[OAUTH-WG] Re: OAuth WG Final Agenda for Vienna

Dick Hardt <dick.hardt@gmail.com> Sun, 19 July 2026 09:12 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B83E611953CA3 for <oauth@mail2.ietf.org>; Sun, 19 Jul 2026 02:12:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784452356; bh=56Zg9Pgxk1fpYQt7+uoE793V6bgqXi4oR4+bqrBVols=; h=References:In-Reply-To:Reply-To:From:Date:Subject:To:Cc; b=NQGbae0RCUtSHYETR3JD7T3yRltq1ZU3hlNAMysxQyCQDcPf3a1RVxtx9gaNMpVpf dbyYC28GPCBVEKDGo08su3qMX7l9IJrYStlkzBwvSuQPiZQoZd3AWALoKZa8VsWvcc 1jRT2ByNcr3eZIYcquo0+R4wL2CMMoX95Pndb0qA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eZ8c9-IbPrx2 for <oauth@mail2.ietf.org>; Sun, 19 Jul 2026 02:12:36 -0700 (PDT)
Received: from mail-ot1-x331.google.com (mail-ot1-x331.google.com [IPv6:2607:f8b0:4864:20::331]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3538A11953C9C for <oauth@ietf.org>; Sun, 19 Jul 2026 02:12:36 -0700 (PDT)
Received: by mail-ot1-x331.google.com with SMTP id 46e09a7af769-7ebd88be784so3458863a34.2 for <oauth@ietf.org>; Sun, 19 Jul 2026 02:12:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1784452349; cv=none; d=google.com; s=arc-20260327; b=HLc56fzClh9apWLDiTHl1J5NNMsUPeuZjtnIQ2ZF2FtdkiUxrtYBK0uvy2VwCiebzv otaVO9sZPpRCG3qdMUPZzMjN+LopK4fkQBN57Ny7EHpWBWS8dgoxYMIHjJTsXLE0Gd2q l1+AHTVIiA97sHN94tVsmfDDD/v8Nxxhep3Hfqt3EVuype8VlM8jZEdRsZHG4vJCceik 23POBa7Sm/eoLg2fOgipWI3VG3YXMO06aJUk3ee3tQyO1QdH+DRaUtq1KVVu+/VkYb4J a4ogNeLNrxDnv3YOeIEZAhQbz+2YDRM77yy3oChjq8uk1cxYL7DJM6Tm+18UuMpcEUBV drdQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:dkim-signature; bh=m0EJWnPW+86VYfaw/exvPuJy840TS2PfldUp+ckpDAo=; fh=b7oDB13V7isyUpE40UxHH21Zvi4/vGP/dT0hAEuZDwQ=; b=MtCO3ERftkYLp4e/4gJoaP6RGYmOYOJWdYVu2nsPwh7CIyup0CfuS4B+WLN4oEHnPL GgSO75IRpOlri6kOXFhgJWCyEXMC5T43NjCq0qknIlluiyP/hlFaPkpoXl8fMHKi9tbP bue0od/i3kjlnQf9A5ac5/2saJsgawSlAh1c8H8+cQajPzvr3vIGhpulBiPPg9owMLE/ WWj2auZK8kHme+vGVW+BBn2/LlLfDhSKByCnt43XwAmub8XHmg8LKo3RXPRGzy93lR1d k3EbkoxVkRKmhzljRCsY/c4SajVucMQMKtC2uXAsmabQpPTANtpxhBAh5m15+fyLXxEQ Y1Dg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784452349; x=1785057149; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:reply-to :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to:content-type; bh=m0EJWnPW+86VYfaw/exvPuJy840TS2PfldUp+ckpDAo=; b=BJkZ8PRfNAzoXnRLWrkGVaRIXCpavhHLU1/Y2YxUPjRLcrJht3BfAB5/eaX8cpIEXd KLLfonC/jGWSUZdb+GcN4nh2PyWafaJJ3I/zR1L2dIbLOaPALmC/uuH6RKRpROOUTI1G PD3bC6EV0Nxv46qUp//BYJwvcRXHZJMKTBSqlp7uryRJIDMgx13w2V9np1CKMi9oVfuo uT/ARm7dbJFmmNTHUQUktZ5SFk5Doi+orGKqUCdE5fhI+z70km26+I1gFwEkEYZtv3hO XAX5xIs5UUwQqI2DbReH5lRxCaInxh3dh9tAX7wbS9spN0Ckoj4IylVV2pcjV1yiXXcm BqiA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784452349; x=1785057149; h=content-type:cc:to:subject:message-id:date:from:reply-to :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=m0EJWnPW+86VYfaw/exvPuJy840TS2PfldUp+ckpDAo=; b=ix3vAprZ8bag+xaEIcaDt4h9ZqdIFBj/2sF8Hpxcx3zcA3FopIAUIH5j6XRuerfgV0 xrzBnSH8MykWmGbDEV/Qd2iCA9po1al2Vcfh2Po1PJDIWah9I0eAk5jHy4EhiUBYFGjH spRE5DSkUG6mqteqdYoCDta+YIeIHWOpo6BfmSCG7QueUsu6MdDOXkDodpkNdeqhi0Qa UjQYmTwKJ/vqV92c8U11dWRJokjjAsqaxG7ntd23s7au/76HNDxl8C2sZSSTDE0rkscR joEDKLMNT+rInxDyrOWvjWGY8d3AlfXmC8EuQVrchEY4Sg9YGJ8uYSxj5hMJpbi4zuBw BRvA==
X-Gm-Message-State: AOJu0YxNxjkB4cLJcoDpwDy/dF18uqlX8jGCwbSb/dlaT9A8PL3McKh7 qvvmTalezj58nJ9h++8HTgjlul4f+g4/AEMU85aYULgVfk753mnod+oc8L7YCPREhrDHzJ3LUyp qnq6ddJF9IjcYrSBcr3zxA3hV8Zi77oM=
X-Gm-Gg: AfdE7ck3cwhx25y9bSlXLEF3EX2OvrrEb6/HCVyu24a5sCSRsukNja12kSDf5WCBaOe CQVQnwkgsB8LYRBiQCpgDqCQK24lDej01Zua6Q5lKk/HXR3mkiVpp8O0HdYBLj5tarBuChka1sP M993wUeay4I4dIgzx3tK+5SAwpCfSDVZ2JxPIB2DbZK/FzRLShU8GJQIMjctMivM/sgat6KPe5Z pJFg+iZY1wK9448ZInaNBz9lP6d7w35nekXyWMuHsCntbEIAN6XgogpUaWC4KBTCfJS54MFekbC QUqzR6N8nIe7mlXrYEw=
X-Received: by 2002:a05:6830:7101:b0:7e9:b4d0:53a5 with SMTP id 46e09a7af769-7eda15301eemr5484496a34.30.1784452349476; Sun, 19 Jul 2026 02:12:29 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP-MSb47L=3N7AYO05sZqBHV_V6FtjBgbo24cUAjvia5Sg@mail.gmail.com>
In-Reply-To: <CADNypP-MSb47L=3N7AYO05sZqBHV_V6FtjBgbo24cUAjvia5Sg@mail.gmail.com>
From: Dick Hardt <dick.hardt@gmail.com>
Date: Sun, 19 Jul 2026 10:11:53 +0100
X-Gm-Features: AUfX_mzLponbGjvNfSdVGTqL9TaG1jwHFGW8XjtUhzFHtK_vWXjtTVVpW992Q1g
Message-ID: <CAD9ie-uvpddNOGFJ2WuntipeQMTSmpsjXntkMHZ62-=TR9SGOQ@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000068c25a0656f33023"
Message-ID-Hash: KOM4A3VVD63VM7ATGHUA7XTCG6CX7JGX
X-Message-ID-Hash: KOM4A3VVD63VM7ATGHUA7XTCG6CX7JGX
X-MailFrom: dick.hardt@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: Dick.Hardt@gmail.com
Subject: [OAUTH-WG] Re: OAuth WG Final Agenda for Vienna
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/QgBH1Z-074aYxcu2Zk8n-C1hMvs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

