Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

akimura [mailto:sakim...@gmail.com] Sent: Tuesday, August 18, 2015 9:00 PM To: Mike Jones Cc: oauth Subject: Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02 Inline: 2015-08-11 14:12 GMT+09:00 Mike Jones mailto:michael.jo...@microsoft.com> >: Replies inli

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

y, August 18, 2015 9:00 PM To: Mike Jones Cc: oauth Subject: Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02 Inline: 2015-08-11 14:12 GMT+09:00 Mike Jones mailto:michael.jo...@microsoft.com>>: Replies inline… From: OAuth [mailto:oauth-boun...@ietf.org<

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Sorry, I'm completely sold out till then... I could do it over the weekend. 2015年8月20日木曜日、Mike Jonesさんは書きました: > Privacy Consideration > > > > It is missing privacy consideration. It is not required per se, but since > Key Confirmation method with ephemeral key can be less

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Privacy Consideration It is missing privacy consideration. It is not required per se, but since Key Confirmation method with ephemeral key can be less privacy intrusive compared to other sender confirmation method so adding some text around it may be a good idea. Can yo

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Inline: 2015-08-11 14:12 GMT+09:00 Mike Jones : > Replies inline… > > > > *From:* OAuth [mailto:oauth-boun...@ietf.org] *On Behalf Of *Nat Sakimura > *Sent:* Wednesday, March 25, 2015 6:38 AM > *To:* oauth > *Subject:* [OAUTH-WG] Review Comments for > draft-ietf-o

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

e JWKs in the > “jwk” claim. > > > > Best wishes, > > -- Mike > > > > *From:* Mike Jones > *Sent:* Thursday, July 30, 2015 7:49 PM > *To:* 'Nat Sakimura'; oauth > *Subject

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

: Mike Jones Sent: Thursday, July 30, 2015 7:49 PM To: 'Nat Sakimura'; oauth Subject: RE: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02 I typically do respond to review comments line-by-line but ran out of time to do this before Prague. (I was doing things li

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Replies inline… From: OAuth [mailto:oauth-boun...@ietf.org] On Behalf Of Nat Sakimura Sent: Wednesday, March 25, 2015 6:38 AM To: oauth Subject: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02 Dear OAuthers: Here is my belated review comments on draft-ietf-oauth-proof-of

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Sent: Thursday, July 30, 2015 6:36 PM To: oauth Subject: Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02 I cannot find any disposition of comment (DoC) to this review that the WG Chairs asked. Nor I see much of them reflected in -03. The process I would imagine to be the

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

I cannot find any disposition of comment (DoC) to this review that the WG Chairs asked. Nor I see much of them reflected in -03. The process I would imagine to be the editors to 1) Provide the DoC [accept, discuss, reject (with reasons)], 2) Open up series of discussions on discuss items and driv

Re: [OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

I have refreshed the draft which talks about what is being discussed in Section 3 paragraph 2 as: http://tools.ietf.org/html/draft-sakimura-oauth-rjwtprof-03 It just talks about Sender Constraint now, dropping all the

[OAUTH-WG] Review Comments for draft-ietf-oauth-proof-of-possession-02

Dear OAuthers: Here is my belated review comments on draft-ietf-oauth-proof-of-possession-02 Below, [POPA] stands for https://tools.ietf.org/html/draft-ietf-oauth-pop-architecture-01 Abstract It is probably better to spell out that this document is describing the JWT format that can