Re: [OAUTH-WG] Call for agenda items

Brian Campbell <bcampbell@pingidentity.com> Tue, 06 March 2018 16:31 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47F7B1274D2 for <oauth@ietfa.amsl.com>; Tue, 6 Mar 2018 08:31:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cjaiIypyj3xk for <oauth@ietfa.amsl.com>; Tue, 6 Mar 2018 08:31:47 -0800 (PST)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7EE0C127076 for <oauth@ietf.org>; Tue, 6 Mar 2018 08:31:47 -0800 (PST)
Received: by mail-io0-x235.google.com with SMTP id q24so22672875ioh.8 for <oauth@ietf.org>; Tue, 06 Mar 2018 08:31:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=CeILREAm9Je+mQ2skkMK2+2s1+9wSKATlsT/F1daqiU=; b=fYKsnO80nRcy9BzpWxsuibKfyP4kO1c+iiC8dZ9uWfzcapI9dz+TjaRLFCYcbQ4gwr A6n0uDUVlLgnjuxMfOFbKzHz9p21w0gWwstLcbev4p4OauxRH58KI/PfUNWhhj3IqLjG 7BxrAagXKQtKpdA6HunK4yKZLXwaPQSn9rF7k=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=CeILREAm9Je+mQ2skkMK2+2s1+9wSKATlsT/F1daqiU=; b=VdcFGqhJKX9MUDnUQO9B2XRYmO6a5a7wxhAXGKtyK6ErHV1X3Zhgt80ZlJN36Sc21z 7QOAFThTiUMppcvS3ce4CDnUcuM4SeILZabY/hGwrteADak1ZVZWaWLNMjRAcqTgrtyR boH02TBmuzilDKJ8pAJXhl3J71l0clQBlvpRvNmQ6MGlN3azBqY0xkpK2e9MbsdKShLy 9v6YAdHoKjTUZrCNNRZP3nQhCDTcO5KARQu+BeVA7W3/jz0ZyOTjyciCEJ4Ht8IYBMIU 0bE1c22LMsTmKcQ1Sb17IIQN4D18+v5e2Yt0nCVxnAxcoDTpkSFB+xOIYsDNHUWklPRo Q9+Q==
X-Gm-Message-State: APf1xPDVWbva9Fs+nGKlwzZcUR682u2cyI5ujdGojxh22Dj4xSmRB/bR hgzf1tmUeepkQnfsFrt1IHm7A1QMQQmLkugRMlzGqV9Kad1B3EpUJXiXVMiJesbxom5c39AReBr TDCy4HD1BZfU7NA==
X-Google-Smtp-Source: AG47ELtGBLi3LfaNM/BMNOqQY03C5xuu7szRTkvIMz43s6NAUcGPP89RoE85+phcta6ZGjgtmSTgl9d8C3RAF4eu5gM=
X-Received: by 10.107.173.12 with SMTP id w12mr20654677ioe.282.1520353906634; Tue, 06 Mar 2018 08:31:46 -0800 (PST)
MIME-Version: 1.0
Received: by 10.2.73.200 with HTTP; Tue, 6 Mar 2018 08:31:16 -0800 (PST)
In-Reply-To: <CAGL6epLa0J0-JH8-cZX_WZ5Ztficz0_n+C9dOP80Gkbp_jvPFQ@mail.gmail.com>
References: <AM4PR0801MB270614990E501071CDB3A2F9FAE40@AM4PR0801MB2706.eurprd08.prod.outlook.com> <CAAP42hAy8iFHDa9hQxNMxytiWjf=MyrCDRzZ4MjvRq8xi0+Baw@mail.gmail.com> <CABzCy2DzJUL86MVTA9xL4Cpv4=ooZyZJ3N1QNS0QKvgr8DJHgA@mail.gmail.com> <CAGL6epLa0J0-JH8-cZX_WZ5Ztficz0_n+C9dOP80Gkbp_jvPFQ@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Tue, 06 Mar 2018 09:31:16 -0700
Message-ID: <CA+k3eCSVdUWu2Cz1N6tF_V1wVJS_+v8UudvWyosc9W6DLt9HkA@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: Nat Sakimura <sakimura@gmail.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="001a114468f689ce990566c0fa9d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/U-Y4T_gMA6hwhLbBW-JhsNENkPE>
Subject: Re: [OAUTH-WG] Call for agenda items
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Mar 2018 16:31:50 -0000

I hadn't previously been planning on it but am happy to do so.

On Tue, Mar 6, 2018 at 8:22 AM, Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
wrote:

> Nat,
>
> During the interim meeting, 3 drafts mentioned in the context of *Distributed
> OAuth*:
>
> https://tools.ietf.org/html/draft-sakimura-oauth-meta-08
> https://tools.ietf.org/html/draft-campbell-oauth-resource-indicators-02
> https://tools.ietf.org/html/draft-tschofenig-oauth-audience-00
>
>
> *Brian, Hannes,*
>
> Are you planning on presenting your documents?
>
> Regards,
>  Rifaat
>
>
>
>
>
>
> On Mon, Mar 5, 2018 at 8:09 PM, Nat Sakimura <sakimura@gmail.com> wrote:
>
>> I would be interested in hearing that.
>>
>> Also, as part of "Distributed OAuth", can we do a bit of re-cap on some
>> of the previous drafts on the similar topic as we discussed in the interim?
>> i.e., Brian's draft (where is the link now?) and my draft (
>> draft-sakimura-oauth-meta
>> <https://tools.ietf.org/id/draft-sakimura-oauth-meta-08.txt>)?
>>
>> Best,
>>
>> Nat
>>
>> On Tue, Mar 6, 2018 at 3:30 AM William Denniss <wdenniss@google.com>
>> wrote:
>>
>>> Hannes & Rifaat,
>>>
>>> I would like the opportunity to present on OAuth 2.0 Incremental
>>> Authorization (draft-wdenniss-oauth-incremental-auth) [an update for
>>> which will be posted today] and "OAuth 2.0 Device Posture Signals"
>>> (draft-wdenniss-oauth-device-posture).
>>>
>>> I can also give an update on the status of Device Flow
>>> (draft-ietf-oauth-device-flow). I expect that to be short now that WGLC
>>> has concluded and the document has advanced.
>>>
>>> Little late to this thread and I see we already have 2 sessions in the
>>> draft agenda, but I'd like to add my support to keeping both sessions,
>>> there's always a lot to discuss and in the past we've been able to use any
>>> spare time to discuss the security topics of the day.
>>>
>>> Regards,
>>> William
>>>
>>>
>>>
>>>
>>> On Tue, Jan 30, 2018 at 4:40 AM Hannes Tschofenig <
>>> Hannes.Tschofenig@arm.com> wrote:
>>>
>>>> Hi all,
>>>>
>>>>
>>>>
>>>> It is time already to think about the agenda for the next IETF meeting.
>>>> Rifaat and I were wondering whether we need one or two sessions. We would
>>>> like to make the decision based on the topics we will discuss. Below you
>>>> can find a first version of the agenda with a few remarks. Let us know if
>>>> you have comments or suggestions for additional agenda items.
>>>>
>>>>
>>>>
>>>> Ciao
>>>> Hannes & Rifaat
>>>>
>>>>
>>>>
>>>> OAuth Agenda
>>>>
>>>> ------------
>>>>
>>>>
>>>>
>>>> - Welcome and Status Update  (Chairs)
>>>>
>>>>
>>>>
>>>>   * OAuth Security Workshop Report
>>>>
>>>>
>>>>
>>>>   * Documents in IESG processing
>>>>
>>>>      # draft-ietf-oauth-device-flow-07
>>>>
>>>>      # draft-ietf-oauth-discovery-08
>>>>
>>>>      # draft-ietf-oauth-jwsreq-15
>>>>
>>>>      # draft-ietf-oauth-token-exchange-11
>>>>
>>>>
>>>>
>>>>        Remark: Status updates only if needed.
>>>>
>>>>
>>>>
>>>> -  JSON Web Token Best Current Practices
>>>>
>>>>    # draft-ietf-oauth-jwt-bcp-00
>>>>
>>>>
>>>>
>>>>    Remark: We are lacking reviews on this document.
>>>>
>>>>    Most likely we will not get them during the f2f meeting
>>>>
>>>>    but rather by reaching out to individuals ahead of time.
>>>>
>>>>
>>>>
>>>> -  OAuth 2.0 Mutual TLS Client Authentication and Certificate Bound
>>>> Access Tokens
>>>>
>>>>    # draft-ietf-oauth-mtls-06
>>>>
>>>>
>>>>
>>>>    Remark: Could be completed by the time of the IETF meeting.
>>>>
>>>>
>>>>
>>>> - OAuth Security Topics
>>>>
>>>>   # draft-ietf-oauth-security-topics-04
>>>>
>>>>
>>>>
>>>>   Remark: We could do a consensus call on parts of the document soon.
>>>>
>>>>
>>>>
>>>> - OAuth 2.0 Token Binding
>>>>
>>>>   # draft-ietf-oauth-token-binding-05
>>>>
>>>>
>>>>
>>>>   Remark: Document is moving along but we are lacking implementations.
>>>>
>>>>
>>>>
>>>> - OAuth 2.0 Device Posture Signals
>>>>
>>>>   # draft-wdenniss-oauth-device-posture-01
>>>>
>>>>
>>>>
>>>>   Remark: Interest in the work but we are lacking content (maybe even
>>>>
>>>>   expertise in the group)
>>>>
>>>>
>>>>
>>>> - Reciprocal OAuth
>>>>
>>>>   # draft-hardt-oauth-mutual-02
>>>>
>>>>
>>>>
>>>>   Remark: We had a virtual interim meeting on this topic and there is
>>>>
>>>>   interest in this work and apparently no competing solutions. The plan
>>>>
>>>>   is to run a call for adoption once we are allowed to add a new
>>>> milestone
>>>>
>>>>   to our charter.
>>>>
>>>>
>>>>
>>>> - Distributed OAuth
>>>>
>>>>   # draft-hardt-oauth-distributed-00
>>>>
>>>>
>>>>
>>>>   Remark: We had a virtual interim meeting on this topic and there is
>>>>
>>>>   interest in this work. Further work on the scope is needed.
>>>> IMPORTANT NOTICE: The contents of this email and any attachments are
>>>> confidential and may also be privileged. If you are not the intended
>>>> recipient, please notify the sender immediately and do not disclose the
>>>> contents to any other person, use it for any purpose, or store or copy the
>>>> information in any medium. Thank you.
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>> --
>>
>> Nat Sakimura
>>
>> Chairman of the Board, OpenID Foundation
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

-- 
*CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you.*