[OAUTH-WG] Re: I-D Action: draft-ietf-oauth-status-list-05.txt

Christian Bormann <chris.bormann@gmx.de> Fri, 15 November 2024 18:06 UTC

From: Christian Bormann <chris.bormann@gmx.de>
To: oauth@ietf.org
References: <172953688102.1997773.10517100031839597883@dt-datatracker-78dc5ccf94-w8wgc>
In-Reply-To: <172953688102.1997773.10517100031839597883@dt-datatracker-78dc5ccf94-w8wgc>
Date: Fri, 15 Nov 2024 19:06:43 +0100
Message-ID: <001201db3789$211c6d80$63554880$@gmx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Thread-Index: AQIJ9cpAeRH/bC92tgINERw1UYrFpbJbJTwQ
Content-Language: en-gb
UI-OutboundReport: notjunk:1;M01:P0:gbQFa8kvwEY=;cK6lfWEQrgiZlzG9JdRDoNonob7 QH0SonigAuO72+A4AXk6eWkZy4v8A3R7RK5PApT3we1BLh5bUnvbirhK2pwxrR/Bonru+5vqP V44JCx9qEypFuPlwQgdDCipkuNA+ARz3C65AYqmvKmjF8Coh6r5JGovxm0UST4MsAmO5O8OAp PbVDOpb8y+XVVana4k+ES5s6wHsBXUqz52+CIec5DTVAnrZFW2yGqzlRM4oip+5jm8VMDbIvF veRBBH55xQdHEm1FcSdIiAiDFKxORVZgdJd8XjcFyzpg4n//Jx4YeEqnpxm/g36ak94tBtljs XJRze9y+OiKgN/oQ7HQ1fcQTNoCV21JmPowEH5+zLr06CgrfZN8pYemfi9KGMTDnG42+BZO1g yN5K+Q5ibIyi/h/PBsFMsmkSzlz3mD2Dib/sftdBNPVNIxMNIUwQrwG57ptg9N98bEIbuyCex yMZ/0rtLzbj6R5y7a9LaqlmQscc/DnNd6UB1rqxlFBkCFeSyWDffk0XxNzaXtqxlqzq9UiVnF JntHlPQK1cKbE4im9I5exl/2aTSRR5Sa73QablRPoduWSAdF8X6YZcNjqhc1AjGVxLzRtUPWg 9VOULrRlSf4+wKGZ1rKN8HgvwrxJBXvlKnBvofJZbKphZG58lOtERReZOiyHUA8wWyI8eMnOv eWbSST5S9/j+cYTi5kXqIfHyjBDIqmv9jNqR2RvAO+mlErQ1cRHZ2TbbkwH5NSjKndLOq1F9N gKUFQnAydcAljDFxZ12khkdbcyt6sHVzxWgeDGYI8tBYCjKYfntz624ul7HZXzFdI61aNIIEl Z+kMcLSxFWc52FIjcW4tR7Cwif7SqLzUFh+HmpuPObSwvILDz/TWbnEeNLZALv28FBooelhjJ 5VR1HacskzkkvlpfGJEsTG57vjkm3pPCyMUPIHmccqi9tVfixYoggifJ9
Message-ID-Hash: MZKEDYQPZ2W3MRRWFZV5QIK5UJ7L65JN
Precedence: list
Reply-To: chris.bormann@gmx.de
Subject: [OAUTH-WG] Re: I-D Action: draft-ietf-oauth-status-list-05.txt
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/NQh2EcSzBt8vqfch9Eo6dGMi-IA>

Hi All,

Thanks for the good discussion on the Status List at the IETF 121 (Dublin). This is our understanding of the discussions and the rough consensus at the meeting. We will continue with PRs in this direction and wanted to confirm that our understanding matches the working groups:

- Unsigned Option: No strong objection to drop the unsigned option in favor of simplicity of the spec. We will drop the unsigned option and add to security considerations that we expect the status list to always be in a secured container.
- Compression: Minimize options and do not introduce an optional parameter to support different compression algorithms (and no compression) for the time being - could still be extended later on.
- Content Type: Enforce media types, especially Content-Type when retrieving the status list. We will also do a bit more research how earlier RFCs dealt with the problem of some services (like some CDNs) not responding with correct media types.

Best Regards,
Christian

-----Original Message-----
From: internet-drafts@ietf.org <internet-drafts@ietf.org> 
Sent: Monday, October 21, 2024 8:55 PM
To: i-d-announce@ietf.org
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-status-list-05.txt

Internet-Draft draft-ietf-oauth-status-list-05.txt is now available. It is a work item of the Web Authorization Protocol (OAUTH) WG of the IETF.

   Title:   Token Status List
   Authors: Tobias Looker
            Paul Bastian
            Christian Bormann
   Name:    draft-ietf-oauth-status-list-05.txt
   Pages:   48
   Dates:   2024-10-21

Abstract:

   This specification defines status list data structures and processing
   rules for representing the status of tokens secured by JSON Object
   Signing and Encryption (JOSE) or CBOR Object Signing and
   Encryption(COSE), such as JSON Web Tokens (JWTs), CBOR Web Tokens
   (CWTs) and ISO mdoc.  The status list token data structures
   themselves are also represented as JWTs or CWTs.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-05.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-oauth-status-list-05

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
OAuth mailing list -- oauth@ietf.org
To unsubscribe send an email to oauth-leave@ietf.org

[OAUTH-WG] I-D Action: draft-ietf-oauth-status-li… internet-drafts
[OAUTH-WG] Re: I-D Action: draft-ietf-oauth-statu… Christian Bormann