Hi OAuth folks, I've published updated versions of the KYAPay family of drafts incorporating review feedback from Jean Diaconu, Rob Zagarella, and Srini Thumma. I know that more reviews are forthcoming, but we've made enough improvements to the drafts that we wanted to get updated versions out there now.
The updated drafts are: * KYAPay Token<https://www.ietf.org/archive/id/draft-skyfire-oauth-kyapay-token-02.html> - Defines JWT token providing claims about the person or organization authorizing an agent to act, the agent platform, the agent instance, and optionally a payment method * Using KYAPay Tokens<https://www.ietf.org/archive/id/draft-skyfire-oauth-using-kyapay-tokens-01.html> - Defines how participants use KYAPay tokens to authorize agentic access to the existing Web * Additional Authentication Method Reference Values<https://www.ietf.org/archive/id/draft-skyfire-oauth-amr-values-02.html> - Adds "amr" values that have come into use since RFC 8176 was published 9 years ago * Identity Verification Methods Values<https://www.ietf.org/archive/id/draft-skyfire-oauth-id-verification-02.html> - Defines Identity Verification Methods claim and values * Anti-Money Laundering Methods Values<https://www.ietf.org/archive/id/draft-skyfire-oauth-aml-methods-01.html> - Defines Anti-Money Laundering Methods claim and values These are in use or planned to be used by the likes of Akamai, MasterCard, Experian, Sequentum, Cequence, F5, Fastly, Ory, Forter, DataDome, Auth0, Black Hawk Network, Verve Market, and more - with roles including bot managers, fraud managers, ATO protectors, CIAM systems, identity verification systems, payment providers, and of course merchants. We invite others to also review the drafts they're interested in. We look forward to talking with you about them both here and at IETF 127 in San Francisco! -- Mike
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
