Return-Path: X-Original-To: oauth@ietfa.amsl.com Delivered-To: oauth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 780A51ACE48 for ; Tue, 24 Nov 2015 19:11:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uf81lD-7bo1j for ; Tue, 24 Nov 2015 19:11:01 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0798.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::798]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7762E1ACE47 for ; Tue, 24 Nov 2015 19:11:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=kutTGE7A2uSW8uoWO9iMS3RNLNuoRqcp0yGXVnylsE4=; b=SIE8bOzf09CRc0ODVB5fJVV6SRXT5/CaXRsKwu5jVUxCYFe9n++WDmT5VZo78pQMdxygiFMlPGqYK0807T7ZZYeo8faAfBbJvSB9s9rfyPQoAZzQ/QSd6PTE3LQckzlHdbzj/aSU6A/Y6rJGqBJWWq1Ati08oM9CZo7ddvoZn0I= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.331.20; Wed, 25 Nov 2015 03:10:42 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0331.023; Wed, 25 Nov 2015 03:10:42 +0000 From: Mike Jones To: Kathleen Moriarty Thread-Topic: [OAUTH-WG] AD review of draft-ietf-oauth-proof-of-possession Thread-Index: AQHRJt++kWDp0FqlfEmPEzc+Ih7voJ6r6UxQgAAee4CAAAb2QA== Date: Wed, 25 Nov 2015 03:10:42 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.85.157] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:Srfe3TQpVnm0EHaMOh2bpH/dGEaXuzMYXEFk0jKKco83z3WHvFjyIgwqYFPf7vW52/Sl4V+U3d3yjO46lO/mH6PKkeJpeQSf9Ss8LHGSL82593yidEzva2pVZLyl0bmzHBxsysCu8owsVNTAFgjR0Q==; 24:yuO/7ad7xZJEhUdi1fSCcgYQM6YAedlRCFdtxHAKr3Vq5ixC3OeTCzAJk/2wif2WUi7tNsoLfYQkY5knRFQm8r2MEwP4VM9gTEL7NLAyohw= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 0771670921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(51914003)(199003)(24454002)(189002)(13464003)(377454003)(43784003)(164054003)(5002640100001)(6116002)(3846002)(102836003)(230783001)(586003)(87936001)(99286002)(122556002)(105586002)(74316001)(5003600100002)(50986999)(40100003)(106116001)(76176999)(106356001)(5007970100001)(11100500001)(86612001)(54356999)(86362001)(8990500004)(33656002)(10090500001)(10400500002)(10290500002)(5005710100001)(5004730100002)(189998001)(66066001)(77096005)(5001920100001)(5001960100002)(2900100001)(81156007)(5008740100001)(110136002)(15975445007)(76576001)(92566002)(97736004)(19580405001)(101416001)(19580395003)(2950100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Nov 2015 03:10:42.2020 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] AD