[OAUTH-WG] Lars Eggert's No Objection on draft-ietf-oauth-iss-auth-resp-03: (with COMMENT)

Lars Eggert via Datatracker <noreply@ietf.org> Mon, 29 November 2021 14:12 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Lars Eggert via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-oauth-iss-auth-resp@ietf.org, oauth-chairs@ietf.org, oauth@ietf.org, rifaat.s.ietf@gmail.com, rifaat.s.ietf@gmail.com
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: Lars Eggert <lars@eggert.org>
Message-ID: <163819516303.30866.9031330719291740896@ietfa.amsl.com>
Date: Mon, 29 Nov 2021 06:12:43 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ZZMPqW6hmVBL7p2dtuLMXptTM-Q>
Subject: [OAUTH-WG] Lars Eggert's No Objection on draft-ietf-oauth-iss-auth-resp-03: (with COMMENT)

Lars Eggert has entered the following ballot position for
draft-ietf-oauth-iss-auth-resp-03: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/blog/handling-iesg-ballot-positions/
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

All comments below are about very minor potential issues that you may choose to
address in some way - or ignore - as you see fit. Some were flagged by
automated tools (via https://github.com/larseggert/ietf-reviewtool), so there
will likely be some false positives. There is no need to let me know what you
did with these suggestions.

Section 2.3. , paragraph 2, nit:
> s by any other mechanism which is outside of the scope of this specification.
>                                   ^^^^^^^^^^
This phrase is redundant. Consider using "outside".

Section 4. , paragraph 4, nit:
> f alternative countermeasures are outside of the scope of this specification.
>                                   ^^^^^^^^^^
This phrase is redundant. Consider using "outside".

These URLs in the document can probably be converted to HTTPS:
 * http://arxiv.org/abs/1508.04324
 * http://www.iana.org/assignments/oauth-parameters
 * http://openid.net/specs/openid-connect-core-1_0.html

[OAUTH-WG] Lars Eggert's No Objection on draft-ie… Lars Eggert via Datatracker