[Wimse] Token Translation Requirements
Justin Richer <jricher@mit.edu> Mon, 29 July 2024 14:00 UTC
Return-Path: <jricher@mit.edu>
X-Original-To: wimse@ietfa.amsl.com
Delivered-To: wimse@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDC9BC169430 for <wimse@ietfa.amsl.com>; Mon, 29 Jul 2024 07:00:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YReomS7xb_BS for <wimse@ietfa.amsl.com>; Mon, 29 Jul 2024 07:00:17 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2114.outbound.protection.outlook.com [40.107.236.114]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB1EAC139C65 for <wimse@ietf.org>; Mon, 29 Jul 2024 07:00:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=EkApVzZLAeLkyzi2YPVyB1CGxW/V1KVa2Kdsaw7kKAxAarc3IpSUZjElcRbwxZSjCtrWe7eACARFu1Lc/WIgsXmoxOiBIllTpFt09l/l1QblohPFeqoCOvSxirSEOo1usqvHxttGtnHWbnoawWMxsekpBQK54shtSogQvKQG82duf3Dnv35piF9K3F7JKx/wGgwzum+iSJ/00cSvGJ9ermc9fQzWa5yMk9i1gT7FK2o6QG5diNEj/8KIbXuuvm9t3/N0KP1FUUAmqlRKogaG21QI2H2lhg02Gh8hcsuZ4w+bs09zKLb1qunIzm/m2b6O519gm6vTIpnIUYrZuZx+kg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=IU+X2/zG6c7OLjH9hgjCfUtO687GJWI7Qs86dzhik1Q=; b=czzp+iLU8XVgHz07s8DHHaN6N+LR5ZVYTZbAro6XYwivH4G3IXUbU1XsnB1F+DWVumWQ9eWnt/CXY0d3D+uKBCAt7DL2RCdYA0LU6kZFDU4t6uLF9BNLDMsaEW54/jFAIXtaCoJRLU6jJJX7j5SdrgrQ31HSqA48vO4Kk1A+PhYW36+3dfUgyNtdjGorhvoaG7wMEWihDKh8iESdYRYp7qmlLWUoS1EkcC1gxgNu+MgAQ7R7Kp6sdDxr5yzTOEg/pd61dKetWzBumbUp214MnMjwn0bD+DfxGnDZTRHjnzI1s39nckS3qgeraFORYL6tFaITkOAzjD3Ei752/9eOvA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IU+X2/zG6c7OLjH9hgjCfUtO687GJWI7Qs86dzhik1Q=; b=P52N6JFMCobKN3Rf9MN9qbF+pRy2p6ROzCDzL6Owd00AGdWv3+kVXWY8oFhKrjtb3paIY9HtG2aGh61fW/goDFjnTBHWmKWus1Al6BHq8c/WbNVtu6WlpkmlO8txJWMukTkV1XODzH8FxWyIHfxjkHDhnrD2hhP5YWYdhKJfGBE=
Received: from LV8PR01MB8677.prod.exchangelabs.com (2603:10b6:408:1e8::20) by BL1PR01MB7818.prod.exchangelabs.com (2603:10b6:208:39a::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7807.23; Mon, 29 Jul 2024 12:26:49 +0000
Received: from LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820]) by LV8PR01MB8677.prod.exchangelabs.com ([fe80::e7d6:999:270f:a820%6]) with mapi id 15.20.7807.026; Mon, 29 Jul 2024 12:26:49 +0000
From: Justin Richer <jricher@mit.edu>
To: "wimse@ietf.org" <wimse@ietf.org>
Thread-Topic: Token Translation Requirements
Thread-Index: AQHa4bKVGu8DhEFrjEqVK5gZw4SZlg==
Date: Mon, 29 Jul 2024 12:26:49 +0000
Message-ID: <C9F484ED-DD76-41CB-8EBA-5A169BDB6D61@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=mit.edu;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: LV8PR01MB8677:EE_|BL1PR01MB7818:EE_
x-ms-office365-filtering-correlation-id: 280f3952-4c39-455c-0f04-08dcafc9b831
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|38070700018;
x-microsoft-antispam-message-info: yG+1sycod6aoTtHeWZRQZ3tRhtmmtjHVO/KQCT8frhkRpxzMMLviY9gYjSojJ2HieVET/ZcM/9zjbQaUZCeRnl4otET/4DwLVqYo5utL7pNDXomuNZ/6OgWwpMjHDrN8P282fzlC3rxK7q9NAgo7TbX4Dt84/kKRpQUxHRbjzLJcGn2d830oHekx2wrvwvVS9Sld/CxIQUzB+BJOb99qjytKTNUpQgYeofnUCieydzrpm1cn2H7QBMPPAdZAE/ZEWCD1rEliCP11VjMhBGAfCrVonGDYLGz8DIszD4+uSDZQpWuGp6clDindL+a9uPBwsJJ0sJEIt8muxJR47Efxs9ooEZWlPYPuFNcod1YTLrVZlS8o0ppj63j2NgPt3yFyYTAbUpFF1ugU7iVMJqzDoV4UQEXYhcF0mY6z69TeYZovNw4x/po0f9IPt4R4HoLaQ1BJ+w1pCPXFJ5+GMxJyFQ3pn0Fl7DBLTvIdhbR2X/NdLVbb6dom4B2HtUjajmwlnadFTIRJTvV2xX/hi5QmUzoXdVcXUHpAniYBsqFEocrVENrlm/UWdLFVKgr87qh/Vocn+o6Ec/NgbB4RNZmSOm9f9VMH7a1Py9YyXO5yCjRtsm8NIt6usEmnPWmtx0nU95IvEufCcwOFYEwm5V8JWc4veIF65looRVdnUiKRblxGSXwK68cuhw/JmYsZVOG3rxQ2azzDp3WYSHfmvyBbihlL09xXuMtWZ0dC7du5C3oNJ3/XQ2i4TB8M48U3ezIv2RFFsTOfOpNcIqK021z2itgVVcmZdf4XObizQ6mNSCseQSQu6hwgf6HEhqXliQ15IQajMmI1CJS+bgRSVpqIkkY0Sz5S4IMo0m3/zTXcey1PRYLoGgevmVWmZQBkdKm5i4eQ0IelAN1W3ygfn1ET/gh0W5a4qQcfLM9VbPsq9xRw02LfjF+ofpFK0c0OQHz1joujlhsiAtSyL9DW1m+M0TRe6M8uPjd82U2cKkOmHXshI8sceTsOfBr2rUETB/rztiE028xEbtaldsZ+jtR+VVt97nP2PXfp51NRrS7kPG24IAMiIItyo0xU7aq1vq/NrAsaWhhPTGYme/71IZ6A/OABryABiKxhQs2dfmCAXebFDEsCiW2KMIReeVpBw6zkekM9yem7xFwp24x59z3Q/kNsLkPLa62goY6p1j7RmG9UoY1iAdi5l9CBmOsK7lKUjncDOnP5iW6bkokPNHxTlLICnj1wXTFmTVUS+D0YCoZkWnUYf1uBpiotI5k3Rsgs+Na+SrsLbBjyuUB7CFdZFjFTXU0DWlMW2I4mrx05+6i0+TrfaA0+XyGYU7HnLWmUiUmqucx3znv+VRI2nrWneAdvG/140bgeFXTIeL1XgOM=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV8PR01MB8677.