[Secdispatch] ALFA 2.0 WG for IETF 121

[David Brossard <[e-mail]>]

Hi Daniel, Rifaat, and Paul,

With IETF 120 in the back, I wanted to circle back and talk about next
steps. After the lightning talk, a few folks came up to me to talk about
their needs for an authorization policy language. In OAuth, there is also a
need but the consensus was that the language should live outside OAuth and
OAuth would just be a consumer of it. Other WGs e.g. WIMSE, SCIM, ACE of
course, and perhaps SPICE.

I am thinking therefore that ALFA 2.0 would belong to the Security Area
(SEC) which is why I am reaching out. @Rifaat Shekh-Yusef
<[e-mail]>, given you were in the OAuth sessions, what
do you think? What are the next steps to create a WG? Does it make sense to
attend IETF 121 and if so what would the expectations be?

The current stub of a draft is here: https://datatracker.ietf
.org/doc/draft-brossard-alfa-authz/ . I have also CCed my two co-authors,
Andy Clymer from Rock Solid Knowledge (UK) and Theo Dimitrakos (IFIPTM, UK
and Huawei, Germany) who should be able to attend IETF 121 in Dublin.

Thanks for your insights,
David.