IETF Logo Mail Archive

Re: [OAUTH-WG] [Ace] PoP, Introspection and ACE

Samuel Erdtman <samuel@erdtman.se> Sat, 23 April 2016 23:00 UTC

Return-Path: <samuel@erdtman.se>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C59212B027 for <oauth@ietfa.amsl.com>; Sat, 23 Apr 2016 16:00:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id klClaoYS9shx for <oauth@ietfa.amsl.com>; Sat, 23 Apr 2016 16:00:03 -0700 (PDT)
Received: from mail-vk0-x231.google.com (mail-vk0-x231.google.com [IPv6:2607:f8b0:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB84E12B01B for <oauth@ietf.org>; Sat, 23 Apr 2016 16:00:02 -0700 (PDT)
Received: by mail-vk0-x231.google.com with SMTP id n67so153438689vkf.3 for <oauth@ietf.org>; Sat, 23 Apr 2016 16:00:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=+iniwx5bMsvWgrm129tqWBx2v1K806ljYM6eIk5lmUQ=; b=iEhMkFNf2iVl4jTU4qsG4VW99NBPCrATTeNJsylCMMXPj8yWAPbrPLEjdBcphmoTNU C3uXty8XO7DIxMxSTmbnxWDtSIza3YVUvgOp5kXfBlmY3rmdZs32xJSWAFmk/p9RyJJG Q/8l2vofP1IrwyoY0RumzeNxRt29+bsNap6dwxNyNZVL0ujcXOR5MHcgu3CqrJEgTcI+ YQLVCF+JY0f0GGD/XjQ9RTLleyHDjPdO3d6NIPY792NBLtMNosOstDZxCwrGMzDeXHnp 0Nj2hRizmfHEFBo++CZ+br1pWkAKDKfHQSs2o/w65UTc18/SkYA4t/S4TR5k8Bxcy/kq tf/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=+iniwx5bMsvWgrm129tqWBx2v1K806ljYM6eIk5lmUQ=; b=NniAZiBpDsSdvPbovNKLwOit9nOiqKV77MTJYGfXL5yh5i8hs5Q8iS8BE+dgZdjd33 YJJBi2iy7G0ZTAK4z1DryXZZDMdQGxXQsdmeD8inaGbaai1LI8zBIVYZMxP9LwFqpuYk OuYe0DEVScoqL4fedThgvwT+vwzEcuw+86Ff5JXUmyM50Mm59zlrKHxGei7ldpHLRMjt AWScz++yv8LFoD/OCaQ0jzcHnlMMNmbT1d1tzMyXLy3GuUiL+YYM7V+3pO6VwoxGDa5s mM+32vjWw4SsqdzlLY6h+fgqy/LftOSWKT0NHv2zuri4dsLcLsRUuWszsYv5sLxVJVbh IXeg==
X-Gm-Message-State: AOPr4FUojcSQ9X2lhRS19zXKW7nnoFhkOeDdFuhp3PZ/FsMnG17qMIIDv3jo+5ev1wgjKyKVVt0ZNAtXtceB/A==
MIME-Version: 1.0
X-Received: by 10.159.37.208 with SMTP id 74mr15803718uaf.148.1461452401881; Sat, 23 Apr 2016 16:00:01 -0700 (PDT)
Received: by 10.176.64.74 with HTTP; Sat, 23 Apr 2016 16:00:01 -0700 (PDT)
In-Reply-To: <F2346FD0-BBBF-4FA1-B373-959F5F95884D@ve7jtb.com>
References: <CAF2hCbZiL5qQ28hzEF_5PYFNrJfXZ8XGzLOVPznBMH9heMqELg@mail.gmail.com> <F2346FD0-BBBF-4FA1-B373-959F5F95884D@ve7jtb.com>
Date: Sun, 24 Apr 2016 01:00:01 +0200
Message-ID: <CAF2hCbaxZRCbExZ7Ls7HEJ+V47YwCgc0cjxtDTrwd78tA1weVw@mail.gmail.com>
From: Samuel Erdtman <samuel@erdtman.se>
To: John Bradley <ve7jtb@ve7jtb.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: multipart/alternative; boundary="001a1139558c4549e005312ee7d9"
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/WIFDsYRsAWsBjjCBkqvyb_z7X5s>
Cc: "<oauth@ietf.org>" <oauth@ietf.org>, Ace@ietf.org
Subject: Re: [OAUTH-WG] [Ace] PoP, Introspection and ACE
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Apr 2016 23:00:05 -0000

Thanks John for your reply, have you had time to discuss a way forward with
Hannes.

I agree we should absolutely register cnf in introspection to go inline
with RFC 7800.

Since RFC 7800 is done it might be preferable to do the registration in the
ACE specification that is the specification that needs it.

//Samuel


On Sun, Apr 17, 2016 at 1:23 AM, John Bradley <ve7jtb@ve7jtb.com> wrote:

> It is probably best to register “cnf” to match RFC 7600 so we don’t have
> two different structures one for JWT/CWT and one for introspection.
>
> On the other hand introspected tokens are generally relatively custom in
> what claims they pass.
>
> I will discuss it with Hannes.
>
> John B.
>
> On Apr 16, 2016, at 6:42 PM, Samuel Erdtman <samuel@erdtman.se> wrote:
>
> Hi,
>
> I'm working on the IANA section in
> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz.
>
> In https://tools.ietf.org/html/draft-ietf-ace-oauth-authz we want to have
> the option to get the PoP parameters (alg, key and aud) via introspection
> e.g. if using a reference token.
>
> At the moment I wrote the registration text of the parameters in the ACE
> specification but I think it would be preferable if
> https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution did the
> registration for introspection too.
>
> Comments?
>
> //Samuel
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>
>
>

v2.46.0 | Report a Bug | By Email | System Status