Subject: [OAUTH-WG] WGLC on OAuth Assertion Documents

From: "Tschofenig, Hannes (NSN - FI/Espoo)" <[email-masked]>
Date: Thu, 18 Jul 2013 08:29:16 +0000

Hi all, 

this is a working group last call for the assertion drafts. 

Here are the document: 
https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/ 
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/   
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

The assertion draft was sent to the IESG already and bounced back. With all three documents updated to address the concerns regarding lack of interoperability we will now try to send all three documents to the IESG in one shot (to provide the additional context of the abstract framework and the respective instantiations). 

Please send you comments to the OAuth mailing list by August 8, 2013. The longer WGLC is due to the IETF meeting but we would highly appreciate your feedback BEFORE the IETF meeting since you are likely going to read the documents in preparation for the meeting. 

When you read through the document try to spot places where the specification offers too much flexibility that could harm security and interoperability. 

Ciao
Hannes & Derek