Re: [OAUTH-WG] OAuth Digest, Vol 111, Issue 36

+1 Additionally, RFC 6749 states it SHOULD only be passed in the body as a last resort and only if using the HTTP Authorization header is NOT possible. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Xing #E Dunwoody, GA 30338-8221 Phone: (949

Re: [OAUTH-WG] Fixing the Authorization Server Mix-Up: Call for Adoption

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Xing #E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Brian Campbell [mailto:

Re: [OAUTH-WG] OAuth 2.0 Discovery Location

+1 for “OAuth 2.0 Authorization Server Discovery” Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Xing #E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com

Re: [OAUTH-WG] OAuth 2.0 Discovery Location

ng. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Xing #E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Nat Sakimura [mailto:sakim...@gmail.co

Re: [OAUTH-WG] OAuth 2.0 Discovery Location

ng of updating the specification to use OAuth 2.0. The industry OpenADE Task Force, which is the technical WG of the UCAIug, defined additional information be returned with the OAuth 2.0 Token Response that includes the URI of the resource to which the AT can be used. Best regards, Don Don

Re: [OAUTH-WG] redircet_uri matching algorithm

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Crossing Suite E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Bill Mills [mailto:wmi

Re: [OAUTH-WG] Token Chaining Use Case

AT and there is no scope= value in the request, how does it ensure the request isn’t asking for more access than was granted by the granting AS? Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Crossing Suite E Dunwoody, GA 30338-8221 Phone: (949

Re: [OAUTH-WG] Token Chaining Use Case

Pedro, Although the registry could be changed to support the new type format, how is that any different than adding a new grant_type, such as grant_type=token_swap or grant_type=swap? Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Crossing Suite E Dunwoody, GA

Re: [OAUTH-WG] Token Chaining Use Case

another AS (which is possible using Justin’s use case)? Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Crossing Suite E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetwor

Re: [OAUTH-WG] Token Chaining Use Case

backwards compatibility issue for many implementations. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 2335 Dunwoody Crossing Suite E Dunwoody, GA 30338-8221 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetwor

Re: [OAUTH-WG] Question regarding draft-hunt-oauth-v2-user-a4c

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com -Original Message- From: Anil Saldhana [mailto:anil.saldh...@redhat.com] Sent: Friday

Re: [OAUTH-WG] Question regarding draft-hunt-oauth-v2-user-a4c

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com -Original Message- From: Bill Burke [mailto:bbu...@redhat.com] Sent: Friday, June 13

Re: [OAUTH-WG] Dynamic Client Registration Conference Call: Wed 28 Aug, 2pm PDT: Conference Bridge Details

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com -Original Message- From: Justin Richer [mailto:jric...@mitre.org] Sent: Wednesday

Re: [OAUTH-WG] TLS question from token revocation draft iesg evaluation

Stephen, I feel it should be MANDATORY to implement TLS1.2, especially since NIST is in the process of deprecating TLS1.0 as a supported version. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636

Re: [OAUTH-WG] review comments on draft-ietf-oauth-dyn-reg-11.txt

See my comments inline [DFC] Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com

Re: [OAUTH-WG] review comments on draft-ietf-oauth-dyn-reg-11.txt

both the complexity of the access tokens as well as make their usage harder to explain to non-technical individuals who have to understand the differences between the access tokens obtained through the various flows. Just my two cents. Best regards, Don Donald F. Coffin Founder/CTO

Re: [OAUTH-WG] Proposed Syntax Changes in Dynamic Registration

The issue I have with not providing Dynamic Registration capability within OAuth (as the current document proposes) is that to provide a Dynamic Registration capability will then require the implementation of an additional standard to provide such support. At the present time, I am respons

Re: [OAUTH-WG] Proposed Syntax Changes in Dynamic Registration

mplemented OAuth 2.0. I would vote for "B" as I believe it clarifies intention of the field, but am also satisfied if "A" is the final result. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-38

Re: [OAUTH-WG] Client Credential Expiry and new Registration Access Token - draft-ietf-oauth-dyn-reg-10

to access resources, which IMHO is incorrect based on the RFC 6749 definition in section 4.4. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com

Re: [OAUTH-WG] Client Credential Expiry and new Registration Access Token - draft-ietf-oauth-dyn-reg-10

ly be used with client application information. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com -Original Message- From: Mike Jones [mailto:

Re: [OAUTH-WG] Registration: Scope Values

Justin, Thanks for the clarification. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetwor

Re: [OAUTH-WG] Registration: Scope Values

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Mike

Re: [OAUTH-WG] Registration: Scope Values

+1 Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Tim Bray [mail

Re: [OAUTH-WG] draft-ietf-oauth-revocation-05 Questions

Thanks for the clarification. I was not envisioning the end-user directly referencing the token revocation endpoint. The question is how does the end-user know the client did in fact revoke a token using the token revocation endpoint. Best regards, Don Donald F. Coffin Founder/CTO

Re: [OAUTH-WG] draft-ietf-oauth-revocation-05 Questions

ork RFC or existing draft, then it must be an out-of-band customized implementation. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@rem

Re: [OAUTH-WG] draft-ietf-oauth-revocation-05 Questions

implementation suggestion? Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: T

[OAUTH-WG] draft-ietf-oauth-revocation-05 Questions

orward to your comments on the above topic. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com

Re: [OAUTH-WG] Additional Oauth Dynamic Client Registration Protocol Information

Justin, Thanks for the information. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetwor

Re: [OAUTH-WG] Additional Oauth Dynamic Client Registration Protocol Information

Mike, Thanks for the information. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetwor

[OAUTH-WG] Additional Oauth Dynamic Client Registration Protocol Information

Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email: donald.cof...@reminetworks.com ___ OAuth mailing list OAuth@ietf.org

Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-06.txt

uot; fail to include the required "Pragma: "no-cache" directive. I assume this is an oversight and am merely pointing out that it needs to be included. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-38

Re: [OAUTH-WG] Fwd: New Version Notification for draft-richer-oauth-introspection-02.txt

Does the term "Active" help clarify the meaning but still confirm to your intention, Justin? Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mail

Re: [OAUTH-WG] draft-richer-oauth-introspection-01 scope syntax

tocol framework. If the OAuth introspective WG feels "scope" should be a JSON array, then the WG should define a new data element rather than changing the definition of an existing data element already defined by RFC6749. Best regards, Don Donald F. Coffin Founder/CTO REMI Net

Re: [OAUTH-WG] draft-ietf-oauth-revocation-04

Hi Torsten, Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:donald.cof...@reminetworks.com> donald.cof...@reminetworks.com From: Torsten Lodde

Re: [OAUTH-WG] draft-richer-oauth-introspection-01 scope syntax

not relevant to a specification, especially since RFC 6749 has already set a documentation precedent.. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Em

Re: [OAUTH-WG] draft-ietf-oauth-revocation-04

George, Thanks for the quick response. I've added my comments after your responses below. Best regards, Don Donald F. Coffin Founder/CTO REMI Networks 22751 El Prado Suite 6216 Rancho Santa Margarita, CA 92688-3836 Phone: (949) 636-8571 Email:<mailto:do