[OAUTH-WG] Fwd: New Version Notification for draft-ietf-oauth-jwt-bcp-05.txt

Yaron Sheffer <yaronf.ietf@gmail.com> Tue, 16 April 2019 09:47 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 144AC120359 for <oauth@ietfa.amsl.com>; Tue, 16 Apr 2019 02:47:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AmiG1warR8RR for <oauth@ietfa.amsl.com>; Tue, 16 Apr 2019 02:47:38 -0700 (PDT)
Received: from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com [IPv6:2a00:1450:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5D58120163 for <oauth@ietf.org>; Tue, 16 Apr 2019 02:47:37 -0700 (PDT)
Received: by mail-wr1-x42b.google.com with SMTP id j9so26063358wrn.6 for <oauth@ietf.org>; Tue, 16 Apr 2019 02:47:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=Rd8u9RwZnoauWo+h6ZiX75YrbEqgoF8RZFsRLkw5IQw=; b=NvU4YHy9Vpe0ryIJK4vUymetXDUrBmNkmAKQHxVDv+Z4bZ8MBF2kji5/Nj1KOvtreD 4bnlrj4ynUs4Pa2xJNa1XoZFB6YXMrNxwrf3t93auL+ZHT6yriQn+jQArBbmPpHp1FMf vrsv5HdYTs27MUhxa4fdHyUJ34mdLxe38MPWBW3tW7JRCVSIa74z1FEH2KyJDZ3UD+Gg QOGnxbF1WZmWIOvDc1bPF02IT3dKQXiDvMiKxF/5xYm3xayZfoxDyJpRgmj3oayE9xLB DpKOw3piwhFSG/vZIYrN1CZ8+cpIspclk6z5JOTLcR5P1gDzwtaqhKLwxRV0pCOlFKeg wTIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=Rd8u9RwZnoauWo+h6ZiX75YrbEqgoF8RZFsRLkw5IQw=; b=DYCpkjUGN4qMEDJkH2Yi+cyGqDAKc9+8V7Osb/Y0PA3j4nGVvP5MjCiUGSIaJ152GZ 6WoPNe1mGr15g+YeAvjXtMsXyoCSd52k29gB8fKLK9SXr0x70zvB45XURg9Oxbdju1su d7Qrbo1JQykQCd4yvm4DBhrhWuR5iSzzp+4EtZTT3DCFBi2cx8TNnP0ZtAx7TNqNsUyZ 26k6jnfspfFcHu9qSdenTFEoxDRVnHugwHpOJvGzvQwz2gabUA2UwSlzjCpEe0aAO/Kc HTkj7wdbnMk18OVduqv7b/esfqHfqQ9A9fSCvda5CxdyU+3ADE8CgLAgQ0PMJ1+dbzOc SHDg==
X-Gm-Message-State: APjAAAXNmWzr/nN3k9gP8ph/MRgW2nAQf5+5dWNlH8ASDq/SHKF2eTF8 ZnQL6vZeHlcd7kOVt+V1oFH5Wegh
X-Google-Smtp-Source: APXvYqwRF4FKGwsjCl9dX1OqeD91vwueSps53u8upOSQ5DfJ5TjiYR3+NFIJA9BXPI1N75HRqBX8BA==
X-Received: by 2002:a5d:4e82:: with SMTP id e2mr18568477wru.164.1555408055990; Tue, 16 Apr 2019 02:47:35 -0700 (PDT)
Received: from [172.18.129.84] (bzq-202-11.red.bezeqint.net. [212.179.202.11]) by smtp.gmail.com with ESMTPSA id d3sm42749934wmf.46.2019.04.16.02.47.35 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 16 Apr 2019 02:47:35 -0700 (PDT)
References: <155540797001.4600.8993819539718772895.idtracker@ietfa.amsl.com>
To: oauth <oauth@ietf.org>
From: Yaron Sheffer <yaronf.ietf@gmail.com>
X-Forwarded-Message-Id: <155540797001.4600.8993819539718772895.idtracker@ietfa.amsl.com>
Message-ID: <c39bf1cb-25eb-fadf-80c4-4868f7b81cba@gmail.com>
Date: Tue, 16 Apr 2019 12:47:34 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version: 1.0
In-Reply-To: <155540797001.4600.8993819539718772895.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/X_MSd368mdpxsTRmAjB9HBovWrk>
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-ietf-oauth-jwt-bcp-05.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Apr 2019 09:47:40 -0000

This version addresses Genart comments. Thanks to Brian Carpenter for 
his review!

	Yaron

-------- Forwarded Message --------
Subject: New Version Notification for draft-ietf-oauth-jwt-bcp-05.txt
Date: Tue, 16 Apr 2019 02:46:10 -0700
From: internet-drafts@ietf.org
To: Michael B. Jones <mbj@microsoft.com>, Dick Hardt 
<dick.hardt@gmail.com>, Yaron Sheffer <yaronf.ietf@gmail.com>, Michael 
Jones <mbj@microsoft.com>


A new version of I-D, draft-ietf-oauth-jwt-bcp-05.txt
has been successfully submitted by Yaron Sheffer and posted to the
IETF repository.

Name:		draft-ietf-oauth-jwt-bcp
Revision:	05
Title:		JSON Web Token Best Current Practices
Document date:	2019-04-16
Group:		oauth
Pages:		15
URL: 
https://www.ietf.org/internet-drafts/draft-ietf-oauth-jwt-bcp-05.txt
Status:         https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bcp/
Htmlized:       https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-05
Htmlized: 
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-bcp
Diff: 
https://www.ietf.org/rfcdiff?url2=draft-ietf-oauth-jwt-bcp-05

Abstract:
    JSON Web Tokens, also known as JWTs, are URL-safe JSON-based security
    tokens that contain a set of claims that can be signed and/or
    encrypted.  JWTs are being widely used and deployed as a simple
    security token format in numerous protocols and applications, both in
    the area of digital identity, and in other application areas.  The
    goal of this Best Current Practices document is to provide actionable
    guidance leading to secure implementation and deployment of JWTs.

 


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat