Re: [OAUTH-WG] OSCORE

2018-02-07 Thread Dave Thaler
icrosoft.com] Sent: 07 February 2018 17:27 To: Göran Selander; Hannes Tschofenig; OAuth@ietf.org Cc: draft-ietf-core-object-secur...@ietf.org Subject: RE: [OAUTH-WG] OSCORE As Göran said, yes the original rationale was end-to-end communication through proxies where each leg might be CoAP or migh

Re: [OAUTH-WG] OSCORE

2018-02-07 Thread Hannes Tschofenig
Wednesday, February 7, 2018 8:00 AM To: Hannes Tschofenig ; OAuth@ietf.org; Dave Thaler Cc: draft-ietf-core-object-secur...@ietf.org Subject: Re: [OAUTH-WG] OSCORE Hi Hannes, Including Dave who may want to provide some background to the use case. As I said, this was a proposed constructi

Re: [OAUTH-WG] OSCORE

2018-02-07 Thread Dave Thaler
February 7, 2018 8:00 AM To: Hannes Tschofenig ; OAuth@ietf.org; Dave Thaler Cc: draft-ietf-core-object-secur...@ietf.org Subject: Re: [OAUTH-WG] OSCORE Hi Hannes, Including Dave who may want to provide some background to the use case. As I said, this was a proposed construction and was straight

Re: [OAUTH-WG] OSCORE

2018-02-07 Thread Göran Selander
Hi Hannes, Including Dave who may want to provide some background to the use case. As I said, this was a proposed construction and was straightforward to include in the draft. I’m not the right person to answer whether this is useful for OAuth, but I’m interested in the answer. Göran On 2018-0

Re: [OAUTH-WG] OSCORE

2018-02-07 Thread Hannes Tschofenig
Hi Göran, Maybe you can then answer the question whether this is useful / applicable to a HTTP. Asked differently, under what conditions does the OSCORE not work for HTTP. This would help the folks in the group, including me, to determine whether this actually something we should be looking int