Re: [OAUTH-WG] [Ext] Lars Eggert's Discuss on draft-ietf-oauth-dpop-14: (with DISCUSS and COMMENT)

2023-04-12 Thread Amanda Baber
Hi Lars,

About this registration modification question (see [AB]):

--
DISCUSS:
--

# GEN AD review of draft-ietf-oauth-dpop-14

CC @larseggert

## Discuss

### Section 12.7.1, paragraph 3
```
 However, the initial registration of the nonce claim by [OpenID.Core]
 used language that was contextually specific to that application,
 which was potentially limiting to its general applicability.

 This specification therefore requests that the entry for nonce in the
 IANA "JSON Web Token Claims" registry [IANA.JWT] be updated as
 follows to reflect that the claim can be used appropriately in other
 contexts.
```
Is OpenID as the change controller OK with the IETF changing the IANA 
registry in this way?

[AB] Brian Campbell writes,

> The document authors are all members of, or co-chair, the OpenID WG that is
> the change controller for the registry. As such, we are comfortable
> representing that group in approval of the small modification to the
> registry entry for the "nonce" JWT claim.



smime.p7s
Description: S/MIME cryptographic signature
___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2021-11-24 Thread Amanda Baber via RT
Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata registry 
experts)

I'm resending a review request for a document that's listed on the next IESG 
telechat. Can you get to this before 12/2?

Please let us know if approval from all four experts is required.

thanks,

Amanda Baber
IANA Operations Manager

On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> Mailing List/Expert Review requested
> 
> Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> registry experts)
> 
> As the designated experts for the OAuth Authorization Server Metadata
> registry, can you review the proposed registration in draft-oauth-iss-
> auth-resp for us? Please see:
> 
> https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> 
> A single, new registration is being requested:
> 
> Metadata Name: authorization_response_iss_parameter_supported
> Metadata Description: Boolean value indicating whether the
> authorization server provides the iss parameter in the authorization
> response.
> Change Controller: IESG
> Reference: [ RFC-to-be; Section 3 ]
> 
> If this is request is OK, when the IESG approves the document for
> publication, we'll make the registration at
> 
> https://www.iana.org/assignments/oauth-parameters/
> 
> If you're the first expert to submit a review, please let us know
> whether you want us to wait for both reviewers to respond before we
> mark the document "IANA OK" (or send your comments to the authors, if
> the registrations aren't OK).
> 
> The IESG has asked us to set a two-week deadline for registration
> reviews. The due date for this request is 2021-11-30.
> 
> Thank you,
> 
> Michelle Cotton
> IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2021-11-24 Thread Amanda Baber via RT
Attn: Hannes (OAuth Parameters registry expert)

I'm resending a review request for a document that's listed on the next IESG 
telechat. Can you get to this before 12/2?

thanks,

Amanda Baber
IANA Operations Manager

On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> Mailing List/Expert Review requested
> 
> Attn: Hannes (OAuth Parameters registry expert)
> 
> As the designated expert for the OAuth Parameters registry, can you
> review the proposed registration in draft-oauth-iss-auth-resp for us?
> Please see:
> 
> https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> 
> A single, new registration is being requested:
> 
> Name: iss
> Parameter Usage Location: authorization response
> Change Controller: IESG
> Reference: [ RFC-to-be; Section 2 ]
> 
> If this is request is OK, when the IESG approves the document for
> publication, we'll make the registration at
> 
> https://www.iana.org/assignments/oauth-parameters/
> 
> The IESG has asked us to set a two-week deadline for registration
> reviews. The due date for this request is 2021-11-30.
> 
> Thank you,
> 
> Michelle Cotton
> IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2021-12-16 Thread Amanda Baber via RT
Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
registry experts)

Have you had a chance to review this request?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

Is approval from all four experts required?

thanks,

Amanda Baber
IANA Operations Manager

On Wed Nov 24 21:27:25 2021, amanda.baber wrote:
> Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> registry experts)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> Please let us know if approval from all four experts is required.
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> > Metadata
> > registry experts)
> >
> > As the designated experts for the OAuth Authorization Server Metadata
> > registry, can you review the proposed registration in draft-oauth-
> > iss-
> > auth-resp for us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Metadata Name: authorization_response_iss_parameter_supported
> > Metadata Description: Boolean value indicating whether the
> > authorization server provides the iss parameter in the authorization
> > response.
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 3 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > If you're the first expert to submit a review, please let us know
> > whether you want us to wait for both reviewers to respond before we
> > mark the document "IANA OK" (or send your comments to the authors, if
> > the registrations aren't OK).
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2021-12-16 Thread Amanda Baber via RT
Hi Hannes,

Have you had a chance to review the OAuth Parameters request in this document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

Is approval from all four experts required?

thanks,

Amanda Baber
IANA Operations Manager


On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> Attn: Hannes (OAuth Parameters registry expert)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Hannes (OAuth Parameters registry expert)
> >
> > As the designated expert for the OAuth Parameters registry, can you
> > review the proposed registration in draft-oauth-iss-auth-resp for us?
> > Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Name: iss
> > Parameter Usage Location: authorization response
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 2 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2021-12-23 Thread Amanda Baber via RT
Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
registry experts)

Have you had a chance to review the request in this document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

Is approval from all four experts required?

thanks,

Amanda Baber
IANA Operations Manager

On Wed Nov 24 21:27:25 2021, amanda.baber wrote:
> Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> registry experts)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> Please let us know if approval from all four experts is required.
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> > Metadata
> > registry experts)
> >
> > As the designated experts for the OAuth Authorization Server Metadata
> > registry, can you review the proposed registration in draft-oauth-
> > iss-
> > auth-resp for us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Metadata Name: authorization_response_iss_parameter_supported
> > Metadata Description: Boolean value indicating whether the
> > authorization server provides the iss parameter in the authorization
> > response.
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 3 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > If you're the first expert to submit a review, please let us know
> > whether you want us to wait for both reviewers to respond before we
> > mark the document "IANA OK" (or send your comments to the authors, if
> > the registrations aren't OK).
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2021-12-23 Thread Amanda Baber via RT
Hi Hannes,

Have you had a chance to review the OAuth Parameters request in this document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

thanks,

Amanda Baber
IANA Operations Manager

On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> Attn: Hannes (OAuth Parameters registry expert)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Hannes (OAuth Parameters registry expert)
> >
> > As the designated expert for the OAuth Parameters registry, can you
> > review the proposed registration in draft-oauth-iss-auth-resp for us?
> > Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Name: iss
> > Parameter Usage Location: authorization response
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 2 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2022-01-03 Thread Amanda Baber via RT
Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
registry experts)

Have you had a chance to review the request in this document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

Is approval from all four experts required?

