Re: [OAUTH-WG] IETF 107 Virtual OAuth Sessions

2020-03-26 Thread Dick Hardt
WFM Would you resend the conferencing information again? On Thu, Mar 26, 2020 at 1:04 PM Hannes Tschofenig wrote: > Hi all, > > > > Rifaat and I had a chat about the virtual interim meetings. > > We decided to schedule 6 one-hour-long sessions with 2 topics per session. > > > > Here is the list

[OAUTH-WG] IETF 107 Virtual OAuth Sessions

2020-03-26 Thread Hannes Tschofenig
Hi all, Rifaat and I had a chat about the virtual interim meetings. We decided to schedule 6 one-hour-long sessions with 2 topics per session. Here is the list of topics we want to discuss: 1) OAuth Security Topics + Browser-Based Apps 2) JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

[OAUTH-WG] Privacy Pass - overlaps with OAuth DPOP work?

2020-03-26 Thread Phillip Hunt
I noticed this BOF on the IETF virtual conference agenda for today. It seems to cover a lot of areas discussed in the OAuth WG and may be of interest. https://datatracker.ietf.org/meeting/107/session/privacypass Cheers, Phil Hunt @independentid phil.h...@independentid.com ___

Re: [OAUTH-WG] WGLC on "JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens"

2020-03-26 Thread Brian Campbell
Preventing token substitution/confusion was not at all the aim of my comment. I only brought that up in an attempt to bridge what looked like a communication gap in Annabelle's and your discussion. Sorry for any confusion that might have caused. That discussion did lead me to think again about the