Hi all, I've opened a PR against draft-skyfire-oauth-using-kyapay-tokens that rewrites the Introduction:
https://github.com/skyfire-xyz/draft-skyfire-oauth-using-kyapay-tokens/pull/6 The rewrite frames KYAPay tokens as the cryptographic successor to the network metadata (IP ranges, ASNs, User-Agent strings) that intermediaries already use to identify verified bots and apply configured policies. It makes explicit what the token asserts — the agent instance (aid), the execution platform (apd), and the authorizing human principal (hid) — and the design goal that identification is distinct from admission: the token is authenticated context for a site's policy engine, not an automatic pass. Review and comments on the PR are welcome. Thanks, Srini
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