review of draft-ietf-oauth-proof-of-possession X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Nov 2015 03:11:05 -0000 RmFpciBxdWVzdGlvbiBhYm91dCB0aGUgdXNlIG9mICJ0eXBpY2FsbHkiLiAgVGhlIHJlYXNvbiBp dCdzIHRoZXJlIGlzIHRoYXQgdGhpcyBsYW5ndWFnZSBpbiBKV1QgW1JGQyA3NTE5XSBTZWN0aW9u IDQgZG9lcyBwZXJtaXQgYXBwbGljYXRpb25zIHRvIHJlcXVpcmUgdGhhdCBKV1RzIHdpdGggbm90 LXVuZGVyc3Rvb2QgY2xhaW1zIGJlIHJlamVjdGVkLCByYXRoZXIgdGhhbiBpZ25vcmVkLCBldmVu IHRob3VnaCB0aGF0J3Mgbm90IHRoZSBkZWZhdWx0IGJlaGF2aW9yOg0KDQogICBUaGUgc2V0IG9m IGNsYWltcyB0aGF0IGEgSldUIG11c3QgY29udGFpbiB0byBiZSBjb25zaWRlcmVkIHZhbGlkIGlz DQogICBjb250ZXh0IGRlcGVuZGVudCBhbmQgaXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBz cGVjaWZpY2F0aW9uLg0KICAgU3BlY2lmaWMgYXBwbGljYXRpb25zIG9mIEpXVHMgd2lsbCByZXF1 aXJlIGltcGxlbWVudGF0aW9ucyB0bw0KICAgdW5kZXJzdGFuZCBhbmQgcHJvY2VzcyBzb21lIGNs YWltcyBpbiBwYXJ0aWN1bGFyIHdheXMuICBIb3dldmVyLCBpbg0KICAgdGhlIGFic2VuY2Ugb2Yg c3VjaCByZXF1aXJlbWVudHMsIGFsbCBjbGFpbXMgdGhhdCBhcmUgbm90IHVuZGVyc3Rvb2QNCiAg IGJ5IGltcGxlbWVudGF0aW9ucyBNVVNUIGJlIGlnbm9yZWQuDQoNClNvIHdoZW4gbm90IHVuZGVy c3Rvb2QsICJjbmYiIHdvdWxkIHR5cGljYWxseSBiZSBpZ25vcmVkLCBidXQgbWlnaHQgbm90IGJl Lg0KDQoJCQkJLS0gTWlrZQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogS2F0 aGxlZW4gTW9yaWFydHkgW21haWx0bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbV0g DQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAyNCwgMjAxNSA2OjQxIFBNDQpUbzogTWlrZSBKb25l cyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KQ2M6IG9hdXRoQGlldGYub3JnDQpTdWJq ZWN0OiBSZTogW09BVVRILVdHXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1vYXV0aC1wcm9vZi1v Zi1wb3NzZXNzaW9uDQoNCkhpIE1pa2UsDQoNClRoYW5rcyBmb3IgdGhlIHF1aWNrIHR1cm4tYXJv dW5kLiAgSnVzdCBvbmUgbW9yZSBjb21tZW50IG9uIG15IGNvbW1lbnRzLg0KDQpPbiBUdWUsIE5v diAyNCwgMjAxNSBhdCA5OjEwIFBNLCBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb20+IHdyb3RlOg0KPiBUaGFua3MgZm9yIHlvdXIgcmV2aWV3IGNvbW1lbnRzLCBLYXRobGVl bi4gIFJlc3BvbnNlcyBhcmUgaW5saW5lIGJlbG93Li4uDQo+DQo+PiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPj4gRnJvbTogT0F1dGggW21haWx0bzpvYXV0aC1ib3VuY2VzQGlldGYub3Jn XSBPbiBCZWhhbGYgT2YgS2F0aGxlZW4gDQo+PiBNb3JpYXJ0eQ0KPj4gU2VudDogVHVlc2RheSwg Tm92ZW1iZXIgMjQsIDIwMTUgOTo0NCBBTQ0KPj4gVG86IG9hdXRoQGlldGYub3JnDQo+PiBTdWJq ZWN0OiBbT0FVVEgtV0ddIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLW9hdXRoLXByb29mLW9mLXBv c3Nlc3Npb24NCj4+DQo+PiBIaSwNCj4+DQo+PiBUaGFuayB5b3UgYWxsIGZvciB5b3VyIHdvcmsg