thanks,

Amanda Baber
IANA Operations Manager

On Wed Nov 24 21:27:25 2021, amanda.baber wrote:
> Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> registry experts)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> Please let us know if approval from all four experts is required.
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> > Metadata
> > registry experts)
> >
> > As the designated experts for the OAuth Authorization Server Metadata
> > registry, can you review the proposed registration in draft-oauth-
> > iss-
> > auth-resp for us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Metadata Name: authorization_response_iss_parameter_supported
> > Metadata Description: Boolean value indicating whether the
> > authorization server provides the iss parameter in the authorization
> > response.
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 3 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > If you're the first expert to submit a review, please let us know
> > whether you want us to wait for both reviewers to respond before we
> > mark the document "IANA OK" (or send your comments to the authors, if
> > the registrations aren't OK).
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-03 Thread Amanda Baber via RT
Hi Hannes,

Have you had a chance to review the OAuth Parameters request in this document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

thanks,

Amanda Baber
IANA Operations Manager

On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> Attn: Hannes (OAuth Parameters registry expert)
> 
> I'm resending a review request for a document that's listed on the
> next IESG telechat. Can you get to this before 12/2?
> 
> thanks,
> 
> Amanda Baber
> IANA Operations Manager
> 
> On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > Mailing List/Expert Review requested
> >
> > Attn: Hannes (OAuth Parameters registry expert)
> >
> > As the designated expert for the OAuth Parameters registry, can you
> > review the proposed registration in draft-oauth-iss-auth-resp for us?
> > Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > A single, new registration is being requested:
> >
> > Name: iss
> > Parameter Usage Location: authorization response
> > Change Controller: IESG
> > Reference: [ RFC-to-be; Section 2 ]
> >
> > If this is request is OK, when the IESG approves the document for
> > publication, we'll make the registration at
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > The IESG has asked us to set a two-week deadline for registration
> > reviews. The due date for this request is 2021-11-30.
> >
> > Thank you,
> >
> > Michelle Cotton
> > IANA Services

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2022-01-06 Thread Amanda Baber via RT
Hi Dick,

Should we wait for further approvals or proceed with the registration? The 
document has been approved by the IESG, so we can move ahead now once one or 
more experts instruct us to do so.

thanks,
Amanda

On Wed Jan 05 16:14:21 2022, dick.ha...@gmail.com wrote:
> I'm fine with the IANA registry update.
> ᐧ
> 
> On Tue, Jan 4, 2022 at 7:19 AM Rifaat Shekh-Yusef 
> wrote:
> 
> > Mike, Nat, John, Dick,
> >
> > Can you please take a look at this to allow us to make progress with this
> > document?
> >
> > Thanks,
> >  Rifaat
> >
> >
> > On Mon, Jan 3, 2022 at 8:57 PM Amanda Baber via RT <
> > drafts-expert-review-comm...@iana.org> wrote:
> >
> >> Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> >> registry experts)
> >>
> >> Have you had a chance to review the request in this document?
> >>
> >> https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >>
> >> Is approval from all four experts required?
> >>
> >> thanks,
> >>
> >> Amanda Baber
> >> IANA Operations Manager
> >>
> >> On Wed Nov 24 21:27:25 2021, amanda.baber wrote:
> >> > Attn: Michael, Nat, John and Dick (OAuth Authorization Server Metadata
> >> > registry experts)
> >> >
> >> > I'm resending a review request for a document that's listed on the
> >> > next IESG telechat. Can you get to this before 12/2?
> >> >
> >> > Please let us know if approval from all four experts is required.
> >> >
> >> > thanks,
> >> >
> >> > Amanda Baber
> >> > IANA Operations Manager
> >> >
> >> > On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> >> > > Mailing List/Expert Review requested
> >> > >
> >> > > Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> >> > > Metadata
> >> > > registry experts)
> >> > >
> >> > > As the designated experts for the OAuth Authorization Server Metadata
> >> > > registry, can you review the proposed registration in draft-oauth-
> >> > > iss-
> >> > > auth-resp for us? Please see:
> >> > >
> >> > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >> > >
> >> > > A single, new registration is being requested:
> >> > >
> >> > > Metadata Name: authorization_response_iss_parameter_supported
> >> > > Metadata Description: Boolean value indicating whether the
> >> > > authorization server provides the iss parameter in the authorization
> >> > > response.
> >> > > Change Controller: IESG
> >> > > Reference: [ RFC-to-be; Section 3 ]
> >> > >
> >> > > If this is request is OK, when the IESG approves the document for
> >> > > publication, we'll make the registration at
> >> > >
> >> > > https://www.iana.org/assignments/oauth-parameters/
> >> > >
> >> > > If you're the first expert to submit a review, please let us know
> >> > > whether you want us to wait for both reviewers to respond before we
> >> > > mark the document "IANA OK" (or send your comments to the authors, if
> >> > > the registrations aren't OK).
> >> > >
> >> > > The IESG has asked us to set a two-week deadline for registration
> >> > > reviews. The due date for this request is 2021-11-30.
> >> > >
> >> > > Thank you,
> >> > >
> >> > > Michelle Cotton
> >> > > IANA Services
> >>
> >> ___
> >> oauth-ext-review mailing list
> >> oauth-ext-rev...@ietf.org
> >> https://www.ietf.org/mailman/listinfo/oauth-ext-review
> >>
> >

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-06 Thread Amanda Baber via RT
Hi Hannes,

Although the IESG has approved the document, we need expert approval in order 
to move forward with the registration, unless the ADs specifically tell us to 
move ahead without it. Can you approve the OAuth Parameter registration in this 
document?

https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/

thanks,
Amanda

On Tue Jan 04 13:21:14 2022, rifaat.s.i...@gmail.com wrote:
> Hannes,
> 
> Can you please take a look at this request to allow us to make progress
> with this document?
> 
> Thanks,
>  Rifaat
> 
> 
> On Mon, Jan 3, 2022 at 8:58 PM Amanda Baber via RT <
> drafts-expert-review-comm...@iana.org> wrote:
> 
> > Hi Hannes,
> >
> > Have you had a chance to review the OAuth Parameters request in this
> > document?
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > thanks,
> >
> > Amanda Baber
> > IANA Operations Manager
> >
> > On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> > > Attn: Hannes (OAuth Parameters registry expert)
> > >
> > > I'm resending a review request for a document that's listed on the
> > > next IESG telechat. Can you get to this before 12/2?
> > >
> > > thanks,
> > >
> > > Amanda Baber
> > > IANA Operations Manager
> > >
> > > On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > > > Mailing List/Expert Review requested
> > > >
> > > > Attn: Hannes (OAuth Parameters registry expert)
> > > >
> > > > As the designated expert for the OAuth Parameters registry, can you
> > > > review the proposed registration in draft-oauth-iss-auth-resp for us?
> > > > Please see:
> > > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >
> > > > A single, new registration is being requested:
> > > >
> > > > Name: iss
> > > > Parameter Usage Location: authorization response
> > > > Change Controller: IESG
> > > > Reference: [ RFC-to-be; Section 2 ]
> > > >
> > > > If this is request is OK, when the IESG approves the document for
> > > > publication, we'll make the registration at
> > > >
> > > > https://www.iana.org/assignments/oauth-parameters/
> > > >
> > > > The IESG has asked us to set a two-week deadline for registration
> > > > reviews. The due date for this request is 2021-11-30.
> > > >
> > > > Thank you,
> > > >
> > > > Michelle Cotton
> > > > IANA Services
> >
> > ___
> > oauth-ext-review mailing list
> > oauth-ext-rev...@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth-ext-review
> >

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1216703] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters)

2022-01-06 Thread Amanda Baber via RT
Hi,

On Fri Jan 07 01:12:36 2022, dick.ha...@gmail.com wrote:
> Unfortunately I don’t know what the approval process is — I don’t feel
> I
> need to discuss or review with the others — the IANA registration is
> pretty
> straightforward and I have not heard any controversy about it
> 
> I recall at least 2 of the other experts are aligned on the underlying
> spec.

It's up to the experts: some groups prefer explicit unanimous or majority 
approval, while others are OK with a single approval (sometimes depending on 
what's being registered). One group rotates approval duties on a monthly basis.

We can move forward with this if you're OK with giving us the go-ahead. For 
what it's worth, the initial approval request was sent in mid-November, and we 
haven't seen any other responses.

Should we make the registration now or wait for Michael, Nat, and John?

thanks,
Amanda 

> On Thu, Jan 6, 2022 at 6:46 PM Amanda Baber via RT <
> drafts-expert-review-comm...@iana.org> wrote:
> 
> > Hi Dick,
> >
> > Should we wait for further approvals or proceed with the
> > registration? The
> > document has been approved by the IESG, so we can move ahead now once
> > one
> > or more experts instruct us to do so.
> >
> > thanks,
> > Amanda
> >
> > On Wed Jan 05 16:14:21 2022, dick.ha...@gmail.com wrote:
> > > I'm fine with the IANA registry update.
> > > ᐧ
> > >
> > > On Tue, Jan 4, 2022 at 7:19 AM Rifaat Shekh-Yusef <
> > rifaat.s.i...@gmail.com>
> > > wrote:
> > >
> > > > Mike, Nat, John, Dick,
> > > >
> > > > Can you please take a look at this to allow us to make progress
> > > > with
> > this
> > > > document?
> > > >
> > > > Thanks,
> > > >  Rifaat
> > > >
> > > >
> > > > On Mon, Jan 3, 2022 at 8:57 PM Amanda Baber via RT <
> > > > drafts-expert-review-comm...@iana.org> wrote:
> > > >
> > > >> Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> > > >> Metadata
> > > >> registry experts)
> > > >>
> > > >> Have you had a chance to review the request in this document?
> > > >>
> > > >> https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >>
> > > >> Is approval from all four experts required?
> > > >>
> > > >> thanks,
> > > >>
> > > >> Amanda Baber
> > > >> IANA Operations Manager
> > > >>
> > > >> On Wed Nov 24 21:27:25 2021, amanda.baber wrote:
> > > >> > Attn: Michael, Nat, John and Dick (OAuth Authorization Server
> > Metadata
> > > >> > registry experts)
> > > >> >
> > > >> > I'm resending a review request for a document that's listed on
> > > >> > the
> > > >> > next IESG telechat. Can you get to this before 12/2?
> > > >> >
> > > >> > Please let us know if approval from all four experts is
> > > >> > required.
> > > >> >
> > > >> > thanks,
> > > >> >
> > > >> > Amanda Baber
> > > >> > IANA Operations Manager
> > > >> >
> > > >> > On Tue Nov 16 21:09:23 2021, michelle.cotton wrote:
> > > >> > > Mailing List/Expert Review requested
> > > >> > >
> > > >> > > Attn: Michael, Nat, John and Dick (OAuth Authorization
> > > >> > > Server
> > > >> > > Metadata
> > > >> > > registry experts)
> > > >> > >
> > > >> > > As the designated experts for the OAuth Authorization Server
> > Metadata
> > > >> > > registry, can you review the proposed registration in draft-
> > > >> > > oauth-
> > > >> > > iss-
> > > >> > > auth-resp for us? Please see:
> > > >> > >
> > > >> > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-
> > > >> > > resp/
> > > >> > >
> > > >> > > A single, new registration is being requested:
> > > >> > >
> > > >> > > Metadata Name:
> > > >> > > authorization_response_iss_parameter_supported
> > > >> > > Metadata Description: Boolean

[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-14 Thread Amanda Baber via RT
Hi Hannes,

As the designated expert for OAuth Parameters, can you sign off on this 
registration?

thanks,
Amanda

On Thu Jan 13 21:29:54 2022, bcampb...@pingidentity.com wrote:
> Indeed, I believe that is exactly what the registration request in the
> draft asks to do
> https://www.ietf.org/archive/id/draft-ietf-oauth-iss-auth-resp-
> 05.html#name-oauth-parameters-registrati
> 
> 5.2.  OAuth Parameters Registration
> 
> This specification updates the "iss" entry in the IANA "OAuth
> Parameters" registry of [IANA.OAuth.Parameters] established by
> [RFC6749].
> 
> Parameter name:  "iss"
> Parameter usage location:  authorization request, authorization
>response
> Change Controller:  IETF
> Specification Document(s):  Section 2 of [[ this document ]],
>[RFC9101], and Section 4.1.1 of [RFC7519].
> 
> On Wed, Jan 12, 2022 at 7:29 PM Mike Jones  40microsoft@dmarc.ietf.org> wrote:
> 
> > Note that the requested OAuth parameter to be registered "iss" has
> > already
> > been registered by RFC 9101 (The OAuth 2.0 Authorization Framework:
> > JWT-Secured Authorization Request (JAR)) for Parameter Usage Location
> > "authorization request".  Fortunately, this use is compatible with
> > that in
> > draft-ietf-oauth-iss-auth-resp.
> >
> > I would be OK with draft-ietf-oauth-iss-auth-resp also registering it
> > for
> > usage "authorization response", as proposed in the draft, but the
> > original
> > registration for use "authorization request" by RFC 9191 should
> > remain.
> >
> > -- Mike
> >
> > P.S.  No, I'm not a designated expert for this registry.  Hannes is
> > the
> > only DE currently appointed by the IESG.
> >
> > -Original Message-
> > From: oauth-ext-review  On Behalf
> > Of
> > Amanda Baber via RT
> > Sent: Thursday, January 6, 2022 4:50 PM
> > Cc: oauth-ext-rev...@ietf.org; Hannes Tschofenig <
> > hannes.tschofe...@arm.com>; oauth@ietf.org
> > Subject: [oauth-ext-review] [IANA #1216704] Expert Review for
> > draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
> >
> > Hi Hannes,
> >
> > Although the IESG has approved the document, we need expert approval
> > in
> > order to move forward with the registration, unless the ADs
> > specifically
> > tell us to move ahead without it. Can you approve the OAuth Parameter
> > registration in this document?
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > thanks,
> > Amanda
> >
> > On Tue Jan 04 13:21:14 2022, rifaat.s.i...@gmail.com wrote:
> > > Hannes,
> > >
> > > Can you please take a look at this request to allow us to make
> > > progress with this document?
> > >
> > > Thanks,
> > >  Rifaat
> > >
> > >
> > > On Mon, Jan 3, 2022 at 8:58 PM Amanda Baber via RT <
> > > drafts-expert-review-comm...@iana.org> wrote:
> > >
> > > > Hi Hannes,
> > > >
> > > > Have you had a chance to review the OAuth Parameters request in
> > > > this
> > > > document?
> > > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >
> > > > thanks,
> > > >
> > > > Amanda Baber
> > > > IANA Operations Manager
> > > >
> > > > On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > >
> > > > > I'm resending a review request for a document that's listed on
> > > > > the
> > > > > next IESG telechat. Can you get to this before 12/2?
> > > > >
> > > > > thanks,
> > > > >
> > > > > Amanda Baber
> > > > > IANA Operations Manager
> > > > >
> > > > > On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > > > > > Mailing List/Expert Review requested
> > > > > >
> > > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > > >
> > > > > > As the designated expert for the OAuth Parameters registry,
> > > > > > can
> > > > > > you review the proposed registration in draft-oauth-iss-auth-
> > > > > > resp
> > for us?
> > > > > > Please see:
> > > > > >
> > > > > > https://datatr

[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-24 Thread Amanda Baber via RT
Hi Hannes,

As the designated expert for OAuth Parameters, can you sign off on this 
registration?

thanks,
Amanda

On Thu Jan 13 21:29:54 2022, bcampb...@pingidentity.com wrote:
> Indeed, I believe that is exactly what the registration request in the
> draft asks to do
> https://www.ietf.org/archive/id/draft-ietf-oauth-iss-auth-resp-
> 05.html#name-oauth-parameters-registrati
> 
> 5.2.  OAuth Parameters Registration
> 
> This specification updates the "iss" entry in the IANA "OAuth
> Parameters" registry of [IANA.OAuth.Parameters] established by
> [RFC6749].
> 
> Parameter name:  "iss"
> Parameter usage location:  authorization request, authorization
>response
> Change Controller:  IETF
> Specification Document(s):  Section 2 of [[ this document ]],
>[RFC9101], and Section 4.1.1 of [RFC7519].
> 
> On Wed, Jan 12, 2022 at 7:29 PM Mike Jones  40microsoft@dmarc.ietf.org> wrote:
> 
> > Note that the requested OAuth parameter to be registered "iss" has
> > already
> > been registered by RFC 9101 (The OAuth 2.0 Authorization Framework:
> > JWT-Secured Authorization Request (JAR)) for Parameter Usage Location
> > "authorization request".  Fortunately, this use is compatible with
> > that in
> > draft-ietf-oauth-iss-auth-resp.
> >
> > I would be OK with draft-ietf-oauth-iss-auth-resp also registering it
> > for
> > usage "authorization response", as proposed in the draft, but the
> > original
> > registration for use "authorization request" by RFC 9191 should
> > remain.
> >
> > -- Mike
> >
> > P.S.  No, I'm not a designated expert for this registry.  Hannes is
> > the
> > only DE currently appointed by the IESG.
> >
> > -Original Message-
> > From: oauth-ext-review  On Behalf
> > Of
> > Amanda Baber via RT
> > Sent: Thursday, January 6, 2022 4:50 PM
> > Cc: oauth-ext-rev...@ietf.org; Hannes Tschofenig <
> > hannes.tschofe...@arm.com>; oauth@ietf.org
> > Subject: [oauth-ext-review] [IANA #1216704] Expert Review for
> > draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
> >
> > Hi Hannes,
> >
> > Although the IESG has approved the document, we need expert approval
> > in
> > order to move forward with the registration, unless the ADs
> > specifically
> > tell us to move ahead without it. Can you approve the OAuth Parameter
> > registration in this document?
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> >
> > thanks,
> > Amanda
> >
> > On Tue Jan 04 13:21:14 2022, rifaat.s.i...@gmail.com wrote:
> > > Hannes,
> > >
> > > Can you please take a look at this request to allow us to make
> > > progress with this document?
> > >
> > > Thanks,
> > >  Rifaat
> > >
> > >
> > > On Mon, Jan 3, 2022 at 8:58 PM Amanda Baber via RT <
> > > drafts-expert-review-comm...@iana.org> wrote:
> > >
> > > > Hi Hannes,
> > > >
> > > > Have you had a chance to review the OAuth Parameters request in
> > > > this
> > > > document?
> > > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >
> > > > thanks,
> > > >
> > > > Amanda Baber
> > > > IANA Operations Manager
> > > >
> > > > On Wed Nov 24 21:28:18 2021, amanda.baber wrote:
> > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > >
> > > > > I'm resending a review request for a document that's listed on
> > > > > the
> > > > > next IESG telechat. Can you get to this before 12/2?
> > > > >
> > > > > thanks,
> > > > >
> > > > > Amanda Baber
> > > > > IANA Operations Manager
> > > > >
> > > > > On Tue Nov 16 21:17:59 2021, michelle.cotton wrote:
> > > > > > Mailing List/Expert Review requested
> > > > > >
> > > > > > Attn: Hannes (OAuth Parameters registry expert)
> > > > > >
> > > > > > As the designated expert for the OAuth Parameters registry,
> > > > > > can
> > > > > > you review the proposed registration in draft-oauth-iss-auth-
> > > > > > resp
> > for us?
> > > > > > Please see:
> > > > > >
> > > > > > https://datatr

[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-24 Thread Amanda Baber via RT
Hi Roman,

We've received a request to move ahead with this OAuth Parameter registration 
without approval from Hannes (see below). As the AD for this document, can you 
approve? 

The document: 
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-iss-auth-resp

