[OAUTH-WG] Inaccuracy in last point in JWSREQ presentation about registering request_object_signing_alg

Mike Jones <Michael.Jones@microsoft.com> Thu, 05 November 2015 07:05 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DA371B3B10 for <oauth@ietfa.amsl.com>; Wed, 4 Nov 2015 23:05:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GxCX_Pwh-gzD for <oauth@ietfa.amsl.com>; Wed, 4 Nov 2015 23:05:30 -0800 (PST)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0787.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::787]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0310C1B3A15 for <oauth@ietf.org>; Wed, 4 Nov 2015 23:05:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=6kzazm+hgfwg8MNjnWkXn8AVGpjGFegVtuVBsnXBkMY=; b=DDNv3D+TPhEmYlvyO32qBYOQOxH7HVfWYD6BeLN+HHjISeyme2yKXaPAhUG00WcpdMZPYyWfdiOsGzZup3vlKgdq7mlW75OUx2jonx1sqmcaCSbI/v1EDeRqrQhjD8FZbHwTUB4foyN7Gxb0U9Hf9ISRSKvVMv+kBAaPWdZgzTY=
Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.312.18; Thu, 5 Nov 2015 07:05:07 +0000
Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0318.003; Thu, 5 Nov 2015 07:05:07 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Inaccuracy in last point in JWSREQ presentation about registering request_object_signing_alg
Thread-Index: AdEXmEuylo/VpcIHSmuiewi03AdI9w==
Date: Thu, 5 Nov 2015 07:05:07 +0000
Message-ID: <BY2PR03MB4421A1068FDEA4FE95129B0F5290@BY2PR03MB442.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com;
x-originating-ip: [2001:c40:0:3032:bdaf:f166:976e:9bb]
x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:rylSKngf9OgFlMLa4Btb3Xj9fS6qkqQBlwEkPTIQAuDeLlbBZcRjLZ5kNvVhNWemKEHwzciaOTRYC6BpnIr7XCuemguStfIbYOdHh04+Ig66pL5HFo2M0oxV9zBBuWZR6Hn6VqcarVzQArc8bC6BnQ==; 24:lorJuQohpjazUn0V5n4V7E+pw1vvl+i7KCli10g1pFbaaWzKMDp63lwoOLFTWqKf7eM4Dp+t14PCDjlrWMj5XO7y9kH0waYZoFVHgB7QsSc=; 20:kaOfg1SOQnfT9p0CXlAzQEyxg89h8BdV4a8hnjMib8xpW7YEgpSMVKccM4UsjPR9D3YIZrRd5dWhHGknc5a/Iw==
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441;
x-microsoft-antispam-prvs: <BY2PR03MB4416768D8AA233AA31D55C2F5290@BY2PR03MB441.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(108003899814671);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441;
x-forefront-prvs: 0751474A44
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(5008740100001)(40100003)(5004730100002)(450100001)(76576001)(122556002)(5007970100001)(10290500002)(229853001)(2351001)(102836002)(15975445007)(2900100001)(97736004)(5005710100001)(8990500004)(10400500002)(77096005)(74316001)(99286002)(105586002)(2501003)(106356001)(5002640100001)(19625215002)(87936001)(19609705001)(110136002)(5001960100002)(11100500001)(92566002)(81156007)(19617315012)(86612001)(10090500001)(189998001)(107886002)(5003600100002)(86362001)(16236675004)(33656002)(101416001)(54356999)(19580395003)(50986999)(15395725005)(19300405004)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4421A1068FDEA4FE95129B0F5290BY2PR03MB442namprd_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2015 07:05:07.4297 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/WZdQfA9Vai4NJ5dl3M55vVTh_LU>
Subject: [OAUTH-WG] Inaccuracy in last point in JWSREQ presentation about registering request_object_signing_alg
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Nov 2015 07:05:32 -0000

The last bullet of the last slide of https://www.ietf.org/proceedings/94/slides/slides-94-oauth-5.pdf says:
  Section 7
  - False statement:
    ● The request_object_signing_alg OAuth Dynamic Client Registration Metadata is pending registration by OpenID Connect Dynamic Registration specification.
    ● The registry doesn't have it and Connect's Registration "makes no requests of IANA"

This not false.  (I didn’t say so from the microphone in the room in the interest of time.)  http://openid.net/specs/openid-connect-registration-1_0-29.html#DynRegContents, the current errata 2 draft version, contains the registration request for request_object_signing_alg.  It has not yet been submitted to IANA but it will be soon.

                                                            -- Mike