[OAUTH-WG] Murray Kucherawy's Discuss on draft-ietf-oauth-resource-metadata-11: (with DISCUSS and COMMENT)

Murray Kucherawy via Datatracker <noreply@ietf.org> Thu, 03 October 2024 05:12 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: oauth@ietf.org
Delivered-To: oauth@ietfa.amsl.com
Received: from [10.244.8.155] (unknown [104.131.183.230]) by ietfa.amsl.com (Postfix) with ESMTP id 334ECC180B4D; Wed, 2 Oct 2024 22:12:50 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Murray Kucherawy via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 12.25.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <172793236988.1105259.6830337518090622561@dt-datatracker-7bbd96684-zjf54>
Date: Wed, 02 Oct 2024 22:12:49 -0700
Message-ID-Hash: XKHHOZSDO7IA5TQZSPBSSZP7BJHXXBCJ
X-Message-ID-Hash: XKHHOZSDO7IA5TQZSPBSSZP7BJHXXBCJ
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-oauth-resource-metadata@ietf.org, oauth-chairs@ietf.org, oauth@ietf.org
X-Mailman-Version: 3.3.9rc5
Reply-To: Murray Kucherawy <superuser@gmail.com>
Subject: [OAUTH-WG] Murray Kucherawy's Discuss on draft-ietf-oauth-resource-metadata-11: (with DISCUSS and COMMENT)
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/RNs04Oxo1u68UWPFw8CGIiH08HA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Murray Kucherawy has entered the following ballot position for
draft-ietf-oauth-resource-metadata-11: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-oauth-resource-metadata/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

I concur strongly enough with John Scudder's comment about the IANA registry
that I'd like to discuss it.  Moreover, Section 4 of BCP 26 says:

   [...]  Newly minted policies,
   including ones that combine the elements of procedures associated
   with these terms in novel ways, may be used if none of these policies
   are suitable; it will help the review process if an explanation is
   included as to why that is the case.

Is that explanation available anywhere?  I think John's right, this is a
peculiar loophole, and it would be helpful to know why the WG thinks this is
necessary.  There's already a debate in progress about whether an I-D (which
expires) is viable in a Specification Required registry, and we're about to
charter a WG to revise BCP 26, so this is actually quite topical.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

On the flipside, I appreciate that so much good guidance was given to the
Designated Experts and even to us on how we should go about selecting them.  It
would be helpful if candidates could be nominated (if that hasn't already
happened) for approval by the IESG.

As rendered on the datatracker's HTML page, the numerous initial entries in
Section 8.1.2 are all run together.  Could we get them separated?

In Section 2, why is "resource_name" only RECOMMENDED?

In Section 2.1, second paragraph, the RECOMMENDED and SHOULD seem bare to me. 
Why would we allow anything other than what's specified, especially since BCP
47 prescribes a particular behavior?