Re: [OAUTH-WG] Murray Kucherawy's No Objection on draft-ietf-oauth-jwsreq-33: (with COMMENT)

Mike Jones <Michael.Jones@microsoft.com> Thu, 08 April 2021 13:45 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75FE73A1839; Thu, 8 Apr 2021 06:45:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HbVRDPNWBBWN; Thu, 8 Apr 2021 06:45:43 -0700 (PDT)
Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650125.outbound.protection.outlook.com [40.107.65.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E80C43A1838; Thu, 8 Apr 2021 06:45:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=I7+Ibtlo2EuFJp4b431DHMvFh4IK3P3FCPe7C7SeGqXPsovzgobgW7894DPLoWtPIiFg16kO+yDtOOstUMm+P+Ca2YBQOexbqFMVVim8jvq3R+Rxsgto0oRw5LmzVfACZMsZgw3TxraI6jfRXY2wDqgTY0ylFCMXWPEOBjLrNddK3z/565rd4DRoOQjc+zblXb6/U+YNachW0ivrlUf77TyFZHnbQSHDVxzwynhYP9KzfqPuIFzLgAHKocDllDDeoXvA+aau/WMh0DO41ZPm0oKvpoX5OyXMq/ALcN+sCTvZ79tQpoZbQMwQE0+iNRlWpon+UIPwJN6RJpJ+mY2+9Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QmiZmVsI+EegafOYWp7MZkX8fIWAclxC5gWw5aZhYsE=; b=V8v5DIucE24bHNTRoqpXYnbyea3BrAJtfQhwdfQwYnY6JgM3LHMsBWsPxGHs8PrZvLQRwysVwnRF5YdB2VRsRKHd1lu+m/YwH3qiZ5BS8GJRR2j8ugHOJkvbSIhv4Ow5KbbpMzA7U2y9AyNcYCXs4q8c36yrxs8NNnwokztvwtetmLZkyxaZNPDN09UAWE7/q0dH2DH71KmZlt1WrRHACTJXCoi0E2keXF0amMgcSNqoOHJz4GoND5rrw9uxfGt7UoKrdG3GN/TYXUYE5dDAD6we+wJvZMs7Lbz9Egq/syaWXr1KnSfc83v7H4uJuLhcyI0Ntl+sL/zeGqkJO/wVJQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QmiZmVsI+EegafOYWp7MZkX8fIWAclxC5gWw5aZhYsE=; b=Kfxim0MldgUDFaUwpHfeg2gSJJJKzdST+axNVmj9m+cKeyFVVQ03ye+XNM+qZS6WnecZj5MdDexgENyGfyfWzxU/f2/on6F5CU3ExqBHpc29lgIaZSq5YIuy336W5WIhKqSpk8pokfnZihwpRjFQEhJWLm2pClJN2JjaaaWtmWg=
Received: from DM5PR00MB0421.namprd00.prod.outlook.com (2603:10b6:4:a0::33) by DM6PR00MB0848.namprd00.prod.outlook.com (2603:10b6:5:1bf::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4058.0; Thu, 8 Apr 2021 13:45:34 +0000
Received: from DM5PR00MB0421.namprd00.prod.outlook.com ([fe80::e553:4e87:8c7e:63d5]) by DM5PR00MB0421.namprd00.prod.outlook.com ([fe80::e553:4e87:8c7e:63d5%7]) with mapi id 15.20.4056.000; Thu, 8 Apr 2021 13:45:34 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "superuser@gmail.com" <superuser@gmail.com>, "iesg@ietf.org" <iesg@ietf.org>
CC: "draft-ietf-oauth-jwsreq@ietf.org" <draft-ietf-oauth-jwsreq@ietf.org>, "oauth-chairs@ietf.org" <oauth-chairs@ietf.org>, "oauth@ietf.org" <oauth@ietf.org>, "Hannes.Tschofenig@gmx.net" <Hannes.Tschofenig@gmx.net>
Thread-Topic: Murray Kucherawy's No Objection on draft-ietf-oauth-jwsreq-33: (with COMMENT)
Thread-Index: AdcsfXHbVuEHxvFASVOnHTGuwDl8pA==
Date: Thu, 8 Apr 2021 13:45:34 +0000
