[OAUTH-WG] Re: OAuth IETF 127 Call for Agenda Items

george@practicalidentity.com Wed, 07 October 2026 14:31 UTC

Received: from outbound.pv.icloud.com (pv-2003j-snip6-4.eps.apple.com [IPv6:2a01:b747:3003:205::5f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id BE1EB42 for <oauth@ietf.org>; Wed, 07 Oct 2026 14:31:53 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=practicalidentity.com header.s=sig1 header.b=rIcqqAxr; spf=pass (mx.ietf.org: domain of george@practicalidentity.com designates 2a01:b747:3003:205::5f as permitted sender) smtp.mailfrom=george@practicalidentity.com; dmarc=none
Received: from outbound.pv.icloud.com (unknown [127.0.0.2]) by p00-icloudmta-asmtp-us-west-1a-20-percent-0 (Postfix) with ESMTPS id 27CDC1800A09; Wed, 07 Oct 2026 14:31:43 +0000 (UTC)
X-ICL-RepId: 01a116c7-04a1-7855-b588-cd43624fe546
X-ICL-Out-Info: HUtFAUMEWwJACUgATUQeDx5WFlZNRAJCTQhLAUMGXwVeDFYCVQNLVxQEH1YCRQxXMEkKUg5DAlERVRFXCFkfWwRAVlACWktUFAQIQQxUH1sTWBRaCVIFRhlNAR0OWAYSAlpFB01fDl4fBBdGGVUERx5dVkMbGQJRHFYNV0NUBF9QSQxBUGxaAEcXSB1dGVlvUF0cDh1FClEEUBtSAV4PVx5NEUcUGQhdHRkVWgkKVwI1Djt2WwBfHzV/SwVAAy4FNhQ6cV0DRgI0fEhxKHFeCzUKSHMdRQpRBFAbUgFeD1ceTRFHFBkIXR0HWEcURw4PE0wLRwJaNFYfVBlaAw==
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=practicalidentity.com; s=sig1; t=1791383506; x=1793975506; bh=3oikMLZ2pJ+eRgF0gxseT6d4wlFbPBcXGLWXCR9ALjA=; h=Content-Type:From:Mime-Version:Subject:Date:Message-Id:To:x-icloud-hme; b=rIcqqAxr/oXE1Cfw539XOUX4gGeiNzf2Gdz7QDZ8K8FnEIgLZmuHIglQFR9U5dSHWROeuIFqpQ5TFegycHpkL0xloQr9kMMqRU0tx7OT9ZMV++elGYr4Ka8t8tfI/7LXsTcZAzZvJP1L6jJNt4KKmcfrpb7uXrGpryu4kG5mP/w1rm2AiqCNgKxb+4v2bFQGTUxvf5dpmlBRXaILEbg4BS77TzJ66TFRtOge12OdIpXpG5axtqzRpVb0AyC7rp5Y1V1xwXNtv9p2h/KkIv0PvhY+2WlksYf4rFBRwPxaIArBDL/ZvssBg5jd3ta8fTx5/V3ZIPa9kCQ2ANnHN4tI3A==
mail-alias-created-date: 1727343745928
Received: from smtpclient.apple (unknown [17.156.192.29]) by p00-icloudmta-asmtp-us-west-1a-20-percent-0 (Postfix) with ESMTPSA id 321FD180010B; Wed, 07 Oct 2026 14:31:43 +0000 (UTC)
Content-Type: multipart/alternative; boundary="Apple-Mail-068951C2-7D8C-4665-B5A4-98B20D67887F"
Content-Transfer-Encoding: 7bit
From: george@practicalidentity.com
Mime-Version: 1.0 (1.0)
Date: Wed, 07 Oct 2026 10:31:30 -0400
Message-Id: <0E7CE674-EF36-4E7F-BB04-0DE0BEF59E30@practicalidentity.com>
References: <CADNypP8B3SC69ooDe8S2XQAisaXkvB4uSf7PwEZ7W4LYcAT4Ow@mail.gmail.com>
In-Reply-To: <CADNypP8B3SC69ooDe8S2XQAisaXkvB4uSf7PwEZ7W4LYcAT4Ow@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, Pieter Kasselman <pieter@defakto.security>
X-Mailer: iPad Mail (24A437)
X-Proofpoint-ORIG-GUID: yGKJAu8PDiOPdNHv9jUROcMQTsnIbhTT
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDA3MDA1NyBTYWx0ZWRfX0H7U1XCjl2gX Dhvj1R6nebLC4xpjci7qwPJC+Mg2t9PKSLRHb97EsRZFAC/0DdFq7WSkP8mLJjVIVPNJ3O/EFB5 wkfPHIh07hx+fxapHMWCv6Pmgg2RnJHcCkOizBbNDUhEgYt0g/C5h/zd8UDMrpx9H8BkTjW1XEr N0jYRmv/xNXt8w3wuskEY97sqNQ8mLkc17/RolodikQ0gVleW9Z4M6hlZAy0smOy3NmpndIgcWR sY8TPrueUWfOtmcFe/MwIi1GhTwMpCUFiYeBrFfAkV4b++Fy9DEwIaVPBuiq/Pd/3UWZBF4CPbE HAY6hPP722gqS+HW15VyEiA+rfLgGn2A7mjnq50iQlQ6z98K0FTzHVWUsXICiQ=
X-Authority-Info-Out: v=2.4 cv=W8A1lBWk c=1 sm=1 tr=0 ts=6ac657d0 cx=c_apl:c_pps:t_out a=aW9mcIavGNWWFvFFKOxBSA==:117 a=aW9mcIavGNWWFvFFKOxBSA==:17 a=660iZSQnnn4A:10 a=VkNPw1HP01LnGYTKEx00:22 a=48vgC7mUAAAA:8 a=pGLkceISAAAA:8 a=RDTFfpWzZ5mVgD54NbAA:9 a=mMHPf7nsPCagHQGq:21 a=_W_S_7VecoQA:10 a=lqcHg5cX4UMA:10 a=QEXdDO2ut3YA:10 a=HXjIzolwW10A:10
X-Proofpoint-GUID: yGKJAu8PDiOPdNHv9jUROcMQTsnIbhTT
X-JNJ: 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 QZauMvzPVyeSVoQ1kROgSX4eu5EDn8GJr8v6jfMN6gG4JSDxEE6p3wo/rsG56HFRzgGPVyVwNX9eWYn2CZdsg1deThRa+mIrDi8nCXQ/bpJ1xy191Bvkt3vFO7I6R27M5PVkb1xxG5z4AJh9vnBek8qQbqxFHyxYUZ2kVkUrVMVJZWtQPAII1vHepJTRzEgZZxhmAIzX/T+wBiorS+iP/MtrjrJl/DSpxvisa/frm76CvTwPINv8RMGKkc98DWVnBmhsd621eOTDivMRwDPrXUpJQmsMsJ5jlGflwUZCJ5ANpAkXLcfZYXPHe8kZMMFTfFZRYbAvbjqyWr40Jq8hrwbyzK321hecuW5FQtA7EXTSzO4do52qzGw1xQBUSeBNmmePWsweHS7giEVs/ojVeDpm6QxJD
X-Spamd-Bar: ----
Message-ID-Hash: Y77LURGGQRD5SSXBPXBDGTUY57LEA5HK
X-Message-ID-Hash: Y77LURGGQRD5SSXBPXBDGTUY57LEA5HK
X-MailFrom: george@practicalidentity.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-oauth.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>, wimse@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [OAUTH-WG] Re: OAuth IETF 127 Call for Agenda Items
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ZooL6g72Itpu8Un8QO7auRImwlw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

