Re: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values

Mike Jones <> Thu, 03 March 2016 00:42 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id E72221A1A2F for <>; Wed, 2 Mar 2016 16:42:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id UB4tyFCq2M7F for <>; Wed, 2 Mar 2016 16:42:49 -0800 (PST)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 38F1F1A1A13 for <>; Wed, 2 Mar 2016 16:42:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vZw7jFMNadFUyq/bw8bcs7NiAb0VyolaMuo+qI3/f5k=; b=FgisSEOpoEIVJf+QOtF4XSMtIBivhnjyPIuHkMAGfSaijpv7ku+re8sKMdi0yc7Vy/j1A7d72yqh02fLrrKZZOHsDz+xMFgjD3x16f2M244rSqEtHt0Aw9UjRu8Q7ArarypWDTL6qhE1g4otyLTSLrp5sHMyt24GK3Edxln+IQw=
Received: from ( by ( with Microsoft SMTP Server (TLS) id 15.1.427.16; Thu, 3 Mar 2016 00:42:45 +0000
Received: from ([]) by ([]) with mapi id 15.01.0427.016; Thu, 3 Mar 2016 00:42:45 +0000
From: Mike Jones <>
To: Hannes Tschofenig <>, "" <>
Thread-Topic: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values
Thread-Index: AdF05ZlBny4USW2wSxCkXEotBc11fg==
Date: Thu, 03 Mar 2016 00:42:45 +0000
Message-ID: <>
Accept-Language: en-US
Content-Language: en-US
authentication-results:; dkim=none (message not signed) header.d=none;; dmarc=none action=none;
x-originating-ip: []
x-ms-office365-filtering-correlation-id: 63d1ceec-b0e3-4551-a4e4-08d342fcbc96
x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:MmUYr0tsX0R9oOnkl+XMK7dlaHxEeqQTqjTBHruVVoFOFo3HgRaL0zSo2uV/5fAIGhcSetZeLgsMaH7zpgyZoWUw2/25CwnmPnKGeYgcIHGyzSzSjwyXieIXosQDJIPC4my3/mokmPOQ65DmO/H+5A==; 24:EHpDbR89+UyAHIvRj384Bum4jaNW1rkv3N7n3i0U+bo4kDj+43omPX+3VTzvKTtVvNnNfpwiQg+yCYVefZnajKgbhgGaowfVNEHJhXSYtgU=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442;
x-microsoft-antispam-prvs: <>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(61426038)(61427038); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442;
x-forefront-prvs: 0870212862
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(13464003)(5002640100001)(19580405001)(19580395003)(10090500001)(77096005)(189998001)(2501003)(5001960100004)(586003)(3846002)(86362001)(74316001)(6116002)(1096002)(1220700001)(40100003)(102836003)(11100500001)(33656002)(50986999)(54356999)(76576001)(5008740100001)(66066001)(122556002)(86612001)(2906002)(3660700001)(3280700002)(92566002)(5001770100001)(87936001)(10290500002)(10400500002)(5005710100001)(15975445007)(107886002)(99286002)(5003600100002)(2900100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442;; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2016 00:42:45.0677 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442
Archived-At: <>
Subject: Re: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 03 Mar 2016 00:42:52 -0000

I support adoption of this specification by the working group.  Aspects of it are already being used in production by Google and Microsoft.  It is also normatively referenced by the mobile profile for OpenID Connect being produced by the OpenID MODRNA working group.

					-- Mike

-----Original Message-----
From: OAuth [] On Behalf Of Hannes Tschofenig
Sent: Thursday, February 18, 2016 5:09 AM
Subject: [OAUTH-WG] 2nd Call for Adoption: Authentication Method Reference Values

In response to my message to the list regarding the initial call for adoption of the Authentication Method Reference Values draft, see, Mike submitted an updated version of the document to take raised concerns into account. Several working group participants responded positively to the new version.

We would therefore like to issue a 2nd call for adoption of the recently submitted version -05:

Please let us know by March 3rd whether you accept / object to the adoption of this document as a starting point for work in the OAuth working group.

Hannes & Derek