Dear WG,
I am new to oauth and wonder which WG would be responsible for reviewing a
Spec for Proxy authentication
https://httpwg.org/specs/rfc9110.html#auth.client.proxy using oauth or does
that spec already exist ?
Thank you
Markus
___
OAuth mai
To my knowledge that spec doesn't exist. I'll let others chime in if
they have seen a proposal in that regard.
In regards to which working group, given the core topic is OAuth
authorization, I would present it here at a minimum.
Thanks,
George
On 1/22/23 7:06 AM, Markus PlusNet wrote:
Dear
Thank you.
Regards
Markus
From: George Fletcher
Sent: Saturday, January 28, 2023 1:43 PM
To: Markus; oauth@ietf.org
Subject: Re: [OAUTH-WG] OAUTH for Web Proxy authentication
To my knowledge that spec doesn't exist. I'll let others chime in if they have
seen a proposal in that r
y 28, 2023 1:43 PM
> *To:* Markus; oauth@ietf.org
> *Subject:* Re: [OAUTH-WG] OAUTH for Web Proxy authentication
>
> To my knowledge that spec doesn't exist. I'll let others chime in if they
> have seen a proposal in that regard.
>
> In regards to which working group,
proxy based controls at
their borders to the Internet.
Regards
Markus
From: Rifaat Shekh-Yusef
Sent: Monday, January 30, 2023 6:12 PM
To: Markus
Cc: oauth@ietf.org ; George Fletcher
Subject: Re: [OAUTH-WG] OAUTH for Web Proxy authentication
Hi Markus,
As Goerge mentioned, there is no such
till require proxy
> based controls at their borders to the Internet.
>
> Regards
> Markus
>
> *From:* Rifaat Shekh-Yusef
> *Sent:* Monday, January 30, 2023 6:12 PM
> *To:* Markus
> *Cc:* oauth@ietf.org ; George Fletcher
> *Subject:* Re: [OAUTH-WG] OAUTH for Web P
o the Internet.
>
> Regards
> Markus
>
> From: Rifaat Shekh-Yusef <>
> Sent: Monday, January 30, 2023 6:12 PM
> To: Markus <>
> Cc: oauth@ietf.org <> ; George Fletcher <>
> Subject: Re: [OAUTH-WG] OAUTH for Web Proxy authentication
&g
@ietf.org
Subject: Re: [OAUTH-WG] OAUTH for Web Proxy authentication
Right - RFC 6750 doesn't explicitly define how to send an access token with the
Proxy-Authorization/Proxy-Authenticate headers, but states:
The Bearer authentication scheme is intended primarily for
server authentication