thanks,
Amanda

On Mon Jan 24 22:36:59 2022, wpa...@rhosys.ch wrote:
> Maybe we should come up with an alternative process that doesn't involve a
> single person sign-off. Is there a reason we need a "designated expert"?
> 
> Since no one on this thread has objected, I think it is fair to say, we
> don't need Hannes to sign-off. We should get this added.
> 
> Amanda, please complete the registration.
> 
> - Warren
> 
> Warren Parad
> 
> Founder, CTO
> Secure your user data with IAM authorization as a service. Implement
> Authress <https://authress.io/>.
> 
> 
> On Mon, Jan 24, 2022 at 11:09 PM Amanda Baber via RT <
> drafts-expert-review-comm...@iana.org> wrote:
> 
> > Hi Hannes,
> >
> > As the designated expert for OAuth Parameters, can you sign off on this
> > registration?
> >
> > thanks,
> > Amanda
> >
> > On Thu Jan 13 21:29:54 2022, bcampb...@pingidentity.com wrote:
> > > Indeed, I believe that is exactly what the registration request in the
> > > draft asks to do
> > > https://www.ietf.org/archive/id/draft-ietf-oauth-iss-auth-resp-
> > > 05.html#name-oauth-parameters-registrati
> > >
> > > 5.2.  OAuth Parameters Registration
> > >
> > > This specification updates the "iss" entry in the IANA "OAuth
> > > Parameters" registry of [IANA.OAuth.Parameters] established by
> > > [RFC6749].
> > >
> > > Parameter name:  "iss"
> > > Parameter usage location:  authorization request, authorization
> > >response
> > > Change Controller:  IETF
> > > Specification Document(s):  Section 2 of [[ this document ]],
> > >[RFC9101], and Section 4.1.1 of [RFC7519].
> > >
> > > On Wed, Jan 12, 2022 at 7:29 PM Mike Jones  > > 40microsoft@dmarc.ietf.org> wrote:
> > >
> > > > Note that the requested OAuth parameter to be registered "iss" has
> > > > already
> > > > been registered by RFC 9101 (The OAuth 2.0 Authorization Framework:
> > > > JWT-Secured Authorization Request (JAR)) for Parameter Usage Location
> > > > "authorization request".  Fortunately, this use is compatible with
> > > > that in
> > > > draft-ietf-oauth-iss-auth-resp.
> > > >
> > > > I would be OK with draft-ietf-oauth-iss-auth-resp also registering it
> > > > for
> > > > usage "authorization response", as proposed in the draft, but the
> > > > original
> > > > registration for use "authorization request" by RFC 9191 should
> > > > remain.
> > > >
> > > > -- Mike
> > > >
> > > > P.S.  No, I'm not a designated expert for this registry.  Hannes is
> > > > the
> > > > only DE currently appointed by the IESG.
> > > >
> > > > -Original Message-
> > > > From: oauth-ext-review  On Behalf
> > > > Of
> > > > Amanda Baber via RT
> > > > Sent: Thursday, January 6, 2022 4:50 PM
> > > > Cc: oauth-ext-rev...@ietf.org; Hannes Tschofenig <
> > > > hannes.tschofe...@arm.com>; oauth@ietf.org
> > > > Subject: [oauth-ext-review] [IANA #1216704] Expert Review for
> > > > draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
> > > >
> > > > Hi Hannes,
> > > >
> > > > Although the IESG has approved the document, we need expert approval
> > > > in
> > > > order to move forward with the registration, unless the ADs
> > > > specifically
> > > > tell us to move ahead without it. Can you approve the OAuth Parameter
> > > > registration in this document?
> > > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp/
> > > >
> > > > thanks,
> > > > Amanda
> > > >
> > > > On Tue Jan 04 13:21:14 2022, rifaat.s.i...@gmail.com wrote:
> > > > > Hannes,
> > > > >
> > > > > Can you please take a look at this request to allow us to make
> > > > > progress with this document?
> > > > >
> > > > > Thanks,
> > > > >  Rifaat
> > > >

[OAUTH-WG] [IANA #1216704] Expert Review for draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)

2022-01-26 Thread Amanda Baber via RT
Hi Hannes,

> I reviewed the draft and the IANA consideratoin section. The changes
> are good.
> I approve the question

Thanks! We'll make the registration today.

> PS: I would like to change my contact details from
> hannes.tschofe...@gmx.net
> to hannes.tschofe...@arm.com because I irregularly check my GMX
> account these
> days. How do I do this?

We actually don't have the gmx.net address in our expert directory -- we've 
been writing to hannes.tschofe...@arm.com, the OAuth list, and 
oauth-ext-rev...@ietf.org. I'll send a separate message to the arm.com address 
to check whether there are any issues with receiving mail from our ticketing 
system.

thanks,
Amanda

 
> Gesendet: Montag, 24. Januar 2022 um 23:59 Uhr
> Von: "Amanda Baber via RT" 
> An: Kein Empfänger
> Cc: r...@cert.org, oauth-ext-rev...@ietf.org,
> hannes.tschofe...@arm.com,
> oauth@ietf.org
> Betreff: [oauth-ext-review] [IANA #1216704] Expert Review for
> draft-ietf-oauth-iss-auth-resp (oauth-parameters) (2)
> Hi Roman,
> 
> We've received a request to move ahead with this OAuth Parameter
> registration
> without approval from Hannes (see below). As the AD for this document,
> can you
> approve?
> 
> The document: https://datatracker.ietf.org/doc/html/
> draft-ietf-oauth-iss-auth-resp
> 
> thanks,
> Amanda
> 
> On Mon Jan 24 22:36:59 2022, wpa...@rhosys.ch wrote:
> > Maybe we should come up with an alternative process that doesn't
> > involve a
> > single person sign-off. Is there a reason we need a "designated
> > expert"?
> >
> > Since no one on this thread has objected, I think it is fair to say,
> > we
> > don't need Hannes to sign-off. We should get this added.
> >
> > Amanda, please complete the registration.
> >
> > - Warren
> >
> > Warren Parad
> >
> > Founder, CTO
> > Secure your user data with IAM authorization as a service. Implement
> > Authress <https://authress.io/>.
> >
> >
> > On Mon, Jan 24, 2022 at 11:09 PM Amanda Baber via RT <
> > drafts-expert-review-comm...@iana.org> wrote:
> >
> > > Hi Hannes,
> > >
> > > As the designated expert for OAuth Parameters, can you sign off on
> > > this
> > > registration?
> > >
> > > thanks,
> > > Amanda
> > >
> > > On Thu Jan 13 21:29:54 2022, bcampb...@pingidentity.com wrote:
> > > > Indeed, I believe that is exactly what the registration request
> > > > in the
> > > > draft asks to do
> > > > https://www.ietf.org/archive/id/draft-ietf-oauth-iss-auth-resp-
> > > > 05.html#name-oauth-parameters-registrati
> > > >
> > > > 5.2. OAuth Parameters Registration
> > > >
> > > > This specification updates the "iss" entry in the IANA "OAuth
> > > > Parameters" registry of [IANA.OAuth.Parameters] established by
> > > > [RFC6749].
> > > >
> > > > Parameter name: "iss"
> > > > Parameter usage location: authorization request, authorization
> > > > response
> > > > Change Controller: IETF
> > > > Specification Document(s): Section 2 of [[ this document ]],
> > > > [RFC9101], and Section 4.1.1 of [RFC7519].
> > > >
> > > > On Wed, Jan 12, 2022 at 7:29 PM Mike Jones  > > > 40microsoft@dmarc.ietf.org> wrote:
> > > >
> > > > > Note that the requested OAuth parameter to be registered "iss"
> > > > > has
> > > > > already
> > > > > been registered by RFC 9101 (The OAuth 2.0 Authorization
> > > > > Framework:
> > > > > JWT-Secured Authorization Request (JAR)) for Parameter Usage
> > > > > Location
> > > > > "authorization request". Fortunately, this use is compatible
> > > > > with
> > > > > that in
> > > > > draft-ietf-oauth-iss-auth-resp.
> > > > >
> > > > > I would be OK with draft-ietf-oauth-iss-auth-resp also
> > > > > registering it
> > > > > for
> > > > > usage "authorization response", as proposed in the draft, but
> > > > > the
> > > > > original
> > > > > registration for use "authorization request" by RFC 9191 should
> > > > > remain.
> > > > >
> > > > > -- Mike
> > > > >
> > > > > P.S. No, I'm not a designated expert fo

[OAUTH-WG] [IANA #1261154] expert review for draft-ietf-oauth-rar (OAuth Parameters - OAuth Extensions Error)

2022-12-05 Thread Amanda Baber via RT
Hi Hannes (cc: oauth wg),

Have you had a chance to review the registrations for this document? This is 
listed on the IESG telechat agenda for the 15th.

thanks,
Amanda

On Thu Nov 17 18:09:19 2022, sabrina.tanamal wrote:
> Hi Hannes (cc: oauth wg),
> 
> As the designated expert for the OAuth Parameters and OAuth Extensions
> Error registries, can you review the proposed registrations in draft-
> ietf-oauth-rar for us? Please see
> 
> https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar
> 
> The due date is December 1st.
> 
> If this is OK, when the IESG approves the document for publication,
> we'll make the registrations at
> 
> https://www.iana.org/assignments/oauth-parameters
> 
> thanks,
> 
> Sabrina Tanamal
> Lead IANA Services Specialist

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1261154] expert review for draft-ietf-oauth-rar (OAuth Parameters - OAuth Extensions Error)

2022-12-09 Thread Amanda Baber via RT
Hi Hannes,

Is this revision OK?

thanks,
Amanda

On Thu Dec 08 21:53:58 2022, bcampb...@pingidentity.com wrote:
> Thanks for catching that Hannes. I believe you are correct that a
> copy-and-paste error went unnoticed. I have fixed the glitch with a
> draft
> -18 https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar-18
> 
> On Thu, Dec 8, 2022 at 4:16 AM Hannes Tschofenig
> 
> wrote:
> 
> > Hi all,
> >
> > Thanks for the email, Amanda.
> >
> > I review the IANA consideration request. Only the OAuth Extension
> > Error
> > registration in Section 15.6 of
> > https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar#name-iana-
> > considerations
> > requires some changes.
> > The other, OAuth-related registry entries, are fine.
> >
> > Here is what the text says for Section 15.6:
> > --
> > 15.6. OAuth Extensions Error registry
> >
> > This specification requests registration of the following value in
> > the
> > IANA "OAuth Extensions Error registry" registry of
> > [IANA.OAuth.Parameters]
> > established by [RFC6749].
> >
> > Metadata Name:
> > invalid_authorization_details
> > Metadata Description:
> > indicates invalid authorization_details_parameter to the client.
> > Change Controller:
> > IETF
> > Specification Document(s):
> > Section 5 of [[ this document ]]
> > --
> >
> > The OAuth Extensions Error registry requires the following
> > information to
> > be provided, see
> >
> > https://www.iana.org/assignments/oauth-parameters/oauth-
> > parameters.xhtml#extensions-error
> >
> > Name:
> > Usage Location:
> > Protocol Extension:
> > Change Controller:
> > Reference:
> >
> > I assume that this is the result of a copy-and-paste error that got
> > unnoticed.
> > I suspect the authors can quickly fix this glitch.
> >
> > Ciao
> > Hannes
> >
> >
> >
> > -Original Message-
> > From: OAuth  On Behalf Of Amanda Baber via RT
> > Sent: Tuesday, December 6, 2022 3:18 AM
> > Cc: oauth@ietf.org; drafts-expert-review-comm...@iana.org;
> > oauth-ext-rev...@ietf.org
> > Subject: [OAUTH-WG] [IANA #1261154] expert review for draft-ietf-
> > oauth-rar
> > (OAuth Parameters - OAuth Extensions Error)
> >
> > Hi Hannes (cc: oauth wg),
> >
> > Have you had a chance to review the registrations for this document?
> > This
> > is listed on the IESG telechat agenda for the 15th.
> >
> > thanks,
> > Amanda
> >
> > On Thu Nov 17 18:09:19 2022, sabrina.tanamal wrote:
> > > Hi Hannes (cc: oauth wg),
> > >
> > > As the designated expert for the OAuth Parameters and OAuth
> > > Extensions
> > > Error registries, can you review the proposed registrations in
> > > draft-
> > > ietf-oauth-rar for us? Please see
> > >
> > > https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar
> > >
> > > The due date is December 1st.
> > >
> > > If this is OK, when the IESG approves the document for publication,
> > > we'll make the registrations at
> > >
> > > https://www.iana.org/assignments/oauth-parameters
> > >
> > > thanks,
> > >
> > > Sabrina Tanamal
> > > Lead IANA Services Specialist
> >
> > ___
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> > IMPORTANT NOTICE: The contents of this email and any attachments are
> > confidential and may also be privileged. If you are not the intended
> > recipient, please notify the sender immediately and do not disclose
> > the
> > contents to any other person, use it for any purpose, or store or
> > copy the
> > information in any medium. Thank you.
> >
> > ___
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1261154] expert review for draft-ietf-oauth-rar (OAuth Parameters - OAuth Extensions Error)

2022-12-12 Thread Amanda Baber via RT
Hi Hannes,

Can you sign off on this revision? This on on Thursday's IESG telechat agenda.

thanks,
Amanda

On Thu Dec 08 21:53:58 2022, bcampb...@pingidentity.com wrote:
> Thanks for catching that Hannes. I believe you are correct that a
> copy-and-paste error went unnoticed. I have fixed the glitch with a
> draft
> -18 https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar-18
> 
> On Thu, Dec 8, 2022 at 4:16 AM Hannes Tschofenig
> 
> wrote:
> 
> > Hi all,
> >
> > Thanks for the email, Amanda.
> >
> > I review the IANA consideration request. Only the OAuth Extension
> > Error
> > registration in Section 15.6 of
> > https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar#name-iana-
> > considerations
> > requires some changes.
> > The other, OAuth-related registry entries, are fine.
> >
> > Here is what the text says for Section 15.6:
> > --
> > 15.6. OAuth Extensions Error registry
> >
> > This specification requests registration of the following value in
> > the
> > IANA "OAuth Extensions Error registry" registry of
> > [IANA.OAuth.Parameters]
> > established by [RFC6749].
> >
> > Metadata Name:
> > invalid_authorization_details
> > Metadata Description:
> > indicates invalid authorization_details_parameter to the client.
> > Change Controller:
> > IETF
> > Specification Document(s):
> > Section 5 of [[ this document ]]
> > --
> >
> > The OAuth Extensions Error registry requires the following
> > information to
> > be provided, see
> >
> > https://www.iana.org/assignments/oauth-parameters/oauth-
> > parameters.xhtml#extensions-error
> >
> > Name:
> > Usage Location:
> > Protocol Extension:
> > Change Controller:
> > Reference:
> >
> > I assume that this is the result of a copy-and-paste error that got
> > unnoticed.
> > I suspect the authors can quickly fix this glitch.
> >
> > Ciao
> > Hannes
> >
> >
> >
> > -Original Message-
> > From: OAuth  On Behalf Of Amanda Baber via RT
> > Sent: Tuesday, December 6, 2022 3:18 AM
> > Cc: oauth@ietf.org; drafts-expert-review-comm...@iana.org;
> > oauth-ext-rev...@ietf.org
> > Subject: [OAUTH-WG] [IANA #1261154] expert review for draft-ietf-
> > oauth-rar
> > (OAuth Parameters - OAuth Extensions Error)
> >
> > Hi Hannes (cc: oauth wg),
> >
> > Have you had a chance to review the registrations for this document?
> > This
> > is listed on the IESG telechat agenda for the 15th.
> >
> > thanks,
> > Amanda
> >
> > On Thu Nov 17 18:09:19 2022, sabrina.tanamal wrote:
> > > Hi Hannes (cc: oauth wg),
> > >
> > > As the designated expert for the OAuth Parameters and OAuth
> > > Extensions
> > > Error registries, can you review the proposed registrations in
> > > draft-
> > > ietf-oauth-rar for us? Please see
> > >
> > > https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar
> > >
> > > The due date is December 1st.
> > >
> > > If this is OK, when the IESG approves the document for publication,
> > > we'll make the registrations at
> > >
> > > https://www.iana.org/assignments/oauth-parameters
> > >
> > > thanks,
> > >
> > > Sabrina Tanamal
> > > Lead IANA Services Specialist
> >
> > ___
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> > IMPORTANT NOTICE: The contents of this email and any attachments are
> > confidential and may also be privileged. If you are not the intended
> > recipient, please notify the sender immediately and do not disclose
> > the
> > contents to any other person, use it for any purpose, or store or
> > copy the
> > information in any medium. Thank you.
> >
> > ___
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1267318] expert review for draft-ietf-oauth-step-up-authn-challenge (oauth-parameters)

