Re: [OAUTH-WG] Which draft to use as a starting point for 'using a token'?

For me, not so much care as believe I am in a qualified-enough position
to vote on this one. I'm inclined to use
draft-ietf-oauth-authentication.

On Tue, 2010-02-09 at 09:15 -0700, Eran Hammer-Lahav wrote:
> No one cares?
> 
> EHL
> 
> > -----Original Message-----
> > From: Eran Hammer-Lahav
> > Sent: Thursday, February 04, 2010 11:29 PM
> > To: OAuth WG (oauth@ietf.org)
> > Subject: Which draft to use as a starting point for 'using a token'?
> > 
> > On the call today I clarified what is going on with all the different drafts. In
> > brief:
> > 
> > draft-hammer-oauth - documentation of the OAuth 1.0 Rev A (with changes)
> > protocol. This is done and should be approved by the IESG shortly for
> > publication.
> > 
> > draft-ietf-oauth-authentication - the part of OAuth 1.0 dealing with 'how to
> > use a token after you obtain it'.
> > draft-ietf-oauth-web-delegation - the part of OAuth 1.0 rev A dealing with
> > 'getting a token'.
> > 
> > draft-hammer-http-token-auth - an alternative proposal (meant to replace
> > draft-ietf-oauth-authentication) which builds on top of OAuth 1.0 but cleans
> > up the structure and removes the client credentials when accessing
> > protected resources. It also changes how the request is normalized into a
> > string before signing.
> > 
> > We have three options for moving forward with 'how to use a token'. Start
> > with:
> > 
> > 1. draft-ietf-oauth-authentication
> > 2. draft-hammer-http-token-auth
> > 3. something else*
> > 
> > * Do not suggest something else unless you are going to submit a proposal. It
> > doesn't have to be an I-D, I am happy to do the editorial work but I will need
> > a detailed proposal that is enough to turn into a specification.
> > 
> > Pick.
> > 
> > EHL
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth