Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

[Christer Holmberg <[e-mail]>]

Hi,

>>>>> I was trying to figure out exactly this. I was trying to see why Christer says that OAuth should not cover requests 
>>>>> other then registration. That seemed strange to me.
>>>> 
>>>> I apologize for being unclear. You can for sure use it for non-registration requests.
>>>> 
>>>> What I meant was that nobody has ever asked for it, so I questioned whether it needs to be added to the draft at this point.
>>> 
>>> To break the trend, I ask for it.
>> 
>> It would have been nice if you had asked for it years ago when the work started, but better late than never :)n
>I apologize for not spending time on this earlier. Life got in the way :-)
  
I know, and I apologize if I sounded rude. It's just this generic frustration that it takes so long to get anything done in IETF, but it's of course not your fault - this has taken too long no matter what :)

>> Anyway, I don't want to spend time arguing whether it should be included: if people want it, let's include it.
>I don’t see any reason to use one auth scheme for a specific sip method. What was the thinking behind that?

People requested a solution for doing SIP registration using OAuth, so we documented that.

Regards,

Christer