[OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025

"Antic Kristian (C/CYG-GE)" <Kristian.Antic@de.bosch.com> Mon, 02 June 2025 14:36 UTC

Return-Path: <Kristian.Antic@de.bosch.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A0BEE2FB871D for <oauth@mail2.ietf.org>; Mon, 2 Jun 2025 07:36:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=de.bosch.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfcClZanq48T for <oauth@mail2.ietf.org>; Mon, 2 Jun 2025 07:36:50 -0700 (PDT)
Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazon11012029.outbound.protection.outlook.com [52.101.66.29]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 0CB722FB8714 for <oauth@ietf.org>; Mon, 2 Jun 2025 07:36:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=jrraxMQ3SenVk/X1+37KPJMP9E9SvtQQ6xwz2k/WzdVbZthbdY/9Lnw/X2qE58fY4GEx4IsYgPeNcXps/ruylxanX29eOd0UjO20LA0ocazkXzT/1Ig22vpwTzoTCl4RbRZH/ElGtfKgmVU1ZuicXZE76a+EZKbB5O2iAk2xI+qsqx0ZZJhcrrojUi7EA5fQIgvAvhlwEy8iU78g3VI0iVNiYpcw4ORfEc3vjlhZDEpP+LyPzWRMiExJAacrXMQXsPG9UbkYXizsvz7BH2KsyW7GzALXX2lk12XOVCGlkes6KlC//l5wtnboIcs+eHV3aJ9XsnFOi/5T+UJtmQzWzQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5dl4rY0r+E533sCAgnONaM2KnsyLBkKU+Y+5AFZ2rj8=; b=Y9nLPQ4JfBIrIoDX+o/Txhrjwd5j+lYQZa/5oUryjVMRf66mudoC6cif+y2yssZGR33CbbZF5lh8IF8DJMKntx6J7NJWsywsqN0nshoayQJ4uOM6c0f6FcK6TYq2O5qK623h/3AEgl+8oK3/1jHWduZ/9w3eqKY4APHBlZSax3y7A5FNAKvQMmPLRCPM7So46gGmL2rWK42X1hsBXY0NvW3Q20HnFHq1KFEsMAaT/jxW5izdj11+XE3XinHeETuasaDFYFfhGJRYnj0R7i7iOIoOpd1N+4vB08dQ4pRqVxqm/i6c8vfvB2N+poBc01NxZGtjNX4HroszjbCVFLNBWQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=de.bosch.com; dmarc=pass action=none header.from=de.bosch.com; dkim=pass header.d=de.bosch.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=de.bosch.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5dl4rY0r+E533sCAgnONaM2KnsyLBkKU+Y+5AFZ2rj8=; b=bawEZJ6TUeMNHClkvHy8orK5r4V+ZfO4dyG0GN2oLICUpYqbHGhP/ZczBk3sIDVHlR1iyi/PfHr3RGuO3boIgYiaqPTY2+bggzThtiB3KlcX/BD0Ut6nX2nbPFOp17CV3Rmi4b1ykBGeWv2JgT8YD5yGUPwCaE7KGS/wTdjul1CJROPIzBj164tHkUfSo2VRJ8YDX4P8iscV5gxGvIUkBk5Wss8jg6mSIt9Dhs47q56lPzPObSW7yHcUHizrqu04h+TPIq1y4jyAhlz5D1NOtOj/VCqhqJDtm+ks3a09WC5D27ArhOILokMviYieuJaIMovNExomxo681qukYywmSQ==
Received: from DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4c3::16) by DB9PR10MB8120.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4c2::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8769.37; Mon, 2 Jun 2025 14:36:48 +0000
Received: from DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM ([fe80::44d:ff4f:a670:c4ce]) by DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM ([fe80::44d:ff4f:a670:c4ce%6]) with mapi id 15.20.8769.031; Mon, 2 Jun 2025 14:36:48 +0000
From: "Antic Kristian (C/CYG-GE)" <Kristian.Antic@de.bosch.com>
To: Aaron Parecki <aaron=40parecki.com@dmarc.ietf.org>, Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Thread-Topic: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
Thread-Index: AQHbz9n81pmxRrxuU0KW7xt7h13wSrPv9bhw
Date: Mon, 02 Jun 2025 14:36:48 +0000
Message-ID: <DB9PR10MB80762ECF2748CA29098F2569A162A@DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM>
References: <VI1PR10MB8086E11F0D0F59F28C5A7B01A198A@VI1PR10MB8086.EURPRD10.PROD.OUTLOOK.COM> <CADNypP_g4PZ5LD_6tEu4_eksAwzBSX3P=1LNAHdpcbjj0iCOmQ@mail.gmail.com> <CAGBSGjq0bUiJsBZqmuhYM7X1Z=0W_qb-zR_AnwX=FQKmk+7t=w@mail.gmail.com>
In-Reply-To: <CAGBSGjq0bUiJsBZqmuhYM7X1Z=0W_qb-zR_AnwX=FQKmk+7t=w@mail.gmail.com>
Accept-Language: de-DE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=de.bosch.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DB9PR10MB8076:EE_|DB9PR10MB8120:EE_
x-ms-office365-filtering-correlation-id: 5d320e25-ea40-489f-34d7-08dda1e2e7d8
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|4022899009|1800799024|38070700018|8096899003|13003099007|7053199007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(4022899009)(1800799024)(38070700018)(8096899003)(13003099007)(7053199007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_DB9PR10MB80762ECF2748CA29098F2569A162ADB9PR10MB8076EURP_"
MIME-Version: 1.0
X-OriginatorOrg: de.bosch.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB9PR10MB8076.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d320e25-ea40-489f-34d7-08dda1e2e7d8
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2025 14:36:48.0273 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0ae51e19-07c8-4e4b-bb6d-648ee58410f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Y4z2h307kxPa/L69fnwgxP0K+Qwr15eKVeDA8kZCTxwfvsfB66AGn52OsOq2reFOy5keIT2MyReief7GSblUQA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR10MB8120
Message-ID-Hash: YIL7UFM6FAT2G4LBMBHQKD73SSQ6DIH2
X-Message-ID-Hash: YIL7UFM6FAT2G4LBMBHQKD73SSQ6DIH2
X-MailFrom: Kristian.Antic@de.bosch.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "oauth@ietf.org" <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/XJDNCWRuZFkbmTPsVNnLQrWfl-U>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Hi,

