On Thu, Oct 26, 2023 at 5:26 PM Brian Campbell <[email protected]> wrote:
> > I think you might underestimate the difficulty in > creating/changing/establishing such a registry and overestimate its > effectiveness and usefulness. And I think the selective disclosability > treatment of many claims is ultimately context dependent. As I've said, I'm > all for strengthening and improving the text in this section. But don't > believe that involves a registry. > One more quick thing here: maintaining a registry also isn't free, which I say as one of the so-called designated experts on the JWT claims registry. I don't want to and don't feel equipped to evaluate a selective disclosability part of claims registration requests. Or try and say what it should be for all the existing registered claims. -- _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you._
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
