Re: [OAUTH-WG] late off-list developer feedback on OAuth MTLS

2018-10-18 Thread Brian Campbell
These changes have been made in the just published -12 draft. The diff is viewable at https://www.ietf.org/rfcdiff?url2=draft-ietf-oauth-mtls-12 Thanks all! On Sat, Oct 13, 2018 at 6:42 AM Brian Campbell wrote: > Good catch, Vladimir. Thanks! > > On Sat, Oct 13, 2018 at 2:52 AM Vladimir Dzhuvi

Re: [OAUTH-WG] late off-list developer feedback on OAuth MTLS

2018-10-13 Thread Brian Campbell
Good catch, Vladimir. Thanks! On Sat, Oct 13, 2018 at 2:52 AM Vladimir Dzhuvinov wrote: > Thanks Brian, this makes the spec even better! > > I have just this one small note, there seems to be an "and" missing here: > > The base64url-encoded value MUST omit all trailing pad '=' characters _and_

Re: [OAUTH-WG] late off-list developer feedback on OAuth MTLS

2018-10-13 Thread Vladimir Dzhuvinov
Thanks Brian, this makes the spec even better! I have just this one small note, there seems to be an "and" missing here: The base64url-encoded value MUST omit all trailing pad '=' characters _and_ MUST NOT include any line breaks, whitespace, or other additional characters. Vladimir On 10/10/1

[OAUTH-WG] late off-list developer feedback on OAuth MTLS

2018-10-09 Thread Brian Campbell
A couple of the draft-ietf-oauth-mtls editors recived some off-list questions and feedback from an implementer, which resulted in a few small potential clarifying updates to the document that I think are worth incorporating despite the post WGLC status. Barring reasonable objections from the WG or