[OAUTH-WG] issuer (was draft-ietf-oauth-saml2-bearer-17)
Brian Campbell <bcampbell@pingidentity.com> Mon, 04 November 2013 20:04 UTC
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EA5811E8175 for <oauth@ietfa.amsl.com>; Mon, 4 Nov 2013 12:04:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.931
X-Spam-Level:
X-Spam-Status: No, score=-5.931 tagged_above=-999 required=5 tests=[AWL=0.046, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n6phuufh8geA for <oauth@ietfa.amsl.com>; Mon, 4 Nov 2013 12:04:38 -0800 (PST)
Received: from na3sys009aog116.obsmtp.com (na3sys009aog116.obsmtp.com [74.125.149.240]) by ietfa.amsl.com (Postfix) with ESMTP id DBBB021F9EED for <oauth@ietf.org>; Mon, 4 Nov 2013 12:04:34 -0800 (PST)
Received: from mail-ie0-f175.google.com ([209.85.223.175]) (using TLSv1) by na3sys009aob116.postini.com ([74.125.148.12]) with SMTP ID DSNKUnf90uTTdXhGq2peG3a4LL5xAxhUlzvl@postini.com; Mon, 04 Nov 2013 12:04:35 PST
Received: by mail-ie0-f175.google.com with SMTP id aq17so12886543iec.6 for <oauth@ietf.org>; Mon, 04 Nov 2013 12:04:34 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-type; bh=Bf6mO0ekPRkwcnV4nRWG6nZ2aeEDcniAIzw+V7iAICg=; b=TSlBMgYqxriTRawUBP6ZmhNtf4uB8nG9vbmLHBCvJGgqaguo3jbgWRLwzn0wYKh5pn /IZQmIENd4VJyITHZMiEgYEehdAfDBE5Uyx8zeUh5cNXh2ry0VPoYZrVQ+uie1DRsNS5 bB4CcUQHshkvvUBq+ChjxR1qyQ6FD+fCu7Hcups9oYVSztI4HEyUoARDIdpoZWQ6fU4q q7eXOewW6KcxJu+IEv6KZPbD4BuRdqMVdypVZMg6gg2I09JkjXe/FjnauCrT9MUfTL/H Wk6xQv1IZ5j7uzr+xXno4jHMGrSRBSLH2FdeQTqPIPPQfuC4XWXvTiDL1fXUPQDu5bow Ldlw==
X-Received: by 10.42.142.129 with SMTP id s1mr11083983icu.30.1383595081579; Mon, 04 Nov 2013 11:58:01 -0800 (PST)
X-Gm-Message-State: ALoCoQltw3wNnNV/C2ah/M1WgyUecU0gKGRnYaOoIfpKYafvfJGL8q6UV4d3CoN88mMu6en28jcBQil8mkA2H6s/+uo0+lqfOTCoqUDyM8SWmA5+PautuAQfoF79kMcena/ZKhT9fPRiuc/JBba/2uVofxsRnRbQ8g==
X-Received: by 10.42.142.129 with SMTP id s1mr11083977icu.30.1383595081498; Mon, 04 Nov 2013 11:58:01 -0800 (PST)
MIME-Version: 1.0
Received: by 10.64.245.233 with HTTP; Mon, 4 Nov 2013 11:57:31 -0800 (PST)
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 04 Nov 2013 11:57:31 -0800
Message-ID: <CA+k3eCTfVqu_KiVeA92kkskmNNUpEaOrd3AEwAL7H8oKGv0_WA@mail.gmail.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: [OAUTH-WG] issuer (was draft-ietf-oauth-saml2-bearer-17)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2013 20:04:43 -0000
On Sat, Nov 2, 2013 at 2:07 AM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote: > Section 3: > > Item #1: You wrote: "Issuer > values SHOULD be compared using the Simple String Comparison > method defined in Section 6.2.1 of RFC 3986 [RFC3986], unless > otherwise specified by the application." > > I would put a MUST here. You can also use the text I proposed for > draft-ietf-oauth-jwt-bearer-06, which is text I copied from the TLS > specification. > > Also the comment regarding the comparison operation I made in > draft-ietf-oauth-jwt-bearer-06 is applicable here. Likewise my comments and response to your comments on draft-ietf-oauth-jwt-bearer-06 are applicable here [1]. But I'm not sure which text you are referring to from the TLS specification? Maybe I overlooked something. [1] http://www.ietf.org/mail-archive/web/oauth/current/msg12249.html
- [OAUTH-WG] issuer (was draft-ietf-oauth-saml2-bea… Brian Campbell