I would like to talk about using transaction tokens to cross trust domain boundaries in the WIMSE/OAuth joint session. This is a key capability for organizations deploying transaction tokens and a resource server downstream in the chain needing to invoke a service in a different trust domain. The current version of the individual draft can be found here:


The authors will be publishing an update before IETF 127.

Thanks,
George

--
George Fletcher
Practical Identity LLC

On Oct 6, 2026, at 1:54 PM, Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> wrote:


All,

The OAuth working group chairs have requested 2 two-hour meeting slots on the agenda for IETF 127 in San Francisco.
 
In addition, as the intersection between the work of the WIMSE and OAuth working groups becomes increasingly important, 
the chairs of both groups have requested an additional two-hour joint session dedicated to topics that touch both groups. 
For example, transaction tokens are defined as OAuth artifacts but relate directly to workload security.
 
At this time the OAuth chairs are soliciting proposals for both the dedicated OAuth sessions and the joint WIMSE/OAuth session. 
Please send your requests to the mailing list or directly to the chairs, indicating whether your request is for the OAuth session, 
the joint session, or could fit in either session.  

Current working group items and proposals with demonstrated interest from multiple different parties will get priority.
 
Please note that the Internet-Draft submission cut-off is Monday, 2 November 2026 at 23:59 UTC [1]. 
Please ensure that new drafts and updates to existing drafts are published in Datatracker before the deadline.
 
Regards,
 Rifaat and Hannes

_______________________________________________
OAuth mailing list -- oauth@ietf.org
To unsubscribe send an email to oauth-leave@ietf.org