Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-07 Thread Anthony Nadalin
: Wednesday, October 06, 2010 2:26 PM To: Anthony Nadalin Cc: Yaron Goland; Mike Jones; oauth@ietf.org Subject: Re: [OAUTH-WG] Comparing the JSON Token drafts So what's the proposal, then? That OAuth service providers document what crypto mechanisms they support? And developers will just have to know

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-07 Thread Dirk Balfanz
Jones; oauth@ietf.org *Subject:* Re: [OAUTH-WG] Comparing the JSON Token drafts So what's the proposal, then? That OAuth service providers document what crypto mechanisms they support? And developers will just have to know which alg to use with which service provider? I guess I could live

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-06 Thread Dirk Balfanz
[mailto:balf...@google.com] *Sent:* Friday, October 01, 2010 8:45 PM *To:* Yaron Goland *Cc:* Anthony Nadalin; Mike Jones; oauth@ietf.org *Subject:* Re: [OAUTH-WG] Comparing the JSON Token drafts On Fri, Oct 1, 2010 at 3:41 PM, Yaron Goland yar...@microsoft.com wrote: No matter what algorithm

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-04 Thread Anthony Nadalin
...@google.com] Sent: Friday, October 01, 2010 8:45 PM To: Yaron Goland Cc: Anthony Nadalin; Mike Jones; oauth@ietf.org Subject: Re: [OAUTH-WG] Comparing the JSON Token drafts On Fri, Oct 1, 2010 at 3:41 PM, Yaron Goland yar...@microsoft.commailto:yar...@microsoft.com wrote: No matter what algorithm or key

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-01 Thread Eve Maler
Glad to see this being worked on here. I wanted to add a few requirements (and maybe, just maybe, a bit of a solution) into the mix. As you may recall, in the UMA group we've been working on what we called a Claims 2.0 spec (all UMA specs -- and some OAuth-related specs too -- are linked off

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-01 Thread Yaron Goland
...@ietf.org] On Behalf Of Anthony Nadalin Sent: Wednesday, September 29, 2010 8:34 AM To: Dirk Balfanz; Mike Jones Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Comparing the JSON Token drafts So this one I do feel more strongly about: We should only include crypto mechanisms that everybody MUST

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-01 Thread Dirk Balfanz
:* Wednesday, September 29, 2010 8:34 AM *To:* Dirk Balfanz; Mike Jones *Cc:* oauth@ietf.org *Subject:* Re: [OAUTH-WG] Comparing the JSON Token drafts So this one I do feel more strongly about: We should only include crypto mechanisms that everybody MUST support. Otherwise, we'll have to invent

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-10-01 Thread Mike Jones
, 2010 8:45 PM To: Yaron Goland Cc: Anthony Nadalin; Mike Jones; oauth@ietf.org Subject: Re: [OAUTH-WG] Comparing the JSON Token drafts On Fri, Oct 1, 2010 at 3:41 PM, Yaron Goland yar...@microsoft.commailto:yar...@microsoft.com wrote: No matter what algorithm or key size we pick the choice will prove

Re: [OAUTH-WG] Comparing the JSON Token drafts

2010-09-29 Thread Anthony Nadalin
: Re: [OAUTH-WG] Comparing the JSON Token drafts On Mon, Sep 27, 2010 at 5:46 PM, Mike Jones michael.jo...@microsoft.commailto:michael.jo...@microsoft.com wrote: Dirk and I both posted JSON Token drafts on Thursday. They are at http://balfanz.github.com/jsontoken-spec/draft-balfanz-jsontoken-00