Re: [OAUTH-WG] Unified Singular Protocol Flow for OAuth (USPFO) Ecosystem

Hi Jaimandeep, Just about the last point: "Remote assertion server" is not a new concept and is already widely used to prevent client impersonation in mobile apps. You may like to refer to Aaron's blog in this regard here

Re: [OAUTH-WG] Unified Singular Protocol Flow for OAuth (USPFO) Ecosystem

Hi Jorge and Jaimandeep, I wanted to clarify something about my blog post that was referenced. The proposal that I brought up at the OAuth Security Workshop was to be able to leverage the specific APIs provided by Apple and Google known as "App Integrity" as this type of assertion. This is fundam

[OAUTH-WG] [IANA #1267318] expert review for draft-ietf-oauth-step-up-authn-challenge (oauth-parameters)

Dear Hannes (cc: oauth wg), As the designated expert for the OAuth Extensions Error Registry registry, can you review the proposed registration in draft-ietf-oauth-step-up-authn-challenge for us? Please see https://datatracker.ietf.org/doc/draft-ietf-oauth-step-up-authn-challenge/ The due date

[OAUTH-WG] [IANA #1267319] expert review for draft-ietf-oauth-step-up-authn-challenge (oauth-parameters)

Dear Justin (cc: oauth wg), As the designated expert for the OAuth Token Introspection Response registry, can you review the proposed registration in draft-ietf-oauth-step-up-authn-challenge for us? Please see https://datatracker.ietf.org/doc/draft-ietf-oauth-step-up-authn-challenge/ The due d

Re: [OAUTH-WG] [IANA #1267319] expert review for draft-ietf-oauth-step-up-authn-challenge (oauth-parameters)

These two registrations look good to me. Thanks, — Justin > On Feb 27, 2023, at 6:11 PM, David Dong via RT > wrote: > > Dear Justin (cc: oauth wg), > > As the designated expert for the OAuth Token Introspection Response registry, > can you review the proposed registration in > draft-ietf-o