Re: [OAUTH-WG] Looking for a compromise on signatures and other open issues

2010-09-28 Thread Keenan, Bill
+1 Eran, thanks for framing this up... On Sep 28, 2010, at 12:14 PM, Brian Campbell wrote: > +1 seems like a pragmatic compromise > > On Tue, Sep 28, 2010 at 12:44 PM, Marius Scurtescu > wrote: >> On Tue, Sep 28, 2010 at 9:05 AM, George Fletcher wrote: >>> +1 I think this is a great path forw

Re: [OAUTH-WG] POLL: Are you going to Maastricht?

2010-07-08 Thread Keenan, Bill
D On Jul 8, 2010, at 9:29 AM, David Recordon wrote: I'm honestly trying to decide myself and a few other people are in similar situations. Thus a poll: A) Yes, I'm going to be in Maastricht B) Maybe, depends on the number of OAuth WG members going C) Maybe, depends on some other reason D) No If

Re: [OAUTH-WG] multiple access tokens from a single authorization flow?

2010-05-24 Thread Keenan, Bill
Thanks Torsten for more of your good thinking and write-up... At Intuit, using 1.0a, we did an experiment with one of our mobile apps using multiple tokens. The programming model of having the client maintain a mapping of token to ROA endpoint, so they used the correct token turned out to be a

[OAUTH-WG] how does the spec move forward

2010-04-29 Thread Keenan, Bill
For the ignorant (me), how does the spec, now hosted at IETF, move forward? Do we still discuss on this list? Who does the editing work? Is .txt what we all have to read now? ___ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailm

Re: [OAUTH-WG] 'Scope' parameter proposal

2010-04-27 Thread Keenan, Bill
The amount of writing done on scope the past few weeks indicates this concept generates a lot of passion. I hope we will spend some time on it during IIW X and at our 20-May f2f. For me, delegation is an identity in my system authorizing my system to issue a toke to an identity, which is not in

Re: [OAUTH-WG] Autonomous clients and resource owners (editorial)

2010-04-27 Thread Keenan, Bill
With Doug in an all day mtg, we have not sync'd on this...so one of us may respond again on this topic. I think I am +1 w/ Brian E. In the flow from SAML gateway to STS to protected resource, I don't see caching both an access and refresh token as getting me any efficiency. Certainly, it adds com