Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-14 Thread Nat Sakimura
4:25 AM > To: John Bradley; Mike Jones > Cc: Nat Sakimura; oauth@ietf.org > Subject: Re: [OAUTH-WG] Dynamic Client Registration: policy_uri > > Here is the text from the OpenID Connect spec (as provided by Nat): > > > policy_uri > > OPTIONAL. URL that the Relying Part

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-14 Thread Mike Jones
-- Mike >> >> *From:* OAuth [mailto:oauth-boun...@ietf.org] *On Behalf Of *Nat >> Sakimura >> *Sent:* Tuesday, July 08, 2014 6:26 AM >> *To:* Hannes Tschofenig >> *Cc:* oauth@ietf.org <mailto:oauth@ietf.org>

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-14 Thread Hannes Tschofenig
t; *From:* OAuth [mailto:oauth-boun...@ietf.org] *On Behalf Of *Nat Sakimura >> *Sent:* Tuesday, July 08, 2014 6:26 AM >> *To:* Hannes Tschofenig >> *Cc:* oauth@ietf.org <mailto:oauth@ietf.org> >> *Subject:* Re: [OAUTH-WG] Dynamic Client Registration: policy_uri >

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread John Bradley
> Sent: Tuesday, July 08, 2014 6:26 AM > To: Hannes Tschofenig > Cc: oauth@ietf.org > Subject: Re: [OAUTH-WG] Dynamic Client Registration: policy_uri > > I am not against using the term "Privacy Policy" in the description. > Depending on the jurisdiction and languag

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread Mike Jones
: OAuth [mailto:oauth-boun...@ietf.org] On Behalf Of Nat Sakimura Sent: Tuesday, July 08, 2014 6:26 AM To: Hannes Tschofenig Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Dynamic Client Registration: policy_uri I am not against using the term "Privacy Policy" in the description. Depend

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread Nat Sakimura
I am not against using the term "Privacy Policy" in the description. Depending on the jurisdiction and language, direct translation of such can be "Data Protection Policy", "Personal Data Protection Policy", etc., instead so just dodging it by avoiding the label would be more politically neutral, b

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread Hannes Tschofenig
For example, even Facebook calls this stuff "Privacy Policy URL". On 07/08/2014 02:43 PM, Nat Sakimura wrote: > policy_uri came down from OpenID Connect Dynamic Client Registraiton 1.0 > [1]. > > It goes: > > policy_uri > OPTIONAL. URL that the Relying Party Client provides to the End-User

Re: [OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread Nat Sakimura
policy_uri came down from OpenID Connect Dynamic Client Registraiton 1.0 [1]. It goes: policy_uriOPTIONAL. URL that the Relying Party Client provides to the End-User to read about the how the profile data will be used. The value of this field MUST point to a valid web page. The OpenID Provider SH

[OAUTH-WG] Dynamic Client Registration: policy_uri

2014-07-08 Thread Hannes Tschofenig
Hi all, two earlier reviews I have noticed that the policy_uri meta-data attribute is not correctly specified. I offered a suggestion and in both cases my request was ignored. Maybe there is a reason to reject my request but I am uncertain about the relationship with another meta-data attribute,