I would like an interim meeting that includes OAuth Protected Authorization

There was a fair amount of support for this work earlier. I took it to
httpbis in IETF 125 -- but there was not interest there in a general
mechanism, so I have simplified it and focussed it on just the OAuth
security issue of authorization codes being in the authorization redirect
URL parameters.

https://datatracker.ietf.org/doc/draft-hardt-oauth-protected-authorization/


On Fri, Jul 17, 2026 at 1:49 PM Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
wrote:

> All,
>
> The following link has our *final* agenda for Vienna:
> https://datatracker.ietf.org/doc/agenda-126-oauth/
>
> We received a very large number of requests this time, and
> unfortunately we could not accommodate all of them.
> We prioritized WG drafts, followed by topics that the WG showed interest
> in and/or had enough discussion on the mailing list.
>
> If needed, we are willing to schedule a few interims after Vienna to
> discuss topics that might be of interest to the WG.
>
> *Individual drafts presenters:*
> We allocated 10 minutes per draft.
> Please, make sure to allocate 5 minutes to present the idea, and leave 5
> minutes for Q&A.
>
> Regards,
>  Rifaat & Hannes
>
> _______________________________________________
> OAuth mailing list -- oauth@ietf.org
> To unsubscribe send an email to oauth-leave@ietf.org
>