier

On 16. December 2019 at 23:02:58, Rob Otto (
robotto=40pingidentity.com@dmarc.ietf.org) wrote:

I’d support adoption of both PAR and RAR.

On Mon, 16 Dec 2019 at 21:57, Richard Backman, Annabelle <richanna=
40amazon.com@dmarc.ietf.org> wrote:

> +1 for a call for adoption on PAR.
>
>
>
> I’d also like to see one for RAR; while there are questions that need to
> be resolved, there seems to be strong interest in this work and adoption
> means we can have those discussions within the WG where they belong.
>
>
>
> –
>
> Annabelle Richard Backman
>
> AWS Identity
>
>
>
>
>
> *From:* OAuth <oauth-bounces@ietf.org> on behalf of Justin Richer <
> jricher@mit.edu>
> *Date:* Monday, December 16, 2019 at 12:36 PM
> *To:* Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>
> *Cc:* "oauth@ietf.org" <oauth@ietf.org>
> *Subject:* Re: [OAUTH-WG] Meeting Minutes
>
>
>
> +1 to this. My take away was that PAR was pretty clear for adoption right
> now, RAR had interest but more question/debate.
>
>
>
> FWIW I’m in favor of both of them.
>
>
>
>  — Justin
>
>
>
> On Dec 16, 2019, at 11:26 AM, Brian Campbell <
> bcampbell=40pingidentity.com@dmarc.ietf.org> wrote:
>
>
>
> With respect to the Pushed Authorization Requests (PAR) draft the minutes
> do capture an individual comment that it's a "no brainer to adopt this
> work" but as I recall there was also a hum to gauge the room's interest in
> adoption, which was largely in favor of such. Of course, one hum in
> Singapore isn't the final word but, following from that, I was
> hoping/expecting to see a call for adoption go out to the mailing list?
>
>
>
> On Tue, Dec 3, 2019 at 1:26 AM Hannes Tschofenig <
> Hannes.Tschofenig@arm.com> wrote:
>
> Here are the meeting minutes from the Singapore IETF meeting:
>
> https://datatracker.ietf.org/meeting/106/materials/minutes-106-oauth-03
>
>
>
> Tony was our scribe. Thanks!
>
>
>
>
>
> IMPORTANT NOTICE: The contents of this email and any attachments are
> confidential and may also be privileged. If you are not the intended
> recipient, please notify the sender immediately and do not disclose the
> contents to any other person, use it for any purpose, or store or copy the
> information in any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> * CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited..
> If you have received this communication in error, please notify the sender
> immediately by e-mail and delete the message and any file attachments from
> your computer. Thank you.*_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
--
Rob Otto
EMEA Field CTO - Ping Identity
+44 777 135 6092

* CONFIDENTIALITY NOTICE: This email may contain confidential and
privileged material for the sole use of the intended recipient(s). Any
review, use, distribution or disclosure by others is strictly prohibited..
If you have received this communication in error, please notify the sender
immediately by e-mail and delete the message and any file attachments from
your computer. Thank you.* _______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth