[OAUTH-WG] draft-parecki-oauth-browser-based-apps-00

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Tue, 06 November 2018 09:55 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5CBF130EB1 for <oauth@ietfa.amsl.com>; Tue, 6 Nov 2018 01:55:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s5sr0Ystj5Qz for <oauth@ietfa.amsl.com>; Tue, 6 Nov 2018 01:55:23 -0800 (PST)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80058.outbound.protection.outlook.com [40.107.8.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8508130FB4 for <oauth@ietf.org>; Tue, 6 Nov 2018 01:55:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vYBVK6A0Vhq20ONCKiBvgHCNIE7hhwsTKq1SfPiVokA=; b=h1oKooIKlbnFL0CNanthDJx4mHGwm5eeFkBJhVWIGiJK/2j9uXmaOBhNhrlRIPDrCzzPBJ70aSVn3MdwwK1p3zXag3VCxNSElsjKVEc/cNNW8WNPSIoLFU0q+9hg8bn0tb3ysEZDcUzmPmHFj+Z1nPIhgTxBv9MQj11FNogKejQ=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1325.eurprd08.prod.outlook.com (10.167.197.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.28; Tue, 6 Nov 2018 09:55:15 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::7165:6199:a54f:510c]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::7165:6199:a54f:510c%2]) with mapi id 15.20.1294.032; Tue, 6 Nov 2018 09:55:15 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: oauth <oauth@ietf.org>
Thread-Topic: draft-parecki-oauth-browser-based-apps-00
Thread-Index: AdR1tZqXsuKHZhdYRhq5sgoVL0Z8eg==
Date: Tue, 06 Nov 2018 09:55:15 +0000
Message-ID: <VI1PR0801MB211299BED6B61582DC33B873FACB0@VI1PR0801MB2112.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [2001:67c:370:128:655d:cd4f:e8ef:67c2]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1325; 6:j1PF+J3nVZc1u4EJzrTjEIM8gQ/mjl3JXIYTjCEdBZc7C7y/xsckz9viXd6gQat6l9/ermHRiQfhWGiEruJIsEt7TtJnTTA1IIf3aKDFSp4ASCzZ2CJD07V92Z2NYjTHW4+6zWoLQZRA2r7J22gd4xJDnG3IO3uBmb/7JfE36BkZRcf6werBhiIe2d1L93Z9fblx64KTVYeY5QAGo22f0VULP+gPIZi19avLt6Ui4vJ8VoKXEmoR1ADpGPMpDnfUkLfHC5atuPUxQD3zgMBrpwdsVLyvxRbCcBrmvnb9k0r5lNsVaytc77TjuCR/VPvWQT4HR2dYQzgAEIQklpkIvpk5F+1kyBWlTHKmmoz17MldtXBLMlGLEcxbTQPmwhtzlYL6trQZVOu2QqEWrJJr3o1rQeBcmauzrsF+Tsv+QjTIh2YJAHq7I+xvkl/qwZHwmjWwaseXgoAFMAWTFt5FMQ==; 5:qTChR/kExZoBhHa5gnnqutKB4R5O5vIvc+h3p2xveyXD3H/6fm2EDnYUVgiFmXVSvU7+dj1xc/OUx2sPHSfUE657/VRNRDM/9mq6OXEBvrtVhcG4Sj+67CEEFgYCs9NshYjO1aCPxFXbeyOHWjR0FUhgrJ4uLMdr4f5wvPwIrHQ=; 7:TE3t3LSgaIMXy3LUz/OUql4J0/NRvNtWsY7T897UEyDIt8O5KS9B6IsZa3wdF4OZUAKCJG1PdRHNcdlSa5r9wfET9EPnVynig5Idv1AfLkOpwWql5Y6/Xv5PmMAAxmO8EhnI7cNfRBnoSJ0c8wpw9w==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: fa8bb22c-e872-4ff3-baf8-08d643cdf393
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1325;
x-ms-traffictypediagnostic: VI1PR0801MB1325:
x-microsoft-antispam-prvs: <VI1PR0801MB1325EC9527ED8477BF342B79FACB0@VI1PR0801MB1325.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(120809045254105);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231382)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123564045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB1325; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1325;
x-forefront-prvs: 0848C1A6AA
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(136003)(366004)(346002)(39860400002)(396003)(189003)(199004)(40434004)(53754006)(105586002)(66574009)(72206003)(102836004)(71200400001)(99286004)(5660300001)(81166006)(81156014)(25786009)(8676002)(97736004)(6506007)(7696005)(71190400001)(186003)(305945005)(7736002)(106356001)(74316002)(2900100001)(68736007)(33656002)(8936002)(2906002)(6116002)(86362001)(256004)(46003)(966005)(5024004)(6306002)(9686003)(478600001)(53936002)(316002)(476003)(486006)(14454004)(14444005)(6916009)(55016002)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1325; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: f0gsC2bDcGYvxXftL/kRpx/KyKJTErLYc/RIdCT4s4VUOxeZkdi0GcTbAoVN90av1YyJ63EKfbKat4/38szJCVBhdaq1C7dU5xUmynMB8YHuJai7315eiwCxVSTtueCMhWDIWqnRvdg2nM2Dv6AvE2yH6GU7Tb5DdgzyECheQsvW9y0JJKFjiQpQE5WAUphAYB8D3nuSwR+k1RODWE34lXag+BFLWMXC9td07UHzhvf01BvJtFqYHlSWR8DsyIPnnYA7R7PU4VS/iICNiV0fzjxZuofTmvJfyw02tXBJapWcvZFJkT3KYrbJY7/KnL5/rTyNXVPWxfowmDe428jrFPu+JGJOCbQrL3A9uu1DyP0=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fa8bb22c-e872-4ff3-baf8-08d643cdf393
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2018 09:55:15.1834 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1325
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Mz3Uc30d5gVtIn7P4X26KNAO3oc>
Subject: [OAUTH-WG] draft-parecki-oauth-browser-based-apps-00
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Nov 2018 09:55:27 -0000

Hi all,

Today we were not able to talk about draft-parecki-oauth-browser-based-apps-00, which describes  "OAuth 2.0 for Browser-Based Apps".

Aaron put a few slides together, which can be found here:
https://datatracker.ietf.org/meeting/103/materials/slides-103-oauth-sessa-oauth-2-for-browser-based-apps-00.pdf

Your review of this new draft is highly appreciated.

Ciao
Hannes
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.