Subject: Re: [Jwt-reg-review] Request to Register JWT Confirmation Method: x5t#S256

From: Mike Jones <[email-masked]>
Date: Fri, 6 Sep 2019 07:59:40 +0000

As a designated expert, I approve of the registration of the "x5t#S256" JWT confirmation method.

-- Mike

________________________________
From: Jwt-reg-review <[email-masked]> on behalf of Brian Campbell <bcampbell=[email-masked]>
Sent: Thursday, August 15, 2019 1:19:02 PM
To: [email-masked] <[email-masked]>; Hannes Tschofenig <[email-masked]>; John Bradley <[email-masked]>
Subject: Re: [Jwt-reg-review] Request to Register JWT Confirmation Method: x5t#S256

Looking at https://www.iana.org/assignments/jwt/jwt.xhtml#confirmation-methods<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.iana.org%2Fassignments%2Fjwt%2Fjwt.xhtml%23confirmation-methods&data=02%7C01%7CMichael.Jones%40microsoft.com%7C6c9070f97eee42ffabaf08d721bde3dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637014971775562898&sdata=WAzLW97QBoGdYE3uKyo%2BSefK9tRIH2%2BMRkoFN0xwDy0%3D&reserved=0> I see the DEs for the Confirmation Methods are John Bradley and Hannes Tschofenig. John is a co-author of the document in question so his approval is implied but also could be perceived as creating a conflict of interest. So per https://tools.ietf.org/html/rfc7800#section-6<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc7800%23section-6&data=02%7C01%7CMichael.Jones%40microsoft.com%7C6c9070f97eee42ffabaf08d721bde3dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637014971775572892&sdata=wPHyeJPnLaqB6htdX8nCamaVcIycD0i%2BpIxZGTNPf5k%3D&reserved=0> I think that means that this should be "defer[ed] to the judgment of the other Experts". The other experts are Hannes. Hannes co-chairs the WG that the document came out of so I'd hope and expect that he'd approve of the registration too. But I'll request that he respond in the affirmative to this message just for procedural sake.

On Tue, Aug 13, 2019 at 12:16 PM Brian Campbell <[email-masked]<mailto:[email-masked]>> wrote:
Please review the registration request for the "x5t#S256" JWT confirmation method found in section 9.1 of draft-ietf-oauth-mtls at https://tools.ietf.org/html/draft-ietf-oauth-mtls-16#section-9.1<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-ietf-oauth-mtls-16%23section-9.1&data=02%7C01%7CMichael.Jones%40microsoft.com%7C6c9070f97eee42ffabaf08d721bde3dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637014971775572892&sdata=kujgq25%2F2nJo0zmof%2BcBVOcS0zxWg8bcb0hqp%2BEGDFs%3D&reserved=0>

Thank you,
Brian Campbell - draft-ietf-oauth-mtls co-author

CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited..  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.