[OAUTH-WG] Re: Mohamed Boucadair's No Objection on charter-ietf-oauth-05-04: (with COMMENT)
Deb Cooley <debcooley1@gmail.com> Thu, 21 May 2026 13:52 UTC
Return-Path: <debcooley1@gmail.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 4B7B0F2765C3 for <oauth@mail2.ietf.org>; Thu, 21 May 2026 06:52:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779371531; bh=Wtz9N391rrx5BFBHyJoFDLcbNjM4yRa1qbb/bM63sMk=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=f7iCOV+vSlX6Yi6SySxvXkUGZwfHAcOnr+uULbYorHqBx4vVcM9SCcy0lnTNgRFqa rGaNYjBcX9xH1cfQp1RLnRrgFXOIFQjQUZYLVp+cq7RGEHz6OvK9HazgCuauSdcdj4 7JhbxUw6SDl2uE1N8eB4AjhkDCepLpo0n9WvGNE4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.848
X-Spam-Level:
X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id msMLklEwJ7ta for <oauth@mail2.ietf.org>; Thu, 21 May 2026 06:52:10 -0700 (PDT)
Received: from mail-dy1-x132c.google.com (mail-dy1-x132c.google.com [IPv6:2607:f8b0:4864:20::132c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C3652F2764FB for <oauth@ietf.org>; Thu, 21 May 2026 06:51:37 -0700 (PDT)
Received: by mail-dy1-x132c.google.com with SMTP id 5a478bee46e88-304106b1204so2587007eec.0 for <oauth@ietf.org>; Thu, 21 May 2026 06:51:37 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779371497; cv=none; d=google.com; s=arc-20240605; b=gERrHDV5Yxji+DDhLMIjQsesX2ZK5+7ld4uRNLRBGFk+BOaKZSRVpuxRk6uj0i94wG dT28nJwDQmAoV8HDg+NnVRl7znyXRw1inRb071VaZy6/fjE276bG6TPR6lWZN6FQeh5v sqpw0PKd/A/dTFhrvetLe2JfVvdjh73PtMy0xpEdpnMPVhUDnqzyO5wKqDtQrYSzU/VZ OFmyFkYmZvjxJVK4Mf4cTOTevTZzK0RFODNR+a8COuUaIbiqzNsei+Pdk3IwCsfbEmPt 3AI+GkvzkJXWlvV7uDwKSg7fzwEEOGb9vEb+gtJz6Uvi9vBQ34fDZZrRoh0F4Ls2bDZ9 Tyqg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=L6mn/WEpmVSgfNyQIThFG4JCSBXZ/b5QmQt6lDorO/8=; fh=uC6E8Gf4KTp2Ft+hrZEL3CoinWpzLIy+IY2qbA1vn2I=; b=EpmC0pg/T2Z9V+vxSG3UABjZoBWyLnjOUwLRTqLxPGvI6E4Va9emIGun3i4ezgmhGd 9JBJTrm/WjXXR1GP+xpXGLCZICnb9zoDnPbbF2b0QRLm81gPoU+bFhKKMToeG2Ix8bVc 4Ex0d7ToSPfIF0q2RRBEWBWZjWzu0C+8PTHGY6Y6q8zIZRGD2QaUwP8wKmI3V4i74tYi sex8OOXqdLQQUNY0SXviiWFQldbNxcYsIIjII+Qm0F/fjD8zn6uORbUTAQL7FHCvqV4d m1X/SQoQgSLDlHeeJRzohr4ZtLQ25u7aSL4LEfH3vjyttE5JIpSoeMK7twoz3nV+dcvL +YgA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1779371497; x=1779976297; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=L6mn/WEpmVSgfNyQIThFG4JCSBXZ/b5QmQt6lDorO/8=; b=mXEcuixyUaQ+YfSJqt9uioE3O/UeuELV7Ki05Kew5grOVCOG81IZfGN4kIWQ1HQrMG hndIbuic5pjwbxppUxnM5V56c9p6qY7+GwiRPgLaO63Lv2HPPDlCDOhRbQhdlZMdg2Dk OAd4Buj/BOwmGrH4DODKtrklrkOJHwt4tOpCGgdrrJDCoLhIQqbnR3+XODWnkCi3dHOg YypQADYu9/jvS0SV2IzYWBADXAdEFM7jkR2+g/cW8UxpG5iJthbNc8cVsfHdeewc0fE6 FvF5PJ7epTTMNfcrYLXQKvpa77Xbrg3se6nS036rQxTzbZZ7BwKt6XChxaVjyThptQXt 5tmw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1779371497; x=1779976297; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=L6mn/WEpmVSgfNyQIThFG4JCSBXZ/b5QmQt6lDorO/8=; b=DW1InhvjVxW1wkWAxQ1TJOOdTIu54GjN2CxaOVStStYYIKlqL9UZSwhmRZY9LJfvbr DZLPXHMPLqjoM0dToIPeB9GxHtJAAk2U+LaNe/aeoIFpUa32wFG0joidFU6dG6jeTEPG sKkonpyPQZjVpES4iK6cIGtOh/HV7FO1wwATIEY3FdnO5hD0nqPed9aYnfPU9gyjMGww 0O/J3DODlcCKYPzvRLvMq4B2Vo1kjFAG31+0IvT0bYqFjbQkpvMc/MB1jqJptu6SZ3Sw ewt5Femhjb/u8RSgSnKOSHsqbVp5BYOES1gc4vaKOwBuTd6Ciu/hL91201KS3t/FhQTg aJ2w==
X-Forwarded-Encrypted: i=1; AFNElJ/+l9VUmEp9xFYkEuGdUunywM6Mlychnx0n4r1ns1WhBHbu4d+ZXVZD+e770VQ3ndswO4GOrg==@ietf.org
X-Gm-Message-State: AOJu0YzmztfWTSGyDpCs4DSb4+0HZZ7yBOh2SLmPkRlxDS0sGrpOPQjm 9E0C7TkAMzbkO6Jr8lzeZznOQpzfLULhzOg64K2XMhsnfKTJjEs8mVW6ioBs3t4fMHOaqS+HH14 8dq9fFkSSovOqIJbELy+m+5apLql1LA==