b24gdGhpcyBkcmFmdCEgIEkganVzdCBoYXZlIGEgZmV3IHF1ZXN0aW9uczoNCj4+DQo+PiAxLiBT ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uIHNheXM6DQo+Pg0KPj4gIkFsbCBvZiB0aGUg bm9ybWFsIHNlY3VyaXR5IGlzc3VlcywgZXNwZWNpYWxseSBpbiByZWxhdGlvbnNoaXAgdG8NCj4+ ICAgIGNvbXBhcmluZyBVUklzIGFuZCBkZWFsaW5nIHdpdGggdW5yZWNvZ25pemVkIHZhbHVlcywg dGhhdCBhcmUNCj4+ICAgIGRpc2N1c3NlZCBpbiBKV1QgW0pXVF0gYWxzbyBhcHBseSBoZXJlLiIN Cj4+DQo+PiBJIGZpbmQgdGhhdCB0byBiZSBvZGQgcGhyYXNpbmcgdGhhdCB3b3VsZCBsaWtlbHkg YmUgcGlja2VkIHVwIGluIA0KPj4gc3Vic2VxdWVudCByZXZpZXdzLiAgUGxlYXNlIHJlbW92ZSB0 aGUgd29yZCAibm9ybWFsIiBzbyB0aGF0IGFsbCBvZiANCj4+IHRoZSBzZWN1cml0eSBpc3N1ZXMg ZGlzY3Vzc2VzIGluIEpXVCBhcmUgaW5jbHVkZWQuICBBcmUgdGhlcmUgb3RoZXIgDQo+PiAnbm9y bWFsIGNvbnNpZGVyYXRpb25zIGluIGFkZGl0aW9uIHRvIHRob3NlIGluIEpXVCB0aGF0IG5lZWQg dG8gYmUgDQo+PiBsaXN0ZWQ/ICBUaGUgcGhyYXNpbmcgcmVhZHMgYXMgaWYgdGhhdCBtYXkgdGhl IGNhc2UgYW5kIHdvdWxkIGJlIA0KPj4gYmV0dGVyIHRvIGluY2x1ZGUgdGhlbSBhbGwgb3IgcG9p bnRlcnMgb3IgY2hhbmdlIHRoZSBwaHJhc2luZy4NCj4NCj4gWW91J3JlIHJpZ2h0LiAgSSByZW1v dmVkIHRoaXMgYXdrd2FyZCB3b3JkaW5nLg0KPg0KPj4gMi4gQWxzbyBpbiB0aGUgc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMgc2VjdGlvbiwNCj4+DQo+PiAgICAiQSByZWNpcGllbnQgbWF5IG5vdCB1 bmRlcnN0YW5kIHRoZSBuZXdseSBpbnRyb2R1Y2VkICJjbmYiIGNsYWltIGFuZA0KPj4gICAgbWF5 IGNvbnNlcXVlbnRseSB0cmVhdCBpdCBhcyBhIGJlYXJlciB0b2tlbi4iDQo+Pg0KPj4gV2hhdCBp cyB0aGUgcHJvcGVyIGhhbmRsaW5nIHJlcXVpcmVtZW50IHdoZW4gYW4gdW5rbm93biBjbGFpbSBp cyANCj4+IHByZXNlbnQ/ICBTZWN0aW9uIDMuMSBzYXlzOg0KPj4gICAiV2hlbiBhIHJlY2lwaWVu dCByZWNlaXZlcyBhICJjbmYiIGNsYWltIHdpdGggYQ0KPj4gICAgbWVtYmVyIHRoYXQgaXQgZG9l cyBub3QgdW5kZXJzdGFuZCwgaXQgTVVTVCBpZ25vcmUgdGhhdCBtZW1iZXIuIg0KPj4NCj4+IElz IHRoaXMgd2h5IGl0IGlzIHRyZWF0ZWQgYXMgYSBiZWFyZXIgdG9rZW4gcmF0aGVyIHRoYW4gYmVp bmcgDQo+PiByZWplY3RlZD8gIElzIHRoaXMgcmVhbGx5IHRoZSBhY3Rpb24geW91IHdhbnQgdG8g c2VlIHdpdGggY25mPyAgV2h5IA0KPj4gaXNuJ3QgdGhlcmUgYW4gZXJyb3IgYW5kIGEgcmVzZW5k IGFzIGEgYmVhcmVyIHRva2VuIHNvIHRoYXQgcGFydGllcyANCj4+IHVuZGVyc3RhbmQgKG9yIGhh dmUgYW4gb3Bwb3J0dW5pdHkgdG8gdW5kZXJzdGFuZCkgdGhhdCB0aGVyZSB3ZXJlIGlzc3Vlcz8N Cj4+DQo+PiBUaGVuIHRoZSBmb2xsb3dpbmcgdGV4dCBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbiBz YXlzOg0KPj4gICAiV2hpbGUgdGhpcyBpcyBhDQo+PiAgICBsZWdpdGltYXRlIGNvbmNlcm4sIGl0 IGlzIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNhdGlvbiwNCj4+ICAgIHNpbmNl