Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Justin Richer
+1 I support adoption of DPoP. I have written an implementation of its current state for a client and implemented its signature mechanism in another project (without the rest of the protocol, fwiw). Now, speaking as the editor of the group’s previous general-purpose http signature draft (for

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Brian Campbell
+1 to adopt DPoP On Tue, Mar 17, 2020 at 6:37 AM Filip Skokan wrote: > I support the adoption of DPoP. > > Best, > Filip > > 17. 3. 2020 v 13:21, Rifaat Shekh-Yusef : > >  > All, > > As per the conclusion of the PoP interim meeting, this is a call for > adoption for the *OAuth 2.0

Re: [OAUTH-WG] Meeting Notes (9th March 2020)

2020-03-17 Thread Brian Campbell
Thanks Rifaat, It's only been eight days but that last slide hasn't aged well and now seems foolishly optimistic :/ On Tue, Mar 17, 2020 at 8:48 AM Rifaat Shekh-Yusef wrote: > The slides that Brian presented, and the minutes with a link to the > recording of the meeting are now available on the

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread John Bradley
+1 On 3/17/2020 12:37 PM, Anthony Nadalin wrote: > > +1 > >   > > *From:* OAuth *On Behalf Of * Mike Jones > *Sent:* Tuesday, March 17, 2020 8:14 AM > *To:* Rifaat Shekh-Yusef ; oauth > *Subject:* [EXTERNAL] Re: [OAUTH-WG] Call for Adoption: DPoP > >   > > I am for adoption of DPoP. > >   > >   

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Anthony Nadalin
+1 From: OAuth On Behalf Of Mike Jones Sent: Tuesday, March 17, 2020 8:14 AM To: Rifaat Shekh-Yusef ; oauth Subject: [EXTERNAL] Re: [OAUTH-WG] Call for Adoption: DPoP I am for adoption of DPoP. -- Mike From: OAuth

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Mike Jones
I am for adoption of DPoP. -- Mike From: OAuth On Behalf Of Rifaat Shekh-Yusef Sent: Tuesday, March 17, 2020 5:21 AM To: oauth Subject: [OAUTH-WG] Call for Adoption: DPoP All, As per the conclusion of the PoP interim meeting, this is a

Re: [OAUTH-WG] Meeting Notes (9th March 2020)

2020-03-17 Thread Rifaat Shekh-Yusef
The slides that Brian presented, and the minutes with a link to the recording of the meeting are now available on the following link: https://datatracker.ietf.org/meeting/interim-2020-oauth-02/session/oauth Regards, Rifaat On Tue, Mar 17, 2020 at 8:12 AM Hannes Tschofenig wrote: >

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Jim Willeke
I support the adoption of DPoP. -- -jim Jim Willeke On Tue, Mar 17, 2020 at 8:21 AM Rifaat Shekh-Yusef wrote: > All, > > As per the conclusion of the PoP interim meeting, this is a call for > adoption for the *OAuth 2.0 Demonstration of Proof-of-Possession at the > Application Layer (DPoP)*

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Dominick Baier
+1 ——— Dominick Baier On 17. March 2020 at 14:18:37, Torsten Lodderstedt ( torsten=40lodderstedt@dmarc.ietf.org) wrote: +1 > On 17. Mar 2020, at 13:40, Vladimir Dzhuvinov wrote: > > +1 for DPoP > > On 17/03/2020 14:25, Rob Otto wrote: >> I support adoption >> >> Thank you >> Rob Otto >>

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Torsten Lodderstedt
+1 > On 17. Mar 2020, at 13:40, Vladimir Dzhuvinov wrote: > > +1 for DPoP > > On 17/03/2020 14:25, Rob Otto wrote: >> I support adoption >> >> Thank you >> Rob Otto >> >> On Tue, 17 Mar 2020 at 12:21, Rifaat Shekh-Yusef >> wrote: >> All, >> >> As per the conclusion of the PoP interim

Re: [OAUTH-WG] JWT Secured Authorization Request (JAR) vs OIDC request object

2020-03-17 Thread Rob Otto
I agree with this as well. Rob On Tue, 17 Mar 2020 at 12:40, Vladimir Dzhuvinov wrote: > +1 > > Thanks! > > Vladimir > On 12/03/2020 17:31, Brian Campbell wrote: > > +1 (again) that `client_id` should be allowed/required as a query > parameter outside the request object JWT or URI and that its

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Vladimir Dzhuvinov
+1 for DPoP On 17/03/2020 14:25, Rob Otto wrote: > I support adoption  > > Thank you > Rob Otto > > On Tue, 17 Mar 2020 at 12:21, Rifaat Shekh-Yusef > mailto:rifaat.i...@gmail.com>> wrote: > > All, > > As per the conclusion of the PoP interim meeting, this is a call > for adoption for

Re: [OAUTH-WG] JWT Secured Authorization Request (JAR) vs OIDC request object

2020-03-17 Thread Vladimir Dzhuvinov
+1 Thanks! Vladimir On 12/03/2020 17:31, Brian Campbell wrote: > +1 (again) that `client_id` should be allowed/required as a query > parameter outside the request object JWT or URI and that its value has > to be the same as within the request object. > > On Thu, Mar 12, 2020 at 8:20 AM Joseph

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Filip Skokan
I support the adoption of DPoP. Best, Filip > 17. 3. 2020 v 13:21, Rifaat Shekh-Yusef : > >  > All, > > As per the conclusion of the PoP interim meeting, this is a call for adoption > for the OAuth 2.0 Demonstration of Proof-of-Possession at the Application > Layer (DPoP) document: >

Re: [OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Rob Otto
I support adoption Thank you Rob Otto On Tue, 17 Mar 2020 at 12:21, Rifaat Shekh-Yusef wrote: > All, > > As per the conclusion of the PoP interim meeting, this is a call for > adoption for the *OAuth 2.0 Demonstration of Proof-of-Possession at the > Application Layer (DPoP)* document: >

[OAUTH-WG] Call for Adoption: DPoP

2020-03-17 Thread Rifaat Shekh-Yusef
All, As per the conclusion of the PoP interim meeting, this is a call for adoption for the *OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP)* document: https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/ Please, let us know if you support or object to the

[OAUTH-WG] Meeting Notes (9th March 2020)

2020-03-17 Thread Hannes Tschofenig
Participants: - Roman Danyliw - Torsten Lodderstedt - Travis Spencer - Aaron Parecki - Ben Kaduk - Brian Campbell - Cigdem Sengul - Daniel Fett - David Waite - Filip - Jim Schaad - Justin Richer - Marco Tiloca - Matthew de Haast - Michael Peck - Mike Jones - Phil Hunt - Hannes Tschofenig - Joseph