Re: [oauth] OAuth Charter Finalized

"Hannes Tschofenig" <Hannes.Tschofenig@gmx.net> Wed, 04 March 2009 14:57 UTC

Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA2E128C379 for <oauth@core3.amsl.com>; Wed, 4 Mar 2009 06:57:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.341
X-Spam-Level:
X-Spam-Status: No, score=-2.341 tagged_above=-999 required=5 tests=[AWL=0.258, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QLPpmVj6Tcu4 for <oauth@core3.amsl.com>; Wed, 4 Mar 2009 06:57:21 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 7B43B28C37B for <oauth@ietf.org>; Wed, 4 Mar 2009 06:57:20 -0800 (PST)
Received: (qmail invoked by alias); 04 Mar 2009 14:57:43 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp051) with SMTP; 04 Mar 2009 15:57:43 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18Rsa1vMn0RJZsfDtajJ2RXV5dnAtz0Ayw1GR6Sl6 agjzMvVUX0++7V
From: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
To: 'Alexey Melnikov' <alexey.melnikov@isode.com>
References: <004901c99a6e$6b96e120$0201a8c0@nsnintra.net> <49AE5CD5.2080308@isode.com>
Date: Wed, 04 Mar 2009 16:58:43 +0200
Message-ID: <000701c99cd9$b81a56e0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
In-Reply-To: <49AE5CD5.2080308@isode.com>
Thread-Index: Acmctv9ro4ptINgQSYiHAvardF7jLwAG6Bcg
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.55
Cc: chris.newman@sun.com, oauth@ietf.org, 'Lisa Dusseault' <Lisa.Dusseault@messagingarchitects.com>
Subject: Re: [oauth] OAuth Charter Finalized
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Oauth bof discussion <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 14:57:21 -0000

Hi Alexey, 

I prefer to avoid re-charting unless the scope of the work significantly
changes. 
The reason for this is efficiency. Discussing the new charter (as we can see
with this exercise) takes a lot of time that could be used more
productively. 

See also the document I recently wrote about my impression on how to reduce
delays: 
http://www.ietf.org/internet-drafts/draft-tschofenig-rai-reducing-delays-00.
txt
(written with a focus on RAI but to some extend also applicable to other
areas)

Ciao
Hannes


>-----Original Message-----
>From: Alexey Melnikov [mailto:alexey.melnikov@isode.com] 
>Sent: 04 March, 2009 12:50
>To: Hannes Tschofenig
>Cc: 'Lisa Dusseault'; chris.newman@sun.com; 'Blaine Cook'; 
>oauth@ietf.org
>Subject: Re: OAuth Charter Finalized
>
>Hi,
>I have a quick question about the proposed Charter (please 
>excuse me if this was discussed on the mailing list):
>
>Hannes Tschofenig wrote:
>
>>After delivering OAuth, the Working Group may consider defining 
>>additional functions and/or extensions, for example (but not limited
>>to):
>>  
>>
>WG charters typically say that work on such extra work items 
>require WG rechartering.
>What is the intent in this case?
>
>> * Discovery of OAuth configuration, e.g., 
>http://oauth.net/discovery/1.0.
>> * Comprehensive message integrity, e.g., 
>>http://oauth.googlecode.com/svn/spec/ext/body_hash/1.0/drafts/
>1/spec.html.
>> * Recommendations regarding the structure of the token.
>> * Localization, e.g.,
>>http://oauth.googlecode.com/svn/spec/ext/language_preference/1
>.0/drafts
>>/2/sp
>>ec.html.
>> * Session-oriented tokens, e.g.,
>>http://oauth.googlecode.com/svn/spec/ext/session/1.0/drafts/1/
>spec.html.
>> * Alternate token exchange profiles, e.g., 
>>draft-dehora-farrell-oauth-accesstoken-creds-00.
>>  
>>
>