Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

[Paul Kyzivat <[e-mail]>]

On 7/11/19 9:56 AM, Christer Holmberg wrote:
> Hi,
> 
>>     This discussion is wandering in many directions. I don't know very much
>>     (anything?) about OAuth so it is pretty abstract for me. But what is
>>     becoming clear is that the people discussing this have *many* unstated
>>     assumptions about how this is to work and how it is to be used. And
>>     those don't appear to be well aligned with one another.
>>     
>>     I've been pushing for more of these assumptions (and implications) to be
>>     written down in the document. I still want that. But I'm beginning to
>>     think that the issue is bigger than what is likely to fit into this
>>     document as it is currently conceived.
>>     
>>     I think what may be needed is a framework document. (Perhaps "Framework
>>     for using OAuth(2?) with SIP", though maybe that isn't quite right. This
>>     would discuss why this is important, how it relates to the sip
>>     environment, how it fits into a broader authentication environment, etc.
>    
> Let's try to document and clarify everything we need in this document.
> 
> The draft tries to map the OAuth architecture to the SIP architecture. If something is unclear we should of course clarify it.

Sure, go ahead and try.

You keep answering my questions as replies to this email thread. But 
what is needed is for them to be answered in the document.

	Thanks,
	Paul