[OAUTH-WG] A review of draft-ietf-oauth-proof-of-possession-06
Erik Wahlström neXus <erik.wahlstrom@nexusgroup.com> Thu, 19 November 2015 11:02 UTC
Return-Path: <erik.wahlstrom@nexusgroup.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D78AF1B320B for <oauth@ietfa.amsl.com>; Thu, 19 Nov 2015 03:02:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.884
X-Spam-Level:
X-Spam-Status: No, score=-2.884 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.585] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PxD1ymh8jMK for <oauth@ietfa.amsl.com>; Thu, 19 Nov 2015 03:02:42 -0800 (PST)
Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94D811B320D for <oauth@ietf.org>; Thu, 19 Nov 2015 03:02:41 -0800 (PST)
Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Thu, 19 Nov 2015 12:02:39 +0100
Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Thu, 19 Nov 2015 12:02:39 +0100
From: Erik Wahlström neXus <erik.wahlstrom@nexusgroup.com>
To: "<oauth@ietf.org>" <oauth@ietf.org>
Thread-Topic: A review of draft-ietf-oauth-proof-of-possession-06
Thread-Index: AQHRIrnNevd5trzixkmxn3Rk/lM2BA==
Date: Thu, 19 Nov 2015 11:02:38 +0000
Message-ID: <73BB3C65-C30B-4634-8561-A4F3B5912995@nexusgroup.com>
Accept-Language: en-US, sv-SE
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.2104)
x-originating-ip: [213.113.163.201]
Content-Type: multipart/alternative; boundary="_000_73BB3C65C30B46348561A4F3B5912995nexusgroupcom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/J0Mu3BxvEqmffMOk9U9uavJo28M>
Subject: [OAUTH-WG] A review of draft-ietf-oauth-proof-of-possession-06
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Nov 2015 11:02:47 -0000
I made a (late) review of draft-ietf-oauth-proof-of-possession-06 and as with draft-ietf-oauth-pop-architecture-05 I think it’s in really good shape and it’s not much to comment on. The only thing that I could mention is that the introduction of the “jwk” member in the following text is a bit abrupt: When the key held by the presenter is an asymmetric private key, the "jwk" member is a JSON Web Key (JWK) [JWK<https://tools.ietf.org/html/draft-ietf-oauth-proof-of-possession-06#ref-JWK>] representing the corresponding asymmetric public key. It’s the first time the member is introduced. Same on “jwe". Otherwise, as I said. It’s in really good shape. / Erik
- [OAUTH-WG] A review of draft-ietf-oauth-proof-of-… Erik Wahlström neXus