thank you both for your quick reply and Aaron for the updated draft version (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-13)

Mit freundlichen Grüßen / Best regards

Kristian Antic

Cyber Security - Governance Enterprise IT (C/CYG-GE)
Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY | www.bosch.com<http://www.bosch.com/>
Kristian.Antic@de.bosch.com<mailto:Kristian.Antic@de.bosch.com>

Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus Forschner,
Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr. Tanja Rückert
​
From: Aaron Parecki <aaron=40parecki.com@dmarc.ietf.org>
Sent: Wednesday, May 28, 2025 4:07 PM
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Cc: Antic Kristian (C/CYG-GE) <Kristian.Antic@de.bosch.com>; oauth@ietf.org
Subject: Re: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025

I've been working on related documents, mainly the OAuth for Browser Apps BCP, and haven't come back around to this one in a while.

I just published an update that fixes some references including updating the Security BCP references to RFC 9700, so it shows as an active draft again.

Aaron


On Fri, May 23, 2025 at 4:09 AM Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com<mailto:rifaat.s.ietf@gmail.com>> wrote:
Hi Kristian,

No, this does not mean that the document is near finalization.
This just means that the authors did not have a chance to work on the document.

Regards,
 Rifaat



On Fri, May 23, 2025 at 5:02 AM Antic Kristian (C/CYG-GE) <Kristian.Antic=40de.bosch.com@dmarc.ietf.org<mailto:40de.bosch.com@dmarc.ietf.org>> wrote:
Dear OAuth Working Group,

I have noticed that the latest draft (draft-ietf-oauth-v2-1-12<https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12>) for OAuth 2.1 has expired on May 19, 2024.
I would like to inquire whether this indicates that the specification is nearing finalization, or if work is underway on a new draft version.
Thank you for your time and clarification.

Mit freundlichen Grüßen / Best regards

Kristian Antic

Cyber Security - Governance Enterprise IT (C/CYG-GE)
Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY | www.bosch.com<http://www.bosch.com/>
Kristian.Antic@de.bosch.com<mailto:Kristian.Antic@de.bosch.com>

Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus Forschner,
Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr. Tanja Rückert
​
_______________________________________________
OAuth mailing list -- oauth@ietf.org<mailto:oauth@ietf.org>
To unsubscribe send an email to oauth-leave@ietf.org<mailto:oauth-leave@ietf.org>
_______________________________________________
OAuth mailing list -- oauth@ietf.org<mailto:oauth@ietf.org>
To unsubscribe send an email to oauth-leave@ietf.org<mailto:oauth-leave@ietf.org>