[Unbearable] Additional review comment about draft-ietf-tokbind-protocol-13
Mike Jones <Michael.Jones@microsoft.com> Thu, 16 March 2017 04:48 UTC
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: unbearable@ietfa.amsl.com
Delivered-To: unbearable@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B06FC120025 for <unbearable@ietfa.amsl.com>; Wed, 15 Mar 2017 21:48:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.797
X-Spam-Level:
X-Spam-Status: No, score=-4.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.796, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q8K64bkIEqRl for <unbearable@ietfa.amsl.com>; Wed, 15 Mar 2017 21:48:13 -0700 (PDT)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0112.outbound.protection.outlook.com [104.47.40.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D91C412002E for <unbearable@ietf.org>; Wed, 15 Mar 2017 21:48:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qaldtoqn8mmD2hIk6zcDmqHXICkuKB9nhbnwDN5Wk1o=; b=H0J8vdvp2GqJnijb10GtWq1dHtNi1wUXWk6f+o+ukr1mkeTCj//HIj1jhUD5waSJDf6rUZCH0fa9Uw08n3wrDS21IEnkxSqqAS/FgAk1pV353UPzLo416LG8kYXstb3RSsOLFfzurvWwoWKA1pg1qKpzgKG/Y0qbtm+w5ad8RnM=
Received: from CY4PR21MB0504.namprd21.prod.outlook.com (10.172.122.14) by CY4PR21MB0501.namprd21.prod.outlook.com (10.172.122.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.991.0; Thu, 16 Mar 2017 04:48:12 +0000
Received: from CY4PR21MB0504.namprd21.prod.outlook.com ([10.172.122.14]) by CY4PR21MB0504.namprd21.prod.outlook.com ([10.172.122.14]) with mapi id 15.01.0991.003; Thu, 16 Mar 2017 04:48:11 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "unbearable@ietf.org" <unbearable@ietf.org>
Thread-Topic: Additional review comment about draft-ietf-tokbind-protocol-13
Thread-Index: AdKeEFjNetdfVWi3SZqKrpUDyr1eTg==
Date: Thu, 16 Mar 2017 04:48:11 +0000
Message-ID: <CY4PR21MB0504D7DAC725BA3E37A0E944F5260@CY4PR21MB0504.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [50.47.93.167]
x-microsoft-exchange-diagnostics: 1; CY4PR21MB0501; 7:aY7NLSvwhyu+uFAf1kMKd6T/2WDdTCIuu9rf/qIz/WhT3KVK1NTAK1uqy0WP08DuUaxxnJ9VZXP9SYAkt/zxu88mKiHWby25+c7FuYyuXesODzUut+IziMOpdRn2XCrsShYNFqLnGmK1+672mZMFJyGzOjUa8CqSciw4Ozrs17UNYM1NIBmHqQ/nmklxqob7sGkBbuOcV+PmbhFELqm5A7E/Dy1mvXjz9goQfzVqh9sa+gZZKLrnRUiN98SsBIEvwWrslw2Kvf+UmnVMlJzwl1tODQ0b8ROBraNANnJHAIF5RShANbRCSQRHkHMPlQQvIBLUsHgd09sWwHEIfEX/+dSPb43nBaXadah+XkqmJXg=
x-ms-office365-filtering-correlation-id: 40f15a03-ad1a-45f0-5c0f-08d46c27a682
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254030)(48565401081); SRVR:CY4PR21MB0501;
x-microsoft-antispam-prvs: <CY4PR21MB05019D299E37AC071C7EF9BFF5260@CY4PR21MB0501.namprd21.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(8121501046)(5005006)(93006012)(93001012)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041248)(20161123562025)(20161123558025)(20161123555025)(20161123564025)(20161123560025)(6072148); SRVR:CY4PR21MB0501; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0501;
x-forefront-prvs: 024847EE92
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39410400002)(39850400002)(39860400002)(39840400002)(39450400003)(66066001)(99286003)(3280700002)(6916009)(9686003)(2351001)(230783001)(86612001)(81166006)(50986999)(55016002)(110136004)(25786008)(6116002)(1730700003)(102836003)(6436002)(790700001)(53936002)(2906002)(6506006)(5640700003)(54896002)(77096006)(7696004)(86362001)(8676002)(2501003)(38730400002)(3846002)(6306002)(5660300001)(8990500004)(33656002)(10090500001)(97736004)(3660700001)(5630700001)(54356999)(8936002)(122556002)(189998001)(74316002)(558084003)(10290500002)(5005710100001)(2900100001)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0501; H:CY4PR21MB0504.namprd21.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0504D7DAC725BA3E37A0E944F5260CY4PR21MB0504namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2017 04:48:11.7716 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0501
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/T5WBBooD3ere7Kv1P5PjlPFyOBU>
Subject: [Unbearable] Additional review comment about draft-ietf-tokbind-protocol-13
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Mar 2017 04:48:15 -0000
Please add an informative reference to [RFC6749] upon the first reference to OAuth.
Thanks,
-- Mike