Re: [OAUTH-WG] sites with wildcard

Yaron Goland <yarong@microsoft.com> Mon, 10 May 2010 23:52 UTC

Return-Path: <yarong@microsoft.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B39373A6C88 for <oauth@core3.amsl.com>; Mon, 10 May 2010 16:52:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.923
X-Spam-Level:
X-Spam-Status: No, score=-9.923 tagged_above=-999 required=5 tests=[AWL=0.676, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j8Gl+Ci+T1PM for <oauth@core3.amsl.com>; Mon, 10 May 2010 16:52:20 -0700 (PDT)
Received: from smtp.microsoft.com (mailc.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id 074CE3A67AD for <oauth@ietf.org>; Mon, 10 May 2010 16:52:20 -0700 (PDT)
Received: from TK5EX14CASC131.redmond.corp.microsoft.com (157.54.52.38) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 10 May 2010 16:52:09 -0700
Received: from TK5EX14MBXC117.redmond.corp.microsoft.com ([169.254.8.11]) by TK5EX14CASC131.redmond.corp.microsoft.com ([157.54.52.38]) with mapi; Mon, 10 May 2010 16:52:09 -0700
From: Yaron Goland <yarong@microsoft.com>
To: Brian Eaton <beaton@google.com>, "Manger, James H" <James.H.Manger@team.telstra.com>
Thread-Topic: [OAUTH-WG] sites with wildcard
Thread-Index: AQHK8JcGO/EckACqnUaErT7DgXKBwpJLVmcg
Date: Mon, 10 May 2010 23:52:08 +0000
Message-ID: <7C01E631FF4B654FA1E783F1C0265F8C4A426C97@TK5EX14MBXC117.redmond.corp.microsoft.com>
References: <255B9BB34FB7D647A506DC292726F6E11263284E5B@WSMSG3153V.srv.dir.telstra.com> <AANLkTinfJpna8LS19XK_0sg3f8WR0qKw9QTAgw1VaHJ4@mail.gmail.com>
In-Reply-To: <AANLkTinfJpna8LS19XK_0sg3f8WR0qKw9QTAgw1VaHJ4@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "OAuth WG (oauth@ietf.org)" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] sites with wildcard
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 May 2010 23:52:20 -0000

+1

> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf
> Of Brian Eaton
> Sent: Monday, May 10, 2010 4:11 PM
> To: Manger, James H
> Cc: OAuth WG (oauth@ietf.org)
> Subject: Re: [OAUTH-WG] sites with wildcard
> 
> On Mon, May 10, 2010 at 7:32 AM, Manger, James H
> <James.H.Manger@team.telstra.com> wrote:
> > HTTP Digest uses (A) [A. List of URI prefixes]. (A) is a pretty good
> > match to how Google uses scope values.
> 
> It's not, actually.  Our scopes are sometimes URI prefixes, and sometimes are
> not.  The reality is complicated, and to be honest is poorly documented.
> We're working on it.
> 
> As I've said in a few other e-mail threads, I think it would be a serious mistake
> to publish a standard that doesn't reflect things that are already deployed in
> the wild and are well-understood.
> 
> If people want to see systems that automatically determines scopes and
> reuses tokens, I think they should go and build those systems.  Then come
> back to the community with explanations of what they did, and why other
> people should adopt it.
> 
> Cheers,
> Brian
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth