IETF Logo Mail Archive

[OAUTH-WG] Re: Call for adoption - PIKA

Richard Barnes <rlb@ipv.sx> Tue, 11 June 2024 03:18 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82885C1E8E11 for <oauth@ietfa.amsl.com>; Mon, 10 Jun 2024 20:18:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hCAZUh9rGCns for <oauth@ietfa.amsl.com>; Mon, 10 Jun 2024 20:18:32 -0700 (PDT)
Received: from mail-il1-x12d.google.com (mail-il1-x12d.google.com [IPv6:2607:f8b0:4864:20::12d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 199C1C14F61E for <oauth@ietf.org>; Mon, 10 Jun 2024 20:18:26 -0700 (PDT)
Received: by mail-il1-x12d.google.com with SMTP id e9e14a558f8ab-371c97913cdso20656325ab.3 for <oauth@ietf.org>; Mon, 10 Jun 2024 20:18:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20230601.gappssmtp.com; s=20230601; t=1718075906; x=1718680706; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=309QW9w5Q02suozUlPEJA7Zqz6hjaMgj2hSu6LfK0P8=; b=a7mM6eLFuUU4stHPbxxH5WVgVps7Ub+Xsdnmi3wiYfFhNHWhp0ABooYchFXYi0B/M+ xF4ycRjkdTjDbEMHPnMmEIaY5uR+9gyURgXkrKfy/kirdCblBiNGd28roig/crwWzbuC iqSvurx8L3UNYVRx8YK/l4wGwAxpMMg6d6RD4A7PG82tp25gBurTaPVwojolM1bYcyMx VsDRCBHMYMqTQEfAOP7ZS6AVHIerjFi4RWuMitlEtgo8Ss9f+4Btmo5Py8aDm2p84G2A Vtu89Sq8wWmz9JbN0YV/fdjYpKT1NzTABBuwHM6T7X7n3UT7T8C60mjCify0/jnSj5bE B0/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1718075906; x=1718680706; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=309QW9w5Q02suozUlPEJA7Zqz6hjaMgj2hSu6LfK0P8=; b=pOkFar/k2kO6SQHyGJ4c+GxnQYzeHOcXucq5MgTtkXLQ4Y25j1FxnZmgUEMQOVRO2y AV87UEWxE0asdxcmYH6vAQBCpfhxu0WLFQkhGzWy9zx7/+vD7PFkInvfYv8+qahzWNgP 9WiYsYYuTjbKdwV9rKVyk8oyNubYMgc4QZWwo6VT3YMOQnQjiQt4Et7eUr7GXhRrxB33 6P0JhgZMEExG9I1HxHnVBLpeAAeWA/n8V17CrD8M6UG19KAVQIW6LoEJki0vcOKquc8W QFdkSuH35rKh3hohUzhLktJ95HtQ2Wpkas3Fp/ar4gajyKDRPG5cHxt18PWm1URJsN7N fQZg==
X-Forwarded-Encrypted: i=1; AJvYcCWLtTczd3JbckTm43PYhMpMXTZ6hg7I002aZ++eCuH21QSStxlIM/SJ2AXSkldIfJvtGt2HTt5OxF/iFZET0w==
X-Gm-Message-State: AOJu0YwIeYfrDzYFBhCLKvEeTdh5G4M4tpaZaMBW1YcbxFxoDrCFIwRw B5ObeajB7G/DI4bIDOYd//y+EsH74MvYSX/ajNJfFbEmTPTzrZLI6SYU9i06o+BPi0k7vL1obz6 TMzDaR5S1yVEILTveiK3d4eAWdl0I2RhDqz3EjBi9O62sYQJeXTA=
X-Google-Smtp-Source: AGHT+IFCsNb09tZzsL1NrueaSGYfSatOCPz51mjIu4aA8J5BzUIPwvkgC14E9H3K/yE3LLsGFz3gABvnWmUTJX4I2/U=
X-Received: by 2002:a05:6e02:1388:b0:374:ae97:9066 with SMTP id e9e14a558f8ab-37580346117mr135710935ab.17.1718075906189; Mon, 10 Jun 2024 20:18:26 -0700 (PDT)
MIME-Version: 1.0
References: <CADNypP9GmF4vp1uzLXK0YYZAHUDjK7RHbhEb4MCXkB7N3Oq4+w@mail.gmail.com> <CAL02cgSEt8z3zsLC6U5eqhMSHbn-+7uywZCQUrUpJ9zQwQeShQ@mail.gmail.com> <SJ0PR02MB74398B6C188C5D374B86F81BB7C72@SJ0PR02MB7439.namprd02.prod.outlook.com>
In-Reply-To: <SJ0PR02MB74398B6C188C5D374B86F81BB7C72@SJ0PR02MB7439.namprd02.prod.outlook.com>
From: Richard Barnes <rlb@ipv.sx>
Date: Mon, 10 Jun 2024 23:18:14 -0400
Message-ID: <CAL02cgTMSgi-boxZAjkFc8_JrEJrGzk=LH5BnS2Earx-Ji2j9A@mail.gmail.com>
To: Michael Jones <michael_b_jones@hotmail.com>
Content-Type: multipart/alternative; boundary="000000000000160c7c061a94b81d"
Message-ID-Hash: MOH7L7RNVP2IMYVVFB63EFWWPMWZJ4ZF
X-Message-ID-Hash: MOH7L7RNVP2IMYVVFB63EFWWPMWZJ4ZF
X-MailFrom: rlb@ipv.sx
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [OAUTH-WG] Re: Call for adoption - PIKA
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/eBSdNk28p6jeqkEgXoH3gCjfPIc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

The applications we're talking about are **already** doing X.509 when they
make HTTPS connections.  It's not a new requirement.  The only thing we're
doing is using the certificate for JWT instead of HTTPS.

--RLB

On Mon, Jun 10, 2024 at 11:15 PM Michael Jones <michael_b_jones@hotmail.com>
wrote:

> As both I and Giuseppe pointed out, the requirement for applications to
> use and understand X.509 certificates means that the draft is way beyond
> the minimum complexity needed.
>
>
>
> Eliminate application-level X.509 (which is an anachronism that OAuth and
> JOSE have moved away from), and I’ll support adoption of the next draft.
>
>
>
>                                                                 -- Mike
>
>
>
> *From:* Richard Barnes <rlb@ipv.sx>
> *Sent:* Monday, June 10, 2024 8:11 PM
> *To:* Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
> *Cc:* oauth <oauth@ietf.org>
> *Subject:* [OAUTH-WG] Re: Call for adoption - PIKA
>
>
>
> In case it's not clear from other messages in this thread: I think this
> draft should be adopted.  It solves several pressing use cases, with the
> minimal amount of complexity needed.
>
>
>
> --Richard
>
>
>
> On Mon, Jun 10, 2024 at 7:47 AM Rifaat Shekh-Yusef <
> rifaat.s.ietf@gmail.com> wrote:
>
> All,
>
> This is an official call for adoption for the *Proof of Issuer Key
> Authority (PIKA)* draft:
>
> https://datatracker.ietf.org/doc/draft-barnes-oauth-pika/
>
>
> Please, reply *on the mailing list* and let us know if you are in favor
> or against adopting this draft as WG document, by *June 24th*.
>
> Regards,
>  Rifaat & Hannes
>
>
>
> _______________________________________________
> OAuth mailing list -- oauth@ietf.org
> To unsubscribe send an email to oauth-leave@ietf.org
>
>

v2.37.1 | Report a Bug | By Email | System Status