IETF Logo Mail Archive

Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

Christer Holmberg <christer.holmberg@ericsson.com> Thu, 11 July 2019 10:40 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10CD412011E for <sipcore@ietfa.amsl.com>; Thu, 11 Jul 2019 03:40:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NqUVEWQ7uyc4 for <sipcore@ietfa.amsl.com>; Thu, 11 Jul 2019 03:40:43 -0700 (PDT)
Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10075.outbound.protection.outlook.com [40.107.1.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DF731200E3 for <sipcore@ietf.org>; Thu, 11 Jul 2019 03:40:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=n7VB9W5yeUWtEA/y/OGCRW7A7hnFmvXKcotd22eMsueSigGbcyyAsE/d6ZQvreMzpkZ6cClhKkYscobOnrg2gEK8m1DkPeVkvS4szJH5WOLQgLwEAwJ0sCI10V5FTMMG9nV5eKTYswiAWbtEa0jGC5sa3geVWTgtdPf9cMrwYS4sMTuyDS/5nBfiv/vX98GS4k0Xk494gK9nVpxgwxf8m3tRSavLbxf4LZarOjyY3ZGQd8wnDeoiSXn5+XLR2b1OIMwrI5LdZINN6m3KC9/+P/H8QMgHt98UicCMHGq8T0xWlOjAQ+28/ISEzpFYnj2tamKFK9PtVEsbSn0lujo+Ow==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v7HYHhx33DiEJVuHpUVJkzgwROpn2/BGgHZP9JgjaZ8=; b=E59+Sgo4LjnAddkW0R2CpUm0nylmuvTruTLLHA+3sNHe+JLrbQGohlumKiEwXzN0H76JLzJ+xQvYIAU41QLuAfTY/rV8B+Lu9Wr02nXI20PANN7eqSyXev8mYeZnmrMi2bQKOA2isZ+pGese84FcYKGPfp2J6Ub5tG0vLJfIOkLNhEUagalR+pVguHB/vLlZvM25Ze6kSPxa5zE7XgXbApYv31oHY31yfAQYeeuqbl0gT9ydvrXHZlTvc+e4s51s5TRLig0DUuUuW1bs7WcPyy10qrvi7rzhsRgR3a9YeRiMnsy1e8GxS69DFHmm2RxdzwmLVamIkx/vhI/4AL+XZA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v7HYHhx33DiEJVuHpUVJkzgwROpn2/BGgHZP9JgjaZ8=; b=qB3T5aI/12s3GkL7+Y3d/qYxWSt2ttiUTXXbruu73vQ7BQEqlPx5C29H8QeMo7YsXzaiJ06lFARsWgIzCvuHp3HvyWmxVd03sC7nA2jJrO/k1gzLaq3xg5YjLddUEhph3S8TxwWC/Yc+CQVWbFH3vh6HNioNwbbEkkJ3pG7qXb8=
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3420.eurprd07.prod.outlook.com (10.170.247.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.8; Thu, 11 Jul 2019 10:40:40 +0000
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5050:a3a9:be80:cf43]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5050:a3a9:be80:cf43%5]) with mapi id 15.20.2073.008; Thu, 11 Jul 2019 10:40:40 +0000
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: "Olle E. Johansson" <oej@edvina.net>
CC: Paul Kyzivat <pkyzivat@alum.mit.edu>, "sipcore@ietf.org" <sipcore@ietf.org>
Thread-Topic: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt
Thread-Index: AQHVNLWxruT/m/C2REGBvr04oIfCDqa/Al8AgAHwRACAACa0QIAAOvWAgACKbgCAAH00gIAARqSA///Z+ACAADMUgP//1TCAgABAXACAATj+gIABDXaAgAA3igD//9RDgAALc6uA
Date: Thu, 11 Jul 2019 10:40:40 +0000
Message-ID: <C3BFE2FE-0797-4E54-BAD4-B24E32CB183F@ericsson.com>
References: <156249821133.14592.1211919336596009446@ietfa.amsl.com> <CAGL6epLsP_UfZMAcFLsORrR05Enu-vp=jnkgUFuKSttQm8swAw@mail.gmail.com> <c8d5c42e-ab21-80e8-3189-c8592dd02d3a@alum.mit.edu> <HE1PR07MB3161C55955B2FCED2C0F6A9993F60@HE1PR07MB3161.eurprd07.prod.outlook.com> <68ed93ae-57df-6bc7-774b-47959417abda@alum.mit.edu> <HE1PR07MB3161D46B4A44FC7E789ADDB893F10@HE1PR07MB3161.eurprd07.prod.outlook.com> <4a9787e5-b5e2-bc08-0fa0-fae6bd44148d@alum.mit.edu> <527F4C39-F065-4335-A939-6D443F1801E7@ericsson.com> <5bb63c0c-130d-7f69-10b0-1ed1b274cc58@alum.mit.edu> <87AD4BB8-CE77-4FD7-BB72-6643DF513058@ericsson.com> <168b1354-b35b-edee-e5f9-d4ddbecfae40@alum.mit.edu> <607A513F-8616-4777-8B5E-59390E845709@ericsson.com> <b6ca4c79-5a17-10da-3882-20bc8b0e9b98@alum.mit.edu> <5ABB2F7B-8928-4581-8AAD-C8EFDBE95F7E@edvina.net> <99649808-9894-42B4-ADD1-52D0F70A3FB3@ericsson.com> <BCFE43BD-86FF-457E-9006-1DA7C8F3F6BE@edvina.net>
