Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-23 Thread Benjamin Kaduk
I want to double-check that I'm understanding you correctly. The idea is that there's ambiguity about how a CWT 'cnf' claim would get represented as "equivalent" JWT, and that it may not even be possible for some 'cnf' values? I'm not entirely sure what the path forward even looks like, and thus

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-23 Thread Benjamin Kaduk
Thanks for putting the effort in, Brian. IANA, do you need to assign a new expert to reviewi the JWT Claims registration request from this document, or are the experts expected to be self-organizing here? Thanks, Ben On Thu, Jan 23, 2020 at 02:31:20PM -0700, Brian Campbell wrote: > Apologies,

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-23 Thread Jim Schaad
I started doing testing of my code and I have started to run into some massive problems with the confirmation claim.The COSE version of the POP key registrations cause a problem because of the way the registration template in the document is written. It currently says: JWT Confirmation

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-23 Thread Brian Campbell
Apologies, I forgot to reply-all at some earlier point and dropped the mailing lists and other cc's off the thread. Added back now. And also apologies because I think I need to recuse myself from the DE responsibility on the JWT registry request here. I've spent more time than I'd like to admit