IETF Logo Mail Archive

Re: [OAUTH-WG] [SPICE] Relationship between SPICE and OAuth

Dick Hardt <dick.hardt@gmail.com> Wed, 01 November 2023 19:06 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E355C14CE54; Wed, 1 Nov 2023 12:06:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.104
X-Spam-Level:
X-Spam-Status: No, score=-7.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6oTjxzfOzTB7; Wed, 1 Nov 2023 12:06:29 -0700 (PDT)
Received: from mail-yb1-xb2b.google.com (mail-yb1-xb2b.google.com [IPv6:2607:f8b0:4864:20::b2b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC359C14CF01; Wed, 1 Nov 2023 12:06:29 -0700 (PDT)
Received: by mail-yb1-xb2b.google.com with SMTP id 3f1490d57ef6-d9a3d737d66so79326276.2; Wed, 01 Nov 2023 12:06:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1698865589; x=1699470389; darn=ietf.org; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=BJ5geI9fhsEZNbExl2g9AByCZ8Rm8Oc9gAi1U6e+4ok=; b=VrpvKyAbX8WbO44lR5Pig4veG8yR8RHG3hqYrZFimWSfz+GnR8273p42h5AgXIpBte QyCpiCu2uKTKtLY5M198KaWdA8xo1dYipztNvqt2CYNeN3YQ2qtCx43QFXrU0n0bo3AQ 9+q7rVh1rsZ+0ZCGT7FSpttiWBHoKCPfxgr+1BV34CJxnFIy2yNiq2dL4HBLNxhxA29f iqsQ9XeJ5otP/BmdJebWauQnlGAZi9zkFDowkJHFzkuS+YIeUZEAkw/xynwRfPd/hfe0 9Xszdkbry3Oh3eF2mRFUXZbxxOXV1QXWU3r8tGIZ1YCxeacccRhf571+wjXrhh3fmW7Z 8IwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1698865589; x=1699470389; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=BJ5geI9fhsEZNbExl2g9AByCZ8Rm8Oc9gAi1U6e+4ok=; b=idK08sluNC4GTzUak1VP6ThWl/xFxahA2iJquMVP/pXe79l2j3cQJMcUOBRnfEWTnd GnGzK/REcYfyv7FyMIOaXoDJhtuwShRlA+s1EFXXMX6W18tOdiIRm6VzSdpwnwk95jYs vXNSsQwdAkngDq9MWJo4XRDRMTnFLrrVU1cQm5BQriRiTsfRwV8vYeJ1aYl+zdAdeK8w 2H3vFh3Edibw4nGTSAXPqdBvB3HFbrsExy2oto1sjDp/FZAvNQGvKSTJ5yqffsKq+Ria a/k5ELmiSwWVwN2N/gM/90QmSFP5YHdAGoI6fbY+GsAApBGMOFcDESGP0Qo9u0qbj4Fz OIcw==
X-Gm-Message-State: AOJu0YzKdl9UlD1dnvMrykDHvkzvQ8nRa1RI/sZ43JpwvOLIjHFNAb9+ Jwhggi3ABRF01SUYu1fFk6yPmra+TtMqXPVYj10=
X-Google-Smtp-Source: AGHT+IF/RCE79s+X1F3N56GxwpMAo61v9z5JO+SWhs/XeJh7mwuv9QusPKEDkSH/jpy4YuBABGUvT59uPGtqhVWjA1U=
X-Received: by 2002:a81:ed0a:0:b0:5a5:575:b222 with SMTP id k10-20020a81ed0a000000b005a50575b222mr14578859ywm.23.1698865588581; Wed, 01 Nov 2023 12:06:28 -0700 (PDT)
MIME-Version: 1.0
References: <144ae5fd-92ef-474e-bd4b-7c7e3abfc78e@gmx.net> <3b7b2292-02bb-4ac3-adf0-7e1edf25eb99@Spark> <1a09e91a-12fd-5c47-ad49-88e040a41383@free.fr>
In-Reply-To: <1a09e91a-12fd-5c47-ad49-88e040a41383@free.fr>
Reply-To: Dick.Hardt@gmail.com
From: Dick Hardt <dick.hardt@gmail.com>
Date: Wed, 01 Nov 2023 12:05:50 -0700
Message-ID: <CAD9ie-uxmxR0sS_P8GHA_+R_6-ffHjfCCnHgPxzKR0RovVfZJA@mail.gmail.com>
To: Denis <denis.ietf@free.fr>
Cc: Hannes Tschofenig <hannes.tschofenig@gmx.net>, spice@ietf.org, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000edbd1a06091bf7a8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lEjtIWG13uWXl45ztp1kSupXC_0>
Subject: Re: [OAUTH-WG] [SPICE] Relationship between SPICE and OAuth
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Nov 2023 19:06:30 -0000

I can't help myself to not reply to this ... :)

On Wed, Nov 1, 2023 at 11:18 AM Denis <denis.ietf@free.fr> wrote:

> <snip>
>
> Bridging the architectural narrative used in the core OAuth framework (AS,
> RS, RO) and in the three roles model
> (Holder, Issuer, Verifier) would not be appropriate.
>

I'm not sure "would not be appropriate" is the right phrase, but I agree
that the models are different.

<snip>

> It should finally be noticed that the acronym of this WG, "OAuth", is a
> short for "Open Authorization". It is questionable whether that acronym or
> its meaning
> would still be appropriate to address the three roles model which does not
> fit into the OAuth 2.0/2.1 framework.
>

OAuth is not short for anything. "OpenAuth" was originally proposed, but
Yahoo! was using that term at the time, so "OAuth" was picked.

The name of the WG is actually "Web Authorization Protocol"
https://datatracker.ietf.org/wg/oauth/about/

This does reinforce what I think is Denis' point -- this WG was chartered
for authorization protocol work -- not "identity" tokens.

/Dick

v2.46.0 | Report a Bug | By Email | System Status