Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-13 Thread Brian Campbell
Thanks Ludwig, On Sat, Jan 11, 2020 at 8:20 AM Seitz Ludwig wrote: > [snip] > > > > *From:* Ace *On Behalf Of *Brian Campbell > > > [snip] > > > > So in -09 the "cnf" Introspection Response Parameter was the following the > syntax of the "cnf" claim from PoP Key Semantics for CWTs > [ID.ietf-ac

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-13 Thread Jim Schaad
Brian, If it does not work then I should know by the end of next week. I am trying to merge my JWT and CWT token issuing code in my ACE OAuth server right now. Jim From: Brian Campbell Sent: Monday, January 13, 2020 10:01 AM To: Seitz Ludwig Cc: Ludwig Seitz ; Roman Danyliw ; o

Re: [Ace] [Jwt-reg-review] Requested review for IANA registration in draft-ietf-ace-oauth-authz

2020-01-13 Thread Brian Campbell
Thanks for the updates Lugwig, Section 6.6. does propose one mitigation for the unbounded memory growth problem. However, it relies on the AS to do pretty specific things with the content of other claims for it to even be possible for an RS to perform the mitigation approach. Do you think, for int