[Ace] CWT and PoP Tokens

2017-04-21 Thread Hannes Tschofenig
Hi all, with the CWT in WGLC (see https://www.ietf.org/mail-archive/web/ace/current/msg02190.html) a question arises about the desired content of the spec. In ACE we have been focused on the use of use of proof-of-possession tokens. Currently, the worksplit between the the CWT and the ACE framewo

Re: [Ace] CWT and PoP Tokens

2017-04-21 Thread Carsten Bormann
On Apr 21, 2017, at 09:56, Hannes Tschofenig wrote: > > * the CWT spec maps some of the JWT claims to CBOR but does not contain > anything regarding PoP tokens. > * the ACE framework provides the PoP-related components (see > https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-06#section-5.5.4

Re: [Ace] CWT and PoP Tokens

2017-04-21 Thread Mike Jones
Subject: Re: [Ace] CWT and PoP Tokens On Apr 21, 2017, at 09:56, Hannes Tschofenig mailto:hannes.tschofe...@gmx.net>> wrote: > > * the CWT spec maps some of the JWT claims to CBOR but does not > contain anything regarding PoP tokens. > * the ACE framework provides the PoP-