IGRlbW9uc3RyYXRpb24gdGhlIHBvc3Nlc3Npb24gb2YgdGhlIGtleSBhc3NvY2lhdGVkIHdpdGgg dGhlDQo+PiAgICAiY25mIiBjbGFpbSBpcyBub3QgY292ZXJlZCBieSB0aGlzIHNwZWNpZmljYXRp b24uIEZvciBtb3JlIA0KPj4gZGV0YWlscywNCj4+DQo+PiBIb3cgaXMgdGhpcyBvdXRzaWRlIG9m IHRoZSBzY29wZSBvZiB0aGlzIGRyYWZ0PyAgY25mIGlzIGRlZmluZWQgaW4gDQo+PiB0aGlzIGRy YWZ0LCBzbyBoYW5kbGluZyBzaG91bGQgYmUgY292ZXJlZCBpbiB0aGlzIGRyYWZ0LiAgQSBwb2lu dGVyIA0KPj4gdG8gdGhlIFBPUCBhcmNoaXRlY3R1cmUgZHJhZnQgaXMgbm90IGhlbHBmdWwgYXMg aXQgaXMgbm90IGRlZmluZWQgDQo+PiB0aGVyZSwgaXQncyBjb3ZlcmVkIGludCBoaXMgZHJhZnQu ICBTaG91bGQgdGhpcyB0ZXh0IGp1c3QgYmUgcmVtb3ZlZCANCj4+IGFuZCByZXBsYWNlZCB3aXRo IG1vcmUgZXhwbGljaXQgaGFuZGxpbmcgaW5mb3JtYXRpb24gaW50IGhlIGJvZHkgb2YgdGhpcyBk cmFmdD8NCj4NCj4gR29vZCBjYXRjaC4gIEpXVCBbUkZDIDc1MTldIFNlY3Rpb24gNCBzYXlzIHRo YXQgY2xhaW1zIHRoYXQgYXJlIG5vdCB1bmRlcnN0b29kIG11c3QgYmUgaWdub3JlZCB1bmxlc3Mg b3RoZXJ3aXNlIHNwZWNpZmllZCBieSB0aGUgYXBwbGljYXRpb24uICBUaGlzIGFsbG93cyBuZXcg Y2xhaW1zIHRvIGJlIGR5bmFtaWNhbGx5IGFkZGVkIHdpdGhvdXQgYnJlYWtpbmcgZXhpc3Rpbmcg YXBwbGljYXRpb25zLiAgRm9yIHRoZSBzYW1lIHJlYXNvbiwgSSBoYXZlIGluY29ycG9yYXRlZCB0 aGlzIGxhbmd1YWdlIGFib3V0IHVuZGVyc3RhbmRpbmcgY2xhaW1zIGZyb20gNzUxOSwgYnV0IGhh dmluZyBpdCBiZSBhYm91dCB1bmRlcnN0YW5kaW5nIGNvbmZpcm1hdGlvbiBtZW1iZXJzLiAgVWx0 aW1hdGVseSwgd2hhdCBmZWF0dXJlcyBtdXN0IGJlIGltcGxlbWVudGVkIGFyZSBhbHdheXMgdXAg dG8gdGhlIGFwcGxpY2F0aW9uLCBqdXN0IGFzIHdpdGggSldUIGNsYWltcy4NCg0KVGhlIG5ldyB0 ZXh0IGluIFNlY3Rpb24gMy4xIGxvb2tzIGdvb2QuICBJJ20gbm90IHN1cmUgd2h5IHRoZSB3b3Jk ICJ0eXBpY2FsbHkiIGFwcGVhcnMgaW50IGhlIG5ldyB0ZXh0IG9mIHRoZSBzZWN1cml0eSBjb25z aWRlcmF0aW9ucyBzZWN0aW9uIHRob3VnaCBhZnRlciByZWFkaW5nIHRoZSBuZXcgdGV4dCBpbiAz LjEuICBXb3VsZG4ndCBpdCBqdXN0IGJlIGlnbm9yZWQgc2luY2UgMy4xIG5vdyBzYXlzOg0KDQog ICAiSG93ZXZlciwgaW4gdGhlIGFic2VuY2Ugb2Ygc3VjaCByZXF1aXJlbWVudHMsDQogICAgYWxs IGNvbmZpcm1hdGlvbiBtZW1iZXJzIHRoYXQgYXJlIG5vdCB1bmRlcnN0b29kIGJ5IGltcGxlbWVu dGF0aW9ucw0KICAgIE1VU1QgYmUgaWdub3JlZC4iDQoNClRoYW5rcywNCkthdGhsZWVuDQoNCg0K Pg0KPj4gVGhhbmtzIQ0KPj4NCj4+IC0tDQo+Pg0KPj4gQmVzdCByZWdhcmRzLA0KPj4gS2F0aGxl ZW4NCj4+DQo+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPj4gT0F1dGggbWFpbGluZyBsaXN0DQo+PiBPQXV0aEBpZXRmLm9yZw0KPj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vYXV0aA0KPg0KPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFRoYW5rcyBhZ2FpbiwNCj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAtLSBNaWtlDQo+DQoNCg0KDQotLSANCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4N Cg==