X-Gm-Gg: Acq92OHIKt98ZQD8yyG46TeWQ5oXxwEjMjzwgM3HQAPzRYJfDmrAZYdoCDKQ/Ue6wUk LVCrFUS7uIBQwyX+umMyf1ZIMqdVr3R0RJxT7VG7zclT0lFLR19KUkVNSGJNiwvrws7rdmaBv6U rnYQjBpjGC+Jd+o7PANTUysTldKTPWr3+K42xLROXV/vaRozQqdRDHcsxYtlupOP+6bygK/71jD XmtKPNU2+qjKafErv52Wo5VkMJDg9h9xQxNBxZDwYMb+GS0/BJLs9UqScQ4tFMlLCCBAAFYlzPw 50JoJU/kvS7Oz3FFb9M5IzKTs9bEzmaSKBpEmRcyReCLhMT/pZTa/od8sAjGtMXhu6JA+hL5eBs 6bh4T0q/5Dddpw3KGz6/DoAcF94MVvgSJRSQ=
X-Received: by 2002:a05:7301:7bc4:b0:304:2af3:5fe3 with SMTP id 5a478bee46e88-3042f9509e3mr1696481eec.16.1779371496605; Thu, 21 May 2026 06:51:36 -0700 (PDT)
MIME-Version: 1.0
References: <177919152467.776868.7486570992158927148@dt-datatracker-7688897f84-l74h4>
In-Reply-To: <177919152467.776868.7486570992158927148@dt-datatracker-7688897f84-l74h4>
From: Deb Cooley <debcooley1@gmail.com>
Date: Thu, 21 May 2026 09:51:26 -0400
X-Gm-Features: AVHnY4KL43gRCjvcgMtaNRcA6GSW0nkCvWwOaJNNT_nlqkNP8-pSyku2rpd8eUM
Message-ID: <CAGgd1OcYeyhc=+Pzpp=GmPVKLnwv8CQhQeH6_xtw5bMFOxm62g@mail.gmail.com>
To: Mohamed Boucadair <mohamed.boucadair@orange.com>
Content-Type: multipart/alternative; boundary="000000000000fa8bef0652543506"
Message-ID-Hash: UMIKLXGZANZ65Y53ML5QWAIGKLXLDLTS
X-Message-ID-Hash: UMIKLXGZANZ65Y53ML5QWAIGKLXLDLTS
X-MailFrom: debcooley1@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, oauth-chairs@ietf.org, oauth@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: Mohamed Boucadair's No Objection on charter-ietf-oauth-05-04: (with COMMENT)
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/gHZd5KPzc5vMzCRIBYiQOa59HTI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>
Hi, Thanks for the comments. Responses inline w/ [DC] On Tue, May 19, 2026 at 7:52 AM Mohamed Boucadair via Datatracker < noreply@ietf.org> wrote: > Mohamed Boucadair has entered the following ballot position for > charter-ietf-oauth-05-04: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-oauth/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Hi all, > > Thank you for preparing this updated version of the charter. > > Please find below some few comments: > > # Agents > > CURRENT: > As automated agents increasingly act on behalf of users, organizations, > or > both, these delegation patterns become increasingly involved and complex. > > ## Does the WG intend to work on identifying specifics of such schemes? > [DC] yes > > ## Does the WG intend to publish applicability documents to show how > existing > OAuth Framework can be used in such contexts? > [DC] that will be considered. > > ## The excerpt above exacerbates the need for having OAuth troubleshooting > mechanisms and good error reporting. I suggest to add an item for > operations/deployment considerations (and troubleshooting, in particular) > under > work program. > [DC] if there is interest in the working group, it will be addressed. > > # Restriction? > > CURRENT: > The working group is now tackling these topics which will be published as > Standards Track or BCPs: > > This statement would exclude that the WG can refresh work such as > https://www.rfc-editor.org/rfc/inline-errata/rfc6819.html (that would, > for > example, integrate existing errata or considerations that may be specific > to > the complex delegation patterns listed above). I would argue for some > flexibility here. > [DC] This is a fair point. I'll be asking for suggestions to this issue on the telechat. Maybe adding the word 'primarily' before published... > > Cheers, > Med > > > >
- [OAUTH-WG] Mohamed Boucadair's No Objection on ch… Mohamed Boucadair via Datatracker
- [OAUTH-WG] Re: Mohamed Boucadair's No Objection o… Deb Cooley