[OAUTH-WG] OAuth Token Exchange spec addressing Area Director feedback

2018-01-19 Thread Mike Jones
A new draft of the OAuth 2.0 Token Exchange specification has been published that addresses feedback from Security Area Director Eric Rescorla. The acknowledgements were also updated. Thanks to Brian Campbell for doing the editing for this version. The specification is available at: * ht

Re: [OAUTH-WG] AD Review: draft-ietf-oauth-token-exchange-09

2018-01-19 Thread Brian Campbell
Yes, thank you for the review, Eric. A new draft -11 has been published incorporating the feedback. On Fri, Dec 29, 2017 at 10:48 AM, Mike Jones wrote: > Thanks for the useful review, Eric. I’ll work with Brian and the crew to > incorporate this feedback. > > > >

[OAUTH-WG] I-D Action: draft-ietf-oauth-token-exchange-11.txt

2018-01-19 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Web Authorization Protocol WG of the IETF. Title : OAuth 2.0 Token Exchange Authors : Michael B. Jones Anthony Nadalin

[OAUTH-WG] draft-hardt-oauth-mutual-02 - strictly for two parties?

2018-01-19 Thread Vladimir Dzhuvinov
Is the reciprocal flow strictly intended for two parties? Could the flow potentially work for more than two parties? Thanks, Vladimir PS: Noticed a typo in the intro - "constent" smime.p7s Description: S/MIME Cryptographic Signature ___ OAuth mail