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(38070700018);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_C9F484EDDD7641CB8EBA5A169BDB6D61mitedu_"
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LV8PR01MB8677.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 280f3952-4c39-455c-0f04-08dcafc9b831
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jul 2024 12:26:49.2934 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 2YgyNcvQAgI2Gh71nkrGka0U/6J/jo5qMwHyxiPNtLU4cTwnc/ehSNUl5yPu/xjU
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL1PR01MB7818
Message-ID-Hash: 5XUW5N3AVHXPJK3OSL5AMN34PWMIN3YQ
X-Message-ID-Hash: 5XUW5N3AVHXPJK3OSL5AMN34PWMIN3YQ
X-MailFrom: jricher@mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Wimse] Token Translation Requirements
List-Id: WIMSE Workload Identity in Multi-Service Environment <wimse.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/wimse/m07AHT1OeQBzss9nhxYtm_pt-y8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wimse>
List-Help: <mailto:wimse-request@ietf.org?subject=help>
List-Owner: <mailto:wimse-owner@ietf.org>
List-Post: <mailto:wimse@ietf.org>
List-Subscribe: <mailto:wimse-join@ietf.org>
List-Unsubscribe: <mailto:wimse-leave@ietf.org>
Following discussion in Vancouver, the chairs would like to begin discussion on what the next steps should be for the Token Translation Requirements document [1], an output of the Token Exchange Design Team. This is not a call for adoption as there was a clear indication in the room that the document was not yet ready for this stage. As this is a requirements document, and it is unusual for a requirements document to be codified as an RFC, the chairs would like the group to discuss what the intended direction of this document should be. Please reply to the list to indicate that: A: You believe this document should be developed into a state that the WG can adopt it. (Please discuss what you believe would be required changes for this. Please keep in mind that a call for adoption is a starting point for a document, not a finished document.) B: You believe this document should be developed by the WG as something other than a WG / RFC-track document. (Please discuss what you think the right format or forum would be - a wiki page, a web page, an eternal I-D, a blog post, etc) C: You believe this document should NOT be developed further by the WG. (Please indicate why if possible) D: You need more information before making this decision. (Please indicate what information you’d need) D: You don’t give a flying rat about this document (i.e., this is not a topic you care strongly about) Please reply to the list by August 12th, 2024. — Justin and Pieter [1] https://datatracker.ietf.org/doc/draft-rosomakho-wimse-tokentranslation-reqs/
- [Wimse] Re: Token Translation Requirements McAdams, Darin
- [Wimse] Token Translation Requirements Justin Richer
- [Wimse] Re: Token Translation Requirements Flemming Andreasen (fandreas)
- [Wimse] Re: Token Translation Requirements Dean Saxe
- [Wimse] Re: Token Translation Requirements Dmitry Izumskiy
- [Wimse] Re: Token Translation Requirements Joseph Salowey