Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-mtls-08.txt

I’ve reviewed the changes and it looks good to me. Thanks, Brian! — Justin > On May 7, 2018, at 4:16 PM, Brian Campbell wrote: > > has *been* published > > sigh > > On Mon, May 7, 2018 at 2:14 PM, Brian Campbell > wrote: > A new draft of the OAuth 2.0 Mu

Re: [OAUTH-WG] Working Group Last Call: JSON Web Token Best Current Practices

Hi Carsten, In preparing a description of the changes made for WGLC, I reread your comments below and saw that we failed to do the update to the RFC 8174 template. I've made a note of it and will plan to do so when we next edit the document. Responding to your point about the "+jwt" structured

Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-jwt-bcp-03.txt

Thanks, Neil. I've made a note of this so that we can update the reference the next time we're editing the spec. -- Mike -Original Message- From: OAuth On Behalf Of Neil Madden Sent: Tuesday, May 8, 2018 5:06 AM To: oauth Subject: Re: [OAUTH-WG] I-D Act

Re: [OAUTH-WG] Working Group Last Call: JSON Web Token Best Current Practices

Thanks Mike! Hannes and I will review the document and get back to you on this next week. Regards, Rifaat On Tue, May 8, 2018 at 3:26 AM, Mike Jones wrote: > Dear OAuth chairs, > > The editors of the JWT BCP published https://tools.ietf.org/html/ > draft-ietf-oauth-jwt-bcp-02 to address all

Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-jwt-bcp-03.txt

I was just checking over this latest draft and I noticed that the reference to [nist-sp-800-56a-r3] currently links to https://csrc.nist.gov/CSRC/media/Publications/sp/800-56a/rev-3/draft/documents/sp800-56ar3-draft.pdf, which is a superseded draft. The final revision 3 is available at https://

Re: [OAUTH-WG] Working Group Last Call: JSON Web Token Best Current Practices

Dear OAuth chairs, The editors of the JWT BCP published https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-02 to address all the WGLC feedback received and https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-03 to add an acknowledgement. Given that the WGLC expired 1.5 weeks ago and all th