[OAUTH-WG] Working Group Last Call: JSON Web Token Best Current Practices

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Mon, 16 April 2018 17:49 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 771CC12D878 for <oauth@ietfa.amsl.com>; Mon, 16 Apr 2018 10:49:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Level:
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bo638_3ax2jY for <oauth@ietfa.amsl.com>; Mon, 16 Apr 2018 10:49:30 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on062a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F388127909 for <oauth@ietf.org>; Mon, 16 Apr 2018 10:49:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=J1pcLq0afEVWqPxTA0mpbH6zeVhdvVz2B+HrfRu8Rg8=; b=LkBk/Sjepx2OPLkWUoUIY3diJjxgb6RgK9roiegAo71MFerQq0fan0YqawgK6cIqBbWMSKhPa+xUEl0mxUjkHgUdiLC9DLhhn24IA1lR7+zhWIcbblbekmjDBLmhRX5zDZbjgyV0CCqtEusXKS4OB5upsFXhM2J3xS84gTDkkH8=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1743.eurprd08.prod.outlook.com (10.168.67.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.675.11; Mon, 16 Apr 2018 17:49:25 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::35fb:6e2c:e118:5644]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::35fb:6e2c:e118:5644%17]) with mapi id 15.20.0675.015; Mon, 16 Apr 2018 17:49:25 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: oauth <oauth@ietf.org>
Thread-Topic: Working Group Last Call: JSON Web Token Best Current Practices
Thread-Index: AdPVqurCFfBabyqeSkmiBPeLsGrqow==
Date: Mon, 16 Apr 2018 17:49:25 +0000
Message-ID: <VI1PR0801MB21126C75C51AFC361852988BFAB00@VI1PR0801MB2112.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.122.27]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1743; 7:O1FHCw2vbwbe4Iz0U7d/9YEW7Way0Rsakp00Rl95EP+S7ELJcKdfTqrWQVeqHRqhfft3HYqV7wxaoA1Uvwz9c9iqcbAzjlVx7cdTCwmI1xL3ZRYhpTP1cdGfZUBwy9aui68ffEldPhmDdgltgbuP9ljCbNdR+ZbEidZt6kt+rYVmJF4aCWhIBO+NMwp0rSpyAm+hkKNc9cmlMk9zBZ0iso4CPak/reQtrj77/pshSzHBc8m1y5OZum/7lWl3zsaU
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1743;
x-ms-traffictypediagnostic: VI1PR0801MB1743:
x-microsoft-antispam-prvs: <VI1PR0801MB17430BD8A36F842F82AD0BFCFAB00@VI1PR0801MB1743.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231232)(944501327)(52105095)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:VI1PR0801MB1743; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1743;
x-forefront-prvs: 0644578634
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(396003)(346002)(366004)(376002)(40434004)(189003)(199004)(53754006)(7736002)(106356001)(99286004)(8936002)(81166006)(81156014)(66066001)(316002)(68736007)(8676002)(476003)(33656002)(3660700001)(55016002)(486006)(14454004)(6306002)(186003)(2906002)(6436002)(72206003)(9686003)(3280700002)(53936002)(7696005)(6116002)(3846002)(105586002)(25786009)(6916009)(305945005)(102836004)(97736004)(6506007)(2900100001)(966005)(86362001)(26005)(5660300001)(478600001)(59450400001)(74316002)(5250100002)(5890100001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1743; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: pcs6KXVZPw77TYfv6L4D8z1xg6ISW1mYcO3wwRRga4uLd8u/1mmv0HOCH4F3goUgmD0naCrHW2FZEggOxXDYfdGsoeOjbfFM4mTOYCgmDqf0hBnfKTlNvspz9UpvI5ZQiaQpqtOcAeuRo0TClUDuevpNn3KoBRcvpcJy49ZDEEaPOe5MINmGHroowxEfUV1n
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: ac127747-0991-4ab8-aae0-08d5a3c2652b
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ac127747-0991-4ab8-aae0-08d5a3c2652b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Apr 2018 17:49:25.7730 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1743
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/fK46-XwstWgI-V5s5dbTgNQN9ec>
Subject: [OAUTH-WG] Working Group Last Call: JSON Web Token Best Current Practices
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Apr 2018 17:49:32 -0000

Hi all,

this is a last call for comments on
https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-01

Please have your comments in no later than April 30th.

Do remember to send a note in if you have read the document and have no other comments other than "its ready to go" - we need those as much as we need "I found a problem".

Ciao
Hannes & Rifaat
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.