MIME-Version: 1.0
References: 
 <172945826659.1831908.3127349618974218415@dt-datatracker-78dc5ccf94-w8wgc>
In-Reply-To: 
 <172945826659.1831908.3127349618974218415@dt-datatracker-78dc5ccf94-w8wgc>
From: Aaron Parecki <aaron@parecki.com>
Date: Sun, 20 Oct 2024 16:32:09 -0500
Message-ID: 
 <CAGBSGjoTjrnRFpwvbo0pB5sNBbWsBzZyosMpF5g4BmwoC-o1+g@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="00000000000068765b0624ef4540"
Message-ID-Hash: WNPBXASQ7DXIJVGDJ6JDWM2JNA2G43PA
Precedence: list
Subject: =?utf-8?q?=5BOAUTH-WG=5D_Re=3A_I-D_Action=3A_draft-ietf-oauth-browser-based-?=
	=?utf-8?q?apps-19=2Etxt?=
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/oauth/pTzw3cT83Dxr1rNv1M8LAmAyAWs>

--00000000000068765b0624ef4540
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

While we wait for the shepherd writeup, I noticed this draft was going to
expire before IETF 121. This version just updates references in the doc.

Aaron

On Sun, Oct 20, 2024 at 4:06=E2=80=AFPM <internet-drafts@ietf.org> wrote:

> Internet-Draft draft-ietf-oauth-browser-based-apps-19.txt is now
> available. It
> is a work item of the Web Authorization Protocol (OAUTH) WG of the IETF.
>
>    Title:   OAuth 2.0 for Browser-Based Applications
>    Authors: Aaron Parecki
>             David Waite
>             Philippe De Ryck
>    Name:    draft-ietf-oauth-browser-based-apps-19.txt
>    Pages:   62
>    Dates:   2024-10-20
>
> Abstract:
>
>    This specification details the threats, attack consequences, security
>    considerations and best practices that must be taken into account
>    when developing browser-based applications that use OAuth 2.0.
>
> Discussion Venues
>
>    This note is to be removed before publishing as an RFC.
>
>    Discussion of this document takes place on the Web Authorization
>    Protocol Working Group mailing list (oauth@ietf.org), which is
>    archived at https://mailarchive.ietf.org/arch/browse/oauth/.
>
>    Source for this draft and an issue tracker can be found at
>    https://github.com/oauth-wg/oauth-browser-based-apps.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-browser-based-apps/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-oauth-browser-based-apps-19.ht=
ml
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-oauth-browser-base=
d-apps-19
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> OAuth mailing list -- oauth@ietf.org
> To unsubscribe send an email to oauth-leave@ietf.org
>

--00000000000068765b0624ef4540
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">While we wait for the shepherd writeup, I noticed this dra=
ft was going to expire before IETF 121. This version just updates reference=
s in the doc.<div><br></div><div>Aaron</div></div><br><div class=3D"gmail_q=
uote"><div dir=3D"ltr" class=3D"gmail_attr">On Sun, Oct 20, 2024 at 4:06=E2=
=80=AFPM &lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">=
internet-drafts@ietf.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex">Internet-Draft draft-ietf-oauth-browser-based-apps-=
19.txt is now available. It<br>
is a work item of the Web Authorization Protocol (OAUTH) WG of the IETF.<br=
>
<br>
=C2=A0 =C2=A0Title:=C2=A0 =C2=A0OAuth 2.0 for Browser-Based Applications<br=
>
=C2=A0 =C2=A0Authors: Aaron Parecki<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 David Waite<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Philippe De Ryck<br>
=C2=A0 =C2=A0Name:=C2=A0 =C2=A0 draft-ietf-oauth-browser-based-apps-19.txt<=
br>
=C2=A0 =C2=A0Pages:=C2=A0 =C2=A062<br>
=C2=A0 =C2=A0Dates:=C2=A0 =C2=A02024-10-20<br>
<br>
Abstract:<br>
<br>
=C2=A0 =C2=A0This specification details the threats, attack consequences, s=
ecurity<br>
=C2=A0 =C2=A0considerations and best practices that must be taken into acco=
unt<br>
=C2=A0 =C2=A0when developing browser-based applications that use OAuth 2.0.=
<br>
<br>
Discussion Venues<br>
<br>
=C2=A0 =C2=A0This note is to be removed before publishing as an RFC.<br>
<br>
=C2=A0 =C2=A0Discussion of this document takes place on the Web Authorizati=
on<br>
=C2=A0 =C2=A0Protocol Working Group mailing list (<a href=3D"mailto:oauth@i=
etf.org" target=3D"_blank">oauth@ietf.org</a>), which is<br>
=C2=A0 =C2=A0archived at <a href=3D"https://mailarchive.ietf.org/arch/brows=
e/oauth/" rel=3D"noreferrer" target=3D"_blank">https://mailarchive.ietf.org=
/arch/browse/oauth/</a>.<br>
<br>
=C2=A0 =C2=A0Source for this draft and an issue tracker can be found at<br>
=C2=A0 =C2=A0<a href=3D"https://github.com/oauth-wg/oauth-browser-based-app=
s" rel=3D"noreferrer" target=3D"_blank">https://github.com/oauth-wg/oauth-b=
rowser-based-apps</a>.<br>
<br>
The IETF datatracker status page for this Internet-Draft is:<br>
<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-browser-based-=
apps/" rel=3D"noreferrer" target=3D"_blank">https://datatracker.ietf.org/do=
c/draft-ietf-oauth-browser-based-apps/</a><br>
<br>
There is also an HTML version available at:<br>
<a href=3D"https://www.ietf.org/archive/id/draft-ietf-oauth-browser-based-a=
pps-19.html" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/arch=
ive/id/draft-ietf-oauth-browser-based-apps-19.html</a><br>
<br>
A diff from the previous version is available at:<br>
<a href=3D"https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-oauth-bro=
wser-based-apps-19" rel=3D"noreferrer" target=3D"_blank">https://author-too=
ls.ietf.org/iddiff?url2=3Ddraft-ietf-oauth-browser-based-apps-19</a><br>
<br>
Internet-Drafts are also available by rsync at:<br>
rsync.ietf.org::internet-drafts<br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list -- <a href=3D"mailto:oauth@ietf.org" target=3D"_blank">o=
auth@ietf.org</a><br>
To unsubscribe send an email to <a href=3D"mailto:oauth-leave@ietf.org" tar=
get=3D"_blank">oauth-leave@ietf.org</a><br>
</blockquote></div>

--00000000000068765b0624ef4540--