Re: [OAUTH-WG] draft-hardjono-oauth-kerberos-00.txt

Peter Saint-Andre <stpeter@stpeter.im> Wed, 21 July 2010 16:51 UTC

Message-ID: <4C472593.4060901@stpeter.im>
Date: Wed, 21 Jul 2010 10:51:31 -0600
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.11) Gecko/20100711 Thunderbird/3.0.6
MIME-Version: 1.0
To: oauth@ietf.org
References: <DADD7EAD88AB484D8CCC328D40214CCD0179259124@EXPO10.exchange.mit.edu>
In-Reply-To: <DADD7EAD88AB484D8CCC328D40214CCD0179259124@EXPO10.exchange.mit.edu>
OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Subject: Re: [OAUTH-WG] draft-hardjono-oauth-kerberos-00.txt
Precedence: list

Thomas, thanks for writing this draft. I finally got a chance to read it
this morning and it is quite helpful and relevant. Do you plan to update
it at some point in the light of more recent versions of the core draft?

On 6/9/10 1:17 PM, Thomas Hardjono wrote:
> 
> I was prompted to write this draft after the OATH WG meeting at the last
> IETF in March, in which several folks in the room were comparing OAuth with
> Kerberos. Some people also suggested to me that a comparative doc might be
> useful.
> 
> http://www.ietf.org/internet-drafts/draft-hardjono-oauth-kerberos-00.txt
> 
> The hope is that if OAuth 2.0 wanted to use the Needham-Schroeder (Kerberos)
> authentication paradigm, that OAuth could learn from the two decades of
> Kerberos development.
> 
> /thomas/
> 
> 
> __________________________________________
> 
> 
> --- On Wed, 6/9/10, Internet-Drafts@ietf.org <Internet-Drafts@ietf.org>
> wrote:
> 
>> From: Internet-Drafts@ietf.org <Internet-Drafts@ietf.org>
>> Subject: I-D Action:draft-hardjono-oauth-kerberos-00.txt
>> To: i-d-announce@ietf.org
>> Date: Wednesday, June 9, 2010, 12:00 PM
>> A New Internet-Draft is available
>> from the on-line Internet-Drafts directories.
>>
>>     Title       
>>    : OAuth 2.0 support for the Kerberos V5
>> Authentication Protocol
>>     Author(s)   
>>    : T. Hardjono
>>     Filename: draft-hardjono-oauth-kerberos-00.txt
>>     Pages       
>>    : 21
>>     Date         
>>   : 2010-06-09
>>
>> This draft proposes an OAuth2.0 profile for Kerberos
>> v5.  We compare
>> the Kerberos protocol flow with the OAuth protocol flow and
>> as far as
>> possible map the relevant parameters in Kerberos to OAuth
>> parameters.
>> We propose the use of the OAuth 2.0 message flows and its
>> tokens to
>> carry Kerberos TGTs and Service Tickets in an opaque
>> manner.
>>
>> A URL for this Internet-Draft is:
>> http://www.ietf.org/internet-drafts/draft-hardjono-oauth-kerberos-00.txt
>>
>> Internet-Drafts are also available by anonymous FTP at:
>> ftp://ftp.ietf.org/internet-drafts/
>>
>> Below is the data which will enable a MIME compliant mail
>> reader
>> implementation to automatically retrieve the ASCII version
>> of the
>> Internet-Draft.
>>
>> -----Inline Attachment Follows-----
>>

[OAUTH-WG] draft-hardjono-oauth-kerberos-00.txt Thomas Hardjono
Re: [OAUTH-WG] draft-hardjono-oauth-kerberos-00.t… Peter Saint-Andre