[OAUTH-WG] Re: [Editorial Errata Reported] RFC7636 (8458)
Justin Richer <jricher@mit.edu> Sat, 14 June 2025 11:18 UTC
Return-Path: <jricher@mit.edu>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 5143234E8D99 for <oauth@mail2.ietf.org>; Sat, 14 Jun 2025 04:18:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJrAEzErBX79 for <oauth@mail2.ietf.org>; Sat, 14 Jun 2025 04:18:02 -0700 (PDT)
Received: from CH5PR02CU005.outbound.protection.outlook.com (mail-northcentralusazon11012015.outbound.protection.outlook.com [40.107.200.15]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 8F09A34E8D92 for <oauth@ietf.org>; Sat, 14 Jun 2025 04:18:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=GYdF9bAiyfkSNGsYqTvvMNo6r8b/7uRgYsAANmnqGjwlNbWLhQ/VJGykZitAkhzgPZMlu2yJe2AU7i64e7G6GvAzFTLC/KlNzs09gYa+ROaeCxQx8kibAU/LpDo3IR4aVoW7Pwc4ssc4E/rncKOtqi/YLijTMm62l6LsCXvRJKesQP2KSyXlqrNSrYQw1Ahetof6e1oA7Jfla/DtkbJNG14lMneV1LkX5UsQ5GNQ+IF7KB4JeyWlReG8Acr/JNr6wLguLr1mCqcKXbOHaIOBq3PwEyc95OlDQL6EM7fbJ5v7JGm/Go4RjTXYOmhK4XZGxdVC2MuTyXGwCUdh8XqhNw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=c91bsEH1rObjFIxmYBEGiebdKoqlsXNr60s6Lz9RiDk=; b=zII9gOfO9SAVMQ72If0gEabDfwizyFE2TUxay1AT2RDTQywzHOMSOo7FZ95gYYp0Jve/+ur1E/I3bITw6IKvPElTsN5MRd+Me1PVrSgnxyKxPZEcdVk+U1SKU3Mh7XE3D1mwpqbgTwFQchniB126W9Qe9RQDpOQH9p2KLX6QMdllUfVHvpjnZiF54mozO3NWkh/6OKJQ0d2zhuuPpPXXsCrnWrQPoFJJJI8TFb33wGikwZkz5+UR6XTctl2dHoxaGmRfxb83bPNiZJ6ADT6DGaqZYVrW7XLWxoBt4a55QcojDC0xBZqEknaQdmbHPmC0Wd3+O6Ql9zv9ptJx7x7ZiQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c91bsEH1rObjFIxmYBEGiebdKoqlsXNr60s6Lz9RiDk=; b=B9HEe2djqS7G4vlqPQj0IHrjVlXBW9vQFo9dxDxGv1cv/mYKPt6KzWOoqJQhX0IY9YsJEzCOQbpuhZsSaZSsppoGh68sEgH1zSsyLVoppkgvilfagT4i3tK+a24yw90QsuFvpcemOeFPViz34XvF3Uh4q2r3qUqB4c3VOAFpP9Q=
Received: from LV8PR01MB8677.prod.exchangelabs.com (2603:10b6:408:1e8::20) by IA3PR01MB8695.prod.exchangelabs.com (2603:10b6:208:533::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8835.23; Sat, 14 Jun 2025 11:18:00 +0000
Received: from LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820]) by LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820%3]) with mapi id 15.20.8835.018; Sat, 14 Jun 2025 11:18:00 +0000
From: Justin Richer <jricher@mit.edu>
To: RFC Errata System <rfc-editor@rfc-editor.org>
Thread-Topic: [OAUTH-WG] [Editorial Errata Reported] RFC7636 (8458)
Thread-Index: AQHb3EvC7f7Ef+5HzkG9D6nC8BmZRrQCgmyj
Date: Sat, 14 Jun 2025 11:18:00 +0000
Message-ID: <LV8PR01MB8677D99EDA22900C1B0FF772BD76A@LV8PR01MB8677.prod.exchangelabs.com>
References: <20250613101218.4B876265CD6@rfcpa.rfc-editor.org>
In-Reply-To: <20250613101218.4B876265CD6@rfcpa.rfc-editor.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=mit.edu;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: LV8PR01MB8677:EE_|IA3PR01MB8695:EE_
x-ms-office365-filtering-correlation-id: 28a18681-a18c-4618-35c7-08ddab351f49
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|4022899009|366016|1800799024|376014|38070700018|13003099007|8096899003|7053199007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV8PR01MB8677.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(4022899009)(366016)(1800799024)(376014)(38070700018)(13003099007)(8096899003)(7053199007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_LV8PR01MB8677D99EDA22900C1B0FF772BD76ALV8PR01MB8677prod_"
