Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-20 Thread Kathleen Moriarty
ment. >>> / Erik >>> >>> >>> On 19 Nov 2015, at 19:18, Justin Richer wrote: >>> >>> I agree with added "For example" in a few places. It's not normative it's >>> informational here. >>> >>&g

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-20 Thread Phil Hunt
uot; in a few places. It's not normative it's >> informational here. >> >> >> >> < div=""> >> -- Justin >> >> / Sent from my phone / >> <> >> >> >> Original message >> Fro

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-20 Thread Kathleen Moriarty
; > -- Justin > > / Sent from my phone / > <> > > > Original message -------- > From: Phil Hunt > Date: 11/19/2015 11:28 AM (GMT-06:00) > To: Erik Wahlström neXus > Cc: "" , Justin Richer > > Subject: Re: [OAUTH-WG] A review of draft

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Erik Wahlström neXus
uth@ietf.org>>" mailto:oauth@ietf.org>>, Justin Richer mailto:i...@justin.richer.org>> Subject: Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05 I think your point that maybe the architecture doc be generic enough to support both json and cbor tokens is worth consideration.

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Justin Richer
, Justin Richer Subject: Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05 I think your point that maybe the architecture doc be generic enough to support both json and cbor tokens is worth consideration.  I am just not sure of process and consensus now that we are past WGLC. Wou

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Phil Hunt
I think your point that maybe the architecture doc be generic enough to support both json and cbor tokens is worth consideration. I am just not sure of process and consensus now that we are past WGLC. Would the cose group prefer this? Happy to do it if desired. Also understand if we are too fa

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Erik Wahlström neXus
Just a note then. I did not see anything that prohibited the usage of pop tokens for IoT so shipping it as is works. Sent from my iPhone On 19 Nov 2015, at 17:18, Phil Hunt mailto:phil.h...@oracle.com>> wrote: On the subject of making the spec(s) less JWT specific, it was a foundational assu

Re: [OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Phil Hunt
On the subject of making the spec(s) less JWT specific, it was a foundational assumption and (I think) in the charter. However COSE wasn't around yet. I suppose the more generic architecture doc could be altered to cover IoT cases, but it may be problematic for the other specs that are more spe

[OAUTH-WG] A review of draft-ietf-oauth-pop-architecture-05

2015-11-19 Thread Erik Wahlström neXus
Hi, I have been reviewing draft-ietf-oauth-pop-architecture-05. In ACE WG we have a draft that uses PoP tokens for IoT and the architectures defined here so my review was done with that IoT perspective. I’m a bit late with the review and some of the comments might already be mentioned by others