In-Reply-To: <BCFE43BD-86FF-457E-9006-1DA7C8F3F6BE@edvina.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1a.0.190609
authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com;
x-originating-ip: [89.166.49.243]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a577eea6-f209-494e-f6d9-08d705ec37fe
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:HE1PR07MB3420;
x-ms-traffictypediagnostic: HE1PR07MB3420:
x-microsoft-antispam-prvs: <HE1PR07MB34202F8F431A020429B9413E93F30@HE1PR07MB3420.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0095BCF226
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(366004)(39860400002)(376002)(396003)(346002)(189003)(199004)(8936002)(81156014)(8676002)(81166006)(4744005)(66556008)(186003)(5660300002)(86362001)(478600001)(71190400001)(71200400001)(66476007)(33656002)(6436002)(6512007)(66446008)(76116006)(36756003)(54906003)(53936002)(58126008)(6246003)(66946007)(25786009)(64756008)(68736007)(2906002)(66066001)(26005)(99286004)(6916009)(44832011)(3846002)(6116002)(76176011)(6506007)(446003)(14454004)(2616005)(486006)(476003)(102836004)(14444005)(11346002)(305945005)(7736002)(316002)(6486002)(229853002)(256004)(4326008); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3420; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: d6mobqu8wW/yLv0rEm+JjYQJSz+wJ9iBCUb7wH4RKpdDS/+aL9uZJ4P0roAyglpcsoGg7sCvZuFajwouxuBBvEByVgXvKxf2kRRTvYBhs1mO/a5/SA8PGgwtlngpXdodD8+mBw470VwIL6mRBBxfQcfxOCHi4EI3loeSmEJ90Ks2Fma78RUXMi9WXOtYlee/X+gDgQBKAQJX4gqUN/bT7dbul2vudk9Af5sI93R/ojQgYpRUdK+tanCabi3yQ35bBr++igsewMAhP6+P0b4uTRwLTDcEvHTOEaiLW6W+7gNjI6gbh7QQgaem2vVs4aZRbmobHucinkwbHtEeLdZQX47UbhV1tvoHPsRGR9ny0NnTaxKOFhi+rSRCAXhhPbjpwqFK/Lgzpqp2ZGk+uHiPriuHeq+Mnol+dm2ANT/vq3E=
Content-Type: text/plain; charset="utf-8"
Content-ID: <07484BEE77FDA04E854BC708F4EC483C@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a577eea6-f209-494e-f6d9-08d705ec37fe
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2019 10:40:40.4032 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: christer.holmberg@ericsson.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3420
Archived-At: <https://mailarchive.ietf.org/arch/msg/sipcore/mMetoaswqEtYdn__qKz-uxiDzwY>
Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Jul 2019 10:40:46 -0000

Hi,

...
 
    >>> The tokens generally, but if I understand it right not always, are JWT structures that contain various data. In 
    >>> OpenID connect both the access and identity token are JWTs.
    >>> We can either specify specific claims that  are standardised for various SIP functions or let that be open for 
    >>> the SIP implementors to specify or a combination. 
    >> 
    >> For backward compatibility, we should at least let SIP implementors specify
    > Maybe, but at least we should write something about the usage of claims and scopes.
    > I think a base level for this draft is specifying a way to say “this access token is valid for SIP usage” or
    >“this is also a SIP identity"

    Perhaps we can add some text about scope and claims, but I don't want to mandate usage of specific values, because that may not be backward compatible with existing implementations using JWT. 

    Regards,

    Christer

v2.23.0 | Report a Bug | By Email