Message-ID: <DM5PR00MB0421B38BC2C7D9516998062DF5749@DM5PR00MB0421.namprd00.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2021-04-08T13:42:45Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=9636321e-049b-45fc-8790-7dd1547eae25; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [2607:fb90:b2d9:b46f:e920:2135:f44b:10a6]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 0499a890-9b4f-4410-2335-08d8fa9495cd
x-ms-traffictypediagnostic: DM6PR00MB0848:
x-microsoft-antispam-prvs: <DM6PR00MB08484A8FCE08F562FCC4BAEFF5749@DM6PR00MB0848.namprd00.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM5PR00MB0421.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(478600001)(6506007)(186003)(66476007)(966005)(316002)(4326008)(66946007)(76116006)(10290500003)(66556008)(86362001)(110136005)(54906003)(66446008)(8990500004)(71200400001)(64756008)(83380400001)(8936002)(52536014)(7696005)(55016002)(9686003)(33656002)(5660300002)(8676002)(38100700001)(2906002)(82950400001)(82960400001)(53546011); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: =?utf-8?B?UDlpT1k5VEI5VUJ4ekgwWjhtVGp5b2hLU2F2eWtIT1J3a2c3ZHd6c2NsK292?= =?utf-8?B?UXZsRTZtU1ZLR1k4VTAxblA5dU16Zkh3YW9GNFRZLzJtdlJKbjM0R1JvVmp4?= =?utf-8?B?T0V4ckljdE54QndIbHBTSVE1aXR2THEycjl5ZVR2TEFKQ01sd1F5dzY1YlJI?= =?utf-8?B?aURldU41L3hWd0lYcWlSdU4reGJDeERVaUM4Zk5iVDl6NGJTbDVrRWFRV0RT?= =?utf-8?B?V1g3SG1IVDIrcC9DZlRTZFBKTmpOY0hSNEdwK2t0SGlRTlpsdGhBU1BNRDg3?= =?utf-8?B?ODFyOVRtRDJEY3lIMC9aRFNmUU1xVk5LMEpwdXBwVnJRd0c3R0NMSk10TjM3?= =?utf-8?B?Z0QzbmN6S2hkMGU0N0J6L2VtamtWM2pwWk1kYmM5MU5FT21xVzQzbUxnVVlQ?= =?utf-8?B?anhUb1F0NmtDSGpGQlAxUlprakFRTXlyYk9YTjdtUWY5OUQybk1KTTB6M0pt?= =?utf-8?B?QjFPNXdBdUJYMndSbDhZNXdmKyt3T2tpaU9NZG1TSEFROURmRG82enI0VDAw?= =?utf-8?B?TDRrSk55ckR1SXpHTWxwd092Vndwa01yN0FWVmtkdTdrdTdZbmpaTG9TdTYy?= =?utf-8?B?akorZ2k1cnk1MmNPbU10b05jQnJWQ0lWdC9HMWhFRnExQlRWZjB1TXVBcWdN?= =?utf-8?B?Zkx4elh4ME1NTjZHTEErTWxEN0pmeXNTektyQ2lsbHVCR1E1Mjl4emd4QURh?= =?utf-8?B?bFFBc1paaW9iWjZ1L2pmTGRHb1NzQm02WUIvNk1LdURpN1ZGOHJaOVk2MFVT?= =?utf-8?B?a1BIRmJ5VGp2YkMzZUFQV0lWNGxrV0daYVBxVitTbnhiaE50RmptNE5BMnZk?= =?utf-8?B?OUZ4VnoxRUFqd3haS1dsRXdEYmtCUmppZ3hKdkJuWHE1dzJ0M3BHc2tnRGJI?= =?utf-8?B?S0cxY0hPYlViT2ZhaTI2c3grQ054bTdvNEQwMjROaHJpVzYrb1owVitvbDFv?= =?utf-8?B?SDZYVzNWS2t4eGFQTjBFN0t1T0o1SjJ6VHUyQzlpREVYTGFiV3RGSVRrbzZh?= =?utf-8?B?aE5rcXhveUJiOWtvbXNNV3EyR1UvOFFTWUhCVmZlMk9acTBOMnRpQmMvQUtj?= =?utf-8?B?RHk5SnVYUExRVjZjbkVldXBUbHhodmh0YnFHOXgvZlRlMzRaNzdTNUFJZGlz?= =?utf-8?B?TTJvOVlCTnl0QjlHYjVhRTVhYkpRZ1U4NDdiUkcxNDdBVG83ME5BazcrZUJn?= =?utf-8?B?enptSWtzYVNpUGRNc3YxSXFSSFBWTzkzeVRHTDVYVm1rT282WXJJcGFELzFD?= =?utf-8?B?QWZjbTI1Q05HODExLy9MeVB5ZFVHMDVQOUdMOEt6eWluQ1lnVWtRb0Nkc3U4?