[Txauth] RS/AS communication for multiparty cases

[Fabien Imbault <[e-mail]>]

Hello Denis,

I have been following your comments. I still fail to see the global privacy
preserving architecture you're proposing. It would help to get a more
thorough proposal if you can.

But more specifically, I have a comment on :

"I would have preferred that you meant: the RS and the AS never
communicate directly, which is indeed a nice property to follow
to ensure the user's privacy."

I think that may come as an issue in some cases, especially for
multiparty patterns (like in UMA). Typically we may wish the RS to
start a grant request and use the handle to continue until a token is
generated.

I think those cases, which weren't initially covered by OAuth2, are
very important to cover as well. How would you cover such
requirements?

Fabien