[OAUTH-WG] [IANA #1267318] expert review for draft-ietf-oauth-step-up-authn-challenge (oauth-parameters)

2023-03-28 Thread David Dong via RT
Dear Hannes, Following-up on this review again; could you let us know if this registration is okay to proceed? Thank you. Best regards, David Dong IANA Services Specialist On Wed Mar 22 20:44:22 2023, david.dong wrote: > Dear Hannes, > > Following-up on this review; could you let us know if

[OAUTH-WG] (no subject)

2023-03-28 Thread ابو احمد الجادر
___ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth

Re: [OAUTH-WG] OAuth 2.0 Proof-of-Possession (PoP) Security Architecture

2023-03-28 Thread Nat Sakimura
Sorry, "oauth" apparently expanded to oauth list. My sincere apologies. > ___ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth

Re: [OAUTH-WG] OAuth 2.0 Proof-of-Possession (PoP) Security Architecture

2023-03-28 Thread Nat Sakimura
Hi Torsten, >From what I can see, there are substantial differences in the approaches. The Security BCP is collecting what should be done with the current toolset and currently known threats in detail. The PoP Architecture, on the other hand, categorizes what kind of proof of possession is conce