= =?utf-8?B?RktuVkUvdUNDVEsvekVKeWpFSldpNHVLVDNoV0lQdEp0Qi9vdDZidlFvZTdB?= =?utf-8?B?UVAzTVNZeGxXd0JzRFhlRlNRckV4TWtJRkdmTytTRTBxc0FJMkFZblNXK2I3?= =?utf-8?B?TVorYkgvZlRQSjljRjZYRUQvYUZ0Z2xkYnl5TkoxTWlrZlMzNDI0N3pML2FC?= =?utf-8?B?aFdGVlV6WUNCekNULzVlbVY0dHFxeVFRRDRIbzM0SlJETmN1eDUrVlk2Wkti?= =?utf-8?B?QTFvREFSZ3c5eXR3dnRoYmVTTmxWYXZ0Rng4OVo5TDYra0NYV1hXazNBSGVQ?= =?utf-8?B?aUQyaEwvWXZzaEdiRkVIWko3QVNqQVl4bUIwanlNZVVITXJwaElLbXVxUGRB?= =?utf-8?B?L043dDRFQk1rc0hyRFdENHQveVdFaFF5MGJROFFOWkdMVnBsb1NzbzJUai8x?= =?utf-8?B?b3lobzJsbGhtMkp1N0ZzdExlTGlwZU8wUy81djR4WEtwSTJnRGxVWVV5Wngz?= =?utf-8?B?SjF1aVg5bHZkM2ZZYUs5VldnWFVwUFVtcnpwaVJ4V1NYQUUxRW5DNzZqTmVo?= =?utf-8?Q?DB5Nw8qC2HQOG?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM5PR00MB0421.namprd00.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0499a890-9b4f-4410-2335-08d8fa9495cd
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Apr 2021 13:45:34.7798 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 4n2gGOH142HYfv0fr7c8zHNdklbm4N4qXfY1e5LCsmx1kXypbejwnRAWwXkW2eySpdwCn5oQCysQXASDgs7xVA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0848
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ptBgPESB-vwB-aua-yPSZNNBu6w>
Subject: Re: [OAUTH-WG] Murray Kucherawy's No Objection on draft-ietf-oauth-jwsreq-33: (with COMMENT)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Apr 2021 13:45:47 -0000

Thanks for your review, Murray.  My replies are inline, prefixed by "Mike>".

-----Original Message-----
From: Murray Kucherawy via Datatracker <noreply@ietf.org> 
Sent: Wednesday, April 7, 2021 11:43 PM
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-oauth-jwsreq@ietf.org; oauth-chairs@ietf.org; oauth@ietf.org; Hannes.Tschofenig@gmx.net
Subject: Murray Kucherawy's No Objection on draft-ietf-oauth-jwsreq-33: (with COMMENT)

Murray Kucherawy has entered the following ballot position for
draft-ietf-oauth-jwsreq-33: No Objection

When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwsreq/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Ah, jwsreq.  We meet again.  Fortunately, looking only at the diff from my last ballot comments to this one, I only have a couple of minor things this time:

Sections 9.2 and 9.3 each say they are registering "values", but each registers only one.

Mike> Thanks.  I correct this in an updated draft after the telechat.

"+1" to Francesca's points #1 and #5.

Mike> We addressed those points in draft 33 (published last night, my time).

Thanks for changing the media type name to use hyphens instead of dots.  That avoided a big mess.

Mike> You're welcome!

				-- Mike