Re: [OAUTH-WG] WGLC for Step-up Authentication

2022-10-13 Thread Yusuf Khan
Hi All, I have a question here to challenge the need for this document specification: 1. Here we are trying an attempt to return the information to the client to know the acr requirements for a resource on the resource server. I feel it will be true for all other parameters where the provided toke

Re: [OAUTH-WG] WGLC for Step-up Authentication

2022-10-13 Thread Vittorio Bertocci
Hi Yusuf, thanks for your comments. Before getting to the specific matters you raise: the specification was submitted as work item and formally adopted by the WG with unambiguous consensus months ago. We iterated on it on two inperson IETF events, multiple industry events and on several online disc