Hi all,
It is time already to think about the agenda for the next IETF meeting. Rifaat
and I were wondering whether we need one or two sessions. We would like to make
the decision based on the topics we will discuss. Below you can find a first
version of the agenda with a few remarks. Let us know if you have comments or
suggestions for additional agenda items.
Ciao
Hannes & Rifaat
OAuth Agenda
------------
- Welcome and Status Update (Chairs)
* OAuth Security Workshop Report
* Documents in IESG processing
# draft-ietf-oauth-device-flow-07
# draft-ietf-oauth-discovery-08
# draft-ietf-oauth-jwsreq-15
# draft-ietf-oauth-token-exchange-11
Remark: Status updates only if needed.
- JSON Web Token Best Current Practices
# draft-ietf-oauth-jwt-bcp-00
Remark: We are lacking reviews on this document.
Most likely we will not get them during the f2f meeting
but rather by reaching out to individuals ahead of time.
- OAuth 2.0 Mutual TLS Client Authentication and Certificate Bound Access
Tokens
# draft-ietf-oauth-mtls-06
Remark: Could be completed by the time of the IETF meeting.
- OAuth Security Topics
# draft-ietf-oauth-security-topics-04
Remark: We could do a consensus call on parts of the document soon.
- OAuth 2.0 Token Binding
# draft-ietf-oauth-token-binding-05
Remark: Document is moving along but we are lacking implementations.
- OAuth 2.0 Device Posture Signals
# draft-wdenniss-oauth-device-posture-01
Remark: Interest in the work but we are lacking content (maybe even
expertise in the group)
- Reciprocal OAuth
# draft-hardt-oauth-mutual-02
Remark: We had a virtual interim meeting on this topic and there is
interest in this work and apparently no competing solutions. The plan
is to run a call for adoption once we are allowed to add a new milestone
to our charter.
- Distributed OAuth
# draft-hardt-oauth-distributed-00
Remark: We had a virtual interim meeting on this topic and there is
interest in this work. Further work on the scope is needed.
IMPORTANT NOTICE: The contents of this email and any attachments are
confidential and may also be privileged. If you are not the intended recipient,
please notify the sender immediately and do not disclose the contents to any
other person, use it for any purpose, or store or copy the information in any
medium. Thank you.
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