2023-04-05 Thread Amanda Baber via RT
Hi Hannes,

Have you had a chance to review the OAuth Extensions Error registration in this 
document? It's on next week's telechat agenda.

https://datatracker.ietf.org/doc/draft-ietf-oauth-step-up-authn-challenge/

thanks,

Amanda Baber
IANA Operations Manager

On Tue Mar 28 16:21:32 2023, david.dong wrote:
> Dear Hannes,
> 
> Following-up on this review again; could you let us know if this
> registration is okay to proceed?
> 
> Thank you.
> 
> Best regards,
> 
> David Dong
> IANA Services Specialist
> 
> On Wed Mar 22 20:44:22 2023, david.dong wrote:
> > Dear Hannes,
> >
> > Following-up on this review; could you let us know if this
> > registration is okay to proceed?
> >
> > Thank you.
> >
> > Best regards,
> >
> > David Dong
> > IANA Services Specialist
> >
> > On Mon Feb 27 23:07:32 2023, david.dong wrote:
> > > Dear Hannes (cc: oauth wg),
> > >
> > > As the designated expert for the OAuth Extensions Error Registry
> > > registry, can you review the proposed registration in draft-ietf-
> > > oauth-step-up-authn-challenge for us? Please see
> > >
> > > https://datatracker.ietf.org/doc/draft-ietf-oauth-step-up-authn-
> > > challenge/
> > >
> > > The due date is March 13 2023.
> > >
> > > If this is OK, when the IESG approves the document for publication,
> > > we'll make the registration at
> > >
> > > https://www.iana.org/assignments/oauth-parameters/
> > >
> > > With thanks,
> > >
> > > David Dong
> > > IANA Services Specialist
> > >
> > > On Mon Feb 27 22:57:06 2023, david.dong wrote:
> > > > First, in the OAuth Extensions Error Registry on the OAuth
> > > > Parameters
> > > > registry page located at:
> > > >
> > > > https://www.iana.org/assignments/oauth-parameters/
> > > >
> > > > a single, registration is to be made as follows:
> > > >
> > > > Name: insufficient_user_authentication
> > > > Usage Location: resource access error response
> > > > Protocol Extension: OAuth 2.0 Step-up Authentication Challenge
> > > > Protocol
> > > > Change Controller: IETF
> > > > Reference: [ RFC-to-be; Section 3 ]
> > > >
> > > > As this document requests registrations in an Expert Review or
> > > > Specification Required (see RFC 8126) registry, we will initiate
> > > > the
> > > > required Expert Review via a separate request. This review must
> > > > be
> > > > completed before the document's IANA state can be changed to
> > > > "IANA
> > > > OK."
> > > >
> > > > Second, in the OAuth Token Introspection Response registry also
> > > > on
> > > > the
> > > > OAuth Parameters registry page located at:
> > > >
> > > > https://www.iana.org/assignments/oauth-parameters/

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1270467] expert review for draft-ietf-oauth-dpop (oauth-parameters)

2023-04-11 Thread Amanda Baber via RT
Hi Hannes,

Can you check this one before Thursday? (We've also sent a separate JWT request 
to you and John.)

thanks,
Amanda

On Mon Apr 10 20:07:14 2023, david.dong wrote:
> Dear Hannes,
> 
> Hello. Have you had a chance to review these proposed registrations?
> 
> The due date is Wednesday April 12th, 2023, as this document is on
> this week's IESG telechat agenda.
> 
> Thank you very much for your time.
> 
> Best regards,
> 
> David Dong
> IANA Services Specialist
> 
> On Thu Apr 06 15:14:01 2023, david.dong wrote:
> > Dear Hannes,
> >
> > As the designated expert for the OAuth Access Token Types, OAuth
> > Extensions Error and OAuth Parameters registries, can you review the
> > proposed registration in draft-ietf-oauth-dpop for us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-dpop/
> >
> > The due date is Wednesday April 12th, 2023. This document is on next
> > week's IESG telechat agenda.
> >
> > -
> > First, in the OAuth Access Token Types registry:
> >
> > Name: DPoP
> > Additional Token Endpoint Response Parameters:
> > HTTP Authentication Scheme(s): DPoP
> > Change controller: IETF
> > Specification document(s): [ RFC-to-be ]
> >
> > Second, in the OAuth Extensions Error registry:
> >
> > Name: invalid_dpop_proof
> > Usage Location: token error response, resource error response
> > Protocol Extension: Demonstrating Proof of Possession (DPoP)
> > Change controller: IETF
> > Specification document(s): [ RFC-to-be ]
> >
> > Name: use_dpop_nonce
> > Usage Location: token error response, resource error response
> > Protocol Extension: Demonstrating Proof of Possession (DPoP)
> > Change controller: IETF
> > Specification document(s): [ RFC-to-be ]
> >
> > Third, in the OAuth Parameters registry:
> >
> > Name: dpop_jkt
> > Parameter Usage Location: authorization request
> > Change Controller: IETF
> > Reference: [ RFC-to-be; Section 10 ]
> > -
> >
> > If this registration is OK, when the IESG approves the document for
> > publication, we'll make the registration at:
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > With thanks,
> >
> > David Dong
> > IANA Services Specialist

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1270468] expert review for draft-ietf-oauth-dpop (oauth-parameters)

2023-04-11 Thread Amanda Baber via RT
Hi Justin,

Can you review this OAuth Dynamic Client Registration Metadata request before 
Thursday?