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LV8PR01MB8677.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 28a18681-a18c-4618-35c7-08ddab351f49
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jun 2025 11:18:00.2777 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: J57Vn84HUSsuj1KNWCohmqkgpOI/dEpgD0CHGdr1vbo1BpZMEmu11gNVYcVwGzcp
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA3PR01MB8695
Message-ID-Hash: UTICNE4SFYLU3WFCT6PRJJYUSN7JXTK5
X-Message-ID-Hash: UTICNE4SFYLU3WFCT6PRJJYUSN7JXTK5
X-MailFrom: jricher@mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Jeffrey S Walden <jwalden@mit.edu>, "n-sakimura@nri.co.jp" <n-sakimura@nri.co.jp>, "naa@google.com" <naa@google.com>, "oauth@ietf.org" <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: [Editorial Errata Reported] RFC7636 (8458)
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/IpxQDzqZnURLwxOb5CyPKW6KgyA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>
This is not an error and the errata should be rejected. As per the ABNF definition in https://www.rfc-editor.org/rfc/rfc5234.html#section-21<https://www.rfc-editor.org/rfc/rfc5234.html#section-2.1> the name contains "alphabetics, digits, and hyphens (dashes)", and not underscores. I believe the commenter is expecting the ABNF rule name of code-verifier to match the parameter name of code_verifier, but they do not need to be the same. While this is confusing, the text is correct as it stands. - Justin ________________________________ From: RFC Errata System <rfc-editor@rfc-editor.org> Sent: Friday, June 13, 2025 6:12 AM To: rfc-editor@rfc-editor.org <rfc-editor@rfc-editor.org> Cc: Jeffrey S Walden <jwalden@mit.edu>; n-sakimura@nri.co.jp <n-sakimura@nri.co.jp>; naa@google.com <naa@google.com>; oauth@ietf.org <oauth@ietf.org> Subject: [OAUTH-WG] [Editorial Errata Reported] RFC7636 (8458) The following errata report has been submitted for RFC7636, "Proof Key for Code Exchange by OAuth Public Clients". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid8458 -------------------------------------- Type: Editorial Reported by: Jeff Walden <jwalden@mit.edu> Section: 4.2 Original Text ------------- code-challenge = 43*128unreserved Corrected Text -------------- code_challenge = 43*128unreserved Notes ----- The ABNF accidentally uses a hyphen/dash rather than an underscore in the code_challenge name in its rule. Instructions: ------------- This erratum is currently posted as "Reported". (If it is spam, it will be removed shortly by the RFC Production Center.) Please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party will log in to change the status and edit the report, if necessary. -------------------------------------- RFC7636 (draft-ietf-oauth-spop-15) -------------------------------------- Title : Proof Key for Code Exchange by OAuth Public Clients Publication Date : September 2015 Author(s) : N. Sakimura, Ed., J. Bradley, N. Agarwal Category : PROPOSED STANDARD Source : Web Authorization Protocol Stream : IETF Verifying Party : IESG _______________________________________________ OAuth mailing list -- oauth@ietf.org To unsubscribe send an email to oauth-leave@ietf.org
- [OAUTH-WG] [Editorial Errata Reported] RFC7636 (8… RFC Errata System
- [OAUTH-WG] Re: [Editorial Errata Reported] RFC763… Justin Richer
- [OAUTH-WG] Re: [Editorial Errata Reported] RFC763… Justin Richer
- [OAUTH-WG] Re: [Editorial Errata Reported] RFC763… Madison Church