Re: [OAUTH-WG] DPoP questions (post IETF 115), part 1

2022-11-17 Thread Brian Campbell
Either way is okay. But straight to GitHub with a PR is probably easier https://github.com/danielfett/draft-dpop On Thu, Nov 17, 2022 at 5:18 PM Dmitry Telegin wrote: > Agreed on general guidance, will try to draft the text. Should I post it > here first or go straight to GitHub? > > On Wed, Nov

Re: [OAUTH-WG] DPoP questions (post IETF 115), part 1

2022-11-17 Thread Dmitry Telegin
Agreed on general guidance, will try to draft the text. Should I post it here first or go straight to GitHub? On Wed, Nov 16, 2022 at 1:49 PM Brian Campbell wrote: > > > On Mon, Nov 14, 2022 at 5:18 PM Dmitry Telegin 40backbase@dmarc.ietf.org> wrote: > >> >> To sum up, my idea is that in ca

Re: [OAUTH-WG] DPoP questions (post IETF 115), part 1

2022-11-16 Thread Brian Campbell
On Mon, Nov 14, 2022 at 5:18 PM Dmitry Telegin wrote: > > To sum up, my idea is that in cases when we can unambiguously establish > the scheme used, we should include error info into the corresponding > challenge only. In cases of ambiguity, both challenges should be used to > deliver error info.

[OAUTH-WG] DPoP questions (post IETF 115), part 1

2022-11-14 Thread Dmitry Telegin
Hi all, In regards to RSs supporting Bearer and DPoP simultaneously, would it make sense to include some examples of error responses? I'm asking because as an implementor, I had to do a lot of guesswork on how to properly form such responses (and more guesswork means more incompatible implementati