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-14#name-oauth-dynamic-client-regist

thanks,
Amanda

On Mon Apr 10 20:08:46 2023, david.dong wrote:
> Dear Justin,
> 
> Hello. Have you had a chance to review these proposed registrations?
> 
> The due date is Wednesday April 12th, 2023, as this document is on
> this week's IESG telechat agenda.
> 
> Thank you very much for your time.
> 
> Best regards,
> 
> David Dong
> IANA Services Specialist
> 
> On Thu Apr 06 15:22:17 2023, david.dong wrote:
> > Dear Justin (cc: oauth WG),
> >
> > As the designated expert for the OAuth Dynamic Client Registration
> > Metadata registry, can you review the proposed registration in draft-
> > ietf-oauth-dpop for us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-dpop/
> >
> > The due date is Wednesday April 12th, 2023. This document is on next
> > week's IESG telechat agenda.
> >
> > -
> > Eleventh, in the OAuth Dynamic Client Registration Metadata also on
> > the OAuth Parameters registry page located at:
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > a single, new parameter is to be registered as follows:
> >
> > Metadata Name: dpop_bound_access_tokens
> > Metadata Description: Boolean value specifying whether the client
> > always uses DPoP for token requests
> > Change Controller: IETF
> > Specification Document(s): [ RFC-to-be; Section 5.2 ]
> >
> > As this section of the draft also requests registrations in a
> > Specification Required (see RFC 8126) registry, the IESG-designated
> > experts for the OAuth Dynamic Client Registration Metadata registry
> > have asked that you send a review request to the mailing list
> > specified in RFC7591. This review must be completed before the
> > document's IANA state can be changed to "IANA OK."
> > -
> >
> > If this registration is OK, when the IESG approves the document for
> > publication, we'll make the registration at:
> >
> > https://www.iana.org/assignments/oauth-parameters/
> >
> > With thanks,
> >
> > David Dong
> > IANA Services Specialist

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1270470] expert review for draft-ietf-oauth-dpop (jwt)

2023-04-11 Thread Amanda Baber via RT
Hi Hannes,

Can you also check this JWT registration before Thursday? John's an author, so 
we would need a review from you.

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-14#name-jwt-confirmation-methods-re

thanks,
Amanda

On Mon Apr 10 20:08:07 2023, david.dong wrote:
> Dear John and Hannes,
> 
> Hello. Have you had a chance to review these proposed registrations?
> 
> The due date is Wednesday April 12th, 2023, as this document is on
> this week's IESG telechat agenda.
> 
> Thank you very much for your time.
> 
> Best regards,
> 
> David Dong
> IANA Services Specialist
> 
> On Thu Apr 06 15:32:08 2023, david.dong wrote:
> > Dear John and Hannes (cc: oauth WG),
> >
> > As the designated experts for the JWT Confirmation Methods registry,
> > can you review the proposed registration in draft-ietf-oauth-dpop for
> > us? Please see:
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-dpop/
> >
> > The due date is Wednesday April 12th, 2023. This document is on next
> > week's IESG telechat agenda.
> >
> > -
> > Sixth, in the JWT Confirmation Methods registry on the JSON Web Token
> > (JWT) registry page located at:
> >
> > https://www.iana.org/assignments/jwt/
> >
> > a single, new registration will be made as follows:
> >
> > Confirmation Method Value: jkt
> > Confirmation Method Description: JWK SHA-256 Thumbprint
> > Change Controller: IETF
> > Specification Document(s): [ RFC-to-be; Section 6 ]
> >
> > As this section of the draft also requests a registration in a
> > Specification Required (see RFC 8126) registry, the IESG-designated
> > experts for the JWT Confirmation Methods registry have asked that you
> > send a review request to the mailing list specified in RFC7800. This
> > review must be completed before the document's IANA state can be
> > changed to "IANA OK."
> > -
> >
> > If this registration is OK, when the IESG approves the document for
> > publication, we'll make the registration at:
> >
> > https://www.iana.org/assignments/jwt/
> >
> > With thanks,
> >
> > David Dong
> > IANA Services Specialist

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


[OAUTH-WG] [IANA #1270467] expert review for draft-ietf-oauth-dpop (oauth-parameters)

2023-04-13 Thread Amanda Baber via RT
Hi Hannes,

We received your JWT review. Thank you! Were you signing off on these as well?

thanks,
Amanda

On Wed Apr 12 05:43:54 2023, amanda.baber wrote:
> Hi Hannes,
> 
> Can you check this one before Thursday? (We've also sent a separate
> JWT request to you and John.)
> 
> thanks,
> Amanda
> 
> On Mon Apr 10 20:07:14 2023, david.dong wrote:
> > Dear Hannes,
> >
> > Hello. Have you had a chance to review these proposed registrations?
> >
> > The due date is Wednesday April 12th, 2023, as this document is on
> > this week's IESG telechat agenda.
> >
> > Thank you very much for your time.
> >
> > Best regards,
> >
> > David Dong
> > IANA Services Specialist
> >
> > On Thu Apr 06 15:14:01 2023, david.dong wrote:
> > > Dear Hannes,
> > >
> > > As the designated expert for the OAuth Access Token Types, OAuth
> > > Extensions Error and OAuth Parameters registries, can you review
> > > the
> > > proposed registration in draft-ietf-oauth-dpop for us? Please see:
> > >
> > > https://datatracker.ietf.org/doc/draft-ietf-oauth-dpop/
> > >
> > > The due date is Wednesday April 12th, 2023. This document is on
> > > next
> > > week's IESG telechat agenda.
> > >
> > > -
> > > First, in the OAuth Access Token Types registry:
> > >
> > > Name: DPoP
> > > Additional Token Endpoint Response Parameters:
> > > HTTP Authentication Scheme(s): DPoP
> > > Change controller: IETF
> > > Specification document(s): [ RFC-to-be ]
> > >
> > > Second, in the OAuth Extensions Error registry:
> > >
> > > Name: invalid_dpop_proof
> > > Usage Location: token error response, resource error response
> > > Protocol Extension: Demonstrating Proof of Possession (DPoP)
> > > Change controller: IETF
> > > Specification document(s): [ RFC-to-be ]
> > >
> > > Name: use_dpop_nonce
> > > Usage Location: token error response, resource error response
> > > Protocol Extension: Demonstrating Proof of Possession (DPoP)
> > > Change controller: IETF
> > > Specification document(s): [ RFC-to-be ]
> > >
> > > Third, in the OAuth Parameters registry:
> > >
> > > Name: dpop_jkt
> > > Parameter Usage Location: authorization request
> > > Change Controller: IETF
> > > Reference: [ RFC-to-be; Section 10 ]
> > > -
> > >
> > > If this registration is OK, when the IESG approves the document for
> > > publication, we'll make the registration at:
> > >
> > > https://www.iana.org/assignments/oauth-parameters/
> > >
> > > With thanks,
> > >
> > > David Dong
> > > IANA Services Specialist

___
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth