
From nobody Fri Nov  1 02:06:31 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15B3B120152 for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 02:06:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JD_J0Jkjxz_c for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 02:06:26 -0700 (PDT)
Received: from mail-wm1-x333.google.com (mail-wm1-x333.google.com [IPv6:2a00:1450:4864:20::333]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AEC412012E for <oauth@ietf.org>; Fri,  1 Nov 2019 02:06:25 -0700 (PDT)
Received: by mail-wm1-x333.google.com with SMTP id 8so1405836wmo.0 for <oauth@ietf.org>; Fri, 01 Nov 2019 02:06:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:message-id:date :cc:to; bh=SV34MieBGahjsaNFfJQShsOXpym3D3y3v9kqoHMBIYE=; b=W2O58ecG2FIeset/NmmWnA/0khLcJexK1P1G1tlGOcWjrgIfqpONPM+u63Cz4P7xeF loasr1YrbhF0OIeINOFgY4+6sueIPo9eF9g8nPRW6Uul7N6isFiiKMWRRJBenvEFrDNK dX3U5L6FsjwKOPqK9i1CFPktO4M641YlIdCqU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:message-id:date:cc:to; bh=SV34MieBGahjsaNFfJQShsOXpym3D3y3v9kqoHMBIYE=; b=ff2TCfwiYU/HVzaQMuyc5o0IVlWPYovzvcEKE6lblwJY/rbDuYW+g+ChJGQ4bv6UDp V+M9dJaGjI8fpOO53SvWBh0HYfSWL/hI6Aegpa2LN/xzwQDlQLFW1Lpld82u6PP2q8kF Ntn0vNXr3Y0krBXsV/gOwcaPqxqxmI2dxOAIDj1dNcZ2X/CFNcjd0bWLN999aPwAfW6b X8bfN5hapZMUdvYxVKRXFtmK0+HTvuaeM/be0cA6xDtTRGydtyEh6+PXLs1umTKg3WyO dTh1lXEmqESWLc65Zj2diWuhvBrCQnOHzcEkRFeeB3aVoSmjbBHIo22IwmMlvC/dT5Bz HSMg==
X-Gm-Message-State: APjAAAXqZlcx2HVO8ugbVxdwiLpQuSlDdP/aBlEyppuZexDVaDXA8kgW 4bjgpjGlpAP4YOxlCxnFlVpW1ukNIG5HHFfxp029hDrv/tMHqAeETECCBHfePq0b7sWiuOEraoq taHqbsxAr8tywjmymox48mdQ/G4Z+1zFEVyCfsyiQUE7FsrnHWjgbvDvTLQjCiTw=
X-Google-Smtp-Source: APXvYqyLbPQ+TUc4jn+2qAAYFCv7SGrMK8m+srUPBQ2rp5HBTf1eaLINzddrUbe86f6hiqs+JavFvw==
X-Received: by 2002:a1c:6a1a:: with SMTP id f26mr2325722wmc.19.1572599183297;  Fri, 01 Nov 2019 02:06:23 -0700 (PDT)
Received: from ?IPv6:2a01:4c8:f:b76f:8df3:da5f:6b92:be99? ([2a01:4c8:f:b76f:8df3:da5f:6b92:be99]) by smtp.gmail.com with ESMTPSA id q14sm8914745wre.27.2019.11.01.02.06.22 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 01 Nov 2019 02:06:22 -0700 (PDT)
Content-Type: multipart/alternative; boundary=Apple-Mail-36F29124-5779-4973-AA0D-E72B19D5EDD4
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Message-Id: <5B45FBC4-F342-48BD-BE88-C8926673CB51@forgerock.com>
Date: Fri, 1 Nov 2019 09:06:20 +0000
Cc: "oauth@ietf.org" <oauth@ietf.org>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/nTGFYL5QQYB1Io-TGYfNuFQPpGY>
Subject: Re: [OAUTH-WG] [UNVERIFIED SENDER] Re: client certs and TLS Terminating Reverse Proxies (was Re: I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 09:06:28 -0000

--Apple-Mail-36F29124-5779-4973-AA0D-E72B19D5EDD4
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

=EF=BB=BF
>=20
>> On 31 Oct 2019, at 21:09, Richard Backman, Annabelle <richanna@amazon.com=
> wrote:
> =EF=BB=BF
> The comparison the bearer tokens is illustrative of the problems I and oth=
ers are pointing out:
> Bearer tokens are embedded in the value of the header, not the header itse=
lf, which partially alleviates the concern I raised regarding request signin=
g algorithms.
> Bearer tokens are typically relatively short-lived, providing some mitigat=
ion against exfiltration through logs.
> Bearer tokens are typically dynamically generated, and are therefore less l=
ikely to be embedded in source code or config files in a project=E2=80=99s r=
epository.
> Bearer tokens are called tokens, and are presented as secrets and are alwa=
ys expected to be treated as secrets.
> =20
> The random header name is effectively an infinite-lifetime, statically def=
ined bearer token presented in a way that does not at all make clear and obv=
ious that it is a secret that must be protected, and in fact makes it more l=
ikely that it will be revealed, rendering it useless. And like all bearer to=
kens, even under ideal conditions it by definition CANNOT BE USED TO AUTHENT=
ICATE THE SENDER.

Are you saying bearer credentials cannot be used for authentication? Passwor=
ds? Session cookies? API keys?

You can change the header name periodically if you really think it might lea=
k.

> =20
> There is a certain amount of irony in the idea of the security of a Mutual=
 TLS deployment ultimately coming down to a bearer-token header name passed b=
etween the reverse proxy and the protected service. =F0=9F=98=82

Well if you don=E2=80=99t do this then in the situations where it would come=
 down to a bearer token, it currently comes down to absolutely nothing at al=
l.

Let=E2=80=99s have a look at some concrete examples, as they are rather easy=
 to find.=20

In 2014, Tomcat found and fixed CVE-2014-0099 that was an integer overflow b=
ug that allowed arbitrary request smuggling when running behind a reverse pr=
oxy, bypassing all request header sanitisation in the RP. If your app was tr=
usting an X-SSL-Cert header for authentication then this is likely to lead t=
o complete compromise.

Here=E2=80=99s an example of some people who spent hours after a DoS attack b=
efore they realised all the IP addresses in their server logs were spoofed b=
ecause HAProxy hadn=E2=80=99t been configured to strip X-Forwarded-For heade=
rs that the backend was trusting. https://serverfault.com/questions/868362/p=
revent-x-forwarded-for-spoofing-in-haproxy?noredirect=3D1

Here=E2=80=99s another one with somebody wondering why their logs contain pr=
ivate space IP addresses: https://serverfault.com/questions/908724/private-a=
ddress-space-ip-found-in-x-forwarded-for

Common theme: apps often blindly trust standard header names by default, whi=
le reverse proxies/load balancers commonly forward them by default.=20

Here=E2=80=99s a security researcher writing about how to spoof an SSL clien=
t certificate header and listing the commonly used header names for several r=
everse proxies, along with simple ways to bypass header sanitisation: https:=
//medium.com/@d0znpp/https-client-certificate-authentication-security-issues=
-part-1-3-ae59514357b1

Here=E2=80=99s an old critical vulnerability in Shibboleth that led to arbit=
rary spoofing of security attributes due to ambiguous normalization of heade=
r names after filtering: http://shibboleth.net/community/advisories/secadv_2=
0060615.txt

Here=E2=80=99s an example of people misconfiguring Envoy=E2=80=99s support f=
or client certificate forwarding and then discovering it can be spoofed. htt=
ps://www.bountysource.com/issues/70466221-correct-behavior-for-x-forwarded-c=
lient-cert=20

Here=E2=80=99s an example of an app being misconfigured when parsing X-Forwa=
rded-For headers behind an RP leading to a bypass of API key authentication:=
 https://github.com/home-assistant/home-assistant/issues/14345

If you search around of google or stack overflow you can easily find dozens m=
ore examples of people being bitten by misconfigured RPs and apps trusting h=
eaders. There is a good reason why Security Misconfiguration is in the OWASP=
 top 10.=20

Adding a random string to a header name means that in the majority of cases t=
hese all-too-common failures don=E2=80=99t immediately lead to a catastrophi=
c compromise of your app. Sure, its not a perfect solution, but it usually s=
tops a common vulnerability being immediately exploitable. Wouldn=E2=80=99t y=
ou rather that an attacker has to go to a little more trouble than trying a l=
ist of a dozen widely used header names in this situation?

It is not helpful to tell people not to make such a simple and essentially c=
ost-free tweak to their configuration because in some world they might enabl=
e trace-level logging of all request headers in a production environment, or=
 their network engineers might post packet captures in powerpoint presentati=
ons, or they might simultaneously be using headers to communicate security i=
nformation to the backend while allowing untrusted clients on the same netwo=
rk to sniff network traffic in the clear.

The alternative at the moment is to do nothing at all, which we know leads t=
o potential vulnerabilities because there is ample evidence in the public re=
cord. Stack overflow is a catalogue of people confused about configuring rev=
erse proxy header forwarding. And yet This One Weird Trick Could Save You =46rom=
 Reverse Proxy Trusted Header Misconfiguration Vulnerabilities!

> =20
> > if you forget to validate the signature *nothing fails*
> =20
> Replace the HMAC with encryption and you solve that problem, as it forces t=
he service to decrypt the value using the correct key in order to access the=
 client certificate data. Whether or not that=E2=80=99s worth doing is somet=
hing we can debate in the context of an actual proposal.

Sure, and if the final proposal for a standard header comes with optional/re=
commended support for authenticated encryption of values (and reverse proxy v=
endors actually implement it) then I=E2=80=99ll be happy enough. And when th=
at finally reaches a good level of adoption I=E2=80=99d advise people to use=
 it. Just don=E2=80=99t make it a JWT with a choice of a dozen algorithms.=20=


=E2=80=94 Neil

--Apple-Mail-36F29124-5779-4973-AA0D-E72B19D5EDD4
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">=EF=BB=BF<meta http-equiv=3D=
"content-type" content=3D"text/html; charset=3Dutf-8"><div dir=3D"ltr"><bloc=
kquote type=3D"cite">On 31 Oct 2019, at 21:09, Richard Backman, Annabelle &l=
t;richanna@amazon.com&gt; wrote:<br><br></blockquote></div><blockquote type=3D=
"cite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle21
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1107043525;
	mso-list-type:hybrid;
	mso-list-template-ids:813078860 -439984036 67698691 67698693 676986=
89 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;
	mso-fareast-font-family:"MS Mincho";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1">
<p class=3D"MsoNormal">The comparison the bearer tokens is illustrative of t=
he problems I and others are pointing out:<o:p></o:p></p>
<ul style=3D"margin-top:0in" type=3D"disc">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 l=
fo1">Bearer tokens are embedded in the value of the header, not the header i=
tself, which partially alleviates the concern I raised regarding request sig=
ning algorithms.<o:p></o:p></li><li class=3D"MsoListParagraph" style=3D"marg=
in-left:0in;mso-list:l0 level1 lfo1">Bearer tokens are typically relatively s=
hort-lived, providing some mitigation against exfiltration through logs.<o:p=
></o:p></li><li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list=
:l0 level1 lfo1">Bearer tokens are typically dynamically generated, and are t=
herefore less likely to be embedded in source code or config files in a proj=
ect=E2=80=99s repository.<o:p></o:p></li><li class=3D"MsoListParagraph" styl=
e=3D"margin-left:0in;mso-list:l0 level1 lfo1">Bearer tokens are called
<i>tokens</i>, and are presented as secrets and are always expected to be tr=
eated as secrets.
<o:p></o:p></li></ul>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The random header name is effectively an infinite-lif=
etime, statically defined bearer token presented in a way that does not at a=
ll make clear and obvious that it is a secret that must be protected, and in=
 fact makes it more likely that
 it will be revealed, rendering it useless. And like all bearer tokens, even=
 under ideal conditions it by definition CANNOT BE USED TO AUTHENTICATE THE S=
ENDER.</p></div></div></blockquote><div dir=3D"ltr"><br></div><div dir=3D"lt=
r">Are you saying bearer credentials cannot be used for authentication? Pass=
words? Session cookies? API keys?</div><div dir=3D"ltr"><br></div><div dir=3D=
"ltr">You can change the header name periodically if you really think it mig=
ht leak.</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"W=
ordSection1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">There is a certain amount of irony in the idea of the=
 security of a Mutual TLS deployment ultimately coming down to a bearer-toke=
n header name passed between the reverse proxy and the protected service.
<span style=3D"font-family:&quot;Apple Color Emoji&quot;">=F0=9F=98=82</span=
></p></div></div></blockquote><div dir=3D"ltr"><br></div>Well if you don=E2=80=
=99t do this then in the situations where it would come down to a bearer tok=
en, it currently comes down to absolutely nothing at all.</div><div dir=3D"l=
tr"><br></div><div dir=3D"ltr">Let=E2=80=99s have a look at some concrete ex=
amples, as they are rather easy to find.&nbsp;</div><div dir=3D"ltr"><br></d=
iv><div dir=3D"ltr">In 2014, Tomcat found and fixed CVE-2014-0099 that was a=
n integer overflow bug that allowed arbitrary request smuggling when running=
 behind a reverse proxy, bypassing all request header sanitisation in the RP=
. If your app was trusting an X-SSL-Cert header for authentication then this=
 is likely to lead to complete compromise.</div><div dir=3D"ltr"><br></div><=
div dir=3D"ltr"><div>Here=E2=80=99s an example of some people who spent hour=
s after a DoS attack before they realised all the IP addresses in their serv=
er logs were spoofed because HAProxy hadn=E2=80=99t been configured to strip=
 X-Forwarded-For headers that the backend was trusting.&nbsp;<a href=3D"http=
s://serverfault.com/questions/868362/prevent-x-forwarded-for-spoofing-in-hap=
roxy?noredirect=3D1">https://serverfault.com/questions/868362/prevent-x-forw=
arded-for-spoofing-in-haproxy?noredirect=3D1</a></div><div><br></div><div>He=
re=E2=80=99s another one with somebody wondering why their logs contain priv=
ate space IP addresses:&nbsp;<a href=3D"https://serverfault.com/questions/90=
8724/private-address-space-ip-found-in-x-forwarded-for">https://serverfault.=
com/questions/908724/private-address-space-ip-found-in-x-forwarded-for</a></=
div><div><br></div><div>Common theme: apps often blindly trust standard head=
er names by default, while reverse proxies/load balancers commonly forward t=
hem by default.&nbsp;</div><div><br></div><div>Here=E2=80=99s a security res=
earcher writing about how to spoof an SSL client certificate header and list=
ing the commonly used header names for several reverse proxies, along with s=
imple ways to bypass header sanitisation:&nbsp;<a href=3D"https://medium.com=
/@d0znpp/https-client-certificate-authentication-security-issues-part-1-3-ae=
59514357b1">https://medium.com/@d0znpp/https-client-certificate-authenticati=
on-security-issues-part-1-3-ae59514357b1</a></div><div><br></div><div>Here=E2=
=80=99s an old critical vulnerability in Shibboleth that led to arbitrary sp=
oofing of security attributes due to ambiguous normalization of header names=
 after filtering:&nbsp;<a href=3D"http://shibboleth.net/community/advisories=
/secadv_20060615.txt">http://shibboleth.net/community/advisories/secadv_2006=
0615.txt</a></div><div><br></div><div>Here=E2=80=99s an example of people mi=
sconfiguring Envoy=E2=80=99s support for client certificate forwarding and t=
hen discovering it can be spoofed.&nbsp;<a href=3D"https://www.bountysource.=
com/issues/70466221-correct-behavior-for-x-forwarded-client-cert">https://ww=
w.bountysource.com/issues/70466221-correct-behavior-for-x-forwarded-client-c=
ert</a>&nbsp;</div><div><br></div><div>Here=E2=80=99s an example of an app b=
eing misconfigured when parsing X-Forwarded-For headers behind an RP leading=
 to a bypass of API key authentication:&nbsp;<a href=3D"https://github.com/h=
ome-assistant/home-assistant/issues/14345">https://github.com/home-assistant=
/home-assistant/issues/14345</a></div><div><br></div><div>If you search arou=
nd of google or stack overflow you can easily find dozens more examples of p=
eople being bitten by misconfigured RPs and apps trusting headers. There is a=
 good reason why Security Misconfiguration is in the OWASP top 10.&nbsp;</di=
v><div><br></div><div>Adding a random string to a header name means that in t=
he majority of cases these all-too-common failures don=E2=80=99t immediately=
 lead to a catastrophic compromise of your app. Sure, its not a perfect solu=
tion, but it usually stops a common vulnerability being immediately exploita=
ble. Wouldn=E2=80=99t you rather that an attacker has to go to a little more=
 trouble than trying a list of a dozen widely used header names in this situ=
ation?</div><div><br></div><div>It is not helpful to tell people not to make=
 such a simple and essentially cost-free tweak to their configuration becaus=
e in some world they might enable trace-level logging of all request headers=
 in a production environment, or their network engineers might post packet c=
aptures in powerpoint presentations, or they might simultaneously be using h=
eaders to communicate security information to the backend while allowing unt=
rusted clients on the same network to sniff network traffic in the clear.</d=
iv><div><br></div><div>The alternative at the moment is to do nothing at all=
, which we know leads to potential vulnerabilities because there is ample ev=
idence in the public record. Stack overflow is a catalogue of people confuse=
d about configuring reverse proxy header forwarding. And yet This One Weird T=
rick Could Save You =46rom Reverse Proxy Trusted Header Misconfiguration Vul=
nerabilities!</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=
=3D"WordSection1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; if you forget to validate the signature *nothing=
 fails*<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Replace the HMAC with encryption and you solve that p=
roblem, as it forces the service to decrypt the value using the correct key i=
n order to access the client certificate data. Whether or not that=E2=80=99s=
 worth doing is something we can debate
 in the context of an actual proposal.</p></div></div></blockquote><div><br>=
</div><div>Sure, and if the final proposal for a standard header comes with o=
ptional/recommended support for authenticated encryption of values (and reve=
rse proxy vendors actually implement it) then I=E2=80=99ll be happy enough. A=
nd when that finally reaches a good level of adoption I=E2=80=99d advise peo=
ple to use it. Just don=E2=80=99t make it a JWT with a choice of a dozen alg=
orithms.&nbsp;</div><div><br></div><div>=E2=80=94 Neil</div><blockquote type=
=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><div>
</div>
</div>


</div></blockquote></div></body></html>=

--Apple-Mail-36F29124-5779-4973-AA0D-E72B19D5EDD4--


From nobody Fri Nov  1 09:38:08 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18913120A8C; Fri,  1 Nov 2019 09:38:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Level: 
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ECywVNzaKrOc; Fri,  1 Nov 2019 09:38:04 -0700 (PDT)
Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 539CB120A99; Fri,  1 Nov 2019 09:37:58 -0700 (PDT)
Received: by mail-io1-xd31.google.com with SMTP id u8so11535590iom.5; Fri, 01 Nov 2019 09:37:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OOlWUtdUCsL8iP2nZbYfJ5JLlvrxPaII0wsV218p4c8=; b=UMAZteTv7ZS1IeaqJdb8wwBv75PtkFb45ylJcCLf9FJpEb6Odne20JdVwv7jdP/f4r JTr20Iv9mvsMusB1XLBLf2+pCVnBNagpfJNXpURAwfx2nffy/T6kewGUdoKl6Vv1mibL Gickl9h9xbVLcWI2OhWmaqMDxaFGrxBmXR3Am2o39sfQbpGB0SxGnUcpESgMzJmPpbAj XBWtUIR+kEL9JbGOnNOAXZVvQCGP1jVintm0OCovDWsjbFkb8SHQjn8lE3BpG5IwURSM /QGKXy1v9WXA7+opCyhr5dtaoCLJGSrZapGwdm7H3XvV7y0076VDuQ5PQpOWEc+I85eW SE6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OOlWUtdUCsL8iP2nZbYfJ5JLlvrxPaII0wsV218p4c8=; b=iOdv4XLf9vr07IV9J1M5iNLGb9PMZljCVHFGHPDrI69MARGfHh40M/iBajI/+U5K0q /+VoH0JCwkEr//mhqHENl6FzfHhp5SGuE84m57FMs7TW7nbUHoKm6YE1rF1LcaDItf+V szr/T1Qr+SgkL9SZukf/ohrcvaXo01slL5jLJXZMvZ+PbD1IMaRBsBcRh02gJLgL2SdK LT0wwUFzjIyhMoqGhUVv9/ZzRKopanG7oxQrO+Whh2uD5T4E5ICOV8legRxWPGOUdpvY 6c1sb24zhUg1TSN5TXRpNfGMeYeNoeRUJkV1b+gignBGpx6j1+jPIKzoJu9WOcFKFq/N CPZA==
X-Gm-Message-State: APjAAAUKP4vIGHTGeHnLT3+y3lEj/bez0drr54b9wbNveAyIN3dAKANe IK3QvlSD9ShWmd0hmOcDcNLNKWPXiiktkU03IsJIIJ7V
X-Google-Smtp-Source: APXvYqytCU6aR7MS6TbZaF9EaK681MQeDoIiUpjE0kEtHtfXABOfTmRisjr4jddfiHiY564orq2pvSZ7LuARXDdbP9k=
X-Received: by 2002:a02:1c41:: with SMTP id c62mr8468338jac.132.1572626277520;  Fri, 01 Nov 2019 09:37:57 -0700 (PDT)
MIME-Version: 1.0
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com> <E85574E6-EE77-41B6-97A5-7CE6056E41ED@lodderstedt.net> <CA+k3eCTqHfX4_aqH1UC+7ZOoonmk5iez5k=gGDo7uMs9Pb3z1A@mail.gmail.com> <CAD9ie-sxqwW66dWX8Ef-cWcKG9vA6ueVbB=BJt7YJciCtG3b+Q@mail.gmail.com> <CAEKOcs2pfFa1=ss-ZoeSH=EtzoWY7AXZL1eZF3rykOBAGbmcoA@mail.gmail.com>
In-Reply-To: <CAEKOcs2pfFa1=ss-ZoeSH=EtzoWY7AXZL1eZF3rykOBAGbmcoA@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Fri, 1 Nov 2019 12:37:46 -0400
Message-ID: <CAGL6epLOPOnw5X3vOBT20tb=bFZr33v+sCTfTSdbNGrqOrVL_A@mail.gmail.com>
To: Travis Spencer <travis.spencer@curity.io>
Cc: oauth <oauth@ietf.org>, oauth-chairs@ietf.org
Content-Type: multipart/alternative; boundary="000000000000a2dbd905964b9669"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/oKJ_r4zfj8eLIfOKhKZg-jtM0Gs>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 16:38:06 -0000

--000000000000a2dbd905964b9669
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Spencer

Sure. When are yo planning on submitting the draft?

Regards,
 Rifaat


On Mon, Oct 14, 2019 at 5:20 AM Travis Spencer <travis.spencer@curity.io>
wrote:

> I would like a slot to talk about a new draft I'm going to submit in the
> coming weeks related to claims (i.e., structured scopes). Would that be
> possible?
>
> On Fri, Oct 4, 2019 at 11:15 PM Dick Hardt <dick.hardt@gmail.com> wrote:
>
>> I'd like a slot to provide an update on Reciprocal OAuth.
>> =E1=90=A7
>>
>> On Fri, Oct 4, 2019 at 2:12 PM Brian Campbell <bcampbell=3D
>> 40pingidentity.com@dmarc.ietf.org> wrote:
>>
>>> Hello chairs,
>>>
>>> I'd like to request some agenda time to present on:
>>> https://tools.ietf.org/html/draft-fett-oauth-dpop
>>>
>>> Thank you,
>>> Brian
>>>
>>> On Fri, Oct 4, 2019 at 3:09 PM Torsten Lodderstedt <
>>> torsten@lodderstedt.net> wrote:
>>>
>>>> Hi chairs,
>>>>
>>>> I would like to request the following slots:
>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-rar
>>>> <https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-00>
>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-par
>>>> <https://tools.ietf.org/html/draft-lodderstedt-oauth-par-00>
>>>> - Security BCP
>>>>
>>>> kind regards,
>>>> Torsten..
>>>>
>>>> Am 04.10.2019 um 11:08 schrieb IETF Meeting Session Request Tool <
>>>> session-request@ietf..org <session-request@ietf.org>>:
>>>>
>>>> =EF=BB=BF
>>>>
>>>> A new meeting session request has just been submitted by Hannes
>>>> Tschofenig, a Chair of the oauth working group.
>>>>
>>>>
>>>> ---------------------------------------------------------
>>>> Working Group Name: Web Authorization Protocol
>>>> Area Name: Security Area
>>>> Session Requester: Hannes Tschofenig
>>>>
>>>> Number of Sessions: 2
>>>> Length of Session(s):  1.5 Hours, 1.5 Hours
>>>> Number of Attendees: 50
>>>> Conflicts to Avoid:
>>>> Chair Conflict: acme tls rats sipcore anima
>>>> Technology Overlap: ace secevent teep suit core tokbind saag
>>>>
>>>>
>>>>
>>>> People who must be present:
>>>>  Roman Danyliw
>>>>  Hannes Tschofenig
>>>>  Rifaat Shekh-Yusef
>>>>
>>>> Resources Requested:
>>>>
>>>> Special Requests:
>>>>
>>>> ---------------------------------------------------------
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>
>>> *CONFIDENTIALITY NOTICE: This email may contain confidential and
>>> privileged material for the sole use of the intended recipient(s). Any
>>> review, use, distribution or disclosure by others is strictly
>>> prohibited...  If you have received this communication in error, please
>>> notify the sender immediately by e-mail and delete the message and any =
file
>>> attachments from your computer. Thank you.*
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>

--000000000000a2dbd905964b9669
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">Hi Spencer<div><br></div><div>Sure. When =
are yo planning on submitting the draft?</div><div><br></div><div>Regards,<=
/div><div>=C2=A0Rifaat</div><div><br></div></div><br><div class=3D"gmail_qu=
ote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Oct 14, 2019 at 5:20 AM =
Travis Spencer &lt;<a href=3D"mailto:travis.spencer@curity.io">travis.spenc=
er@curity.io</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddin=
g-left:1ex"><div dir=3D"ltr">I would like a slot to talk about a new draft =
I&#39;m going to submit in the coming weeks related to claims (i.e., struct=
ured scopes). Would that be possible?<br></div><br><div class=3D"gmail_quot=
e"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Oct 4, 2019 at 11:15 PM Di=
ck Hardt &lt;<a href=3D"mailto:dick.hardt@gmail.com" target=3D"_blank">dick=
.hardt@gmail.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pa=
dding-left:1ex"><div dir=3D"ltr">I&#39;d like a slot to provide an update o=
n Reciprocal OAuth.</div><div hspace=3D"streak-pt-mark" style=3D"max-height=
:1px"><img alt=3D"" style=3D"width: 0px; max-height: 0px; overflow: hidden;=
" src=3D"https://mailfoogae.appspot.com/t?sender=3DaZGljay5oYXJkdEBnbWFpbC5=
jb20%3D&amp;type=3Dzerocontent&amp;guid=3D07a95f01-97cf-40e9-8e51-249ac89ff=
857"><font size=3D"1" color=3D"#ffffff">=E1=90=A7</font></div><br><div clas=
s=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Oct 4, 2019=
 at 2:12 PM Brian Campbell &lt;bcampbell=3D<a href=3D"mailto:40pingidentity=
.com@dmarc.ietf.org" target=3D"_blank">40pingidentity.com@dmarc.ietf.org</a=
>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px=
 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><di=
v dir=3D"ltr"><div>Hello chairs,</div><div><br></div><div>I&#39;d like to r=
equest some agenda time to present on:<br></div><div><a href=3D"https://too=
ls.ietf.org/html/draft-fett-oauth-dpop" target=3D"_blank">https://tools.iet=
f.org/html/draft-fett-oauth-dpop</a> <br></div><div><br></div><div>Thank yo=
u, <br></div><div>Brian <br></div></div><br><div class=3D"gmail_quote"><div=
 dir=3D"ltr" class=3D"gmail_attr">On Fri, Oct 4, 2019 at 3:09 PM Torsten Lo=
dderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank">=
torsten@lodderstedt.net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_=
quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,=
204);padding-left:1ex"><div dir=3D"auto"><div dir=3D"ltr">Hi chairs,</div><=
div dir=3D"ltr"><br></div><div dir=3D"ltr">I would like to request the foll=
owing slots:</div><div dir=3D"ltr">-=C2=A0<a href=3D"https://tools.ietf.org=
/html/draft-lodderstedt-oauth-rar-00" target=3D"_blank">https://tools.ietf.=
org/html/draft-lodderstedt-oauth-rar</a></div><div dir=3D"ltr">-=C2=A0<a hr=
ef=3D"https://tools.ietf.org/html/draft-lodderstedt-oauth-par-00" target=3D=
"_blank">https://tools.ietf.org/html/draft-lodderstedt-oauth-par</a></div><=
div dir=3D"ltr">- Security BCP=C2=A0</div><div dir=3D"ltr"><br></div><div d=
ir=3D"ltr">kind regards,</div><div dir=3D"ltr">Torsten..</div><div dir=3D"l=
tr"><br><blockquote type=3D"cite">Am 04.10.2019 um 11:08 schrieb IETF Meeti=
ng Session Request Tool &lt;<a href=3D"mailto:session-request@ietf.org" tar=
get=3D"_blank">session-request@ietf..org</a>&gt;:<br><br></blockquote></div=
><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF<span></span><br><span=
></span><br><span>A new meeting session request has just been submitted by =
Hannes Tschofenig, a Chair of the oauth working group.</span><br><span></sp=
an><br><span></span><br><span>---------------------------------------------=
------------</span><br><span>Working Group Name: Web Authorization Protocol=
</span><br><span>Area Name: Security Area</span><br><span>Session Requester=
: Hannes Tschofenig</span><br><span></span><br><span>Number of Sessions: 2<=
/span><br><span>Length of Session(s): =C2=A01.5 Hours, 1.5 Hours</span><br>=
<span>Number of Attendees: 50</span><br><span>Conflicts to Avoid: </span><b=
r><span> Chair Conflict: acme tls rats sipcore anima</span><br><span> Techn=
ology Overlap: ace secevent teep suit core tokbind saag</span><br><span></s=
pan><br><span></span><br><span></span><br><span>People who must be present:=
</span><br><span> =C2=A0Roman Danyliw</span><br><span> =C2=A0Hannes Tschofe=
nig</span><br><span> =C2=A0Rifaat Shekh-Yusef</span><br><span></span><br><s=
pan>Resources Requested:</span><br><span></span><br><span>Special Requests:=
</span><br><span></span><br><span>-----------------------------------------=
----------------</span><br><span></span><br><span>_________________________=
______________________</span><br><span>OAuth mailing list</span><br><span><=
a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a></span=
><br><span><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=
=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a></span><br></div=
></blockquote></div>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor non=
e 0px;vertical-align:baseline;background:none 0% 0% repeat scroll rgb(255,2=
55,255);font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,=
&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Ne=
ue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><span style=3D"margin:0px;pa=
dding:0px;border:0px none;outline:currentcolor none 0px;vertical-align:base=
line;background:none 0% 0% repeat scroll transparent;font-family:proxima-no=
va-zendesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,=
Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-s=
erif;font-weight:600"><font size=3D"2">CONFIDENTIALITY NOTICE: This email m=
ay contain confidential and privileged material for the sole use of the int=
ended recipient(s). Any review, use, distribution or disclosure by others i=
s strictly prohibited...=C2=A0 If you have received this communication in e=
rror, please notify the sender immediately by e-mail and delete the message=
 and any file attachments from your computer. Thank you.</font></span></i>_=
______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>
</blockquote></div></div>

--000000000000a2dbd905964b9669--


From nobody Fri Nov  1 09:40:23 2019
Return-Path: <jricher@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4807F1209DA; Fri,  1 Nov 2019 09:40:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QRFRUv0T1Lol; Fri,  1 Nov 2019 09:40:19 -0700 (PDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCBCF1209CC; Fri,  1 Nov 2019 09:39:56 -0700 (PDT)
Received: from [192.168.1.7] (static-71-174-62-56.bstnma.fios.verizon.net [71.174.62.56]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xA1GdsAn006967 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 1 Nov 2019 12:39:55 -0400
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Justin Richer <jricher@mit.edu>
In-Reply-To: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com>
Date: Fri, 1 Nov 2019 12:39:54 -0400
Cc: oauth <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <54454966-B71A-40AC-8525-4B85F46B5820@mit.edu>
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com>
To: oauth-chairs@ietf.org
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/br1u8V55gyArFsTIeKuxEzY7zVI>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 16:40:21 -0000

I=E2=80=99d like to present a readout of the TXAuth BoF, which is =
happening earlier in the week.=20

 =E2=80=94 Justin

> On Oct 4, 2019, at 2:08 PM, IETF Meeting Session Request Tool =
<session-request@ietf.org> wrote:
>=20
>=20
>=20
> A new meeting session request has just been submitted by Hannes =
Tschofenig, a Chair of the oauth working group.
>=20
>=20
> ---------------------------------------------------------
> Working Group Name: Web Authorization Protocol
> Area Name: Security Area
> Session Requester: Hannes Tschofenig
>=20
> Number of Sessions: 2
> Length of Session(s):  1.5 Hours, 1.5 Hours
> Number of Attendees: 50
> Conflicts to Avoid:=20
> Chair Conflict: acme tls rats sipcore anima
> Technology Overlap: ace secevent teep suit core tokbind saag
>=20
>=20
>=20
> People who must be present:
>  Roman Danyliw
>  Hannes Tschofenig
>  Rifaat Shekh-Yusef
>=20
> Resources Requested:
>=20
> Special Requests:
>=20
> ---------------------------------------------------------
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Fri Nov  1 09:42:13 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6718E1209CC; Fri,  1 Nov 2019 09:42:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A7gEFspjeuD3; Fri,  1 Nov 2019 09:42:09 -0700 (PDT)
Received: from mail-io1-xd33.google.com (mail-io1-xd33.google.com [IPv6:2607:f8b0:4864:20::d33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8C94120019; Fri,  1 Nov 2019 09:42:08 -0700 (PDT)
Received: by mail-io1-xd33.google.com with SMTP id c11so11513547iom.10; Fri, 01 Nov 2019 09:42:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ukoo18dZy2U6RMya3dZaE689rXnDa+DkGVeLeeAtEAs=; b=TGuUUq/uznTZrwWPGTfnw8DmIvW28ockg+TukPTBTOozDjJbi14yj5wgXO+oybX8dw T/BuxyXkpkQZlDM/4tUahrwn1XLoJxafVq1uhNoacvd6VYDO2oY8f0z8fMpUbcu8NZzX GRTQCKXxymv5nIUgNS8+wcZLaMnk0IsJICGPz21RSpFZlGWvcGoYMtTOXfUNhWNdZsyP V2hrPbGfJCzVVrxXKwtCvF/HE5ZBbzjxYD+XgNBPIBkUgDT+9J5rs75BVihgvJbbfW75 75uJbmjH+DuIUqrsml3dzG6f935BNYh3xq86l65U8sEOAcGPKVlGYW4TxLxa+DDXPzss pRRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ukoo18dZy2U6RMya3dZaE689rXnDa+DkGVeLeeAtEAs=; b=FpKDM5+QG5bBBvrX3Claj2m7IS+f5JI3JCWi0WU2qo7K/td7Hwv8AAjXNZzrsRt3/R khuhYaMNUcfNhU52XsUBHRURDiPcV9/lwa91/ypj+3XU3z9QJouJQ/wTgulwDH0/BB2U REVBzixBf3is7aiHMFgPav4XENLLdzZN7eTK1I6HeQMwz6/KH0Z7GpXYDyBMRGObuvJx EMBsb7CO8/0T2QOV827AYWrPr3cpM+2maJT+GwO/TU3YUQbJ6niJaSeir7g2h4Gr/ZzH VVaPUNc93080PFk2lLcLP3Ih1tvk+F8UlgybFTL744JgeA2DBgmig+4QXSqDYa8UFUBW 2Wgw==
X-Gm-Message-State: APjAAAXrKcGl7qWnIADn5GUKXJztxk1wW3SFsvGGh7G4i68gjU40qoUA 17vjADqxKlPOpIn4K5tpbBNR/yFiqMCRJAL0bIjrGHgM
X-Google-Smtp-Source: APXvYqzBDzBfjRyN5q89os66Kv8WpWS3s2I9ijhcaFy12UhMa7rrCTarOIoBl/6YJE7UXptLCbN2cVew7h100azaGCs=
X-Received: by 2002:a02:7829:: with SMTP id p41mr3275204jac.73.1572626527250;  Fri, 01 Nov 2019 09:42:07 -0700 (PDT)
MIME-Version: 1.0
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com> <54454966-B71A-40AC-8525-4B85F46B5820@mit.edu>
In-Reply-To: <54454966-B71A-40AC-8525-4B85F46B5820@mit.edu>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Fri, 1 Nov 2019 12:41:56 -0400
Message-ID: <CAGL6ep+Mascjp-_GrAM6oNehOdnueG80=rwSd2oxDGKsxtgtnA@mail.gmail.com>
To: Justin Richer <jricher@mit.edu>
Cc: oauth-chairs@ietf.org, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000856e4705964ba5d0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/AEV8_jtOh5j_W8Y-znfxJJM--J8>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 16:42:12 -0000

--000000000000856e4705964ba5d0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Sure.

On Fri, Nov 1, 2019 at 12:40 PM Justin Richer <jricher@mit.edu> wrote:

> I=E2=80=99d like to present a readout of the TXAuth BoF, which is happeni=
ng
> earlier in the week.
>
>  =E2=80=94 Justin
>
> > On Oct 4, 2019, at 2:08 PM, IETF Meeting Session Request Tool <
> session-request@ietf.org> wrote:
> >
> >
> >
> > A new meeting session request has just been submitted by Hannes
> Tschofenig, a Chair of the oauth working group.
> >
> >
> > ---------------------------------------------------------
> > Working Group Name: Web Authorization Protocol
> > Area Name: Security Area
> > Session Requester: Hannes Tschofenig
> >
> > Number of Sessions: 2
> > Length of Session(s):  1.5 Hours, 1.5 Hours
> > Number of Attendees: 50
> > Conflicts to Avoid:
> > Chair Conflict: acme tls rats sipcore anima
> > Technology Overlap: ace secevent teep suit core tokbind saag
> >
> >
> >
> > People who must be present:
> >  Roman Danyliw
> >  Hannes Tschofenig
> >  Rifaat Shekh-Yusef
> >
> > Resources Requested:
> >
> > Special Requests:
> >
> > ---------------------------------------------------------
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>
>

--000000000000856e4705964ba5d0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Sure.</div><br><div class=3D"gmail_quote"><div dir=3D"ltr"=
 class=3D"gmail_attr">On Fri, Nov 1, 2019 at 12:40 PM Justin Richer &lt;<a =
href=3D"mailto:jricher@mit.edu">jricher@mit.edu</a>&gt; wrote:<br></div><bl=
ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-lef=
t:1px solid rgb(204,204,204);padding-left:1ex">I=E2=80=99d like to present =
a readout of the TXAuth BoF, which is happening earlier in the week. <br>
<br>
=C2=A0=E2=80=94 Justin<br>
<br>
&gt; On Oct 4, 2019, at 2:08 PM, IETF Meeting Session Request Tool &lt;<a h=
ref=3D"mailto:session-request@ietf.org" target=3D"_blank">session-request@i=
etf.org</a>&gt; wrote:<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; A new meeting session request has just been submitted by Hannes Tschof=
enig, a Chair of the oauth working group.<br>
&gt; <br>
&gt; <br>
&gt; ---------------------------------------------------------<br>
&gt; Working Group Name: Web Authorization Protocol<br>
&gt; Area Name: Security Area<br>
&gt; Session Requester: Hannes Tschofenig<br>
&gt; <br>
&gt; Number of Sessions: 2<br>
&gt; Length of Session(s):=C2=A0 1.5 Hours, 1.5 Hours<br>
&gt; Number of Attendees: 50<br>
&gt; Conflicts to Avoid: <br>
&gt; Chair Conflict: acme tls rats sipcore anima<br>
&gt; Technology Overlap: ace secevent teep suit core tokbind saag<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; People who must be present:<br>
&gt;=C2=A0 Roman Danyliw<br>
&gt;=C2=A0 Hannes Tschofenig<br>
&gt;=C2=A0 Rifaat Shekh-Yusef<br>
&gt; <br>
&gt; Resources Requested:<br>
&gt; <br>
&gt; Special Requests:<br>
&gt; <br>
&gt; ---------------------------------------------------------<br>
&gt; <br>
&gt; _______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote></div>

--000000000000856e4705964ba5d0--


From nobody Fri Nov  1 09:56:12 2019
Return-Path: <travis.spencer@curity.io>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2398120B64 for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 09:56:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=curity-io.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hlP9-GinvQjD for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 09:56:02 -0700 (PDT)
Received: from mail-yw1-xc2b.google.com (mail-yw1-xc2b.google.com [IPv6:2607:f8b0:4864:20::c2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87D9F120B42 for <oauth@ietf.org>; Fri,  1 Nov 2019 09:56:02 -0700 (PDT)
Received: by mail-yw1-xc2b.google.com with SMTP id d5so3703115ywk.9 for <oauth@ietf.org>; Fri, 01 Nov 2019 09:56:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=curity-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=yCW9mm1R4r1JPMLagmT8RYP1KApUGmMv7N0J8QAQKe0=; b=fQjwQLjEa9P5hmyKiMZButYL8dMMwIXNEmma8nWAzjd7TTEGtHQAyy1KgOtyE67GPe wXUUuSD4E5iNzFJ53lTXogO6FqeJCL0C58hLdpscLGya7xZuB+66N00Q5T10khw4izb8 q6TxZsnyBX9zt1y8diDteE6MpGvy1oRZe98LNounNGQHbgUE1xJ23rby5+Fx546++n5/ J7m/HsttidRmwTfgYXfFX2HQGZBKHPJA9tdxUrAA+0/z9Nwyc+5oA9CyAbf056VqcxEi BC7lcOYUm1/cU3M2Qq6VLhVWClkPzwX8++H5URR2TzkBqQo4XR7R/QVXu4TquGn8hogs gCHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=yCW9mm1R4r1JPMLagmT8RYP1KApUGmMv7N0J8QAQKe0=; b=WJcRXVe/glSpBvwb9coIY2kxzkLobms4rgYw5lD5bCoiPrEnVkx56JMbpEvddhPKvv 6vm5RRlLb37CP1pq3yYQAC/DyzHHsH6SxIgxF1GRt2pJZ3tMBeEvzPQxXKT9uHoHdHPm cgwgCzJqwKDwRENshhAut+N+mVSEpza7VpxjWr55KGYoq0MMM85fNgkEPZXidRHoz51e Vxi2aXkkUsFFuy+X2smqJtoi7nDveFGK5/UMGdFysPvSZpPeZ+KcpOuvsMjG4BlPKCh4 UoHBvAGOKrVUe3nDADqqQ82CO//h29gLtk4NnwjeE7YinCzs8Ud6onnOAwLd0quwHaUE 2Axw==
X-Gm-Message-State: APjAAAUmzev7mne36fLojtavRlV8jtXIsRKowrwrbwC8fPAsrsTcxe+m 3FkM5+HXGrqjoJ682lV2Mqil/OyGHDCh3wxygFxieA==
X-Google-Smtp-Source: APXvYqxrP5NyOuVh+lLl9xD64fhPcIqwj3TkDldBqR8o4GKiki3uZiMM6NgoAZjJ0QK7kZvaQC16QtDyM41Jg4DrPaU=
X-Received: by 2002:a81:5f8a:: with SMTP id t132mr9477127ywb.43.1572627361690;  Fri, 01 Nov 2019 09:56:01 -0700 (PDT)
MIME-Version: 1.0
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com> <E85574E6-EE77-41B6-97A5-7CE6056E41ED@lodderstedt.net> <CA+k3eCTqHfX4_aqH1UC+7ZOoonmk5iez5k=gGDo7uMs9Pb3z1A@mail.gmail.com> <CAD9ie-sxqwW66dWX8Ef-cWcKG9vA6ueVbB=BJt7YJciCtG3b+Q@mail.gmail.com> <CAEKOcs2pfFa1=ss-ZoeSH=EtzoWY7AXZL1eZF3rykOBAGbmcoA@mail.gmail.com> <CAGL6epLOPOnw5X3vOBT20tb=bFZr33v+sCTfTSdbNGrqOrVL_A@mail.gmail.com>
In-Reply-To: <CAGL6epLOPOnw5X3vOBT20tb=bFZr33v+sCTfTSdbNGrqOrVL_A@mail.gmail.com>
From: Travis Spencer <travis.spencer@curity.io>
Date: Fri, 1 Nov 2019 17:55:50 +0100
Message-ID: <CAEKOcs3+dXQotAeEmxvTJcEb+yPLrqB9Rj1Sax0PnpkKEDz7VQ@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: oauth <oauth@ietf.org>, oauth-chairs@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/meHFLoZZx3WlQVNxmt_TW1BnV7E>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 16:56:11 -0000

I see that the deadline is Monday.[1] I'll work this weekend, and
submit what I have. It won't be as much as I wanted due to other
commitments, but the gist will be complete.

[1] https://datatracker.ietf.org/meeting/106/important-dates/

On Fri, Nov 1, 2019 at 5:37 PM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com> w=
rote:
>
> Hi Spencer
>
> Sure. When are yo planning on submitting the draft?
>
> Regards,
>  Rifaat
>
>
> On Mon, Oct 14, 2019 at 5:20 AM Travis Spencer <travis.spencer@curity.io>=
 wrote:
>>
>> I would like a slot to talk about a new draft I'm going to submit in the=
 coming weeks related to claims (i.e., structured scopes). Would that be po=
ssible?
>>
>> On Fri, Oct 4, 2019 at 11:15 PM Dick Hardt <dick.hardt@gmail.com> wrote:
>>>
>>> I'd like a slot to provide an update on Reciprocal OAuth.
>>> =E1=90=A7
>>>
>>> On Fri, Oct 4, 2019 at 2:12 PM Brian Campbell <bcampbell=3D40pingidenti=
ty.com@dmarc.ietf.org> wrote:
>>>>
>>>> Hello chairs,
>>>>
>>>> I'd like to request some agenda time to present on:
>>>> https://tools.ietf.org/html/draft-fett-oauth-dpop
>>>>
>>>> Thank you,
>>>> Brian
>>>>
>>>> On Fri, Oct 4, 2019 at 3:09 PM Torsten Lodderstedt <torsten@loddersted=
t.net> wrote:
>>>>>
>>>>> Hi chairs,
>>>>>
>>>>> I would like to request the following slots:
>>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-rar
>>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-par
>>>>> - Security BCP
>>>>>
>>>>> kind regards,
>>>>> Torsten..
>>>>>
>>>>> Am 04.10.2019 um 11:08 schrieb IETF Meeting Session Request Tool <ses=
sion-request@ietf..org>:
>>>>>
>>>>> =EF=BB=BF
>>>>>
>>>>> A new meeting session request has just been submitted by Hannes Tscho=
fenig, a Chair of the oauth working group.
>>>>>
>>>>>
>>>>> ---------------------------------------------------------
>>>>> Working Group Name: Web Authorization Protocol
>>>>> Area Name: Security Area
>>>>> Session Requester: Hannes Tschofenig
>>>>>
>>>>> Number of Sessions: 2
>>>>> Length of Session(s):  1.5 Hours, 1.5 Hours
>>>>> Number of Attendees: 50
>>>>> Conflicts to Avoid:
>>>>> Chair Conflict: acme tls rats sipcore anima
>>>>> Technology Overlap: ace secevent teep suit core tokbind saag
>>>>>
>>>>>
>>>>>
>>>>> People who must be present:
>>>>>  Roman Danyliw
>>>>>  Hannes Tschofenig
>>>>>  Rifaat Shekh-Yusef
>>>>>
>>>>> Resources Requested:
>>>>>
>>>>> Special Requests:
>>>>>
>>>>> ---------------------------------------------------------
>>>>>
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>>
>>>> CONFIDENTIALITY NOTICE: This email may contain confidential and privil=
eged material for the sole use of the intended recipient(s). Any review, us=
e, distribution or disclosure by others is strictly prohibited...  If you h=
ave received this communication in error, please notify the sender immediat=
ely by e-mail and delete the message and any file attachments from your com=
puter. Thank you._______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth


From nobody Fri Nov  1 09:57:43 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBB6B120A41; Fri,  1 Nov 2019 09:57:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g5CAMGFaO3p2; Fri,  1 Nov 2019 09:57:39 -0700 (PDT)
Received: from mail-io1-xd32.google.com (mail-io1-xd32.google.com [IPv6:2607:f8b0:4864:20::d32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60A37120A30; Fri,  1 Nov 2019 09:57:39 -0700 (PDT)
Received: by mail-io1-xd32.google.com with SMTP id h9so11643194ioh.2; Fri, 01 Nov 2019 09:57:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=JK831yHRa+l3ScDuaoNiWpyJ3J3rn1b/+vDUq0/H55g=; b=hgitlIcCGLNdcjkCm9o9y0KQlUtO4heQg40LkUNu/jDJ3yUtBuCN+FhAZdcBsZhOi0 WWDNgr4ry8BUTbgfIhccUtm06e4ZMoY1VgJPG8Zg2eKUB/V5BxNCEit65yZibAIJWQ9l 7+PcDOV+196LKzWNsoJaup/bCKDYaQXx1p1XX631yEPvOyPnIP0O/C0aGHsEf1IDjvlq vd/e8auiIuOyvcP8pE/sNU9jPV9EQ1D86zm6NwyXZHeFvM9e66OaqUgAV4s1NEs8qS/Y PCYSFas7P20ynreqGBFFr2Ua1QfkGU6JcraqT+40+qeRP8NkL32ryi2XwAUVpK+USV8N dvlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JK831yHRa+l3ScDuaoNiWpyJ3J3rn1b/+vDUq0/H55g=; b=rbHd5a3oJ6CrjFDzT/miTJ+mSf46Te5LLOksv4BiMzSpRtizXYXTXEhW9xGL8sttsv LX2ABnnObdBcLYyRdZJo407yvIUPJCYQ9pm3hk1jQdyf2dgOdsicJSdZHRAp3u3Jr+xn w3i/jQJw6aR32Xn/NDPhIWegOqXPSS6fguRzDyXbijLk4aAk4iI7qur2qo3WCWicwywH CWjBVivQVb9QC0Lhne+XY9VXxOHbXh+PZYXlUDZncEFzoYmFGu+uJMBEB9ZnKP65SPaB I2pnpVr+Jub9K9C7HzvO5+iskYDc2wdVKE/ex5AjV0M9N4WZT3/TJ9S0kptqcxVXqV3D qLkQ==
X-Gm-Message-State: APjAAAWZXwpuDTBa6iBYV/vmjmDjwRoK2ENvVDyGLru/s45eKkCaMpiU FG+VWUyA64Q6TXKUADYDPx6pkfxC/Btp7p11VNA=
X-Google-Smtp-Source: APXvYqwuxFJV3+zGLhj6PRLPX2z8YS/ELIHu0Nn5VQTTOFmNPCED2JMbQvLr8F0Oo0a4okRHQ/QrKW9FFKjEHi9ZiGs=
X-Received: by 2002:a02:7829:: with SMTP id p41mr3332025jac.73.1572627458405;  Fri, 01 Nov 2019 09:57:38 -0700 (PDT)
MIME-Version: 1.0
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com> <E85574E6-EE77-41B6-97A5-7CE6056E41ED@lodderstedt.net> <CA+k3eCTqHfX4_aqH1UC+7ZOoonmk5iez5k=gGDo7uMs9Pb3z1A@mail.gmail.com> <CAD9ie-sxqwW66dWX8Ef-cWcKG9vA6ueVbB=BJt7YJciCtG3b+Q@mail.gmail.com> <CAEKOcs2pfFa1=ss-ZoeSH=EtzoWY7AXZL1eZF3rykOBAGbmcoA@mail.gmail.com> <CAGL6epLOPOnw5X3vOBT20tb=bFZr33v+sCTfTSdbNGrqOrVL_A@mail.gmail.com> <CAEKOcs3+dXQotAeEmxvTJcEb+yPLrqB9Rj1Sax0PnpkKEDz7VQ@mail.gmail.com>
In-Reply-To: <CAEKOcs3+dXQotAeEmxvTJcEb+yPLrqB9Rj1Sax0PnpkKEDz7VQ@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Fri, 1 Nov 2019 12:57:27 -0400
Message-ID: <CAGL6epKgpuyOc2b9hjgA0Uxm7uV_iKiYcvXybdR-=o1L4VxvHA@mail.gmail.com>
To: Travis Spencer <travis.spencer@curity.io>
Cc: oauth <oauth@ietf.org>, oauth-chairs@ietf.org
Content-Type: multipart/alternative; boundary="00000000000005baf005964bdd10"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/xGpFLiu-Jm2WxEVLVjCqwhi0bqg>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 16:57:42 -0000

--00000000000005baf005964bdd10
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Sounds good.

On Fri, Nov 1, 2019 at 12:56 PM Travis Spencer <travis.spencer@curity.io>
wrote:

> I see that the deadline is Monday.[1] I'll work this weekend, and
> submit what I have. It won't be as much as I wanted due to other
> commitments, but the gist will be complete.
>
> [1] https://datatracker.ietf.org/meeting/106/important-dates/
>
> On Fri, Nov 1, 2019 at 5:37 PM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
> wrote:
> >
> > Hi Spencer
> >
> > Sure. When are yo planning on submitting the draft?
> >
> > Regards,
> >  Rifaat
> >
> >
> > On Mon, Oct 14, 2019 at 5:20 AM Travis Spencer <travis.spencer@curity.i=
o>
> wrote:
> >>
> >> I would like a slot to talk about a new draft I'm going to submit in
> the coming weeks related to claims (i.e., structured scopes). Would that =
be
> possible?
> >>
> >> On Fri, Oct 4, 2019 at 11:15 PM Dick Hardt <dick.hardt@gmail.com>
> wrote:
> >>>
> >>> I'd like a slot to provide an update on Reciprocal OAuth.
> >>> =E1=90=A7
> >>>
> >>> On Fri, Oct 4, 2019 at 2:12 PM Brian Campbell <bcampbell=3D
> 40pingidentity.com@dmarc.ietf.org> wrote:
> >>>>
> >>>> Hello chairs,
> >>>>
> >>>> I'd like to request some agenda time to present on:
> >>>> https://tools.ietf.org/html/draft-fett-oauth-dpop
> >>>>
> >>>> Thank you,
> >>>> Brian
> >>>>
> >>>> On Fri, Oct 4, 2019 at 3:09 PM Torsten Lodderstedt <
> torsten@lodderstedt.net> wrote:
> >>>>>
> >>>>> Hi chairs,
> >>>>>
> >>>>> I would like to request the following slots:
> >>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-rar
> >>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-par
> >>>>> - Security BCP
> >>>>>
> >>>>> kind regards,
> >>>>> Torsten..
> >>>>>
> >>>>> Am 04.10.2019 um 11:08 schrieb IETF Meeting Session Request Tool
> <session-request@ietf..org>:
> >>>>>
> >>>>> =EF=BB=BF
> >>>>>
> >>>>> A new meeting session request has just been submitted by Hannes
> Tschofenig, a Chair of the oauth working group.
> >>>>>
> >>>>>
> >>>>> ---------------------------------------------------------
> >>>>> Working Group Name: Web Authorization Protocol
> >>>>> Area Name: Security Area
> >>>>> Session Requester: Hannes Tschofenig
> >>>>>
> >>>>> Number of Sessions: 2
> >>>>> Length of Session(s):  1.5 Hours, 1.5 Hours
> >>>>> Number of Attendees: 50
> >>>>> Conflicts to Avoid:
> >>>>> Chair Conflict: acme tls rats sipcore anima
> >>>>> Technology Overlap: ace secevent teep suit core tokbind saag
> >>>>>
> >>>>>
> >>>>>
> >>>>> People who must be present:
> >>>>>  Roman Danyliw
> >>>>>  Hannes Tschofenig
> >>>>>  Rifaat Shekh-Yusef
> >>>>>
> >>>>> Resources Requested:
> >>>>>
> >>>>> Special Requests:
> >>>>>
> >>>>> ---------------------------------------------------------
> >>>>>
> >>>>> _______________________________________________
> >>>>> OAuth mailing list
> >>>>> OAuth@ietf.org
> >>>>> https://www.ietf.org/mailman/listinfo/oauth
> >>>>>
> >>>>> _______________________________________________
> >>>>> OAuth mailing list
> >>>>> OAuth@ietf.org
> >>>>> https://www.ietf.org/mailman/listinfo/oauth
> >>>>
> >>>>
> >>>> CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly
> prohibited...  If you have received this communication in error, please
> notify the sender immediately by e-mail and delete the message and any fi=
le
> attachments from your computer. Thank
> you._______________________________________________
> >>>> OAuth mailing list
> >>>> OAuth@ietf.org
> >>>> https://www.ietf.org/mailman/listinfo/oauth
> >>>
> >>> _______________________________________________
> >>> OAuth mailing list
> >>> OAuth@ietf.org
> >>> https://www.ietf.org/mailman/listinfo/oauth
>

--00000000000005baf005964bdd10
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Sounds good.=C2=A0<br></div><br><div class=3D"gmail_quote"=
><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 1, 2019 at 12:56 PM Trav=
is Spencer &lt;<a href=3D"mailto:travis.spencer@curity.io">travis.spencer@c=
urity.io</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le=
ft:1ex">I see that the deadline is Monday.[1] I&#39;ll work this weekend, a=
nd<br>
submit what I have. It won&#39;t be as much as I wanted due to other<br>
commitments, but the gist will be complete.<br>
<br>
[1] <a href=3D"https://datatracker.ietf.org/meeting/106/important-dates/" r=
el=3D"noreferrer" target=3D"_blank">https://datatracker.ietf.org/meeting/10=
6/important-dates/</a><br>
<br>
On Fri, Nov 1, 2019 at 5:37 PM Rifaat Shekh-Yusef &lt;<a href=3D"mailto:rif=
aat.ietf@gmail.com" target=3D"_blank">rifaat.ietf@gmail.com</a>&gt; wrote:<=
br>
&gt;<br>
&gt; Hi Spencer<br>
&gt;<br>
&gt; Sure. When are yo planning on submitting the draft?<br>
&gt;<br>
&gt; Regards,<br>
&gt;=C2=A0 Rifaat<br>
&gt;<br>
&gt;<br>
&gt; On Mon, Oct 14, 2019 at 5:20 AM Travis Spencer &lt;<a href=3D"mailto:t=
ravis.spencer@curity.io" target=3D"_blank">travis.spencer@curity.io</a>&gt;=
 wrote:<br>
&gt;&gt;<br>
&gt;&gt; I would like a slot to talk about a new draft I&#39;m going to sub=
mit in the coming weeks related to claims (i.e., structured scopes). Would =
that be possible?<br>
&gt;&gt;<br>
&gt;&gt; On Fri, Oct 4, 2019 at 11:15 PM Dick Hardt &lt;<a href=3D"mailto:d=
ick.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote:<=
br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; I&#39;d like a slot to provide an update on Reciprocal OAuth.<=
br>
&gt;&gt;&gt; =E1=90=A7<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; On Fri, Oct 4, 2019 at 2:12 PM Brian Campbell &lt;bcampbell=3D=
<a href=3D"mailto:40pingidentity.com@dmarc.ietf.org" target=3D"_blank">40pi=
ngidentity.com@dmarc.ietf.org</a>&gt; wrote:<br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt; Hello chairs,<br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt; I&#39;d like to request some agenda time to present on:<br=
>
&gt;&gt;&gt;&gt; <a href=3D"https://tools.ietf.org/html/draft-fett-oauth-dp=
op" rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/html/draft-=
fett-oauth-dpop</a><br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt; Thank you,<br>
&gt;&gt;&gt;&gt; Brian<br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt; On Fri, Oct 4, 2019 at 3:09 PM Torsten Lodderstedt &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderste=
dt.net</a>&gt; wrote:<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; Hi chairs,<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; I would like to request the following slots:<br>
&gt;&gt;&gt;&gt;&gt; - <a href=3D"https://tools.ietf.org/html/draft-lodders=
tedt-oauth-rar" rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org=
/html/draft-lodderstedt-oauth-rar</a><br>
&gt;&gt;&gt;&gt;&gt; - <a href=3D"https://tools.ietf.org/html/draft-lodders=
tedt-oauth-par" rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org=
/html/draft-lodderstedt-oauth-par</a><br>
&gt;&gt;&gt;&gt;&gt; - Security BCP<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; kind regards,<br>
&gt;&gt;&gt;&gt;&gt; Torsten..<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; Am 04.10.2019 um 11:08 schrieb IETF Meeting Session Re=
quest Tool &lt;session-request@ietf..org&gt;:<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; =EF=BB=BF<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; A new meeting session request has just been submitted =
by Hannes Tschofenig, a Chair of the oauth working group.<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; ------------------------------------------------------=
---<br>
&gt;&gt;&gt;&gt;&gt; Working Group Name: Web Authorization Protocol<br>
&gt;&gt;&gt;&gt;&gt; Area Name: Security Area<br>
&gt;&gt;&gt;&gt;&gt; Session Requester: Hannes Tschofenig<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; Number of Sessions: 2<br>
&gt;&gt;&gt;&gt;&gt; Length of Session(s):=C2=A0 1.5 Hours, 1.5 Hours<br>
&gt;&gt;&gt;&gt;&gt; Number of Attendees: 50<br>
&gt;&gt;&gt;&gt;&gt; Conflicts to Avoid:<br>
&gt;&gt;&gt;&gt;&gt; Chair Conflict: acme tls rats sipcore anima<br>
&gt;&gt;&gt;&gt;&gt; Technology Overlap: ace secevent teep suit core tokbin=
d saag<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; People who must be present:<br>
&gt;&gt;&gt;&gt;&gt;=C2=A0 Roman Danyliw<br>
&gt;&gt;&gt;&gt;&gt;=C2=A0 Hannes Tschofenig<br>
&gt;&gt;&gt;&gt;&gt;=C2=A0 Rifaat Shekh-Yusef<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; Resources Requested:<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; Special Requests:<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; ------------------------------------------------------=
---<br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; _______________________________________________<br>
&gt;&gt;&gt;&gt;&gt; OAuth mailing list<br>
&gt;&gt;&gt;&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OA=
uth@ietf.org</a><br>
&gt;&gt;&gt;&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth=
" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/listinf=
o/oauth</a><br>
&gt;&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;&gt; _______________________________________________<br>
&gt;&gt;&gt;&gt;&gt; OAuth mailing list<br>
&gt;&gt;&gt;&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OA=
uth@ietf.org</a><br>
&gt;&gt;&gt;&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth=
" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/listinf=
o/oauth</a><br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt;<br>
&gt;&gt;&gt;&gt; CONFIDENTIALITY NOTICE: This email may contain confidentia=
l and privileged material for the sole use of the intended recipient(s). An=
y review, use, distribution or disclosure by others is strictly prohibited.=
..=C2=A0 If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachme=
nts from your computer. Thank you._________________________________________=
______<br>
&gt;&gt;&gt;&gt; OAuth mailing list<br>
&gt;&gt;&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@=
ietf.org</a><br>
&gt;&gt;&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" re=
l=3D"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oa=
uth</a><br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; _______________________________________________<br>
&gt;&gt;&gt; OAuth mailing list<br>
&gt;&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf=
.org</a><br>
&gt;&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D=
"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth<=
/a><br>
</blockquote></div>

--00000000000005baf005964bdd10--


From nobody Fri Nov  1 10:02:14 2019
Return-Path: <travis.spencer@curity.io>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2148E1208BB for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 10:02:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=curity-io.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mLG5aORfgL_d for <oauth@ietfa.amsl.com>; Fri,  1 Nov 2019 10:02:11 -0700 (PDT)
Received: from mail-yb1-xb2b.google.com (mail-yb1-xb2b.google.com [IPv6:2607:f8b0:4864:20::b2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F30A120019 for <oauth@ietf.org>; Fri,  1 Nov 2019 10:02:11 -0700 (PDT)
Received: by mail-yb1-xb2b.google.com with SMTP id h202so4120517ybg.13 for <oauth@ietf.org>; Fri, 01 Nov 2019 10:02:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=curity-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ecpCWkytMesrEQXclX2KAHoxraZ8AmXiTTR7GYhgkwY=; b=cIEMZu3y9AJ/Q5DF0j1phnrmRaz34nNnw1AccWgtlsMcd6Fu2q9QzgeU5RoPzcWJzU z84kdcSAAQ2KpQfln3taVS1U7fZlMOezKf/D7GxQYs5AHgMc1B+yn9js3w3Z8XInAeu+ 1oEkdNHU59LebKqwTuUGneUn6kgvpXbolIHou6HgM85545pzgfgu1Z1LRkmygzc7WnUp QMc6oyU9GDdmoGe6pWorQdDBz5rOoTgKeEilMctgV541SfZv+5/bUfd/dnQzN/APmCuV MhYj7VJPi2rIn7GSXJWsL4mMZxxa/fZpHMqQIbmzRHmtuEV6PcJyc8MLvtWQzj7c3SAE 9Awg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ecpCWkytMesrEQXclX2KAHoxraZ8AmXiTTR7GYhgkwY=; b=IfSvAZDG0kvU5zJ6caeE8w7CV985IExLwkDC8sMx3zbIgvznPS89mxHTGf99F8fsqv w0tQHBISMNAyj7vVpUbE1mXMaDifTSCztGKNbvvgyUzEFKQjyLQwI99r6lNcxUkPMpVV z3XH+qB1Xb7xcDtXUjGb8YFQixd+qiVfskpZ+k7BRSeT4j+QclAbIfQ7ATMnfOQWMAv4 ehSk6c7cxHxgWUQJV+XXZas8QMBJ0gWFxL2cUj9iqwqG6qBvU0o0x6aLR1LGpruBnHF/ 031hPK+uIcaI86F1iVEJR8Z4sbFPrGiS7izcpK9xPwtGxMz32WN2nlLPOBpR9cUxhr2q E4+A==
X-Gm-Message-State: APjAAAVgfN9JfGjxMSKt29b+mclA5EgVJpB3bR1OlBpLUAjFJeGpSZ4t vYKGyDOqvcl6vhDJTI037cNl/PUFLQ/oitudf7afxg==
X-Google-Smtp-Source: APXvYqywEAe3nJvKzK/pt6YP96auPCbJGuA0ukz+4If2qrcUdTYYjSDbejh3ghvgUPKlZCr+5rv7wSdOCyNgWFRhUK4=
X-Received: by 2002:a25:e70a:: with SMTP id e10mr10233917ybh.105.1572627730484;  Fri, 01 Nov 2019 10:02:10 -0700 (PDT)
MIME-Version: 1.0
References: <85D42AA1-FF57-4383-BACB-57C5AA32CFAC@lodderstedt.net> <CAEKOcs2gkM3Henz5nS04_EuBQXWWbJU5K02ErP0rnVZXmjxXJQ@mail.gmail.com> <20191021020546.GZ43312@kduck.mit.edu> <CA+k3eCS7pf3wXBkpbXE0AXKUGogo0YcHd8oWfiBfkPB5axGQQw@mail.gmail.com>
In-Reply-To: <CA+k3eCS7pf3wXBkpbXE0AXKUGogo0YcHd8oWfiBfkPB5axGQQw@mail.gmail.com>
From: Travis Spencer <travis.spencer@curity.io>
Date: Fri, 1 Nov 2019 18:01:59 +0100
Message-ID: <CAEKOcs2po08AUUcqgMmuQOmsRPbDpLYsAFTK_br0x+QEb_0rgA@mail.gmail.com>
To: Brian Campbell <bcampbell@pingidentity.com>
Cc: Benjamin Kaduk <kaduk@mit.edu>, oauth <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/oa33KZdTxp7h6BX2yfUzp4UMQpM>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 17:02:13 -0000

On Wed, Oct 23, 2019 at 2:11 PM Brian Campbell
<bcampbell@pingidentity.com> wrote:
> I agree with Ben here that it's not at all clear that the OAuth MTLS document should have defined a protocol from proxy to backend.

Shouldn't it at least normalitvely reference some other spec then? If
that reference is not defined before this draft is finalized, one
could say they comply with the final mTLS spec but in a
non-interoperable way.


From nobody Sun Nov  3 08:11:42 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8E4412008C for <oauth@ietfa.amsl.com>; Sun,  3 Nov 2019 08:11:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id so1eryUCUGzf for <oauth@ietfa.amsl.com>; Sun,  3 Nov 2019 08:11:38 -0800 (PST)
Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE73712004A for <oauth@ietf.org>; Sun,  3 Nov 2019 08:11:37 -0800 (PST)
Received: by mail-wm1-x335.google.com with SMTP id q130so13572420wme.2 for <oauth@ietf.org>; Sun, 03 Nov 2019 08:11:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:mime-version:subject:message-id:references:to:date; bh=ZVwhOgWT9TJhyNrBX7wnse1ve2lx9H8ar3ZmHdg1/Q8=; b=pI/krk/ONB7Vg3BoCKQvE2zkOwi3uVGq/CELtFmxInFUqJboh2id5YuQmGm3nqw4vn qSTy6xb6Ma9pQJasnIBEZdep/Ktqf9YiYW21G/NAijeUDV7p1QNEtVqipqTPw1MCV5Qe 35OxY5DZh6pT2OkUrdyFMDJy5QpDf3qdNdd1W4+N5MR7dedIN43mOx/MGa7iacl7eeO3 fyoi+ZpGC0GK5lA25v2vY0rRDpkmYsjt6BvCUyva9fBpzdk7i/lcacbGWk8CDxuuXkBc y7ojGdk/IKz1mqgzTtsppG0sgal7wGcibsFqLD2OXJVbW/ylTA89ruDcFA1r4wPS9xxW Fw9w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:references :to:date; bh=ZVwhOgWT9TJhyNrBX7wnse1ve2lx9H8ar3ZmHdg1/Q8=; b=cefB0jNV3EQ6863vpDM7vVAXXfSeyFVgyqk8MrwW5xi+jryFYFleL7MbrhOf4q3rhR HD17zds+yiSjBhY0gL8LUc+Y3/RRB3JgHQul7Zlc7tiJNlnLZzxTrS1A2070aWqSyzWR vwWTbWcDAKPa2uSj8wrBUO5bSGJFvONE/x88zTt71NK6a+/APJ5/RNZLJlgu6irg7hY7 0A/E1sMoTymcODEMpXkRb4RHC7vwal95OTEcnxgZxHxND+pFmqyTBfmeHTrTjstfNShh TAO7cqiJ4J7vz+macJHmp9iRyDOX16HNetYIlYDCGIsXIdp46d31zryGaj7Am4sxdwBH vMhQ==
X-Gm-Message-State: APjAAAXwpyifkJaeW4VeLFVwpCiSLMO2TttTAxJfusIZmSrIwkUOjjwV jfb54JJvc0USbcglsobSKMYnu9k+YrFHHg==
X-Google-Smtp-Source: APXvYqxSnD4P+9oGJOBrAhCGNS8aWIoo6ew3Jvau7tZ0yAdMktrNBo67BsXubfKDdxxjBAdgv1VUvA==
X-Received: by 2002:a1c:a548:: with SMTP id o69mr4892615wme.31.1572797496107;  Sun, 03 Nov 2019 08:11:36 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id b14sm4066253wmj.18.2019.11.03.08.11.35 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 03 Nov 2019 08:11:35 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_A883C907-6377-491C-A066-52E2257144B0"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Message-Id: <E80E980E-1EA5-4C4F-8055-5B9344AD9986@lodderstedt.net>
References: <157279706304.13465.11272517425392766767.idtracker@ietfa.amsl.com>
To: oauth <oauth@ietf.org>
Date: Sun, 3 Nov 2019 17:11:34 +0100
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/EtPN-jkc2yTZyZXL2Thg_UBcPVc>
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-lodderstedt-oauth-par-01.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Nov 2019 16:11:41 -0000

--Apple-Mail=_A883C907-6377-491C-A066-52E2257144B0
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_EA736AD6-FBD0-40E6-8AB8-3CA18AF8E169"


--Apple-Mail=_EA736AD6-FBD0-40E6-8AB8-3CA18AF8E169
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi all,=20

revision of draft-lodderstedt-oauth-par (Pushed Authorization Requests) =
was just published.=20

Here is the list of changes:
List client_id as one of the basic parameters
Explicitly forbid request_uri in the processing rules
Clarification regarding client authentication and that public clients =
are allowed
Added option to let clients register per-authorization request redirect =
URIs
General clean up and wording improvements
I will present this draft in Singapore and would be happy if the working =
group would consider adoption of this joint work (Co-authors: David =
Tonge, Nat Sakimura, Brian Campbell, Filip Skokan) as WG draft.

best regards,
Torsten.=20

> Begin forwarded message:
>=20
> From: internet-drafts@ietf.org
> Subject: New Version Notification for =
draft-lodderstedt-oauth-par-01.txt
> Date: 3. November 2019 at 17:04:23 CET
> To: "Nat Sakimura" <nat@sakimura.org>, "Brian Campbell" =
<bcampbell@pingidentity.com>, "Torsten Lodderstedt" =
<torsten@lodderstedt.net>, "Dave Tonge" <dave@tonge.org>, "Filip Skokan" =
<panva.ip@gmail.com>
>=20
>=20
> A new version of I-D, draft-lodderstedt-oauth-par-01.txt
> has been successfully submitted by Torsten Lodderstedt and posted to =
the
> IETF repository.
>=20
> Name:		draft-lodderstedt-oauth-par
> Revision:	01
> Title:		OAuth 2.0 Pushed Authorization Requests
> Document date:	2019-11-02
> Group:		Individual Submission
> Pages:		14
> URL:            =
https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-par-01.txt
> Status:         =
https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/
> Htmlized:       =
https://tools.ietf.org/html/draft-lodderstedt-oauth-par-01
> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-par
> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-par-01
>=20
> Abstract:
>   This document defines the pushed authorization request endpoint,
>   which allows clients to push the payload of an OAuth 2.0
>   authorization request to the authorization server via a direct
>   request and provides them with a request URI that is used as
>   reference to the data in a subsequent authorization request.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20


--Apple-Mail=_EA736AD6-FBD0-40E6-8AB8-3CA18AF8E169
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
all,&nbsp;<div class=3D""><br class=3D""></div><div class=3D"">revision =
of draft-lodderstedt-oauth-par (Pushed Authorization Requests) was just =
published.&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">Here is the list of changes:</div><div class=3D""><ul =
style=3D"font-family: verdana, helvetica, arial, sans-serif; font-size: =
13.3333px; font-variant-ligatures: normal; orphans: 2; widows: 2;" =
class=3D""><li style=3D"margin-left: 2em; margin-right: 2em;" =
class=3D"">List&nbsp;<samp class=3D"">client_id</samp>&nbsp;as one of =
the basic parameters</li><li style=3D"margin-left: 2em; margin-right: =
2em;" class=3D"">Explicitly forbid&nbsp;<samp =
class=3D"">request_uri</samp>&nbsp;in the processing rules</li><li =
style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">Clarification =
regarding client authentication and that public clients are =
allowed</li><li style=3D"margin-left: 2em; margin-right: 2em;" =
class=3D"">Added option to let clients register per-authorization =
request redirect URIs</li><li style=3D"margin-left: 2em; margin-right: =
2em;" class=3D"">General clean up and wording improvements</li></ul><div =
class=3D"">I will present this draft in Singapore and would be happy if =
the working group would consider adoption of this joint work =
(Co-authors: David&nbsp;Tonge, Nat Sakimura, Brian Campbell, Filip =
Skokan) as WG draft.</div><div class=3D""><br class=3D""></div><div =
class=3D"">best regards,</div><div class=3D"">Torsten.&nbsp;</div><div><br=
 class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">Begin =
forwarded message:</div><br class=3D"Apple-interchange-newline"><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;" class=3D""><span style=3D"font-family: =
-webkit-system-font, Helvetica Neue, Helvetica, sans-serif; =
color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">From: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D""><a =
href=3D"mailto:internet-drafts@ietf.org" =
class=3D"">internet-drafts@ietf.org</a><br class=3D""></span></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;" class=3D""><span style=3D"font-family: =
-webkit-system-font, Helvetica Neue, Helvetica, sans-serif; =
color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Subject: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D""><b class=3D"">New Version =
Notification for draft-lodderstedt-oauth-par-01.txt</b><br =
class=3D""></span></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span =
style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Date: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">3. November 2019 at 17:04:23 =
CET<br class=3D""></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span=
 style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">To: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">"Nat Sakimura" &lt;<a =
href=3D"mailto:nat@sakimura.org" class=3D"">nat@sakimura.org</a>&gt;, =
"Brian Campbell" &lt;<a href=3D"mailto:bcampbell@pingidentity.com" =
class=3D"">bcampbell@pingidentity.com</a>&gt;, "Torsten Lodderstedt" =
&lt;<a href=3D"mailto:torsten@lodderstedt.net" =
class=3D"">torsten@lodderstedt.net</a>&gt;, "Dave Tonge" &lt;<a =
href=3D"mailto:dave@tonge.org" class=3D"">dave@tonge.org</a>&gt;, "Filip =
Skokan" &lt;<a href=3D"mailto:panva.ip@gmail.com" =
class=3D"">panva.ip@gmail.com</a>&gt;<br class=3D""></span></div><br =
class=3D""><div class=3D""><div class=3D""><br class=3D"">A new version =
of I-D, draft-lodderstedt-oauth-par-01.txt<br class=3D"">has been =
successfully submitted by Torsten Lodderstedt and posted to the<br =
class=3D"">IETF repository.<br class=3D""><br class=3D"">Name:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>draft-lodderstedt-oauth-par<br class=3D"">Revision:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>01<br =
class=3D"">Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre">=
	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>OAuth 2.0 Pushed Authorization Requests<br class=3D"">Document =
date:<span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>2019-11-02<br class=3D"">Group:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>Individual Submission<br =
class=3D"">Pages:<span class=3D"Apple-tab-span" style=3D"white-space:pre">=
	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>14<br class=3D"">URL: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-par-0=
1.txt" =
class=3D"">https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-pa=
r-01.txt</a><br class=3D"">Status: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/" =
class=3D"">https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/</=
a><br class=3D"">Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-lodderstedt-oauth-par-01" =
class=3D"">https://tools.ietf.org/html/draft-lodderstedt-oauth-par-01</a><=
br class=3D"">Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-par"=
 =
class=3D"">https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-p=
ar</a><br class=3D"">Diff: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-par-01=
" =
class=3D"">https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-par=
-01</a><br class=3D""><br class=3D"">Abstract:<br class=3D""> =
&nbsp;&nbsp;This document defines the pushed authorization request =
endpoint,<br class=3D""> &nbsp;&nbsp;which allows clients to push the =
payload of an OAuth 2.0<br class=3D""> &nbsp;&nbsp;authorization request =
to the authorization server via a direct<br class=3D""> =
&nbsp;&nbsp;request and provides them with a request URI that is used =
as<br class=3D""> &nbsp;&nbsp;reference to the data in a subsequent =
authorization request.<br class=3D""><br class=3D""><br class=3D""><br =
class=3D""><br class=3D"">Please note that it may take a couple of =
minutes from the time of submission<br class=3D"">until the htmlized =
version and diff are available at <a href=3D"http://tools.ietf.org" =
class=3D"">tools.ietf.org</a>.<br class=3D""><br class=3D"">The IETF =
Secretariat<br class=3D""><br =
class=3D""></div></div></blockquote></div><br =
class=3D""></div></body></html>=

--Apple-Mail=_EA736AD6-FBD0-40E6-8AB8-3CA18AF8E169--

--Apple-Mail=_A883C907-6377-491C-A066-52E2257144B0
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_A883C907-6377-491C-A066-52E2257144B0--


From nobody Sun Nov  3 23:34:46 2019
Return-Path: <vladimir@connect2id.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6601120232 for <oauth@ietfa.amsl.com>; Sun,  3 Nov 2019 23:34:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level: 
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N15V2IhSez_o for <oauth@ietfa.amsl.com>; Sun,  3 Nov 2019 23:34:42 -0800 (PST)
Received: from p3plsmtpa08-02.prod.phx3.secureserver.net (p3plsmtpa08-02.prod.phx3.secureserver.net [173.201.193.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 516DF1200E0 for <oauth@ietf.org>; Sun,  3 Nov 2019 23:34:42 -0800 (PST)
Received: from [192.168.0.102] ([94.155.17.54]) by :SMTPAUTH: with ESMTPSA id RWsniawJ1SGDjRWspiHreP; Mon, 04 Nov 2019 00:34:40 -0700
x-spam-cmae: v=2.3 cv=R9595uZX c=1 sm=1 tr=0 p=_Y5QVBCcAAAA:8 a=FNQ4XmqxRr20pcroDK0mpg==:117 a=FNQ4XmqxRr20pcroDK0mpg==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=q0rX5H01Qin5IyBaTmIA:9 a=r77TgQKjGQsHNAKrUKIA:9 a=l1ntXry1AAAA:8 a=48vgC7mUAAAA:8 a=DVqm7IH0AAAA:8 a=LS6YZpeZAAAA:8 a=ISqk5ONUAAAA:8 a=pGLkceISAAAA:8 a=t9015xufTkz5GXrGAAEA:9 a=pILNOxqGKmIA:10 a=jezVBGK-lbQA:10 a=lJ8i9s0jXcYA:10 a=csNWAHJfSlAA:10 a=9oeUTK8yl2sA:10 a=ssyN7oLQum5f7eN7gWEA:9 a=2-35bgFUeLTu4nEI:21 a=_W_S_7VecoQA:10 a=D8lnhvtxf0AONpHuB7QA:9 a=ZVk8-NSrHBgA:10 a=30ssDGKg3p0A:10 a=qqYkSYq5RtzIiZrt3cAW:22 a=w1C3t2QeGrPiZgrLijVG:22 a=M6wP_kGduNurgptF5PJY:22 a=IRr2vCDBpksuBOXhfkKu:22 a=IdGyktwZ2tr74praB_5u:22 a=j012aKtm0j0zU2ly6LEW:22
x-spam-account: vladimir@connect2id.com
x-spam-domain: connect2id.com
To: oauth@ietf.org
References: <157279706304.13465.11272517425392766767.idtracker@ietfa.amsl.com> <E80E980E-1EA5-4C4F-8055-5B9344AD9986@lodderstedt.net>
From: Vladimir Dzhuvinov <vladimir@connect2id.com>
Openpgp: preference=signencrypt
X-Enigmail-Draft-Status: N11100
Organization: Connect2id Ltd.
Message-ID: <ea7ba454-2ef3-bff0-553b-f8450d558532@connect2id.com>
Date: Mon, 4 Nov 2019 09:34:37 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <E80E980E-1EA5-4C4F-8055-5B9344AD9986@lodderstedt.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms070407070905020107080900"
X-CMAE-Envelope: MS4wfLhtLltbwfbrCt7x8uBD9fRe5HSEuFElMkqa38Mx56Alu8HjW7JeePlr0/epvGvLnvOF8sedNk+WEem3Nsw3aOEAfQmxLypRl8R42+PQwSuqQ+Y7+e36 XEDoYU3yXCtZWc9bPpN+ahN7JaOlXNt0U1ypQPfoSwlGig1+MdCgMlgG
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/WH_1tvTDgvCf1AM8OYvDc6w2g2E>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-lodderstedt-oauth-par-01.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 07:34:45 -0000

This is a cryptographically signed message in MIME format.

--------------ms070407070905020107080900
Content-Type: multipart/alternative;
 boundary="------------4BD0444CD4BEAD693545568D"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------4BD0444CD4BEAD693545568D
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

+1 for WG adoption

I'm super pleased with how usable the spec already is and how easy it
was to explain to developers - you just take the regular authZ request
and POST it form-encoded, using whatever client auth is registered for
the token endpoint. PAR is significantly more versatile than the
original "request object endpoint" from FAPI, while keeping normative
stuff minimal by relying on existing specs - RFC 6749 and JAR. This
means existing OAuth clients and servers can be made to support it with
relatively little work because code reuse is facilitated.

The OAuth SDK was updated from PAR -00 to PAR -01 this morning to allow
for the authZ error codes:

https://www.javadoc.io/doc/com.nimbusds/oauth2-oidc-sdk/6.18/com/nimbusds=
/oauth2/sdk/PushedAuthorizationRequest.html

https://www.javadoc.io/doc/com.nimbusds/oauth2-oidc-sdk/6.18/com/nimbusds=
/oauth2/sdk/PushedAuthorizationResponse.html


Vladimir


On 03/11/2019 18:11, Torsten Lodderstedt wrote:
> Hi all,=A0
>
> revision of draft-lodderstedt-oauth-par (Pushed Authorization
> Requests) was just published.=A0
>
> Here is the list of changes:
>
>   * List=A0client_id=A0as one of the basic parameters
>   * Explicitly forbid=A0request_uri=A0in the processing rules
>   * Clarification regarding client authentication and that public
>     clients are allowed
>   * Added option to let clients register per-authorization request
>     redirect URIs
>   * General clean up and wording improvements
>
> I will present this draft in Singapore and would be happy if the
> working group would consider adoption of this joint work (Co-authors:
> David=A0Tonge, Nat Sakimura, Brian Campbell, Filip Skokan) as WG draft.=

>
> best regards,
> Torsten.=A0
>
>> Begin forwarded message:
>>
>> *From: *internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>
>> *Subject: **New Version Notification for
>> draft-lodderstedt-oauth-par-01.txt*
>> *Date: *3. November 2019 at 17:04:23 CET
>> *To: *"Nat Sakimura" <nat@sakimura.org <mailto:nat@sakimura.org>>,
>> "Brian Campbell" <bcampbell@pingidentity.com
>> <mailto:bcampbell@pingidentity.com>>, "Torsten Lodderstedt"
>> <torsten@lodderstedt.net <mailto:torsten@lodderstedt.net>>, "Dave
>> Tonge" <dave@tonge.org <mailto:dave@tonge.org>>, "Filip Skokan"
>> <panva.ip@gmail.com <mailto:panva.ip@gmail.com>>
>>
>>
>> A new version of I-D, draft-lodderstedt-oauth-par-01.txt
>> has been successfully submitted by Torsten Lodderstedt and posted to t=
he
>> IETF repository.
>>
>> Name:draft-lodderstedt-oauth-par
>> Revision:01
>> Title:OAuth 2.0 Pushed Authorization Requests
>> Document date:2019-11-02
>> Group:Individual Submission
>> Pages:14
>> URL:
>> =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0https://www.ietf.org/internet-drafts/=
draft-lodderstedt-oauth-par-01.txt
>> Status:
>> =A0=A0=A0=A0=A0=A0=A0=A0https://datatracker.ietf.org/doc/draft-lodders=
tedt-oauth-par/
>> Htmlized:
>> =A0=A0=A0=A0=A0=A0https://tools.ietf.org/html/draft-lodderstedt-oauth-=
par-01
>> Htmlized:
>> =A0=A0=A0=A0=A0=A0https://datatracker.ietf.org/doc/html/draft-lodderst=
edt-oauth-par
>> Diff:
>> =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0https://www.ietf.org/rfcdiff?url2=3Ddraf=
t-lodderstedt-oauth-par-01
>>
>> Abstract:
>> =A0=A0This document defines the pushed authorization request endpoint,=

>> =A0=A0which allows clients to push the payload of an OAuth 2.0
>> =A0=A0authorization request to the authorization server via a direct
>> =A0=A0request and provides them with a request URI that is used as
>> =A0=A0reference to the data in a subsequent authorization request.
>>
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org
>> <http://tools.ietf.org>.
>>
>> The IETF Secretariat
>>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------4BD0444CD4BEAD693545568D
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<html>
  <head>
    <meta http-equiv=3D"Content-Type" content=3D"text/html;
      charset=3Dwindows-1252">
  </head>
  <body text=3D"#000000" bgcolor=3D"#FFFFFF">
    <p>+1 for WG adoption</p>
    <p>I'm super pleased with how usable the spec already is and how
      easy it was to explain to developers - you just take the regular
      authZ request and POST it form-encoded, using whatever client auth
      is registered for the token endpoint. PAR is significantly more
      versatile than the original "request object endpoint" from FAPI,
      while keeping normative stuff minimal by relying on existing specs
      - RFC 6749 and JAR. This means existing OAuth clients and servers
      can be made to support it with relatively little work because code
      reuse is facilitated.<br>
    </p>
    <p>The OAuth SDK was updated from PAR -00 to PAR -01 this morning to
      allow for the authZ error codes:</p>
    <p><a class=3D"moz-txt-link-freetext" href=3D"https://www.javadoc.io/=
doc/com.nimbusds/oauth2-oidc-sdk/6.18/com/nimbusds/oauth2/sdk/PushedAutho=
rizationRequest.html">https://www.javadoc.io/doc/com.nimbusds/oauth2-oidc=
-sdk/6.18/com/nimbusds/oauth2/sdk/PushedAuthorizationRequest.html</a></p>=

    <p><a class=3D"moz-txt-link-freetext" href=3D"https://www.javadoc.io/=
doc/com.nimbusds/oauth2-oidc-sdk/6.18/com/nimbusds/oauth2/sdk/PushedAutho=
rizationResponse.html">https://www.javadoc.io/doc/com.nimbusds/oauth2-oid=
c-sdk/6.18/com/nimbusds/oauth2/sdk/PushedAuthorizationResponse.html</a></=
p>
    <p><br>
    </p>
    <p>Vladimir<br>
    </p>
    <p><br>
    </p>
    <div class=3D"moz-cite-prefix">On 03/11/2019 18:11, Torsten
      Lodderstedt wrote:<br>
    </div>
    <blockquote type=3D"cite"
      cite=3D"mid:E80E980E-1EA5-4C4F-8055-5B9344AD9986@lodderstedt.net">
      <meta http-equiv=3D"Content-Type" content=3D"text/html;
        charset=3Dwindows-1252">
      Hi all,=A0
      <div class=3D""><br class=3D"">
      </div>
      <div class=3D"">revision of draft-lodderstedt-oauth-par (Pushed
        Authorization Requests) was just published.=A0</div>
      <div class=3D""><br class=3D"">
      </div>
      <div class=3D"">Here is the list of changes:</div>
      <div class=3D"">
        <ul style=3D"font-family: verdana, helvetica, arial, sans-serif;
          font-size: 13.3333px; font-variant-ligatures: normal; orphans:
          2; widows: 2;" class=3D"">
          <li style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">L=
ist=A0<samp
              class=3D"">client_id</samp>=A0as one of the basic parameter=
s</li>
          <li style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">E=
xplicitly
            forbid=A0<samp class=3D"">request_uri</samp>=A0in the process=
ing
            rules</li>
          <li style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">C=
larification
            regarding client authentication and that public clients are
            allowed</li>
          <li style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">A=
dded
            option to let clients register per-authorization request
            redirect URIs</li>
          <li style=3D"margin-left: 2em; margin-right: 2em;" class=3D"">G=
eneral
            clean up and wording improvements</li>
        </ul>
        <div class=3D"">I will present this draft in Singapore and would
          be happy if the working group would consider adoption of this
          joint work (Co-authors: David=A0Tonge, Nat Sakimura, Brian
          Campbell, Filip Skokan) as WG draft.</div>
        <div class=3D""><br class=3D"">
        </div>
        <div class=3D"">best regards,</div>
        <div class=3D"">Torsten.=A0</div>
        <div><br class=3D"">
          <blockquote type=3D"cite" class=3D"">
            <div class=3D"">Begin forwarded message:</div>
            <br class=3D"Apple-interchange-newline">
            <div style=3D"margin-top: 0px; margin-right: 0px;
              margin-bottom: 0px; margin-left: 0px;" class=3D""><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
                class=3D""><b class=3D"">From: </b></span><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif;" class=3D""><a
                  href=3D"mailto:internet-drafts@ietf.org" class=3D""
                  moz-do-not-send=3D"true">internet-drafts@ietf.org</a><b=
r
                  class=3D"">
              </span></div>
            <div style=3D"margin-top: 0px; margin-right: 0px;
              margin-bottom: 0px; margin-left: 0px;" class=3D""><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
                class=3D""><b class=3D"">Subject: </b></span><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif;" class=3D""><b class=3D"">New Vers=
ion
                  Notification for draft-lodderstedt-oauth-par-01.txt</b>=
<br
                  class=3D"">
              </span></div>
            <div style=3D"margin-top: 0px; margin-right: 0px;
              margin-bottom: 0px; margin-left: 0px;" class=3D""><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
                class=3D""><b class=3D"">Date: </b></span><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif;" class=3D"">3. November 2019 at
                17:04:23 CET<br class=3D"">
              </span></div>
            <div style=3D"margin-top: 0px; margin-right: 0px;
              margin-bottom: 0px; margin-left: 0px;" class=3D""><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"
                class=3D""><b class=3D"">To: </b></span><span
                style=3D"font-family: -webkit-system-font, Helvetica Neue=
,
                Helvetica, sans-serif;" class=3D"">"Nat Sakimura" &lt;<a
                  href=3D"mailto:nat@sakimura.org" class=3D""
                  moz-do-not-send=3D"true">nat@sakimura.org</a>&gt;,
                "Brian Campbell" &lt;<a
                  href=3D"mailto:bcampbell@pingidentity.com" class=3D""
                  moz-do-not-send=3D"true">bcampbell@pingidentity.com</a>=
&gt;,
                "Torsten Lodderstedt" &lt;<a
                  href=3D"mailto:torsten@lodderstedt.net" class=3D""
                  moz-do-not-send=3D"true">torsten@lodderstedt.net</a>&gt=
;,
                "Dave Tonge" &lt;<a href=3D"mailto:dave@tonge.org"
                  class=3D"" moz-do-not-send=3D"true">dave@tonge.org</a>&=
gt;,
                "Filip Skokan" &lt;<a href=3D"mailto:panva.ip@gmail.com"
                  class=3D"" moz-do-not-send=3D"true">panva.ip@gmail.com<=
/a>&gt;<br
                  class=3D"">
              </span></div>
            <br class=3D"">
            <div class=3D"">
              <div class=3D""><br class=3D"">
                A new version of I-D, draft-lodderstedt-oauth-par-01.txt<=
br
                  class=3D"">
                has been successfully submitted by Torsten Lodderstedt
                and posted to the<br class=3D"">
                IETF repository.<br class=3D"">
                <br class=3D"">
                Name:<span class=3D"Apple-tab-span" style=3D"white-space:=
pre">	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	</=
span>draft-lodderstedt-oauth-par<br
                  class=3D"">
                Revision:<span class=3D"Apple-tab-span" style=3D"white-sp=
ace:pre">	</span>01<br
                  class=3D"">
                Title:<span class=3D"Apple-tab-span" style=3D"white-space=
:pre">	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	<=
/span>OAuth
                2.0 Pushed Authorization Requests<br class=3D"">
                Document date:<span class=3D"Apple-tab-span" style=3D"whi=
te-space:pre">	</span>2019-11-02<br
                  class=3D"">
                Group:<span class=3D"Apple-tab-span" style=3D"white-space=
:pre">	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	<=
/span>Individual
                Submission<br class=3D"">
                Pages:<span class=3D"Apple-tab-span" style=3D"white-space=
:pre">	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	<=
/span>14<br
                  class=3D"">
                URL: =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0<a
href=3D"https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-par-=
01.txt"
                  class=3D"" moz-do-not-send=3D"true">https://www.ietf.or=
g/internet-drafts/draft-lodderstedt-oauth-par-01.txt</a><br
                  class=3D"">
                Status: =A0=A0=A0=A0=A0=A0=A0=A0<a
                  href=3D"https://datatracker.ietf.org/doc/draft-lodderst=
edt-oauth-par/"
                  class=3D"" moz-do-not-send=3D"true">https://datatracker=
=2Eietf.org/doc/draft-lodderstedt-oauth-par/</a><br
                  class=3D"">
                Htmlized: =A0=A0=A0=A0=A0=A0<a
                  href=3D"https://tools.ietf.org/html/draft-lodderstedt-o=
auth-par-01"
                  class=3D"" moz-do-not-send=3D"true">https://tools.ietf.=
org/html/draft-lodderstedt-oauth-par-01</a><br
                  class=3D"">
                Htmlized: =A0=A0=A0=A0=A0=A0<a
                  href=3D"https://datatracker.ietf.org/doc/html/draft-lod=
derstedt-oauth-par"
                  class=3D"" moz-do-not-send=3D"true">https://datatracker=
=2Eietf.org/doc/html/draft-lodderstedt-oauth-par</a><br
                  class=3D"">
                Diff: =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0<a
                  href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-lodde=
rstedt-oauth-par-01"
                  class=3D"" moz-do-not-send=3D"true">https://www.ietf.or=
g/rfcdiff?url2=3Ddraft-lodderstedt-oauth-par-01</a><br
                  class=3D"">
                <br class=3D"">
                Abstract:<br class=3D"">
                =A0=A0This document defines the pushed authorization requ=
est
                endpoint,<br class=3D"">
                =A0=A0which allows clients to push the payload of an OAut=
h
                2.0<br class=3D"">
                =A0=A0authorization request to the authorization server v=
ia
                a direct<br class=3D"">
                =A0=A0request and provides them with a request URI that i=
s
                used as<br class=3D"">
                =A0=A0reference to the data in a subsequent authorization=

                request.<br class=3D"">
                <br class=3D"">
                <br class=3D"">
                <br class=3D"">
                <br class=3D"">
                Please note that it may take a couple of minutes from
                the time of submission<br class=3D"">
                until the htmlized version and diff are available at <a
                  href=3D"http://tools.ietf.org" class=3D""
                  moz-do-not-send=3D"true">tools.ietf.org</a>.<br class=3D=
"">
                <br class=3D"">
                The IETF Secretariat<br class=3D"">
                <br class=3D"">
              </div>
            </div>
          </blockquote>
        </div>
        <br class=3D"">
      </div>
      <br>
      <fieldset class=3D"mimeAttachmentHeader"></fieldset>
      <pre class=3D"moz-quote-pre" wrap=3D"">____________________________=
___________________
OAuth mailing list
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:OAuth@ietf.org">OAut=
h@ietf.org</a>
<a class=3D"moz-txt-link-freetext" href=3D"https://www.ietf.org/mailman/l=
istinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <pre class=3D"moz-signature" cols=3D"72">
</pre>
  </body>
</html>

--------------4BD0444CD4BEAD693545568D--

--------------ms070407070905020107080900
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms070407070905020107080900--


From nobody Mon Nov  4 05:40:11 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6FE8120274 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 05:40:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PlpWFHvYq8DZ for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 05:40:04 -0800 (PST)
Received: from mail-lj1-x22d.google.com (mail-lj1-x22d.google.com [IPv6:2a00:1450:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D601120869 for <oauth@ietf.org>; Mon,  4 Nov 2019 05:40:03 -0800 (PST)
Received: by mail-lj1-x22d.google.com with SMTP id k15so5522324lja.3 for <oauth@ietf.org>; Mon, 04 Nov 2019 05:40:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=NrS8C2DcuFIXvjYguZSL+1V2FfHg6mqftOHB+ZfWiGs=; b=I3vHnrs7m9R8qi2of2+6sqApw2Sj7dTrtRTSUD8PrvRVoAL/JUNn0+g70xuUCv30jO iRtkyfxFWAk1P2LG0SrENEjeqUr/u3l4yECbchAKVaw8CIsaHZOjVZZ/iqbJ/hO/Meh4 +VMKrzCLGQyKx7Buwj0RDnLU9VnqYpeCRg4Lk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=NrS8C2DcuFIXvjYguZSL+1V2FfHg6mqftOHB+ZfWiGs=; b=fWAG1C5IABNdMjM7ZIuu+iXMnuKer6urGW3a3sf6S8ouQrtP4JpF5FQZCSH86YG/kF M+MygoXvYs9kUudRdMCzIMUoAUU9YwHV2OkMefbI46WHa9axBFgijbG6oUPKTsC1FWfK QxOh2abMeAxFeLKlzsdmellFEmm5JGAdyFYSQkO/u19AxlruOfrfEbBMl9VoT3xMYhjZ c1L/d+/ggkyE8SUPgzrYRJhHfyxd7LP0JJ5fH0zcXuEjzeQeKJpYl2NSG9k5eIRU2ZPa Z7TpamKmD+8blISuVAZyix9vnAteUNSC264r2kNWuBa3eCVhnNfz6WcbH4xY1MgCQ7d2 3lYQ==
X-Gm-Message-State: APjAAAVZ1etozuU1CSRTJ11sJOiV6NS7C85Bjb0KW49+91H9RIeC0JeT ZHF5hOEm1WuirE/jUG7vUtMYLaLQWIyMbLxEKZitAReeNboODZidlT1EF9lxzQSMGcBMUXKEVMA sJL4L+zX4IGRZuw==
X-Google-Smtp-Source: APXvYqwCUitXl53j0/h0yw3/LAdJTo5PA2sbmALOTXCtPy4JSXP0wQA/N6bfu5pqFHZLqp5lWyiuozPJ/lXZtkH6a3A=
X-Received: by 2002:a2e:8784:: with SMTP id n4mr3140397lji.230.1572874801741;  Mon, 04 Nov 2019 05:40:01 -0800 (PST)
MIME-Version: 1.0
References: <85D42AA1-FF57-4383-BACB-57C5AA32CFAC@lodderstedt.net> <CAEKOcs2gkM3Henz5nS04_EuBQXWWbJU5K02ErP0rnVZXmjxXJQ@mail.gmail.com> <20191021020546.GZ43312@kduck.mit.edu> <CA+k3eCS7pf3wXBkpbXE0AXKUGogo0YcHd8oWfiBfkPB5axGQQw@mail.gmail.com> <CAEKOcs2po08AUUcqgMmuQOmsRPbDpLYsAFTK_br0x+QEb_0rgA@mail.gmail.com>
In-Reply-To: <CAEKOcs2po08AUUcqgMmuQOmsRPbDpLYsAFTK_br0x+QEb_0rgA@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 4 Nov 2019 06:39:35 -0700
Message-ID: <CA+k3eCQxs9PTQPM9nv4_A5vQxvEPLQjW3ij1FSxsMhSVhGXz4Q@mail.gmail.com>
To: Travis Spencer <travis.spencer@curity.io>
Cc: Benjamin Kaduk <kaduk@mit.edu>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d59a780596857385"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/r7ciAN_Be7A_5uq8h5GqYgZCfio>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 13:40:09 -0000

--000000000000d59a780596857385
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

The goal of the draft-ietf-oauth-mtls document is to define the pieces
needed for interoperability between the OAuth client, AS and RS. It's not
intended to define or prescribe the internal implementation details of
those entities. Although this particular implementation detail came up
enough to make it into the document with
https://tools.ietf.org/html/draft-ietf-oauth-mtls-17#section-6.5 saying
it's possible but the specifics are explicitly out of scope. It would have
made sense to reference something there informatively, if such a thing
existed. But as far as I know there's not anything that fits the bill. So
draft-ietf-oauth-mtls, which is currently in the RFC editor's quere so
kinda beyond accepting changes at this point, says that "how the client
certificate metadata is securely communicated between the intermediary and
the application server in this case is out of scope of this specification."

On Fri, Nov 1, 2019 at 11:02 AM Travis Spencer <travis.spencer@curity.io>
wrote:

> On Wed, Oct 23, 2019 at 2:11 PM Brian Campbell
> <bcampbell@pingidentity.com> wrote:
> > I agree with Ben here that it's not at all clear that the OAuth MTLS
> document should have defined a protocol from proxy to backend.
>
> Shouldn't it at least normalitvely reference some other spec then? If
> that reference is not defined before this draft is finalized, one
> could say they comply with the final mTLS spec but in a
> non-interoperable way.
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000d59a780596857385
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>The goal of the draft-ietf-oauth-mtls document is to =
define the pieces needed for interoperability between the OAuth client, AS =
and RS. It&#39;s not intended to define or prescribe the internal implement=
ation details of those entities. Although this particular implementation de=
tail came up enough to make it into the document with <a href=3D"https://to=
ols.ietf.org/html/draft-ietf-oauth-mtls-17#section-6.5" target=3D"_blank">h=
ttps://tools.ietf.org/html/draft-ietf-oauth-mtls-17#section-6.5</a> saying =
it&#39;s possible but the specifics are explicitly out of scope. It would h=
ave made sense to reference something there informatively, if such a thing =
existed. But as far as I know there&#39;s not anything that fits the bill. =
So draft-ietf-oauth-mtls, which is currently in the RFC editor&#39;s quere =
so kinda beyond accepting changes at this point, says that &quot;how the cl=
ient certificate metadata is securely communicated between the intermediary=
 and the application server in this case is out of scope of this specificat=
ion.&quot; </div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" clas=
s=3D"gmail_attr">On Fri, Nov 1, 2019 at 11:02 AM Travis Spencer &lt;<a href=
=3D"mailto:travis.spencer@curity.io" target=3D"_blank">travis.spencer@curit=
y.io</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1=
ex">On Wed, Oct 23, 2019 at 2:11 PM Brian Campbell<br>
&lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank">bcampbe=
ll@pingidentity.com</a>&gt; wrote:<br>
&gt; I agree with Ben here that it&#39;s not at all clear that the OAuth MT=
LS document should have defined a protocol from proxy to backend.<br>
<br>
Shouldn&#39;t it at least normalitvely reference some other spec then? If<b=
r>
that reference is not defined before this draft is finalized, one<br>
could say they comply with the final mTLS spec but in a<br>
non-interoperable way.<br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000d59a780596857385--


From nobody Mon Nov  4 08:04:07 2019
Return-Path: <makmuranggi@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00874120AF3 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 08:04:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fYmBMxfsK43f for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 08:04:02 -0800 (PST)
Received: from mail-io1-xd2f.google.com (mail-io1-xd2f.google.com [IPv6:2607:f8b0:4864:20::d2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16863120ACF for <oauth@ietf.org>; Mon,  4 Nov 2019 08:04:02 -0800 (PST)
Received: by mail-io1-xd2f.google.com with SMTP id u8so19022764iom.5 for <oauth@ietf.org>; Mon, 04 Nov 2019 08:04:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=eyQqJXxwHz9W2qJ7XQjOPrd8+5CUfCkk3JHuBogtT/I=; b=vKuDko4YnRV0JV4B9Svjo153om4NZAvi2PSLzRR4/F+R4us6Ou27CVgGYPe+Hsl7qx 7tvvlJ/7weOTJPJerlHazzbBGWQ5ebqfztvi1CJLB7r1Jzy8wLK0ORYshw3F8sHFEZ3u 9hclrXginjSN0PiXtZfN9GoJbYKnGbHFIVbh4RAIr/BREfgcnxZHlSH1sOKzp08fpmpS I7nVYAN1+4m1g97Q6LlWXtKTi4dnLmxxMIeEKZAj5zrKPx85NYUcM+pZwxkJP8Z2mZS3 Blvf5TlHK3qIg3l5RBzuj23no4uZ34NeiGf3EYvOZs3hk91aikhrdsv+MzRkOK/klg2y YpuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=eyQqJXxwHz9W2qJ7XQjOPrd8+5CUfCkk3JHuBogtT/I=; b=YKnVk8DIkdcWd9wAr84mCWIFHA9GsMuLKxbkocBsYGH1gMUKFw7o0y0IS6qW44hSIv P/3P+Lf4YK4bKBQAO6dUH7pcJdfN/H+iRGwO1phA+tY//PYZydTciskSOZ25vEwMxOB1 WoatzWnjRiKTyJV9igI/I8zNUHUQptHtlR0WzrdNB2vAbr7z7R3f5WnadtFYXHXHv3sm fdArir+Tc64JE33X4QzPuHyEnRqAEIB53PGXEO9Q6X533v6vZrjarKn8d/9Sv0XmgUqs W2OrEMqDH3J2Z2/jSyTbX0BA85HnAmio2fFOLhnHoJjn4o7ieMF6P2hGFmF7K/bl0LrO 77zQ==
X-Gm-Message-State: APjAAAVo5e29785HU965UaCEXpjonE5ja3zt2tqIZtzvo6SBcxi6d4By ICrSJGb4PUTGV4EfS/2ZbXaNy5Yds8sUThaXpujzmQ==
X-Google-Smtp-Source: APXvYqwfNUz6AaLRTuZt1qeuzKGeQEcXppFe0UUa1RZ78am5Eji6OkOQhjqMUkQb+aZf5UkLJlU3DZIpYbmOkIkcJ+I=
X-Received: by 2002:a6b:3707:: with SMTP id e7mr24860606ioa.293.1572883441132;  Mon, 04 Nov 2019 08:04:01 -0800 (PST)
MIME-Version: 1.0
From: Anggi Setiady Makmur <makmuranggi@gmail.com>
Date: Tue, 5 Nov 2019 00:03:50 +0800
Message-ID: <CAOZ_+YZeFpMUyYr4Pv7_EJWvX9Qk=d3QEhUvweTDbtfx4vdqTA@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="000000000000c82df105968776cc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/6zeufBi-_aQiA7UuiXrN0Sx1Ao8>
Subject: [OAUTH-WG] Yes i need Subscribe
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 16:04:05 -0000

--000000000000c82df105968776cc
Content-Type: text/plain; charset="UTF-8"

-- 
Anggi Makmur

--000000000000c82df105968776cc
Content-Type: text/html; charset="UTF-8"

-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Anggi Makmur</div>

--000000000000c82df105968776cc--


From nobody Mon Nov  4 08:48:24 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D6121201AA for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 08:48:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hjymPFpZvl4J for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 08:48:19 -0800 (PST)
Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4305B120100 for <oauth@ietf.org>; Mon,  4 Nov 2019 08:48:19 -0800 (PST)
Received: by mail-wr1-x432.google.com with SMTP id s1so17955189wro.0 for <oauth@ietf.org>; Mon, 04 Nov 2019 08:48:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:mime-version:subject:message-id:references:to:date; bh=+uhFHOzjVssnIXNjPW70uM/ZitXZg3StH2jYicsdDf0=; b=WJ9Ut3up5iPVGPoo/GFeojvnhM2hNC3zaHuibB41U8EISKZctNgjRoyRIlPeWiH9HL igYWhpCqURsRFw3l8vnQbsYj9JDIkKCrr/hoMj3mJvmdKDUd0raaZeegFTdiI94XBIiI NIDLR2zgM+bwBXWQZ7PgCsjRo6mkmAE5M2FbcHsUmkEElm5I4B+/j5CGUvCkbWa/9zfQ IOEdJulk4OKeKi8DpmizYGGfoODvF2P4c+a+5O54w5rPXcWGCcafA2pu+BJY/q4WN83e 8I8jCKnqCdgwX7Cmq05htjof1jtgaJUijWgxOmeUCWoyA0z3upkA7bShRdCv4L/JtZFC 5wFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:references :to:date; bh=+uhFHOzjVssnIXNjPW70uM/ZitXZg3StH2jYicsdDf0=; b=mcjC8He1kxpYoHTCkZEhR1R1iygLnAmIWNmJRqTUGvTmNEXYIaoRkCAET+nurnFT5C vnaTIPAGKkSWDYVcwzTVD/gTZMRvHq+tcBu4VoTHppN6rWlf/EBPapzy1S+//0xezyU6 smQIm6YBKixT7kmhgBVH+hmGSOANdUREnenTdOB/t7a3QV4linjdPoq+PCEoz4u2TVt5 8DmiwGyYUmAnx38cadPwWloQbNy00DlNIrTFkajEh4DQmTYxv9ZUhUwD4s7g3C9dSCwg TLhxvY35jfil0/1YVaYA/8ZDZoBS5GwPfMuCkgfVnhYTxaE9JkmLTN3WkxqcW19SR3Oy PMkw==
X-Gm-Message-State: APjAAAXpYnvTtguap0nmpORK3VS1yjypCZFH0lQZnoGu/pK/rcR3+eCa H9YTf42H2wOj8+DJcFtnI6G2fmyzVNwSfA==
X-Google-Smtp-Source: APXvYqzID+zLGjXjaP4TbVMIJcnqeI+ugYsXdQSxDgN3bXQu9q1zBvOG0YlPIbNJ63ecjcZVjGQ12A==
X-Received: by 2002:a5d:5091:: with SMTP id a17mr22862560wrt.249.1572886097410;  Mon, 04 Nov 2019 08:48:17 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id 76sm28601531wma.0.2019.11.04.08.48.16 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 04 Nov 2019 08:48:16 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Message-Id: <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net>
References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com>
To: oauth <oauth@ietf.org>
Date: Mon, 4 Nov 2019 17:48:15 +0100
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/UZt3rSjkAlCIuYPXrz5r9jqW6sc>
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-lodderstedt-oauth-rar-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 16:48:22 -0000

--Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428"


--Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi all,

a new (significantly enhanced) revision of draft-lodderstedt-oauth-rar =
was just published. Here is the list of changes:

	=E2=80=A2 Reworked examples to illustrate privacy preserving use =
of authorization_details
	=E2=80=A2 Added text on audience restriction
	=E2=80=A2 Added description of relationship between scope and =
authorization_details
	=E2=80=A2 Added text on token request & response and =
authorization_details
	=E2=80=A2 Added text on how authorization details are conveyed =
to RSs by JWTs or token endpoint response
	=E2=80=A2 Added description of relationship between claims and =
authorization_details
	=E2=80=A2 Added more example from different sectors
	=E2=80=A2 Clarified string comparison to be byte-exact without =
collation

Thanks a lot for all contributions and the review feedback so far. I =
will present this draft in Singapore and would appreciate if the WG =
would consider this draft for adoption.=20

best regards,
Torsten.=20

> Begin forwarded message:
>=20
> From: internet-drafts@ietf.org
> Subject: New Version Notification for =
draft-lodderstedt-oauth-rar-03.txt
> Date: 4. November 2019 at 17:43:01 CET
> To: "Justin Richer" <ietf@justin.richer.org>, "Torsten Lodderstedt" =
<torsten@lodderstedt.net>, "Brian Campbell" <bcampbell@pingidentity.com>
>=20
>=20
> A new version of I-D, draft-lodderstedt-oauth-rar-03.txt
> has been successfully submitted by Torsten Lodderstedt and posted to =
the
> IETF repository.
>=20
> Name:		draft-lodderstedt-oauth-rar
> Revision:	03
> Title:		OAuth 2.0 Rich Authorization Requests
> Document date:	2019-11-03
> Group:		Individual Submission
> Pages:		30
> URL:            =
https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-03.txt
> Status:         =
https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
> Htmlized:       =
https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03
> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-rar
> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03
>=20
> Abstract:
>   This document specifies a new parameter "authorization_details" that
>   is used to carry fine grained authorization data in the OAuth
>   authorization request.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20


--Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
all,<div class=3D""><br class=3D""></div><div class=3D"">a new =
(significantly enhanced) revision of draft-lodderstedt-oauth-rar was =
just published. Here is the list of changes:</div><div class=3D""><br =
class=3D""></div><div class=3D""><div class=3D""><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>=E2=80=A2 =
Reworked examples to illustrate privacy preserving use =
of&nbsp;authorization_details<br class=3D""></div><div class=3D""><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>=E2=80=A2 =
Added text on audience restriction<br class=3D""></div><div =
class=3D""><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>=E2=80=A2 Added description of relationship =
between&nbsp;scope&nbsp;and&nbsp;authorization_details<br =
class=3D""></div><div class=3D""><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>=E2=80=A2 Added text on token =
request &amp; response and&nbsp;authorization_details<br =
class=3D""></div><div class=3D""><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>=E2=80=A2 Added text on how =
authorization details are conveyed to RSs by JWTs or token endpoint =
response<br class=3D""></div><div class=3D""><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>=E2=80=A2 =
Added description of relationship =
between&nbsp;claims&nbsp;and&nbsp;authorization_details<br =
class=3D""></div><div class=3D""><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>=E2=80=A2 Added more example from =
different sectors<br class=3D""></div><div class=3D""><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>=E2=80=A2 =
Clarified string comparison to be byte-exact without collation</div><div =
class=3D""><br class=3D""></div><div class=3D"">Thanks a lot for all =
contributions and the review feedback so far. I will present this draft =
in Singapore and would appreciate if the WG would consider this draft =
for adoption.&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">best regards,</div><div class=3D"">Torsten.&nbsp;</div><div><br=
 class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">Begin =
forwarded message:</div><br class=3D"Apple-interchange-newline"><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;" class=3D""><span style=3D"font-family: =
-webkit-system-font, Helvetica Neue, Helvetica, sans-serif; =
color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">From: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D""><a =
href=3D"mailto:internet-drafts@ietf.org" =
class=3D"">internet-drafts@ietf.org</a><br class=3D""></span></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;" class=3D""><span style=3D"font-family: =
-webkit-system-font, Helvetica Neue, Helvetica, sans-serif; =
color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Subject: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D""><b class=3D"">New Version =
Notification for draft-lodderstedt-oauth-rar-03.txt</b><br =
class=3D""></span></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span =
style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Date: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">4. November 2019 at 17:43:01 =
CET<br class=3D""></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span=
 style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">To: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">"Justin Richer" &lt;<a =
href=3D"mailto:ietf@justin.richer.org" =
class=3D"">ietf@justin.richer.org</a>&gt;, "Torsten Lodderstedt" &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" =
class=3D"">torsten@lodderstedt.net</a>&gt;, "Brian Campbell" &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" =
class=3D"">bcampbell@pingidentity.com</a>&gt;<br =
class=3D""></span></div><br class=3D""><div class=3D""><div class=3D""><br=
 class=3D"">A new version of I-D, draft-lodderstedt-oauth-rar-03.txt<br =
class=3D"">has been successfully submitted by Torsten Lodderstedt and =
posted to the<br class=3D"">IETF repository.<br class=3D""><br =
class=3D"">Name:<span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>draft-lodderstedt-oauth-rar<br class=3D"">Revision:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span>03<br =
class=3D"">Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre">=
	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>OAuth 2.0 Rich Authorization Requests<br class=3D"">Document =
date:<span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>2019-11-03<br class=3D"">Group:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span>Individual Submission<br =
class=3D"">Pages:<span class=3D"Apple-tab-span" style=3D"white-space:pre">=
	</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span>30<br class=3D"">URL: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-0=
3.txt" =
class=3D"">https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-ra=
r-03.txt</a><br class=3D"">Status: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/" =
class=3D"">https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/</=
a><br class=3D"">Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03" =
class=3D"">https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03</a><=
br class=3D"">Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-rar"=
 =
class=3D"">https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-r=
ar</a><br class=3D"">Diff: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03=
" =
class=3D"">https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar=
-03</a><br class=3D""><br class=3D"">Abstract:<br class=3D""> =
&nbsp;&nbsp;This document specifies a new parameter =
"authorization_details" that<br class=3D""> &nbsp;&nbsp;is used to carry =
fine grained authorization data in the OAuth<br class=3D""> =
&nbsp;&nbsp;authorization request.<br class=3D""><br class=3D""><br =
class=3D""><br class=3D""><br class=3D"">Please note that it may take a =
couple of minutes from the time of submission<br class=3D"">until the =
htmlized version and diff are available at <a =
href=3D"http://tools.ietf.org" class=3D"">tools.ietf.org</a>.<br =
class=3D""><br class=3D"">The IETF Secretariat<br class=3D""><br =
class=3D""></div></div></blockquote></div><br =
class=3D""></div></body></html>=

--Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428--

--Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8--


From luke.o.synnestvedt@pwc.com  Mon Nov  4 10:26:42 2019
Return-Path: <luke.o.synnestvedt@pwc.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC6FE120CCD for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 10:26:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.999
X-Spam-Level: 
X-Spam-Status: No, score=-6.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pwc.com header.b=oIGSWFLP; dkim=fail (2048-bit key) reason="fail (body has been altered)" header.d=pwc.com header.b=Mxy4S/G4
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MKnJE9Xcg6nw for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 10:26:39 -0800 (PST)
Received: from lxsmpr21.pwc.com (lxsmpr21.pwc.com [155.201.248.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8200120C50 for <oauth@ietf.org>; Mon,  4 Nov 2019 10:26:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pwc.com; h=mime-version : from : date : message-id : subject : to : content-type; s=Gtwy1-06072019-H9MsYnooFYIE; bh=0CO2BOeZ5bF2rUVVt/EK5FNzVGh+oFmajZ/3nMDrQME=; b=oIGSWFLPjfsg8ThDvUJ1huItSlzsxwtC4wmudXxwmErP/+bsOJM6ByzLnBP+qIZ00fBa jZgwzfvsVx8b6927Vzs4j98rfa8PvhU+xpFDPYI5C/4dh+W0nuBBnemqTruYVqq/s5lT f099WiKuX2isqcc5HjuRHdk+CpV00lcjqhLYuvtXvIUViaA7NNnNTEzCgYyQnWwsu8Sn 4I/OMIRG3wS6k6YVB5RoyfVAjOkT/ukP7MKNTO75K88nMiTuK7+wtUcGA3DX9vp8KgK8 r4+lh+FqJ1seJruTTUfthWAAtXWHL3nPVoN4CBTfA8QIUNIOSOY6omDlDG1DweVvWZqm dA== 
Received: from mail-ot1-f71.google.com (mail-ot1-f71.google.com [209.85.210.71]) by lxsmpr21.nam.pwcinternal.com (8.16.0.27/8.16.0.27) with ESMTPS id xA4IQbN8092207 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=OK) for <oauth@ietf.org>; Mon, 4 Nov 2019 13:26:38 -0500
Received: by mail-ot1-f71.google.com with SMTP id 9so10501541otc.21 for <oauth@ietf.org>; Mon, 04 Nov 2019 10:26:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pwc.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=k3crTkI3AbIaoDnfZXi7wc0VSFkBfbBV17HEL0GaY6U=; b=Mxy4S/G4zMd/KY+/ce9PASHw+V9a7HG0cZYrTP3y/oghM5uW6hYUv77JERYPY1IMXB /4J+M+zAShFsCOMBq+Ys7/ot3NTtO3H5Hqg0Bm+Kal9dCtKEhq6YI/q03P/4ZN1RafDv fW8Wu7YJdN1FRDc8BNHHFS1SnDWHujEcqyXWi1ci/DQ6qHksXPzXUzl/MJ4zq3xD5T6u iHDPR5nJoHfXptUadJ3pMlTGufRJ7IT2MLiUzXdr1M0rVOYGWX2T3y6aVGyTIX6SyARo 9U3hNKw31xbdPwMaeR7y45ED4yZSpLT3cuIaPzWeKY8JiLewRnEicf/8rlN4DO5uhJez ZrbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=k3crTkI3AbIaoDnfZXi7wc0VSFkBfbBV17HEL0GaY6U=; b=NMwTmFs+TQM4ks3p0ravRjuYTQyx6VQNvi968LikV0Cv52WLdnHqIfO+IRm9xsUH6T 0I/u5ONX/7oYPMtW/7kp3Cii1DNnLFXPidi9zYIgcWBmvULKE8g9YSVcZdaEdRcTYLgw zXE/SicSpydoigDpgeFWED5SOc+9RDWR7DzhbvWbjE0l4otUaTrPtfBDYnpdq3TutGJM AoxCsgH20UqZIxmkTjH4Xe0w+tAh3c3ReSi8vo3bZVOYDGoSau1D5DkKvXKNGiDb6Wq5 VHAarkaE9OYSeBa1DehcdJoEEiiy3M7NB9TVfmzawXiBD94aDw0nrbEvU84qkwbnoZPJ gIgA==
X-Gm-Message-State: APjAAAXjQeTX/zxASjOd8bK2oCjENnk/ZVYhO20Khev0KWvtNSWc8AAa tgfMnLs/cECCjzAqI/L3gtex+wKgFQzAQtD4TdZMCMeac+qKJ7c92ms+5gkCYguJXxIKwhPPJbg c7U+u75WqjhdyTrSuzmsUuKmAuZowcXd2bBk=
X-Received: by 2002:a05:6830:1be3:: with SMTP id k3mr20095017otb.180.1572891997273;  Mon, 04 Nov 2019 10:26:37 -0800 (PST)
X-Google-Smtp-Source: APXvYqyGzQ93TbjcCzSV2zwcyyoMU/o71qTWHgQuidiEhAm01p9AISs/Kxbv6COQMzlKXxQ4O6xN+6+KAKjYvZtjCHI=
X-Received: by 2002:a05:6830:1be3:: with SMTP id k3mr20094973otb.180.1572891996139;  Mon, 04 Nov 2019 10:26:36 -0800 (PST)
MIME-Version: 1.0
From: "Luke Synnestvedt (US - ADVS)" <luke.o.synnestvedt@pwc.com>
Date: Mon, 4 Nov 2019 12:26:25 -0600
Message-ID: <CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="000000000000b4732f0596897442"
X-Proofpoint-PoS-Virus-Version: PwCProdVirusScanned
X-Proofpoint-Spam-Details: rule=notspam policy=outboundspam score=0 priorityscore=1501 malwarescore=0 suspectscore=8 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=972 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1911040179
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/AJtjADzCGJ1jw0_ttrm9_25yX0Y>
X-Mailman-Approved-At: Mon, 04 Nov 2019 11:58:55 -0800
Subject: [OAUTH-WG] Mail regarding draft-ietf-oauth-token-exchange (version 19)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 19:38:13 -0000

--000000000000b4732f0596897442
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Hello IETF OAuth team,

I'm drafting some internal reference architecture guidance on the topic of
Token Exchange within an OAuth 2.0 authentication/authorization flow and
have relied heavily on the most recent draft
<https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-19> which I
know has since expired. I also see that this document has been sent for
publication approval - is there an update from the team regarding when this
document may be published?

Thanks,
Luke Synnestvedt

-- 
*Luke Owen Synnestvedt*
Cybersecurity Consultant
Philadelphia | +1 (215) 280 6032
PricewaterhouseCoopers Advisory Services LLC

______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.

--000000000000b4732f0596897442
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"

<div dir=3D"ltr">Hello IETF OAuth team,<div><br></div><div>I&#39;m drafting=
 some internal reference architecture guidance on the topic of Token Exchan=
ge within an OAuth 2.0 authentication/authorization flow and have relied he=
avily on the <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-token-=
exchange-19">most recent draft</a> which I know has since expired. I also s=
ee that this document has been sent for publication approval - is there an =
update from the team regarding when this document may be published?</div><d=
iv><br></div><div>Thanks,</div><div>Luke Synnestvedt<br clear=3D"all"><div>=
<br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=
=3D"gmail_signature"><div dir=3D"ltr"><div><span style=3D"color:rgb(0,0,0);=
font-family:georgia,palatino;font-size:9pt;line-height:14pt"><strong><span =
style=3D"color:rgb(0,0,1)">Luke</span> <span style=3D"color:rgb(0,0,1)">Owe=
n</span> <span style=3D"color:rgb(0,0,1)">Synnestvedt</span></strong></span=
><br><span style=3D"color:rgb(0,0,0);font-family:arial,helvetica,sans-serif=
;font-size:9pt;line-height:14pt">Cybersecurity Consultant<br>Philadelphia |=
 <span style=3D"color:rgb(0,0,1)">+1 (215) 280 6032</span><span style=3D"co=
lor:rgb(0,0,1)"></span><br>PricewaterhouseCoopers Advisory Services LLC<br>=
</span></div></div></div></div></div>

<HR>The information transmitted, including any attachments, is intended onl=
y for the person or entity to which it is addressed and may contain confide=
ntial and/or privileged material. Any review, retransmission, dissemination=
 or other use of, or taking of any action in reliance upon, this informatio=
n by persons or entities other than the intended recipient is prohibited, a=
nd all liability arising therefrom is disclaimed. If you received this in e=
rror, please contact the sender and delete the material from any computer. =
PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  Th=
is communication may come from PricewaterhouseCoopers LLP or one of its sub=
sidiaries.<BR>

--000000000000b4732f0596897442--


From nobody Mon Nov  4 12:12:57 2019
Return-Path: <vladimir@connect2id.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9688120832 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:12:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.894
X-Spam-Level: 
X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WGTsGJITX9rY for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:12:52 -0800 (PST)
Received: from p3plsmtpa08-04.prod.phx3.secureserver.net (p3plsmtpa08-04.prod.phx3.secureserver.net [173.201.193.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3351512082E for <oauth@ietf.org>; Mon,  4 Nov 2019 12:12:52 -0800 (PST)
Received: from [192.168.0.102] ([94.155.17.54]) by :SMTPAUTH: with ESMTPSA id RiiWikdkpPReBRiiYiAvS9; Mon, 04 Nov 2019 13:12:51 -0700
To: oauth@ietf.org
References: <CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmail.com>
From: Vladimir Dzhuvinov <vladimir@connect2id.com>
Openpgp: preference=signencrypt
Organization: Connect2id Ltd.
Message-ID: <04d91af7-502b-fbd8-8cd6-0edd96d85b97@connect2id.com>
Date: Mon, 4 Nov 2019 22:12:47 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmail.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050909070609060200030109"
X-CMAE-Envelope: MS4wfB4nSdEYKUDKT2bzZqbEyCj52qWgZwjp+jpWrXNMGdpXnPT6HmYq8WQ8S5UD41cTeBSZJ0K4dFGAHwZMhM7HJPEhPrIMSGaF4A53bk+JpfY1TiH7wg5M Rzrpqays9OPugnPa66vwqVc90ZcmSJUNneGu7XnuiNv36wDVSBdZdJzK
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/voHo4ETHMSxyl-Q0TokqgDhbbhU>
Subject: Re: [OAUTH-WG] Mail regarding draft-ietf-oauth-token-exchange (version 19)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 20:12:55 -0000

This is a cryptographically signed message in MIME format.

--------------ms050909070609060200030109
Content-Type: multipart/alternative;
 boundary="------------E9AD62C8818FBF7397D6D47C"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------E9AD62C8818FBF7397D6D47C
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

=46rom what I see -19 hasn't expired:

Expires: January 21, 2020


Perhaps somebody else could answer your second question, but for me it's
essentially at a stage when it's a done deal.

Vladimir

On 04/11/2019 20:26, Luke Synnestvedt (US - ADVS) wrote:
> Hello IETF OAuth team,
>
> I'm drafting some internal reference architecture guidance on the
> topic of Token Exchange within an OAuth 2.0
> authentication/authorization flow and have relied heavily on the most
> recent draft
> <https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-19> which
> I know has since expired. I also see that this document has been sent
> for publication approval - is there an update from the team regarding
> when this document may be published?
>
> Thanks,
> Luke Synnestvedt


--------------E9AD62C8818FBF7397D6D47C
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
  <head>
    <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body text=3D"#000000" bgcolor=3D"#FFFFFF">
    <p>From what I see -19 hasn't expired: <br>
    </p>
    <pre>Expires: January 21, 2020</pre>
    <div class=3D"moz-cite-prefix"><br>
    </div>
    <div class=3D"moz-cite-prefix">Perhaps somebody else could answer you=
r
      second question, but for me it's essentially at a stage when it's
      a done deal.</div>
    <div class=3D"moz-cite-prefix"><br>
    </div>
    <div class=3D"moz-cite-prefix">Vladimir<br>
    </div>
    <div class=3D"moz-cite-prefix"><br>
    </div>
    <div class=3D"moz-cite-prefix">On 04/11/2019 20:26, Luke Synnestvedt
      (US - ADVS) wrote:<br>
    </div>
    <blockquote type=3D"cite"
cite=3D"mid:CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmai=
l.com">
      <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DU=
TF-8">
      <div dir=3D"ltr">Hello IETF OAuth team,
        <div><br>
        </div>
        <div>I'm drafting some internal reference architecture guidance
          on the topic of Token Exchange within an OAuth 2.0
          authentication/authorization flow and have relied heavily on
          the <a
            href=3D"https://tools.ietf.org/html/draft-ietf-oauth-token-ex=
change-19"
            moz-do-not-send=3D"true">most recent draft</a> which I know
          has since expired. I also see that this document has been sent
          for publication approval - is there an update from the team
          regarding when this document may be published?</div>
        <div><br>
        </div>
        <div>Thanks,</div>
        <div>Luke Synnestvedt</div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------E9AD62C8818FBF7397D6D47C--

--------------ms050909070609060200030109
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms050909070609060200030109--


From nobody Mon Nov  4 12:29:30 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9820B120219 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:29:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ulfuZsRJa2q for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:29:26 -0800 (PST)
Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58135120233 for <oauth@ietf.org>; Mon,  4 Nov 2019 12:29:26 -0800 (PST)
Received: by mail-lf1-x12f.google.com with SMTP id j14so13272635lfb.8 for <oauth@ietf.org>; Mon, 04 Nov 2019 12:29:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xUUoqQyxzsJp8BvMNxjDWTCXG45Bu27ZB2LiFlvYV2M=; b=ONZYaKGISDEGj/rufO2MtzHs4MvZLN8xBqhELt5fh4dv48vxPPNTUjP8Qrdpyae68V FdurpfbXFQr9MurN4qo7DRoZyfOGq2TYTW+h8ppbTIhYpGVScIFc+5VwAkH2l40zElwJ 5O5AVLZXKp2fTDz3SFHDj1gWZHbZMYTvyncjA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xUUoqQyxzsJp8BvMNxjDWTCXG45Bu27ZB2LiFlvYV2M=; b=XU/rOsvCKqajrK6oirSkzHrGgHqgWXRAca3VbFi2RXTOGYjH31mbb9UnN/kbof7pJ0 aQR+y5uQAj1nZagbOTD5Zyj6rsgIEeJxj6hl1519fxCr0XRvPamb18b/SBjTTKxQ05sW st8MFyVDcWWS0LVuP4xFCJ633GV6CUgnWs5RQ53RPd6ALYLYJUAjG93NGmRWHcfp01ns Jc5Ro6PSNuYHy2aOe9jfuKhH+GDqsAjrcs1pFLnL2YQhRTvb6UJDiuy+KoZR2VN7R3pz 6pDLcu3AowWiTuC1ydGJPT+pOq5o7ct3t8thDESqTcNyCyWlxVjYbrNmFzuOsG8y21lD FRPA==
X-Gm-Message-State: APjAAAWv2bk8XG5u5VGiT3YKGrJh9JoQJ+9OrBA+bF2WeWalb0mpQQ/J UG/YWsyMb/Z8wJlzzBMmtU0RlUVn2nTK1VF4C9Rv790NN8nzmf1fJ90E67gy8CxFuc2TKJzu+7B hFslIIfQ3VzwfuAF7/80=
X-Google-Smtp-Source: APXvYqyiMYgnYoGbaxGD/4KV1DYRNIgBVxsxJO3aB7vg9jCtZgQhyxCJQMIYQwofhE3dgm1lv8lwWgsS/B7JHe+E3zw=
X-Received: by 2002:a19:f811:: with SMTP id a17mr17558707lff.132.1572899364382;  Mon, 04 Nov 2019 12:29:24 -0800 (PST)
MIME-Version: 1.0
References: <CAPiTtb73FQ0d4H31-hFJPUVnPmnpnsznw-SdYWgM5qCBaZ84sw@mail.gmail.com> <04d91af7-502b-fbd8-8cd6-0edd96d85b97@connect2id.com>
In-Reply-To: <04d91af7-502b-fbd8-8cd6-0edd96d85b97@connect2id.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 4 Nov 2019 13:28:58 -0700
Message-ID: <CA+k3eCTP4otFs_t9H0QR5E5afQwUDXBx1DyOWdrUp=uhecs6Qw@mail.gmail.com>
To: Vladimir Dzhuvinov <vladimir@connect2id.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e1c2fe05968b2bdf"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/hlZ7xwYYGCcU8Uzqb_sLqb0D85w>
Subject: Re: [OAUTH-WG] Mail regarding draft-ietf-oauth-token-exchange (version 19)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 20:29:29 -0000

--000000000000e1c2fe05968b2bdf
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

It is currently in the RFC Editor's publication queue
https://www.rfc-editor.org/current_queue.php so should be published soon as
an RFC (for some value of soon).

On Mon, Nov 4, 2019 at 1:13 PM Vladimir Dzhuvinov <vladimir@connect2id.com>
wrote:

> From what I see -19 hasn't expired:
>
> Expires: January 21, 2020
>
>
> Perhaps somebody else could answer your second question, but for me it's
> essentially at a stage when it's a done deal.
>
> Vladimir
>
> On 04/11/2019 20:26, Luke Synnestvedt (US - ADVS) wrote:
>
> Hello IETF OAuth team,
>
> I'm drafting some internal reference architecture guidance on the topic o=
f
> Token Exchange within an OAuth 2.0 authentication/authorization flow and
> have relied heavily on the most recent draft
> <https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-19> which I
> know has since expired. I also see that this document has been sent for
> publication approval - is there an update from the team regarding when th=
is
> document may be published?
>
> Thanks,
> Luke Synnestvedt
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000e1c2fe05968b2bdf
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">It is currently in the RFC Editor&#39;s publication queue =
<a href=3D"https://www.rfc-editor.org/current_queue.php">https://www.rfc-ed=
itor.org/current_queue.php</a> so should be published soon as an RFC (for s=
ome value of soon). <br></div><br><div class=3D"gmail_quote"><div dir=3D"lt=
r" class=3D"gmail_attr">On Mon, Nov 4, 2019 at 1:13 PM Vladimir Dzhuvinov &=
lt;<a href=3D"mailto:vladimir@connect2id.com">vladimir@connect2id.com</a>&g=
t; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0p=
x 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
 =20
   =20
 =20
  <div bgcolor=3D"#FFFFFF">
    <p>From what I see -19 hasn&#39;t expired: <br>
    </p>
    <pre>Expires: January 21, 2020</pre>
    <div><br>
    </div>
    <div>Perhaps somebody else could answer your
      second question, but for me it&#39;s essentially at a stage when it&#=
39;s
      a done deal.</div>
    <div><br>
    </div>
    <div>Vladimir<br>
    </div>
    <div><br>
    </div>
    <div>On 04/11/2019 20:26, Luke Synnestvedt
      (US - ADVS) wrote:<br>
    </div>
    <blockquote type=3D"cite">
     =20
      <div dir=3D"ltr">Hello IETF OAuth team,
        <div><br>
        </div>
        <div>I&#39;m drafting some internal reference architecture guidance
          on the topic of Token Exchange within an OAuth 2.0
          authentication/authorization flow and have relied heavily on
          the <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-token=
-exchange-19" target=3D"_blank">most recent draft</a> which I know
          has since expired. I also see that this document has been sent
          for publication approval - is there an update from the team
          regarding when this document may be published?</div>
        <div><br>
        </div>
        <div>Thanks,</div>
        <div>Luke Synnestvedt</div>
      </div>
    </blockquote>
    <br>
  </div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000e1c2fe05968b2bdf--


From nobody Mon Nov  4 12:35:39 2019
Return-Path: <travis.spencer@curity.io>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E963B120850 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:35:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=curity-io.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jEG6_rJ4MUu0 for <oauth@ietfa.amsl.com>; Mon,  4 Nov 2019 12:35:15 -0800 (PST)
Received: from mail-yb1-xb33.google.com (mail-yb1-xb33.google.com [IPv6:2607:f8b0:4864:20::b33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FBC3120125 for <oauth@ietf.org>; Mon,  4 Nov 2019 12:35:15 -0800 (PST)
Received: by mail-yb1-xb33.google.com with SMTP id i12so2363478ybg.2 for <oauth@ietf.org>; Mon, 04 Nov 2019 12:35:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=curity-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=VLGjmm6R3Pup03IBLLXqfHlINnYP/afGTgG/JnO9mbk=; b=BBezxHsWmv0aDHS7y0D/UQggjRi+l+QaO+5KgcS0rVLpFw2ZJkgKsC+mk2LcYjn7IQ z+ZRlNRCd+8xA7VxXK4mg4j1NVpwyE3I0Pz+faLcYeem6JsxsuDncV9u6Yljqtqn4VWl x+KYi0zXvZUosfPItGzxDK61MeYX0yNol4Hbrkx0QetjFIz2ZFUa9x5PSJ4fiyuvT27j SCzV8H4onkXgovX9GwG7hb1DEnQwwPQwfcDg+IfG6m5Xy+AKJXHXmM+6aB9fLWAB6AtP YYZI/+pPwggtEyOVdyratZrNdSvjDRLfI2UNWQS9GrniMpw6pbkxIkb73G94+wYtR85w InYA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=VLGjmm6R3Pup03IBLLXqfHlINnYP/afGTgG/JnO9mbk=; b=aX8WyFHtQZmh99ggLQ4DIJRy+kSxMyPKhOjXLpxv7ugNIwuqd2YLIcWpZhLXRwIA4F /GhsVAlrtPCzcw3LPSbFZQWywi6WixlyteUWR7q8Sq3WaRBhsorhZ3Uy1y10ijZM4Q27 /Y+VEzRiv2m/UpS7XYOx8EB2zNyI2FrxLEC6TBAl9wn+yJFTrYOU70hQk5HCFyAc+9vr V9vDp+3v7OJmyD4uFl3kWsqKkzALDYcCLTcuaOKdXXzcHkU9WO5JU2f78xGYvB1hagTT +gUmKrSrol+eDyjU2GpVXbdf1EKwujXmre7KbPG6ndLfyyNKQtzfnyzHeP+OmnhUSS4g cdog==
X-Gm-Message-State: APjAAAWF8izYbEKuBsryF/N9AGFwe020IS5EDPrvk+EoJnn3hYEQ/gmH PjxiEq52LExDt6FcGn2Cy3w6+U0jB4V1ldYyucwZNw==
X-Google-Smtp-Source: APXvYqwkZ0EOTmaThmnZHHHDXZFOaYHGPu/8r4mxDFtTzgTRMBoshWNLaoje8mITxsKr9sYEMSdmii/z5gqIPJvT6ro=
X-Received: by 2002:a5b:c52:: with SMTP id d18mr10014218ybr.98.1572899714753;  Mon, 04 Nov 2019 12:35:14 -0800 (PST)
MIME-Version: 1.0
References: <157021248387.1396.8889788139399592188.idtracker@ietfa.amsl.com> <E85574E6-EE77-41B6-97A5-7CE6056E41ED@lodderstedt.net> <CA+k3eCTqHfX4_aqH1UC+7ZOoonmk5iez5k=gGDo7uMs9Pb3z1A@mail.gmail.com> <CAD9ie-sxqwW66dWX8Ef-cWcKG9vA6ueVbB=BJt7YJciCtG3b+Q@mail.gmail.com> <CAEKOcs2pfFa1=ss-ZoeSH=EtzoWY7AXZL1eZF3rykOBAGbmcoA@mail.gmail.com> <CAGL6epLOPOnw5X3vOBT20tb=bFZr33v+sCTfTSdbNGrqOrVL_A@mail.gmail.com> <CAEKOcs3+dXQotAeEmxvTJcEb+yPLrqB9Rj1Sax0PnpkKEDz7VQ@mail.gmail.com> <CAGL6epKgpuyOc2b9hjgA0Uxm7uV_iKiYcvXybdR-=o1L4VxvHA@mail.gmail.com>
In-Reply-To: <CAGL6epKgpuyOc2b9hjgA0Uxm7uV_iKiYcvXybdR-=o1L4VxvHA@mail.gmail.com>
From: Travis Spencer <travis.spencer@curity.io>
Date: Mon, 4 Nov 2019 21:35:03 +0100
Message-ID: <CAEKOcs3M+G9QTvATzguBX_KNbwFLz7AN3G_pxrwyhcULiREuRA@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: oauth <oauth@ietf.org>, oauth-chairs@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Z3yU-cN6irvTVaE0seKQ-7vqS8c>
Subject: Re: [OAUTH-WG] oauth - New Meeting Session Request for IETF 106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 20:35:23 -0000

Submitted: https://datatracker.ietf.org/doc/draft-spencer-oauth-claims/

On Fri, Nov 1, 2019 at 5:57 PM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com> w=
rote:
>
> Sounds good.
>
> On Fri, Nov 1, 2019 at 12:56 PM Travis Spencer <travis.spencer@curity.io>=
 wrote:
>>
>> I see that the deadline is Monday.[1] I'll work this weekend, and
>> submit what I have. It won't be as much as I wanted due to other
>> commitments, but the gist will be complete.
>>
>> [1] https://datatracker.ietf.org/meeting/106/important-dates/
>>
>> On Fri, Nov 1, 2019 at 5:37 PM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com=
> wrote:
>> >
>> > Hi Spencer
>> >
>> > Sure. When are yo planning on submitting the draft?
>> >
>> > Regards,
>> >  Rifaat
>> >
>> >
>> > On Mon, Oct 14, 2019 at 5:20 AM Travis Spencer <travis.spencer@curity.=
io> wrote:
>> >>
>> >> I would like a slot to talk about a new draft I'm going to submit in =
the coming weeks related to claims (i.e., structured scopes). Would that be=
 possible?
>> >>
>> >> On Fri, Oct 4, 2019 at 11:15 PM Dick Hardt <dick.hardt@gmail.com> wro=
te:
>> >>>
>> >>> I'd like a slot to provide an update on Reciprocal OAuth.
>> >>> =E1=90=A7
>> >>>
>> >>> On Fri, Oct 4, 2019 at 2:12 PM Brian Campbell <bcampbell=3D40pingide=
ntity.com@dmarc.ietf.org> wrote:
>> >>>>
>> >>>> Hello chairs,
>> >>>>
>> >>>> I'd like to request some agenda time to present on:
>> >>>> https://tools.ietf.org/html/draft-fett-oauth-dpop
>> >>>>
>> >>>> Thank you,
>> >>>> Brian
>> >>>>
>> >>>> On Fri, Oct 4, 2019 at 3:09 PM Torsten Lodderstedt <torsten@lodders=
tedt.net> wrote:
>> >>>>>
>> >>>>> Hi chairs,
>> >>>>>
>> >>>>> I would like to request the following slots:
>> >>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-rar
>> >>>>> - https://tools.ietf.org/html/draft-lodderstedt-oauth-par
>> >>>>> - Security BCP
>> >>>>>
>> >>>>> kind regards,
>> >>>>> Torsten..
>> >>>>>
>> >>>>> Am 04.10.2019 um 11:08 schrieb IETF Meeting Session Request Tool <=
session-request@ietf..org>:
>> >>>>>
>> >>>>> =EF=BB=BF
>> >>>>>
>> >>>>> A new meeting session request has just been submitted by Hannes Ts=
chofenig, a Chair of the oauth working group.
>> >>>>>
>> >>>>>
>> >>>>> ---------------------------------------------------------
>> >>>>> Working Group Name: Web Authorization Protocol
>> >>>>> Area Name: Security Area
>> >>>>> Session Requester: Hannes Tschofenig
>> >>>>>
>> >>>>> Number of Sessions: 2
>> >>>>> Length of Session(s):  1.5 Hours, 1.5 Hours
>> >>>>> Number of Attendees: 50
>> >>>>> Conflicts to Avoid:
>> >>>>> Chair Conflict: acme tls rats sipcore anima
>> >>>>> Technology Overlap: ace secevent teep suit core tokbind saag
>> >>>>>
>> >>>>>
>> >>>>>
>> >>>>> People who must be present:
>> >>>>>  Roman Danyliw
>> >>>>>  Hannes Tschofenig
>> >>>>>  Rifaat Shekh-Yusef
>> >>>>>
>> >>>>> Resources Requested:
>> >>>>>
>> >>>>> Special Requests:
>> >>>>>
>> >>>>> ---------------------------------------------------------
>> >>>>>
>> >>>>> _______________________________________________
>> >>>>> OAuth mailing list
>> >>>>> OAuth@ietf.org
>> >>>>> https://www.ietf.org/mailman/listinfo/oauth
>> >>>>>
>> >>>>> _______________________________________________
>> >>>>> OAuth mailing list
>> >>>>> OAuth@ietf.org
>> >>>>> https://www.ietf.org/mailman/listinfo/oauth
>> >>>>
>> >>>>
>> >>>> CONFIDENTIALITY NOTICE: This email may contain confidential and pri=
vileged material for the sole use of the intended recipient(s). Any review,=
 use, distribution or disclosure by others is strictly prohibited...  If yo=
u have received this communication in error, please notify the sender immed=
iately by e-mail and delete the message and any file attachments from your =
computer. Thank you._______________________________________________
>> >>>> OAuth mailing list
>> >>>> OAuth@ietf.org
>> >>>> https://www.ietf.org/mailman/listinfo/oauth
>> >>>
>> >>> _______________________________________________
>> >>> OAuth mailing list
>> >>> OAuth@ietf.org
>> >>> https://www.ietf.org/mailman/listinfo/oauth


From nobody Mon Nov  4 14:05:42 2019
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietf.org
Delivered-To: oauth@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B8FB51200C4; Mon,  4 Nov 2019 14:05:34 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: oauth@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.108.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: oauth@ietf.org
Message-ID: <157290513468.13868.1844421911373469120@ietfa.amsl.com>
Date: Mon, 04 Nov 2019 14:05:34 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/HTFxbEMcywEktJ98OyVZsc2LPj8>
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-incremental-authz-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 22:05:35 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Web Authorization Protocol WG of the IETF.

        Title           : OAuth 2.0 Incremental Authorization
        Author          : William Denniss
	Filename        : draft-ietf-oauth-incremental-authz-03.txt
	Pages           : 9
	Date            : 2019-11-04

Abstract:
   OAuth 2.0 authorization requests that include every scope the client
   might ever need can result in over-scoped authorization and a sub-
   optimal end-user consent experience.  This specification enhances the
   OAuth 2.0 authorization protocol by adding incremental authorization,
   the ability to request specific authorization scopes as needed, when
   they're needed, removing the requirement to request every possible
   scope that might be needed upfront.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-incremental-authz/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-03
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-incremental-authz-03

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-oauth-incremental-authz-03


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Tue Nov  5 03:59:53 2019
Return-Path: <Lee_McGovern@swissre.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B84E41208E6 for <oauth@ietfa.amsl.com>; Tue,  5 Nov 2019 03:59:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6Z_bKj8PkEr4 for <oauth@ietfa.amsl.com>; Tue,  5 Nov 2019 03:59:48 -0800 (PST)
Received: from esa10.hc1106-67.c3s2.iphmx.com (esa10.hc1106-67.c3s2.iphmx.com [139.138.36.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCF2A1200B3 for <oauth@ietf.org>; Tue,  5 Nov 2019 03:59:47 -0800 (PST)
IronPort-SDR: 2lQubVBZi6P6s1SJfF7yvhRlr+5IvJdtTyOIjjHLpH4gi5MXTMOInvE4IF8gD4IKPpXbu9Q1gd ap/Sm7CF5FII/x+73pc4x0CchxfgPDhcITTJPrEh4cBvjUTdIjvvKaQZPvDgTqhSJPo2HpEQiU WyYTfSN1x+mzJxDocEjiI8whnrXYxbdPX+lrizUtXfxBsQ8MKTjolpHPda9tDaVTAPIQP3mVSx HynZs9o+GcqgQ/TY0rv7FQfwpHYb/JY2z4miBrHvv6zUt41iwoc5raAkL6nG/lJXEf4cPauIBG Gac=
X-Amp-Result: SKIPPED(no attachment in message)
Received: from edge.swissre.com ([193.246.239.100]) by esa10.hc1106-67.c3s2.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 05 Nov 2019 11:59:44 +0000
Received: from CHRP5013.corp.gwpnet.com (10.53.1.46) by edge.swissre.com (193.246.239.100) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 5 Nov 2019 12:59:43 +0100
Received: from CHRP5009.corp.gwpnet.com (10.53.1.44) by CHRP5013.corp.gwpnet.com (10.53.1.46) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 5 Nov 2019 12:59:41 +0100
Received: from CHRP5009.corp.gwpnet.com ([fe80::39a1:59b8:2e6a:5da6]) by CHRP5009.corp.gwpnet.com ([fe80::39a1:59b8:2e6a:5da6%15]) with mapi id 15.00.1473.003; Tue, 5 Nov 2019 12:59:41 +0100
From: Lee McGovern <Lee_McGovern@swissre.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Security BCP Review
Thread-Index: AdWT0ICkX9HZU4pbQKepV3hk+Xa3kQ==
Date: Tue, 5 Nov 2019 11:59:40 +0000
Message-ID: <e8801fda98a44c8eafad0856ce86c248@CHRP5009.corp.gwpnet.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Enabled=True; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_SiteId=45597f60-6e37-4be7-acfb-4c9e23b261ea; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Owner=Lee_McGovern@swissre.com; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_SetDate=2019-11-05T11:59:39.8849799Z; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Name=Internal; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Application=Microsoft Azure Information Protection; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Extended_MSFT_Method=Automatic; Sensitivity=Internal
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.62.28.10]
x-rcom-deduphash: 703879e4-644a-43bc-b33f-8d2e00b199ff
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-GBS-PROC: Uuu/QJ/pOQ7KCDEkvBtph8lwbvaj1NAoa9B9PmhCqvA=
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1LpwxgaSBG1tAVG_CHzLSnsk1cs>
Subject: [OAUTH-WG] Security BCP Review
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Nov 2019 11:59:52 -0000

As discussed on call yesterday here is my comments after review of https://=
tools.ietf.org/html/draft-ietf-oauth-security-topics-13 =


3.1 - "Clients MUST memorize which authorization server they sent an author=
ization request to" - is memorize the best synonym here, perhaps store or r=
etain is more aligned with computational language?

3.1.2 How does the draft https://tools.ietf.org/html/draft-parecki-oauth-br=
owser-based-apps-02 align with this guidance and will a future BCP update i=
nclude a direct reference to the final published version of this spec?

3.5, 3.6 Since there is a reference to the MTLS draft could there also be s=
ome guidance on the usage of token exchange best practise and also for the =
contents of the access token to be aligned https://tools.ietf.org/html/draf=
t-ietf-oauth-access-token-jwt-02

-----Original Message-----
From: OAuth <oauth-bounces@ietf.org> On Behalf Of oauth-request@ietf.org
Sent: Donnerstag, 17. Oktober 2019 21:00
To: oauth@ietf.org
Subject: OAuth Digest, Vol 132, Issue 24

Send OAuth mailing list submissions to
	oauth@ietf.org

To subscribe or unsubscribe via the World Wide Web, visit
	https://www.ietf.org/mailman/listinfo/oauth
or, via email, send a message with subject or body 'help' to
	oauth-request@ietf.org

You can reach the person managing the list at
	oauth-owner@ietf.org

When replying, please edit your Subject line so it is more specific than "R=
e: Contents of OAuth digest..."


Today's Topics:

   1. Re: Virtual Interim Meeting - Nov. 4th (Daniel Fett)
   2. Web Authorization Protocol (oauth) WG Virtual Meeting:
      2019-11-04 (IESG Secretary)


----------------------------------------------------------------------

Message: 1
Date: Thu, 17 Oct 2019 12:35:35 +0200
From: Daniel Fett <danielf+oauth@yes.com>
To: oauth@ietf.org
Subject: Re: [OAUTH-WG] Virtual Interim Meeting - Nov. 4th
Message-ID: <726efad4-a76c-c4dd-8a6e-b1097ac519c5@yes.com>
Content-Type: text/plain; charset=3D"utf-8"

I'm in as well.

Am 16.10.19 um 22:46 schrieb Mike Jones:
>
> I would participate.
>
> ?
>
> *From:* OAuth <oauth-bounces@ietf.org> *On Behalf Of * Vineet Banga
> *Sent:* Wednesday, October 16, 2019 7:19 AM
> *To:* Aaron Parecki <aaron@parecki.com>
> *Cc:* oauth <oauth@ietf.org>
> *Subject:* Re: [OAUTH-WG] Virtual Interim Meeting - Nov. 4th
>
> ?
>
> I would like to attend as well.
>
> ?
>
> Vineet
>
> ?
>
> On Wed, Oct 16, 2019 at 6:36 AM Aaron Parecki <aaron@parecki.com =

> <mailto:aaron@parecki.com>> wrote:
>
>     I'm interested as well.
>
>     ?
>
>     Aaron Parecki
>
>     ?
>
>     ?
>
>     ?
>
>     On Wed, Oct 16, 2019 at 3:54 AM Torsten Lodderstedt
>     <torsten@lodderstedt..net <mailto:torsten@lodderstedt.net>> wrote:
>
>         Hi,
>
>         I?m interested.
>
>         kind regards,
>         Torsten.
>
>         > On 15. Oct 2019, at 17:44, Hannes Tschofenig
>         <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>>
>         wrote:
>         >
>         > Hi all,
>         >
>         > we would like to hold a virtual interim meeting to discuss
>         the next steps regarding the OAuth 2.0 Security Best Current
>         Practice
>         (https://datatracker.ietf.org/doc/draft-ietf-oauth-security-topic=
s/
>         <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2=
F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-oauth-security-topics%2F&data=
=3D02%7C01%7CMichael.Jones%40microsoft.com%7C2e9bf2ca971a4052178108d75243ef=
81%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C1%7C637068324058348893&sdata=3D=
NwGEWOUYXhrOsqwmqrUnphFFe8k1XsnLzHyIMmvCeXQ%3D&reserved=3D0>)
>         draft.
>         >
>         > Time would be at our bi-weekly OAuth WG Virtual Office Hours
>         (i.e., 6:00 PM to 6:30 PM, (UTC+01:00) Amsterdam, Berlin,
>         Bern, Rome, Stockholm, Vienna).
>         >
>         > Please let us know if you are interested in the call.
>         >
>         > Ciao
>         > Hannes & Rifaat
>         >
>         > IMPORTANT NOTICE: The contents of this email and any
>         attachments are confidential and may also be privileged. If
>         you are not the intended recipient, please notify the sender
>         immediately and do not disclose the contents to any other
>         person, use it for any purpose, or store or copy the
>         information in any medium. Thank you.
>         >
>         > _______________________________________________
>         > OAuth mailing list
>         > OAuth@ietf.org <mailto:OAuth@ietf.org>
>         > https://www.ietf.org/mailman/listinfo/oauth
>         =

> <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww
> .ietf.org%2Fmailman%2Flistinfo%2Foauth&data=3D02%7C01%7CMichael.Jones%40
> microsoft.com%7C2e9bf2ca971a4052178108d75243ef81%7C72f988bf86f141af91a
> b2d7cd011db47%7C1%7C1%7C637068324058358885&sdata=3DB%2BnvMjXUIcXk6SJ6T8W
> OpNA9i%2BHeACHFYBku0hOQoXY%3D&reserved=3D0>
>
>         _______________________________________________
>         OAuth mailing list
>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>         https://www.ietf.org/mailman/listinfo/oauth
>         =

> <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww
> .ietf.org%2Fmailman%2Flistinfo%2Foauth&data=3D02%7C01%7CMichael.Jones%40
> microsoft.com%7C2e9bf2ca971a4052178108d75243ef81%7C72f988bf86f141af91a
> b2d7cd011db47%7C1%7C1%7C637068324058368875&sdata=3D%2FmKWM%2BqL9l6sVtUfT
> X%2BCHxb%2FTAzX7RiBMPwnM5Ld6Jg%3D&reserved=3D0>
>
>     --
>
>     ----
>
>     Aaron Parecki
>
>     aaronparecki.com
>     =

> <https://nam06.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Faaro
> nparecki.com&data=3D02%7C01%7CMichael.Jones%40microsoft.com%7C2e9bf2ca97
> 1a4052178108d75243ef81%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C1%7C63
> 7068324058378871&sdata=3DRo2YHHm5OIVuwfwtSjhtf7YU0IrauEtC6%2Bym52C1tSU%3
> D&reserved=3D0>
>
>     @aaronpk
>     =

> <https://nam06.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Ftwit
> ter.com%2Faaronpk&data=3D02%7C01%7CMichael.Jones%40microsoft.com%7C2e9bf
> 2ca971a4052178108d75243ef81%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0
> %7C637068324058378871&sdata=3Dz710a23WXKXSBqVjpE%2BIHqMwnpRuHm%2BVuaddDS
> NnVNY%3D&reserved=3D0>
>
>     ?
>
>     _______________________________________________
>     OAuth mailing list
>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>     https://www.ietf.org/mailman/listinfo/oauth
>     =

> <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww
> .ietf.org%2Fmailman%2Flistinfo%2Foauth&data=3D02%7C01%7CMichael.Jones%40
> microsoft.com%7C2e9bf2ca971a4052178108d75243ef81%7C72f988bf86f141af91a
> b2d7cd011db47%7C1%7C1%7C637068324058388866&sdata=3DcuSE2sOuZmyqc7GTmAB1c
> C%2BRvOS7tGU11jgOhjeHCmw%3D&reserved=3D0>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailarchive.ietf.org/arch/browse/oauth/attachments/20191017/6=
be5bf7c/attachment.html>

------------------------------

Message: 2
Date: Thu, 17 Oct 2019 10:18:33 -0700
From: IESG Secretary <iesg-secretary@ietf.org>
To: "IETF-Announce" <ietf-announce@ietf.org>
Cc: oauth@ietf.org
Subject: [OAUTH-WG] Web Authorization Protocol (oauth) WG Virtual
	Meeting: 2019-11-04
Message-ID: <157133271343.10206.12697042949233111458@ietfa.amsl.com>
Content-Type: text/plain; charset=3D"utf-8"

The Web Authorization Protocol (oauth) Working Group will hold a virtual in=
terim meeting on 2019-11-04 from 18:00 to 19:00 Europe/Vienna.

Agenda:
The purpose of the meeting is to discuss the next steps regarding the OAuth=
 2.0 Security Best Current Practice (https://datatracker.ietf.org/doc/draft=
-ietf-oauth-security-topics/) draft.

While our OAuth WG Virtual Office Hours is only 30 minutes long, I have ext=
ended the meeting invite to an one hour (in case we need more time).

Webex info:
https://ietf.webex.com/ietf/j.php?MTID=3Dma9109b49231ef3fee527bbc24b6a285b
Meeting number (access code): 643 148 548 Host key: 317086 =



Information about remote participation:
https://ietf.webex.com/ietf/j.php?MTID=3Dma9109b49231ef3fee527bbc24b6a285b



------------------------------

Subject: Digest Footer

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


------------------------------

End of OAuth Digest, Vol 132, Issue 24
**************************************


This e-mail, including attachments, is intended for the person(s) or compan=
y named and may contain confidential and/or legally privileged information.

Unauthorized disclosure, copying or use of this information may be unlawful=
 and is prohibited. If you are not the intended recipient, please delete th=
is message and notify the sender.
All incoming and outgoing e-mail messages are stored in the Swiss Re Electr=
onic Message Repository.
If you do not wish the retention of potentially private e-mails by Swiss Re=
, we strongly advise you not to use the Swiss Re e-mail account for any pri=
vate, non-business related communications.


From nobody Wed Nov  6 00:27:13 2019
Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2ED1112007A for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 00:27:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=fV4Gkbo+; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=viRmvioC
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gyRPXr0VS9-z for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 00:27:08 -0800 (PST)
Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30067.outbound.protection.outlook.com [40.107.3.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD857120013 for <oauth@ietf.org>; Wed,  6 Nov 2019 00:27:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FNWfqavKFd2qOSfZdI6c0mf50sH8qWllf6v2YUyLNiQ=; b=fV4Gkbo+zEXiiEsTwrkYDcpAZUY83DNIIF6Yz8pIeza8aOHb3NdrDU0gfQThu8Mc2V++GcJOvKChhg3akp1b2I9gtTvX0+xyr2dZBIFDTL0RGZAtdlC12Lp0f9QnwdLEdFZ1c22CfJf4LrOv6B/91QVYI9nh6IEmiZJEWpf8Oyc=
Received: from AM4PR08CA0049.eurprd08.prod.outlook.com (2603:10a6:205:2::20) by AM0PR08MB4467.eurprd08.prod.outlook.com (2603:10a6:208:138::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Wed, 6 Nov 2019 08:26:56 +0000
Received: from DB5EUR03FT026.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::208) by AM4PR08CA0049.outlook.office365.com (2603:10a6:205:2::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20 via Frontend Transport; Wed, 6 Nov 2019 08:26:56 +0000
Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com;
Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT026.mail.protection.outlook.com (10.152.20.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.20 via Frontend Transport; Wed, 6 Nov 2019 08:26:56 +0000
Received: ("Tessian outbound 851a1162fca7:v33"); Wed, 06 Nov 2019 08:26:55 +0000
X-CR-MTA-TID: 64aa7808
Received: from 9d55b21a45dc.1 (cr-mta-lb-1.cr-mta-net [104.47.13.53]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 27285694-F4EA-4D92-B4C9-1D73D72F3B63.1;  Wed, 06 Nov 2019 08:26:50 +0000
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-he1eur04lp2053.outbound.protection.outlook.com [104.47.13.53]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 9d55b21a45dc.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 06 Nov 2019 08:26:50 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=oVjMwspTQQhEGXu17wqDuHQm/2dc0HbP7OkxTgwtauS4wel2tpsRGGlxOX90qh25H3354PhzxEXQGrnDFzyW+HPnC/wAn/pK2sAMPUogAREpN6YG5T51zZrdP9sOYBjwcQaCPb0TXW71uXOopgS7aauvBBS2OwpO4P3FRD7wDTwg6LmnyZqLC4ISl2wP2m1kYgPGdprqBjgTjicAlHYDkgv8Ar5jQe2g5tXmerpNZh7BWlmop8jhY7Ip9x4dbVegVJHfNWxSty3ZjHfTAMEIzwP3nnS9vaAUMb6nQogjEorb29D5Opnvw5yd32OZoRmxDTqMRYgWky527Fc7AySJQA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Oi+qEOsJRT9jroD9ds2pnIOo3POjcHyw4q7nhf6dYng=; b=W37Gg32fqXPKuHjl4SxjxQBwXN1Ox/mwq92+pY3CZGtA81PVy4RvcbMypwCoKfRsnnWJXeUvS/ywyL4b+bVUIseH7U3b41WtRTrrpBQmM++8B9WW/64yNXGtUx3/yKc8+AbQMv/8QlCgVo+7ypKAQ8QGmz1Vid+XPOoVWk3jIV10UhyXUtZIj1Ynt5356Foxa6BljvH+0dD3HhEWzGXMhQIrLaY484wh17JxLTvL+16wV0dFpSjpgY/ccXGtuKPLXQZ5GJmzwJXoKQJx4HKXOcr5SN/rjzYJGPLBL/IpSeof6TGDeWsrAt5mVhUQ1fbSRBRj4CW/y3iMLKMLhLY9jg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Oi+qEOsJRT9jroD9ds2pnIOo3POjcHyw4q7nhf6dYng=; b=viRmvioCjiJUY/9trvkfG0QvhZ9bjO+AvJaA5TZ+WYPJ0z6RVh7749FQ7kDGO00ZvO5hE/1WpyikTiVHNfJ5NKwaHi9D625Yu9oILj03+6MxHh/q+7U41rPY95Jr6ljue/0hpOANCW2zStSCa/5REoMZTXWP/tmho326DzQ0PsI=
Received: from VI1PR08MB5360.eurprd08.prod.outlook.com (52.133.245.74) by VI1PR08MB4000.eurprd08.prod.outlook.com (20.178.125.94) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Wed, 6 Nov 2019 08:26:49 +0000
Received: from VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::21b9:aacd:ea36:92ee]) by VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::21b9:aacd:ea36:92ee%5]) with mapi id 15.20.2408.024; Wed, 6 Nov 2019 08:26:49 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: WGLC for "OAuth 2.0 Security Best Current Practice"
Thread-Index: AdWUe7vJeyT5tvxoSSGfe7d18Ckk5Q==
Date: Wed, 6 Nov 2019 08:26:49 +0000
Message-ID: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ts-tracking-id: fd6510fb-b251-4f13-b307-c49ce42b5d25.0
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; 
x-originating-ip: [195.149.223.216]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: e16f6be6-469e-4c57-b2fd-08d7629315c0
X-MS-TrafficTypeDiagnostic: VI1PR08MB4000:|AM0PR08MB4467:
X-MS-Exchange-PUrlCount: 1
X-Microsoft-Antispam-PRVS: <AM0PR08MB44675A6DE03CA077B5C15E3FFA790@AM0PR08MB4467.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
x-ms-oob-tlc-oobclassifiers: OLM:5236;OLM:5236;
x-forefront-prvs: 02135EB356
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(136003)(376002)(366004)(39860400002)(53754006)(199004)(189003)(8936002)(66946007)(4744005)(3846002)(6116002)(966005)(14454004)(66446008)(52536014)(1730700003)(81156014)(66556008)(66476007)(33656002)(86362001)(15650500001)(25786009)(64756008)(66066001)(478600001)(8676002)(81166006)(6436002)(76116006)(2906002)(55016002)(5640700003)(71200400001)(316002)(5660300002)(476003)(7736002)(305945005)(486006)(9686003)(6916009)(2501003)(71190400001)(186003)(102836004)(6506007)(26005)(256004)(14444005)(99286004)(74316002)(2351001)(6306002)(7696005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB4000; H:VI1PR08MB5360.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: C543xyGGZMXl9clFCnS3VwZCdx4cyhWwpBUv9HOjLgFDeMpIC4bNxIPaH0HMSW/NlliX3Hq8Sy1OdAWX88Zk9WJaJuEPHks/WkaKdvAEcw57a8cDGohYchRgmwhtOAbwSDlEJ3k65FAhk+2yPPXsJsQxZ59wImceON/ZpcI5UGafQ/xxqnxEDpAAWKvxHPljLjPWZduFbNoREIfCdSTCYdvmQovan9IClh1qHhKy4/Oblq1XR/DqET8SKWzm9jUU4mMpDdTJpqfOOZOLlgn96Z2TlO3Pc/w8gZ4Dmf6eFBm/495t0XEjrDsS1fJC0+0ZVRZaq+6fF4oDNoY6zTjKcCmTc64S9hrm4crXEKYxVVClN2YZSz6hPfXoH24Qq3UDuOQb1z6R6f0QZK0Oti8esrvy92YdcC7M/4J3IXNuMmJhUMdAyGgIVxciK1n80xxw6cPM6Wbiatgan5MJ+BQg8Wa+4oapfX+hbp5uoBI24Lo=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB4000
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; 
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT026.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(346002)(39860400002)(376002)(1110001)(339900001)(40434004)(199004)(189003)(53754006)(6306002)(6916009)(74316002)(15650500001)(81156014)(14454004)(8676002)(1730700003)(5640700003)(9686003)(14444005)(52536014)(76130400001)(81166006)(126002)(26826003)(476003)(86362001)(70206006)(33656002)(486006)(8936002)(305945005)(6506007)(26005)(102836004)(186003)(336012)(356004)(50466002)(316002)(7736002)(966005)(55016002)(23726003)(8746002)(47776003)(2906002)(22756006)(7696005)(99286004)(66066001)(25786009)(4744005)(2351001)(5660300002)(2501003)(70586007)(5024004)(478600001)(3846002)(6116002)(97756001)(46406003)(105606002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB4467; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; 
X-MS-Office365-Filtering-Correlation-Id-Prvs: e4586a06-89f3-4005-b8d9-08d7629311e5
X-Forefront-PRVS: 02135EB356
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: uZofYzCIfsImPDu5DsUZp8lPzQOH++ZE+ZUqSh74wSG74NJD0WI2UGLF0bor/r5C/fAOh+9k5QJY6SAc//WdIZGox0ZyCPbQEoPxoBXAxmaC4za1k4GX59Nv/rNklJeAPnT9j9oupc2O+TPQJAPLxn51o6Fgrw4NIEkTH9XgSL8TTORxgpf+O38qb5tGladEke+iYdst+lM+We7NoNj22vCFsPO8lgGkqrpN4XhHb4kWY8XnXvmYaMGiyNt83AF14iKXYdR+77FHCzoipCaohgzvj/TQ2ZVAt0/uHVM3o+vp59Y+KcXYnkGgrrsSQoKVzyIK6L7XhqnxKn6cbIozJ1IOJ50OKgYFRxNzG5GWkYr9kBpGlj0D5EF5sZdPLA+oD5E/KNuVvUlQdD3tIcsVL3zemIFh1f7/lSHxoByWW9yG5RbLcBltyazHfW5DIhgMBNO58N46Bo4VXK9CnovUWlxX8VAAItShuOksS4G4Hdg=
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Nov 2019 08:26:56.0348 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e16f6be6-469e-4c57-b2fd-08d7629315c0
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123];  Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4467
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/JxVkZoJrGvNeYdR6ZNzPuDB8Ycc>
Subject: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 08:27:12 -0000

Hi all,

this is a working group last call for "OAuth 2.0 Security Best Current Prac=
tice".

Here is the document:
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13

Please send you comments to the OAuth mailing list by Nov. 27, 2019.
(We use a three week WGLC because of the IETF meeting.)

Ciao
Hannes & Rifaat

IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.


From nobody Wed Nov  6 01:46:47 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B6D112022E for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 01:46:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fXljz-baX5Cx for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 01:46:43 -0800 (PST)
Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1CD61201AA for <oauth@ietf.org>; Wed,  6 Nov 2019 01:46:43 -0800 (PST)
Received: by mail-qt1-x82e.google.com with SMTP id t8so33066122qtc.6 for <oauth@ietf.org>; Wed, 06 Nov 2019 01:46:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=j38qzI2pB77D/H0ggXftDZUbpbpTD+8TV+FA9iQz4pM=; b=zVr6RwEOtwk3Zpt2qXnPfiB5rVHqalMLNOoLYwQkJqIXW3N5YUq1c25IElLXgZrsPc O296JNC1xVUOF+MugZ6g9NALTs5sgPdcrA9QsqyIrI/hyA/jAel+NKXrB9AfO9Rz6bYO NqBbNkyMTNKAsqsX7gsRWjaeuZxWhrprJEXMqpyo+KqCOJiPnxCYXhKq0CDjy63Jl7Wz hl3xbMxUeu8nnAacjfEN6vOr56jEwSvmvcQwrNDd4E7qTwZDqytHGce1LsD6hyb+CIb7 RzxrNFb2s3YXl9rgv40VU1VKGlo/HkMPMRX3NIK8/SO2SNTZQcAjd4CgeGr43z1jJbkZ wR6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=j38qzI2pB77D/H0ggXftDZUbpbpTD+8TV+FA9iQz4pM=; b=ZDplgFHKMYQ+RekODvE0HXfRLZHhSijmk4OsiahiZhwFnICq5wHZ0RTLQe5RO7D4+3 U2Mg9RNlrQvypef44EbPUhRAw5tzC9W3htvseIdXEqLXQVNeFeO7K+GYhsA2nl+1/svg bs7RuJtkBpeJ1E/6d2aEUmipZ/4t5F3xNbmqhD3SjLiFKU9pLkK0+9j3ok/gmgDu/SQy QdixKCBE5hV806RNAHlCbQVKTZOnc/mDwQ9+XH6v/KRhYSGJYaJ0Mwz4Ek7oLBciUojY 62KHTZoquXKY84zvFiwJ4z0QstaHTUc5AGK4nv0ywi1n9UA5xT5ianExrXMpHMNBNrSr DqBg==
X-Gm-Message-State: APjAAAUFkhJjVYN0cv19lp4rVzrcVMRXwrsp2uLu8kxFf3VBoUf7tt5X kDBEnmf54DZyHaVq7SVd1xk0fSbMWazM8MNmCAOeuTl0WNUP9g==
X-Google-Smtp-Source: APXvYqwbhzNzsnCuARN2qOkBxTvRifa6GN/xOue1KaIXns1rbaS8xguI2oIQG5/SZWjVtI2FC4Gc1DUNM8vtrdAXz0Y=
X-Received: by 2002:ac8:758e:: with SMTP id s14mr1507128qtq.288.1573033602030;  Wed, 06 Nov 2019 01:46:42 -0800 (PST)
MIME-Version: 1.0
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Wed, 6 Nov 2019 09:46:31 +0000
Message-ID: <CA+iA6uh_aToo8hquZAwbAO6M3AMHf6BUnAYo3pf2qYMiP4zqtg@mail.gmail.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000011b1a70596aa6dfc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Qa4PumpJyExiaDQmMPZ5inuGOvc>
Subject: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [1/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 09:46:46 -0000

--00000000000011b1a70596aa6dfc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

Please find my feedback on the first 10 pages below.

Hans.

Overall:
- grammar in the first sections: there's a lot of comma-separated sentences
that could/should be reworked by a native speaker
- perhaps readers guidance pointing developers straight to section 3. as
Torsten said on the call would be useful
- as also discussed on the call, perhaps it would be good to spell out how
this BCP relates to the original OAuth 2.0 security considerations in the
RFC(s)

P3 1. Introduction
Usage of OAuth vs. OAuth 2.0 across the document: perhaps explain that in
the remainder OAuth refers to OAuth 2.0.

First bullet:
- CSRF and referrer header are being mentioned without explaining the
abbreviation, context or reference. And btw, it is the =E2=80=9Creferer=E2=
=80=9D header=E2=80=A6
- =E2=80=9Cdefense in depth=E2=80=9D -> =E2=80=9Cin depth defense=E2=80=9D =
?
Third bullet:
- I believe those higher security use cases were considered from the start,
but they were not acted upon before (e.g. MAC spec was left abandoned).

P4 first paragraph, in the middle:
=E2=80=9CThis way the same..=E2=80=9D -> =E2=80=9CIn this way the same=E2=
=80=A6=E2=80=9D
=E2=80=9Cserves as a frontend=E2=80=A6=E2=80=9D -> =E2=80=9Cserve as a fron=
tend=E2=80=A6=E2=80=9D
=E2=80=9Cin a multi-tenancy.=E2=80=9D -> =E2=80=9Cin multi-tenant environme=
nt.=E2=80=9D

In general there are a lot of sentences broken up by comma=E2=80=99s that c=
ould be
rearranged and do without the comma=E2=80=99s.

1.1 the whole section is comprised of comma-split sentences that could be
re-arranged.

2.
In general: shouldn=E2=80=99t the OAuth 2.0 terms be capitalized everywhere=
 e.g.
resource owner -> Resource Owner
authorization server -> Authorization Server
Etc. ?

- =E2=80=9Cwas laid out that described=E2=80=A6=E2=80=9D -> =E2=80=9Cwas la=
id out that describes=E2=80=A6=E2=80=9D
- =E2=80=9Cat an authorization server (AS)=E2=80=A6=E2=80=9D -> =E2=80=9Cat=
 the authorization server (AS)=E2=80=A6=E2=80=9D

P5:
A1:
- first sentence ends the list with =E2=80=9Cetc.=E2=80=9D but I don=E2=80=
=99t feel an enumeration
of attacks can be left up to the reader to complete.
- =E2=80=9Cbe achieved through many ways=E2=80=9D -> =E2=80=9Cbe achieved i=
n many ways=E2=80=9D

A3 and A4 could very conveniently be bundled together, isn=E2=80=99t it, by
specifying =E2=80=9Cread but not write the authorization request and/or res=
ponse=E2=80=9D.

P6: 2.
The last paragraph of 2. is hand-wavy, almost scaring the implementor but
not giving him the guidance to act properly. I=E2=80=99m not sure this help=
s,
especially the usage of MUST will make implementers feel uncomfortable
because it does not tell them exactly what they MUST do. Something like =E2=
=80=9Can
implementer SHOULD always consider other attack vectors specific to their
environment=E2=80=9D may work better?

3.1
End of first paragraph =E2=80=9CIt also helps to detect mix-up attacks.=E2=
=80=9D lacks an
explanation or a reference to a section where this is explained. As a
matter of fact I don=E2=80=99t immediately get why this would help to mitig=
ate
mix-up attacks.

P7:
2nd paragraph: I don=E2=80=99t think [I-D.bradley-oauth-jwt-encoded-state] =
is going
anywhere and =E2=80=93 even as a co-author - I=E2=80=99m not sure the refer=
ence should be
included here.

Last paragraph of 3.1:
=E2=80=9CAS which redirect a request=E2=80=A6=E2=80=9D -> =E2=80=9CASes whi=
ch redirect a request=E2=80=A6=E2=80=9D or =E2=80=9CAn
AS that redirects a request=E2=80=A6=E2=80=9D

P8:
3rd paragraph: I guess it was discussed in length but I would like to see
=E2=80=9Cclients SHOULD NOT use the implicit grant=E2=80=9D change into =E2=
=80=9Cclients MUST NOT
use the implicit grant=E2=80=9D, as done for ROPC further down. This is a s=
ecurity
BCP and implementers complying with it must really not support Implicit any
longer IMHO. It is still an option for implementers to not follow this BCP
and =E2=80=9Cjust=E2=80=9D do OAuth 2.0=E2=80=A6 or implement sender constr=
ained tokens. The SHOULD
gives people a way out and an excuse that we should no longer allow.

P9:
3.3 missing text about not using access tokens for user authentication
(again?) plus reference to oauth.net/articles/authentication, A thing I
still often see in deployments and still a source of confusion for
developers and deployers

--=20
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--00000000000011b1a70596aa6dfc
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi,</div><div><br></div><div>Please find my feedback =
on the first 10 pages below.</div><div><br></div><div>Hans.</div><div><br><=
/div>Overall:<br>- grammar in the first sections: there&#39;s a lot of comm=
a-separated sentences that could/should be reworked by a native speaker<br>=
-	perhaps readers guidance pointing developers straight to section 3. as To=
rsten said on the call would be useful<br>-	as also discussed on the call, =
perhaps it would be good to spell out how this BCP relates to the original =
OAuth 2.0 security considerations in the RFC(s)<br><br>P3 1. Introduction<b=
r>Usage of OAuth vs. OAuth 2.0 across the document: perhaps explain that in=
 the remainder OAuth refers to OAuth 2.0.<br><br>First bullet:<br>-	CSRF an=
d referrer header are being mentioned without explaining the abbreviation, =
context or reference. And btw, it is the =E2=80=9Creferer=E2=80=9D header=
=E2=80=A6<br>-	=E2=80=9Cdefense in depth=E2=80=9D -&gt; =E2=80=9Cin depth d=
efense=E2=80=9D ?<br>Third bullet:<br>-	I believe those higher security use=
 cases were considered from the start, but they were not acted upon before =
(e.g. MAC spec was left abandoned).<br><br>P4 first paragraph, in the middl=
e:<br>=E2=80=9CThis way the same..=E2=80=9D -&gt; =E2=80=9CIn this way the =
same=E2=80=A6=E2=80=9D<br>=E2=80=9Cserves as a frontend=E2=80=A6=E2=80=9D -=
&gt; =E2=80=9Cserve as a frontend=E2=80=A6=E2=80=9D<br>=E2=80=9Cin a multi-=
tenancy.=E2=80=9D -&gt; =E2=80=9Cin multi-tenant environment.=E2=80=9D<br><=
br>In general there are a lot of sentences broken up by comma=E2=80=99s tha=
t could be rearranged and do without the comma=E2=80=99s.<br><br>1.1 the wh=
ole section is comprised of comma-split sentences that could be re-arranged=
.<br><br>2.<br>In general: shouldn=E2=80=99t the OAuth 2.0 terms be capital=
ized everywhere e.g.<br>resource owner -&gt; Resource Owner<br>authorizatio=
n server -&gt; Authorization Server<br>Etc. ?<br><br>- =E2=80=9Cwas laid ou=
t that described=E2=80=A6=E2=80=9D -&gt; =E2=80=9Cwas laid out that describ=
es=E2=80=A6=E2=80=9D<br>- =E2=80=9Cat an authorization server (AS)=E2=80=A6=
=E2=80=9D -&gt; =E2=80=9Cat the authorization server (AS)=E2=80=A6=E2=80=9D=
<br><br>P5:<br>A1:<br>-	 first sentence ends the list with =E2=80=9Cetc.=E2=
=80=9D but I don=E2=80=99t feel an enumeration of attacks can be left up to=
 the reader to complete.<br>-	=E2=80=9Cbe achieved through many ways=E2=80=
=9D -&gt; =E2=80=9Cbe achieved in many ways=E2=80=9D<br><br>A3 and A4 could=
 very conveniently be bundled together, isn=E2=80=99t it, by specifying =E2=
=80=9Cread but not write the authorization request and/or response=E2=80=9D=
.<br><br>P6: 2.<br>The last paragraph of 2. is hand-wavy, almost scaring th=
e implementor but not giving him the guidance to act properly. I=E2=80=99m =
not sure this helps, especially the usage of MUST will make implementers fe=
el uncomfortable because it does not tell them exactly what they MUST do. S=
omething like =E2=80=9Can implementer SHOULD always consider other attack v=
ectors specific to their environment=E2=80=9D may work better?<br><br>3.1<b=
r>End of first paragraph =E2=80=9CIt also helps to detect mix-up attacks.=
=E2=80=9D lacks an explanation or a reference to a section where this is ex=
plained. As a matter of fact I don=E2=80=99t immediately get why this would=
 help to mitigate mix-up attacks.<br><br>P7:<br>2nd paragraph: I don=E2=80=
=99t think [I-D.bradley-oauth-jwt-encoded-state] is going anywhere and =E2=
=80=93 even as a co-author - I=E2=80=99m not sure the reference should be i=
ncluded here.<br><br>Last paragraph of 3.1:<br>=E2=80=9CAS which redirect a=
 request=E2=80=A6=E2=80=9D -&gt; =E2=80=9CASes which redirect a request=E2=
=80=A6=E2=80=9D or =E2=80=9CAn AS that redirects a request=E2=80=A6=E2=80=
=9D<br><br>P8:<br>3rd paragraph: I guess it was discussed in length but I w=
ould like to see =E2=80=9Cclients SHOULD NOT use the implicit grant=E2=80=
=9D change into =E2=80=9Cclients MUST NOT use the implicit grant=E2=80=9D, =
as done for ROPC further down. This is a security BCP and implementers comp=
lying with it must really not support Implicit any longer IMHO. It is still=
 an option for implementers to not follow this BCP and =E2=80=9Cjust=E2=80=
=9D do OAuth 2.0=E2=80=A6 or implement sender constrained tokens. The SHOUL=
D gives people a way out and an excuse that we should no longer allow.<br><=
br>P9:<br>3.3 missing text about not using access tokens for user authentic=
ation (again?) plus reference to <a href=3D"http://oauth.net/articles/authe=
ntication">oauth.net/articles/authentication</a>, A thing I still often see=
 in deployments and still a source of confusion for developers and deployer=
s<br><div><br></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" data-=
smartmail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div d=
ir=3D"ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@z=
martzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div sty=
le=3D"font-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" =
target=3D"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></d=
iv></div>

--00000000000011b1a70596aa6dfc--


From nobody Wed Nov  6 05:41:14 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B89E12087E for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 05:41:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HEhIzUMIJl9d for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 05:41:10 -0800 (PST)
Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BFFB12089D for <oauth@ietf.org>; Wed,  6 Nov 2019 05:41:10 -0800 (PST)
Received: by mail-wm1-x32f.google.com with SMTP id z26so3438526wmi.4 for <oauth@ietf.org>; Wed, 06 Nov 2019 05:41:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=1eXV+t3NE99kMshRiqM3Q7vXo/7OkWrCAal5BA5Pf48=; b=jAV6AkRppRj4iYsxtY2+5R9EcIoyKMJl3wAFJjUzjhsICkP0V9LI1nrtzJo6GwAZnZ ewgxQYznCsMicu8HYxzzzjZKfVD7GPfcWcjw3gKYjtuqX2tqgvj/9inAJLmtSA1VxxSA 2giZoE0vqbxw1Mn9uIbdscuzO2mNgNCg5xKYv8ND8MV/Ppmww6ZDMaYaXME6H5sGD4h1 Qh3+cknC/vJNDJgQO5cJAf/EcGMV756z0yJqHnRaD+2kmnXzziIBrb+pRbe7hrAe5rcv m/rBu/r6XfXurCdVcb+0H7CO/atoWFY7yv01WMtisPJN03nXfocX6TQ0cjT6kiKRnsoB nlMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=1eXV+t3NE99kMshRiqM3Q7vXo/7OkWrCAal5BA5Pf48=; b=g89MOKHyshrU7FRzem/LpB7EsAnYedOT9r+XrWlIewj73pZX1Uv5Z8ygFJ0mFQp3i4 /S/U8aWZ+LalxWi4Aa08bNr2sSbWHHrwGizVNB1CwZ3gjuaQy+5syJ3IszXzYM2bgbXQ YmMtIwY2HSn19kD2wjIJY73vPbVdKRr0RUwbxS6aWiAHqoJWdATRXf40Yvlcb7SrzGD/ owr9nFEXKb1QyBzHuceuTCI1PUsS+vDgLr9iDHP+EEuI6u3YbdDXZ5di2T+LjTjJ5aC2 0UX6Eo6MS+0djMdGCHILCBSPlz7uEIkwK0AU25IZNQwlbbL612h2w/vCMQvPuDtdber1 FKLw==
X-Gm-Message-State: APjAAAWR7Z7zAnrb//HIlT2sbehqFdOhRoq3Ug75mBKjhUfBlP2hgCio 1gTincpV+iyoqswO4b0QwRHRb+uH7zwO8F8xgF6wGVJpUoY=
X-Google-Smtp-Source: APXvYqwJE198ooUCLNhDwMU+idRwEZMoXcwT8wLOi0N9IN8GtHxt95GnFf0+jZ5s2PX077GgNuYBwJGB5gMA3MWJDIg=
X-Received: by 2002:a1c:a9cb:: with SMTP id s194mr2753110wme.92.1573047667974;  Wed, 06 Nov 2019 05:41:07 -0800 (PST)
MIME-Version: 1.0
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Wed, 6 Nov 2019 08:40:56 -0500
Message-ID: <CAGL6ep+kZvxCgDmzDeyzA0+vdqF3-j6Cw4M2trVcjQ0Gs=5z9A@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000076e5680596adb3b0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/MdyTqE0q9dpVtImcvEiEWaOtUL0>
Subject: [OAUTH-WG] OAuth WG Draft Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 13:41:12 -0000

--00000000000076e5680596adb3b0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

All,

The following is our draft agenda for the two sessions in Singapore:

*Wednesday=E2=80=99s Agenda*

Chairs Update (15 min)
Security Topics =E2=80=93 Torsten (15 min)
Browser-based Apps =E2=80=93 Aaron (30 min)
TXAuth update =E2=80=93 Dick/Justin (15 min)
DPoP =E2=80=93 Brian (15 min)


*Thursday=E2=80=99s Agenda*

Rich Authorization =E2=80=93 Torsten (20 min)
Pushed Authorization =E2=80=93 Torsten (20 min)
Client Intermediary Metadata =E2=80=93 Aaron (20 min)
Authorization Framework: Claims =E2=80=93 Travis (20 min)
10 minutes buffer

Please, let us know if you have any comments or if we missed anything.

Regards,
 Rifaat & Hannes

P.S., I will not be attending the meeting in Singapore.
If you need any help from the chairs during the meeting week, make sure to
contact Hannes.

--00000000000076e5680596adb3b0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">All,<div><br></div><div>The following is our draft agenda =
for the two sessions in Singapore:</div><div><br></div><div><b>Wednesday=E2=
=80=99s Agenda</b><br><br>Chairs Update (15 min)<br>Security Topics =E2=80=
=93 Torsten (15 min)<br>Browser-based Apps =E2=80=93 Aaron (30 min)<br>TXAu=
th update =E2=80=93 Dick/Justin (15 min)<br>DPoP =E2=80=93 Brian (15 min)<b=
r><br><br><b>Thursday=E2=80=99s Agenda</b><br><br>Rich Authorization =E2=80=
=93 Torsten (20 min)<br>Pushed Authorization =E2=80=93 Torsten (20 min)<br>=
Client Intermediary Metadata =E2=80=93 Aaron (20 min)<br>Authorization Fram=
ework: Claims =E2=80=93 Travis (20 min)<br>10 minutes buffer<br></div><div>=
<br></div><div>Please, let us know if you have any comments or if we missed=
 anything.</div><div><br></div><div>Regards,</div><div>=C2=A0Rifaat &amp; H=
annes</div><div><br></div><div>P.S., I will not be attending the meeting in=
 Singapore.=C2=A0</div><div>If you need any help from the chairs during the=
 meeting week, make sure to contact Hannes.</div></div>

--00000000000076e5680596adb3b0--


From nobody Wed Nov  6 12:16:36 2019
Return-Path: <jaredljennings@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE741200A4 for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 12:16:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O03fvLhMQaAZ for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 12:16:32 -0800 (PST)
Received: from mail-ed1-x52c.google.com (mail-ed1-x52c.google.com [IPv6:2a00:1450:4864:20::52c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08C9912004A for <oauth@ietf.org>; Wed,  6 Nov 2019 12:16:32 -0800 (PST)
Received: by mail-ed1-x52c.google.com with SMTP id m13so14137728edv.9 for <oauth@ietf.org>; Wed, 06 Nov 2019 12:16:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=J6+mOTUQCwQpX68qLTaJ2JteyByl6pQuHQiRI+Y2hs8=; b=pmv+4eHYIsI+J+kRUOwKxeMWk0hzf69tS60+OFv5EBTn/Yal8Dx3u2pjKNOVpayP7s V/6DHYtiJXJ0VcbUBBcDNtmbW3Wv1y6HL6vaa3TUnuy12H4Nbnc82/fkB05+y7EgR4Gw e4ed9dxat9vgYoe8dIgvIQanfOyelbS0J/lTm3DGrqo+alw2jXEcMaavF6nQdAUCYU+L yRbE6BO8zufEJ5hyLzxgPHlgZHqXkl5mHYi6506Lq9p7YSoA9R+XUwObv5jiWD8UjrDC FW90pv2eCK/uKKi6G70BL3WntuWIO1CUzv7T2GZ/6fhWOeRvT7QThFCZSdX5Tz2zD7LA jmwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=J6+mOTUQCwQpX68qLTaJ2JteyByl6pQuHQiRI+Y2hs8=; b=djJGC0TRvmRk9DSYuekTxYYUCNgqCwluLv4KoiNmojhXNMeKrOz96qXTY7bbpRtPee OH+jVxzHj8M4d9DsvCcZFoPjPlXIJOvCIMvsMve7BC931pNdY2LO+QgA/1JqL+XNrJ2t Os8pemh0BknVK9oQVrUL5BP+gNcKwShztRRLh6Y6ILYzC+Dn0T9kT+pKxoRaNEyKzNR/ hbS24jFTMtHCpVDX8xFiembF00zHE8VuyIOgDJj2IacaGgp/xEdRaCZ36eUf8FZKSAYc dMe+MO3FCbFYZWucUYwUSgc3OGRuMIMnQ+ZcMBlzMcvX1bNW/rxWOGvVnK8PviJjA9Wz 0N8g==
X-Gm-Message-State: APjAAAWMb0w7W5KkGBe8r1jo1v+LE75TzurGb3eh0FH3gYOgP/7ovsyz NBB3HbV895c6SvOfXAoANZvyhxABgQQw7dcT0u0=
X-Google-Smtp-Source: APXvYqxxYntwSamwkGs0s+sRwXi2kPn2EwDnHG6lay5x79AG3l1cHpPmhbN4LSKksIhNUANoOQ/SR5fjReC1CYuLqC8=
X-Received: by 2002:a17:906:cca:: with SMTP id l10mr15009842ejh.161.1573071390292;  Wed, 06 Nov 2019 12:16:30 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
In-Reply-To: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
From: Jared Jennings <jaredljennings@gmail.com>
Date: Wed, 6 Nov 2019 14:16:19 -0600
Message-ID: <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006cc87c0596b33972"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Ko2za6h418VzZzIhFBGCG4AqpWs>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 20:16:34 -0000

--0000000000006cc87c0596b33972
Content-Type: text/plain; charset="UTF-8"

Hi,

This is my first time reviewing a document or responding to the group. So,
with that introduction feel free to guide me along the way.

Reading through the document, I had a few high-level questions first. I
will have more detailed comments later, once I know I'm on the right track
and I assume those comments I should just share with the mailing list?

1. Since the document is a "Best Practices" document, are the words "MUST"
and "REQUIRED" and other definitive terms? Would instead SHOULD and
RECOMMENDED be used?

2. Should other possible threats and vulnerabilities be included? Meaning,
is the list the definitive known list?

Thanks!
-Jared
Skype:jaredljennings
Signal:+1 816.730.9540
WhatsApp: +1 816.678.4152



On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig <Hannes.Tschofenig@arm.com>
wrote:

> Hi all,
>
> this is a working group last call for "OAuth 2.0 Security Best Current
> Practice".
>
> Here is the document:
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>
> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> (We use a three week WGLC because of the IETF meeting.)
>
> Ciao
> Hannes & Rifaat
>
> IMPORTANT NOTICE: The contents of this email and any attachments are
> confidential and may also be privileged. If you are not the intended
> recipient, please notify the sender immediately and do not disclose the
> contents to any other person, use it for any purpose, or store or copy the
> information in any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--0000000000006cc87c0596b33972
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>This is my first time reviewing a d=
ocument or responding to the group. So, with that introduction feel free to=
 guide me along the way.</div><div><br></div><div>Reading through the docum=
ent, I had a few high-level questions first. I will have more detailed comm=
ents later, once I know I&#39;m on the right track and I assume those comme=
nts I should just share with the mailing list?</div><div><br></div><div>1. =
Since the document is a &quot;Best Practices&quot; document, are the words =
&quot;MUST&quot; and &quot;REQUIRED&quot; and other definitive=C2=A0terms? =
Would instead SHOULD and RECOMMENDED be used?</div><div><br></div><div>2. S=
hould other possible threats and vulnerabilities=C2=A0be included? Meaning,=
 is the list the definitive=C2=A0known list?</div><div><br></div><div>Thank=
s!<br clear=3D"all"><div><div dir=3D"ltr" class=3D"gmail_signature" data-sm=
artmail=3D"gmail_signature">-Jared</div></div><div class=3D"gmail_signature=
" data-smartmail=3D"gmail_signature">Skype:jaredljennings</div><div class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature">Signal:+1 816.730.9=
540</div><div class=3D"gmail_signature" data-smartmail=3D"gmail_signature">=
WhatsApp:=C2=A0+1 816.678.4152</div><div class=3D"gmail_signature" data-sma=
rtmail=3D"gmail_signature"><br></div><br></div></div><br><div class=3D"gmai=
l_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov 6, 2019 at 2:27 =
AM Hannes Tschofenig &lt;<a href=3D"mailto:Hannes.Tschofenig@arm.com">Hanne=
s.Tschofenig@arm.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quo=
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex">Hi all,<br>
<br>
this is a working group last call for &quot;OAuth 2.0 Security Best Current=
 Practice&quot;.<br>
<br>
Here is the document:<br>
<a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13"=
 rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/html/draft-iet=
f-oauth-security-topics-13</a><br>
<br>
Please send you comments to the OAuth mailing list by Nov. 27, 2019.<br>
(We use a three week WGLC because of the IETF meeting.)<br>
<br>
Ciao<br>
Hannes &amp; Rifaat<br>
<br>
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.<br>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--0000000000006cc87c0596b33972--


From nobody Wed Nov  6 12:56:03 2019
Return-Path: <jricher@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFB4B12010E for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 12:56:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SNConHOM4NwC for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 12:56:00 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7630120072 for <oauth@ietf.org>; Wed,  6 Nov 2019 12:55:59 -0800 (PST)
Received: from [192.168.1.7] (static-71-174-62-56.bstnma.fios.verizon.net [71.174.62.56]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xA6Ktsat003895 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 6 Nov 2019 15:55:55 -0500
From: Justin Richer <jricher@mit.edu>
Message-Id: <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1BD5C1C9-8CC6-4F05-AF0F-0ED5B445D5A3"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Wed, 6 Nov 2019 15:55:54 -0500
In-Reply-To: <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
To: Jared Jennings <jaredljennings@gmail.com>
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/3RzQmfBbt9stqK_EmUWSm-KxGQQ>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 20:56:02 -0000

--Apple-Mail=_1BD5C1C9-8CC6-4F05-AF0F-0ED5B445D5A3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

1. Normative MUST/REQUIRED is fine in a BCP.=20

2. This is not the definitive list, but instead the best list of things =
that we have at this time. There will be more attacks, and more =
mitigations for those attacks.

 =E2=80=94 Justin

> On Nov 6, 2019, at 3:16 PM, Jared Jennings <jaredljennings@gmail.com> =
wrote:
>=20
> Hi,
>=20
> This is my first time reviewing a document or responding to the group. =
So, with that introduction feel free to guide me along the way.
>=20
> Reading through the document, I had a few high-level questions first. =
I will have more detailed comments later, once I know I'm on the right =
track and I assume those comments I should just share with the mailing =
list?
>=20
> 1. Since the document is a "Best Practices" document, are the words =
"MUST" and "REQUIRED" and other definitive terms? Would instead SHOULD =
and RECOMMENDED be used?
>=20
> 2. Should other possible threats and vulnerabilities be included? =
Meaning, is the list the definitive known list?
>=20
> Thanks!
> -Jared
> Skype:jaredljennings
> Signal:+1 816.730.9540
> WhatsApp: +1 816.678.4152
>=20
>=20
>=20
> On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig =
<Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>> wrote:
> Hi all,
>=20
> this is a working group last call for "OAuth 2.0 Security Best Current =
Practice".
>=20
> Here is the document:
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13 =
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13>
>=20
> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> (We use a three week WGLC because of the IETF meeting.)
>=20
> Ciao
> Hannes & Rifaat
>=20
> IMPORTANT NOTICE: The contents of this email and any attachments are =
confidential and may also be privileged. If you are not the intended =
recipient, please notify the sender immediately and do not disclose the =
contents to any other person, use it for any purpose, or store or copy =
the information in any medium. Thank you.
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org <mailto:OAuth@ietf.org>
> https://www.ietf.org/mailman/listinfo/oauth =
<https://www.ietf.org/mailman/listinfo/oauth>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_1BD5C1C9-8CC6-4F05-AF0F-0ED5B445D5A3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">1. =
Normative MUST/REQUIRED is fine in a BCP.&nbsp;<div class=3D""><br =
class=3D""></div><div class=3D"">2. This is not the definitive list, but =
instead the best list of things that we have at this time. There will be =
more attacks, and more mitigations for those attacks.</div><div =
class=3D""><br class=3D""></div><div class=3D"">&nbsp;=E2=80=94 =
Justin<br class=3D""><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D"">On Nov 6, 2019, at 3:16 PM, Jared Jennings =
&lt;<a href=3D"mailto:jaredljennings@gmail.com" =
class=3D"">jaredljennings@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><meta =
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div dir=3D"ltr" class=3D"">Hi,<div class=3D""><br =
class=3D""></div><div class=3D"">This is my first time reviewing a =
document or responding to the group. So, with that introduction feel =
free to guide me along the way.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Reading through the document, I had a =
few high-level questions first. I will have more detailed comments =
later, once I know I'm on the right track and I assume those comments I =
should just share with the mailing list?</div><div class=3D""><br =
class=3D""></div><div class=3D"">1. Since the document is a "Best =
Practices" document, are the words "MUST" and "REQUIRED" and other =
definitive&nbsp;terms? Would instead SHOULD and RECOMMENDED be =
used?</div><div class=3D""><br class=3D""></div><div class=3D"">2. =
Should other possible threats and vulnerabilities&nbsp;be included? =
Meaning, is the list the definitive&nbsp;known list?</div><div =
class=3D""><br class=3D""></div><div class=3D"">Thanks!<br clear=3D"all" =
class=3D""><div class=3D""><div dir=3D"ltr" class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature">-Jared</div></div><div =
class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><a =
href=3D"Skype:jaredljennings" =
class=3D"">Skype:jaredljennings</a></div><div class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature">Signal:+1 816.730.9540</div><div =
class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature">WhatsApp:&nbsp;+1 =
816.678.4152</div><div class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature"><br class=3D""></div><br =
class=3D""></div></div><br class=3D""><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov 6, 2019 at 2:27 AM Hannes =
Tschofenig &lt;<a href=3D"mailto:Hannes.Tschofenig@arm.com" =
class=3D"">Hannes.Tschofenig@arm.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex">Hi all,<br class=3D"">
<br class=3D"">
this is a working group last call for "OAuth 2.0 Security Best Current =
Practice".<br class=3D"">
<br class=3D"">
Here is the document:<br class=3D"">
<a =
href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13=
</a><br class=3D"">
<br class=3D"">
Please send you comments to the OAuth mailing list by Nov. 27, 2019.<br =
class=3D"">
(We use a three week WGLC because of the IETF meeting.)<br class=3D"">
<br class=3D"">
Ciao<br class=3D"">
Hannes &amp; Rifaat<br class=3D"">
<br class=3D"">
IMPORTANT NOTICE: The contents of this email and any attachments are =
confidential and may also be privileged. If you are not the intended =
recipient, please notify the sender immediately and do not disclose the =
contents to any other person, use it for any purpose, or store or copy =
the information in any medium. Thank you.<br class=3D"">
<br class=3D"">
_______________________________________________<br class=3D"">
OAuth mailing list<br class=3D"">
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank" =
class=3D"">OAuth@ietf.org</a><br class=3D"">
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer"=
 target=3D"_blank" =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth</a><br class=3D"">
</blockquote></div>
_______________________________________________<br class=3D"">OAuth =
mailing list<br class=3D""><a href=3D"mailto:OAuth@ietf.org" =
class=3D"">OAuth@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_1BD5C1C9-8CC6-4F05-AF0F-0ED5B445D5A3--


From nobody Wed Nov  6 17:15:05 2019
Return-Path: <wdenniss@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9511B1200F6 for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 17:15:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.499
X-Spam-Level: 
X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ogpypXS3-s93 for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 17:15:01 -0800 (PST)
Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CFE9120045 for <oauth@ietf.org>; Wed,  6 Nov 2019 17:15:01 -0800 (PST)
Received: by mail-oi1-x236.google.com with SMTP id e9so480250oif.8 for <oauth@ietf.org>; Wed, 06 Nov 2019 17:15:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xFsLXmAmmHr6QtDFYRCUr/n4cb6utCq3lg9/3v6TtZY=; b=jVmeRS/+DUipY7P0VLCHZ+yKX+wzoTgXAHtl1ituEOq1ODcBxmtmDpY8OuGSmij17R 8PBCgKj26xPli93IAlz/fbFb8ZFhUJNre+lgYiob7Cswwy9QJ2QG5LP4jI6deTq0BHrA kbwjWrjTqTwIcJ9CcBLXSwx+2gYNEHIMZv4qSYsrYju/JG2ZSfHRn4qb4AceehUvgNkn U7LsGkByAiP/y2xqhpGv0ZRWbnWvphzRmngRCKwi/p0Y85UevKZXra6n6s7A6jE7mnK5 CXJ+R0+PXZqHd4vq+SvTJzof4Sy6J6r/x82etRrA0/+bhDIsgHjUClA2l75WsldhRB/+ Rabg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xFsLXmAmmHr6QtDFYRCUr/n4cb6utCq3lg9/3v6TtZY=; b=nSQFe48PTuYZCQxnrbQhmslqmIMzgzXh6kkCRwUxF7UqMWBHPTVA/drw5YdFcsSXBA urxy6DuJhPz4MivfDs+J+VfGHaZtKLGGacfqre264iRjVcWSmVvNX1KZjJYy6sS2h9gT avStfqWKgsd6SfSJAwhE0vI+vmXph/icwUqUIlqLkhynQcWkY6iHaqxWGxIaWHzSxo3X mU0rj99+QnuuJs2qZidv+NZvcI0BiuOCM7KZh0w/Yv/cK76vXjpBMhkZX00a4uv4vQRZ wdpCGxOIM7p6NBad/IKxc6OA3Q8PvmJG04MGBXryq9QtmzVrygYoVPiQLeduSRtb1Wn4 pyog==
X-Gm-Message-State: APjAAAXhLwj3I3F7smPmFVVjFMWGshP3R+7YHMSc3OpEuCVuGyMi0PA3 NvJio5QUz1cOF8QKx2TRc9adxXbIY7PYCPki6McqmA==
X-Google-Smtp-Source: APXvYqzOfRnbDJzppgwaPX4B7Wtf/HnGhUWYB6UVp0vczleMAefN+cBOM+H1F4x01YwuMlWPIEfcrrONMIbo5YyvNZM=
X-Received: by 2002:aca:3e8a:: with SMTP id l132mr809011oia.146.1573089299630;  Wed, 06 Nov 2019 17:14:59 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360BBDDDF8362B40C97AF18FAB10@VI1PR08MB5360.eurprd08.prod.outlook.com> <736340BF-B33D-4407-81AF-532C947F1243@xmlgrrl.com> <AM0PR08MB5345B19B0AF2304AE8E110CAFAB00@AM0PR08MB5345.eurprd08.prod.outlook.com> <CA+k3eCR_ga1c1Cts0RY6Vy8AEgwjD2TaqOeWStkwQ6udqnkn2Q@mail.gmail.com>
In-Reply-To: <CA+k3eCR_ga1c1Cts0RY6Vy8AEgwjD2TaqOeWStkwQ6udqnkn2Q@mail.gmail.com>
From: William Denniss <wdenniss@google.com>
Date: Wed, 6 Nov 2019 17:14:48 -0800
Message-ID: <CAAP42hCf2fQO29q3vCH8U7sJWpQ94AiE4BCvMWqYxqxe-erYyw@mail.gmail.com>
To: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e7f69f0596b764b5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/HHjlfGYxi-E_MIXrZZ3FY3Ls3Rc>
Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 01:15:03 -0000

--000000000000e7f69f0596b764b5
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, Sep 25, 2019 at 3:54 PM Brian Campbell <bcampbell=3D
40pingidentity.com@dmarc.ietf.org> wrote:

> Just noticed that something is missing in
> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02#section=
-5
> where it has just, "(Section 4.1.4 of )"
>

Thank you for catching this Brian. It was meant to read Section 4.1.4 of
RFC 6749.

I've updated this in my local copy, will get posted in version 04.


>
> On Thu, Sep 12, 2019 at 8:40 AM Hannes Tschofenig <
> Hannes.Tschofenig@arm.com> wrote:
>
>> Thanks for the correction; yes =E2=80=93 the most recent version is -02 =
and I
>> posted an old link.
>>
>>
>>
>>
>>
>> *From:* Eve Maler <eve@xmlgrrl.com>
>> *Sent:* Donnerstag, 12. September 2019 16:16
>> *To:* Hannes Tschofenig <Hannes.Tschofenig@arm.com>
>> *Subject:* Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
>>
>>
>>
>> I think you mean
>> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02?
>>
>> Eve Maler (sent from my iPad) | cell +1 425 345 6756 <(425)%20345-6756>
>>
>>
>> On Sep 11, 2019, at 4:22 AM, Hannes Tschofenig <Hannes.Tschofenig@arm.co=
m
>> <Hannes..Tschofenig@arm.com>> wrote:
>>
>> Hi all,
>>
>>
>>
>> We are starting a WGLC on the "OAuth 2.0 Incremental Authorization"
>> draft. You can find the document here:
>>
>> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-01
>>
>>
>>
>> Please review the document and provide feedback.
>>
>>
>>
>> The WGLC will end September 25th, 2019.
>>
>>
>>
>> Ciao
>>
>> Hannes & Rifaat
>>
>> IMPORTANT NOTICE: The contents of this email and any attachments are
>> confidential and may also be privileged. If you are not the intended
>> recipient, please notify the sender immediately and do not disclose the
>> contents to any other person, use it for any purpose, or store or copy t=
he
>> information in any medium. Thank you.
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>> IMPORTANT NOTICE: The contents of this email and any attachments are
>> confidential and may also be privileged. If you are not the intended
>> recipient, please notify the sender immediately and do not disclose the
>> contents to any other person, use it for any purpose, or store or copy t=
he
>> information in any medium. Thank you.
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.*_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000e7f69f0596b764b5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><br></div><div class=3D"gmail_quote"><div dir=3D"ltr"=
 class=3D"gmail_attr">On Wed, Sep 25, 2019 at 3:54 PM Brian Campbell &lt;bc=
ampbell=3D<a href=3D"mailto:40pingidentity.com@dmarc.ietf.org">40pingidenti=
ty.com@dmarc.ietf.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,20=
4);padding-left:1ex"><div dir=3D"ltr">Just noticed that  something is missi=
ng in <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-incremental-a=
uthz-02#section-5" target=3D"_blank">https://tools.ietf.org/html/draft-ietf=
-oauth-incremental-authz-02#section-5</a> where it has just, &quot;(Section=
 4.1.4 of )&quot; <br></div></blockquote><div><br></div><div>Thank you for =
catching this Brian. It was meant to read Section 4.1.4 of RFC 6749.</div><=
div><br></div><div>I&#39;ve updated this in my local copy, will get posted =
in version 04.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddin=
g-left:1ex"><div dir=3D"ltr"></div><br><div class=3D"gmail_quote"><div dir=
=3D"ltr" class=3D"gmail_attr">On Thu, Sep 12, 2019 at 8:40 AM Hannes Tschof=
enig &lt;<a href=3D"mailto:Hannes.Tschofenig@arm.com" target=3D"_blank">Han=
nes.Tschofenig@arm.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,2=
04);padding-left:1ex">





<div lang=3D"EN-GB">
<div>
<p class=3D"MsoNormal">Thanks for the correction; yes =E2=80=93 the most re=
cent version is -02 and I posted an old link.
<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<div style=3D"border-color:rgb(225,225,225) currentcolor currentcolor;borde=
r-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm"=
>
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> Eve Maler &lt;<a href=3D"mailto:eve@xmlgrrl.com" target=3D"_bla=
nk">eve@xmlgrrl.com</a>&gt;
<br>
<b>Sent:</b> Donnerstag, 12. September 2019 16:16<br>
<b>To:</b> Hannes Tschofenig &lt;<a href=3D"mailto:Hannes.Tschofenig@arm.co=
m" target=3D"_blank">Hannes.Tschofenig@arm.com</a>&gt;<br>
<b>Subject:</b> Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-0=
1<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12pt">I think you mean=C2=A0<=
a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02=
" target=3D"_blank">https://tools.ietf.org/html/draft-ietf-oauth-incrementa=
l-authz-02</a>?<u></u><u></u></p>
<div id=3D"gmail-m_1435676697572774595gmail-m_-4075814296889357178AppleMail=
Signature">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:13pt">Eve Maler (sent from =
my iPad) |=C2=A0cell <a href=3D"tel:(425)%20345-6756" value=3D"+14253456756=
" target=3D"_blank">+1 425 345 6756</a></span><u></u><u></u></p>
</div>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12pt"><br>
On Sep 11, 2019, at 4:22 AM, Hannes Tschofenig &lt;<a href=3D"mailto:Hannes=
..Tschofenig@arm.com" target=3D"_blank">Hannes.Tschofenig@arm.com</a>&gt; w=
rote:<u></u><u></u></p>
</div>
<blockquote style=3D"margin-top:5pt;margin-bottom:5pt">
<div>
<p class=3D"MsoNormal">Hi all,<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">We are starting a WGLC on the &quot;OAuth 2.0 Increm=
ental Authorization&quot; draft. You can find the document here:<u></u><u><=
/u></p>
<p class=3D"MsoNormal"><a href=3D"https://tools.ietf.org/html/draft-ietf-oa=
uth-incremental-authz-01" target=3D"_blank">https://tools.ietf.org/html/dra=
ft-ietf-oauth-incremental-authz-01</a><u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">Please review the document and provide feedback.<u><=
/u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">The WGLC will end September 25th, 2019.<u></u><u></u=
></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">Ciao<u></u><u></u></p>
<p class=3D"MsoNormal">Hannes &amp; Rifaat<u></u><u></u></p>
<p class=3D"MsoNormal">IMPORTANT NOTICE: The contents of this email and any=
 attachments are confidential and may also be privileged. If you are not th=
e intended recipient, please notify the sender immediately and do not discl=
ose the contents to any other person,
 use it for any purpose, or store or copy the information in any medium. Th=
ank you.
<u></u><u></u></p>
</div>
</blockquote>
<blockquote style=3D"margin-top:5pt;margin-bottom:5pt">
<div>
<p class=3D"MsoNormal">_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><u></u><u></u></p>
</div>
</blockquote>
</div>
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose,
 or store or copy the information in any medium. Thank you.
</div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
..=C2=A0 If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachme=
nts from your computer. Thank you.</font></span></i>_______________________=
________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>

--000000000000e7f69f0596b764b5--


From nobody Wed Nov  6 17:36:47 2019
Return-Path: <wdenniss@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34F7D12008F for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 17:36:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level: 
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FbKWpmeDb6iv for <oauth@ietfa.amsl.com>; Wed,  6 Nov 2019 17:36:42 -0800 (PST)
Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD7A8120045 for <oauth@ietf.org>; Wed,  6 Nov 2019 17:36:42 -0800 (PST)
Received: by mail-ot1-x32d.google.com with SMTP id d5so595032otp.4 for <oauth@ietf.org>; Wed, 06 Nov 2019 17:36:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gh/BXr8hCBMpdH1JiMybEnEUyKcSkzICJpRzk/O5UXo=; b=kWwqM+nZhLD6CMm4Fsx+cRT4xmIltXDUgJA79dujdGdC34cRfrb5An1FPRqopxBsty nyXIArYP16Fa/9Vni0qj8+EtHhRf2wPER7To1kUaHyiIYH6nnri8xxDpew6/AfYHWx0M 7o9+dFy4OOdzN58o/pzh4Nn+TckPWpXpRKOBsJAlqyX9q4mYZpS6l9gP2laens7R2P9J tKhrgxDbGDcamWi3GcWfj/SzKLQavFYxbqkXepfGjMTwHNCnIMBSC6yCZa/5vcbNEANF HIPOkPJn97iET7teSjXa9p7oPtRCyF5L/ihafpFqQ7sX7UA2FgG+Itzq+JUuxTo5DZCK qxXQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gh/BXr8hCBMpdH1JiMybEnEUyKcSkzICJpRzk/O5UXo=; b=I4B0ug4Qw6uF0/l2q8SsRbCryVBz4dn1+V7O8OG4jty3pxiza+odnV51ihkQbNGfba DsklLlZ05ed4cPH3bCPsd0ngC4WXmUfxlG9NaYsJOtLYnunPY0xwmpbaTKIfUDK+LYh2 +CEIehdzu5tmuG5qJa0oXkY42lov8//Ffh3CjZkIeTToXsdw/JXkkh/M9iT6CKEpIMl9 n4AKDW0pcAOt00nx5Fk5agQ86VqDCv8DFLRZ9cX0mrslFZH6krI7KLNcQsq9Q9iF/C3c Ij/xQDRsKvLUdELKJrDZFOCSPEbHPERtZ7qYhn8gmjs5skqA23QmJf/7dMaUgvPclOZA 2IJw==
X-Gm-Message-State: APjAAAWCfa7/HPBp44lT6a5vw+L0azx4Y2H7Xci6Z4MENUfc8kv1RZse Q7O2dt+3YRHuRx8SuKJg22j0MpHd8STNQ90X1Nep5g==
X-Google-Smtp-Source: APXvYqz1dyMY/WnisXDHdqvNZwdC8zLxnnPdhecD57+yHB32oZsa9q1vIgiHZ/KqyXJE2DHy8GbetDjReRxNatIqUfc=
X-Received: by 2002:a9d:bb6:: with SMTP id 51mr694125oth.158.1573090601565; Wed, 06 Nov 2019 17:36:41 -0800 (PST)
MIME-Version: 1.0
References: <CAC_m_FFcVWtU_cgV_OyZtJA3uirt5YiyJE+tz8DkPKkT8brCXg@mail.gmail.com>
In-Reply-To: <CAC_m_FFcVWtU_cgV_OyZtJA3uirt5YiyJE+tz8DkPKkT8brCXg@mail.gmail.com>
From: William Denniss <wdenniss@google.com>
Date: Wed, 6 Nov 2019 17:36:30 -0800
Message-ID: <CAAP42hDRTw3OAErusTXjaSgqigQVioMsO0womJeZUkHcxKJNig@mail.gmail.com>
To: Glen Mazza <glen.mazza@gmail.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000081fecf0596b7b21d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/jnaLjaHYl9Xhlfk6Ca8PnkWSMCo>
Subject: Re: [OAUTH-WG] Comments on draft-ietf-oauth-incremental-authz-01
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 01:36:45 -0000

--00000000000081fecf0596b7b21d
Content-Type: text/plain; charset="UTF-8"

Hi Glen,

Thank you for reviewing the draft. Replies inline:

On Wed, Sep 11, 2019 at 5:35 AM Glen Mazza <glen.mazza@gmail.com> wrote:

> In Section 6.1, Handling Denials of incremental authorization requests, I
> wonder if the resource owner should be provided the ability by the
> Authorization Server to reject not just the additional scope(s) but also
> all previously granted ones.  This would be to guard against the client
> withholding dubious permission requests at the outset that might indicate
> to the resource owner that the client isn't particularly reliable, scopes
> that if they were provided all at once at the beginning would have resulted
> in the user never approving any of them.  In the user is inclined to deny
> an additional permission request due to a newfound lack of trust, he may
> also want to immediately decline previously granted permissions as well.
>

It is definitely always the authorization server's prerogative to take such
an action. In my experience, this boils down to UX decisions made by the
authorization server. One way to implement this would be to remind the user
of previously granted scopes, and give them the opportunity to revoke them.
Or, you could do your suggestion of instantly revoking all scopes on the
denial of any one, however this may go against the user's wishes (they
might be happy to grant contacts, but not calendar, for instance, in much
the same way today on a mobile phone you may grant notifications, but
withhold location).

I don't think we need to change the spec normatively to enable such
behavior, since the server can already revoke tokens it issues. Clients
should detect this revocation during the next request to the resource
server, and handle it accordingly.

Perhaps we could add a discussion about these implementation choices for
Authorization Server


In Section 7.2, it seems odd for the Authorization Server to rely on the
> client to tell it what scopes has already been approved for it.  I would
> think there would need to be a mechanism for the Auth Server to verify that
> information, but given that, why not rely on that information directly
> instead of what the client would be informing it?
>

This section documents an alternative approach that clients can take today
(i.e. without needing this new specification). I'll illustrate with an
example. Let's say a website needs Contacts on day 1, and both Contacts and
Calendar on day 2, here's how you might implement that with pure RFC 6749:

Day 1. User performs an action that requires contacts access. The website
does an OAuth requests for contacts, which the user approves. Now the app
has one authorization (with its associated access token) for contacts.
Day 2. User performs an action that requires both calendar and contacts
access. The website knows that it already has contacts access, so it does a
new OAuth request only for calendar, which the user approves. Now the app
has two different authorizations, one for contacts, and one for calendar
(and 2 access tokens, and potentially 2 refresh tokens to keep track of).

When the app makes a request to the resource server, it needs to know which
authorization's access tokens to include on the request. This is what I
mean by the app "keep[s] a running record of all granted scope", basically
it needs to have an internal list of which token includes which scope,
something that is burdensome. The other option of course is to just ask for
all scopes up front (even the ones it may not need right then), which is
not an ideal user experience (as the user is asked to grant permission to
scopes unrelated to their current activity), and this is the problem we're
trying to solve with incremental authz.

This spec makes life easier for the confidential client to do incremental
authorization. An incremental authz flow instead looks like the following:

Day 1. User performs an action that requires contacts access. The app does
an OAuth requests for contacts, which the user approves. Now the app has
one authorization for contacts.
Day 2. User performs an action that requires both calendar and contacts
access. The app simply makes a request that includes both scopes. The
authorization server can see that contacts was already approved, so only
displays the new scope - calendar. The user approves, and a new
authorization grant is issued that includes *both* scopes. The app still
has one authorization, but now it includes the contacts and calendar scope.

Best,
William

--00000000000081fecf0596b7b21d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi Glen,</div><div><br>Thank you for reviewing the dr=
aft. Replies inline:</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" c=
lass=3D"gmail_attr">On Wed, Sep 11, 2019 at 5:35 AM Glen Mazza &lt;<a href=
=3D"mailto:glen.mazza@gmail.com" target=3D"_blank">glen.mazza@gmail.com</a>=
&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div=
 dir=3D"ltr">In Section 6.1, Handling Denials of incremental authorization =
requests, I wonder if the resource owner should be provided the ability by =
the Authorization Server to reject not just the additional scope(s) but als=
o all previously granted ones.=C2=A0 This would be to guard against the cli=
ent withholding dubious permission requests at the outset that might indica=
te to the resource owner that the client isn&#39;t particularly reliable, s=
copes that if they were provided all at once at the beginning would have re=
sulted in the user never approving any of them.=C2=A0 In the user is inclin=
ed to deny an additional permission request due to a newfound lack of trust=
, he may also want to immediately decline previously granted permissions as=
 well. <br></div></blockquote><div><br></div><div>It is definitely always t=
he authorization server&#39;s prerogative to take such an action. In my exp=
erience, this boils down to UX decisions made by the authorization server. =
One way to implement this would be to remind the user of previously granted=
 scopes, and give them the opportunity to revoke them. Or, you could=C2=A0d=
o your suggestion of instantly revoking all scopes on the denial of any one=
, however this may go against the user&#39;s wishes (they might be happy to=
 grant contacts, but not calendar, for instance, in much the same way today=
 on a mobile phone you may grant notifications, but withhold location).</di=
v><div><br></div><div>I don&#39;t think we need to change the spec normativ=
ely to enable such behavior, since the server can already revoke tokens it =
issues. Clients should detect this revocation during the next request to th=
e resource server, and handle it accordingly.</div><div><br></div><div>Perh=
aps we could add a discussion about these implementation choices for Author=
ization Server</div><div>=C2=A0</div><div><br></div><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex"><div dir=3D"ltr">In Section 7.2, it seems odd fo=
r the Authorization Server to rely on the client to tell it what scopes has=
 already been approved for it.=C2=A0 I would think there would need to be a=
 mechanism for the Auth Server to verify that information, but given that, =
why not rely on that information directly instead of what the client would =
be informing it?<br></div></blockquote><div><br></div><div>This section doc=
uments an alternative approach that clients can take today (i.e. without ne=
eding this new specification). I&#39;ll illustrate with an example. Let&#39=
;s say a website needs Contacts on day 1, and both Contacts and Calendar on=
 day 2, here&#39;s how you might implement that with pure RFC 6749:</div><d=
iv><br></div><div>Day 1. User performs an action that requires contacts acc=
ess. The website does an OAuth requests for contacts, which the user approv=
es. Now the app has one authorization (with its associated access token) fo=
r contacts.</div><div>Day 2. User performs an action that requires both cal=
endar and contacts access. The=20

website=20

knows that it already has contacts access, so it does a new OAuth request o=
nly for calendar, which the user approves. Now the app has two different au=
thorizations, one for contacts, and one for calendar (and 2 access tokens, =
and potentially 2 refresh tokens to keep track of).</div><div><br></div><di=
v>When the app makes a request to the resource server, it needs to know whi=
ch authorization&#39;s access tokens to include on the request. This is wha=
t I mean by the app &quot;keep[s] a running record of all granted scope&quo=
t;, basically it needs to have an internal list of which token includes whi=
ch scope, something that is burdensome. The other option of course is to ju=
st ask for all scopes up front (even the ones it may not need right then), =
which is not an ideal user experience (as the user is asked to grant permis=
sion to scopes unrelated to their current activity), and this is the proble=
m we&#39;re trying to solve with incremental authz.</div><div><br></div><di=
v>This spec makes life easier for the confidential client to do incremental=
 authorization. An incremental authz flow instead looks like the following:=
</div><div><br></div><div><div>Day 1. User performs an action that requires=
 contacts access. The app does an OAuth requests for contacts, which the us=
er approves. Now the app has one authorization for contacts.</div><div>Day =
2. User performs an action that requires both calendar and contacts access.=
 The app simply makes a request that includes both scopes. The authorizatio=
n server can see that contacts was already approved, so only displays the n=
ew scope - calendar. The user approves, and a new authorization grant is is=
sued that includes *both* scopes. The app still has one authorization, but =
now it includes the contacts and calendar scope.</div><div><br></div><div>B=
est,</div></div><div>William</div></div></div>

--00000000000081fecf0596b7b21d--


From nobody Thu Nov  7 00:16:38 2019
Return-Path: <denis.ietf@free.fr>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74193120800 for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 00:16:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.895
X-Spam-Level: 
X-Spam-Status: No, score=-0.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w818v-0z78PK for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 00:16:32 -0800 (PST)
Received: from smtp.smtpout.orange.fr (smtp11.smtpout.orange.fr [80.12.242.133]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30E1F120123 for <oauth@ietf.org>; Thu,  7 Nov 2019 00:16:31 -0800 (PST)
Received: from [192.168.1.11] ([90.79.49.31]) by mwinf5d90 with ME id NwGT2100M0gNo7u03wGTqP; Thu, 07 Nov 2019 09:16:29 +0100
X-ME-Helo: [192.168.1.11]
X-ME-Auth: ZGVuaXMucGlua2FzQG9yYW5nZS5mcg==
X-ME-Date: Thu, 07 Nov 2019 09:16:29 +0100
X-ME-IP: 90.79.49.31
To: oauth@ietf.org
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu>
From: Denis <denis.ietf@free.fr>
Message-ID: <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr>
Date: Thu, 7 Nov 2019 09:16:29 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu>
Content-Type: multipart/alternative; boundary="------------C6B714A198F958BE4E2A0210"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/R6UuQY9kgvKEPLmQaTJeRKfSSKw>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 08:16:34 -0000

This is a multi-part message in MIME format.
--------------C6B714A198F958BE4E2A0210
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Hello Jared,

You raised the following question :
*
**Should other possible threats and vulnerabilities be included? 
Meaning, is the list the definitive known list?*

This list is certainly not a "definitive /known /list" since there 
exists an additional /known /threat that has been advertised to this list
for the fist time *exactly* 3 years ago. It is the right time to blow 
three candles !

This is not either "the best list of things that we have at this time", 
as Justin mentioned.

The current document only addresses external "attackers". The case of 
collusion between users is not mentioned.

The first description of such a kind of attack, named the "*Alice and 
Bob Collusion*" attack, was mentioned on this list
*on November the 7 th, 2016*. It is available at: 
https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html

Considering collaborative users is critical when considering age 
verification. If a user legitimately obtains one attribute demonstrating
that he is over 18 and if that user voluntarily transmits such an 
attribute to another user that is below 18, the RP should be in a position
to detect that the attribute does not belong to that other user and 
should thus be in a position to reject it.

It is often believed that protecting secret keys or private keys in a 
secure element is an efficient and sufficient way to prevent such a 
collusion
attack between users against a RP. However, this is not true. There have 
been some implementations using OAuth and smart cards, but the simple 
addition
of these two elements does not necessarily provide a secure solution.

The first user is in a position to perform all the cryptographic 
computations that the other user needs since it can perform any 
cryptographic computation
that the other user needs using secret or private key stored in his 
secure element.

*Whatever kind of cryptographic is being used, when two users 
collaborate, a software-only solution will be unable to prevent the 
transmission *
*Â Â Â Â Â Â  of an attribute of a user that possess it to another user that 
does not possess it. *
**
Additional functional properties are required for the secure element and 
the presence of those properties needs to be verified both by the RP
and the Authorization Server. There are six roles to be considered in 
order to be able to counter the Alice and Bob Collusion attack, namely:

  * Users (usually human users),
  * Clients,
  * Secure Elements (SE),
  * Authorization Servers (AS),
  * Relying Parties (RP), and
  * Secure Element Providers (SEP).

Note: Since RFC 6819 (OAuth 2.0 Threat Model and Security 
Considerations*) *does not include any figure, a figure illustrating 
these roles would be really helpful for the readers.

As a consequence, the protocols SHALL support exchanges where 
computations performed by the secure elements are part of the protocols.

I understand that it may be embarrassing to describe in this document an 
attack that cannot be countered using any of the OAuth 2.0 Security Best 
Current Practices
... but this is not a reason to conceal user's collaborative attacks in 
this document.

The fact is that any (secure) solution to the ABC attack SHALL be based 
on the use of secure elements and hence CANNOT be based on the use of a 
software only solution,
whatever kind of cryptographic algorithms would be used.

I believe that some of the material provided both in this email and in 
the email from November the 7 th, 2016 should be incorporated into this 
document
in order to address this missing threat.

Denis

> 1. Normative MUST/REQUIRED is fine in a BCP.
>
> 2. This is not the definitive list, but instead the best list of 
> things that we have at this time. There will be more attacks, and more 
> mitigations for those attacks.
>
> Â â€” Justin
>
>> On Nov 6, 2019, at 3:16 PM, Jared Jennings <jaredljennings@gmail.com 
>> <mailto:jaredljennings@gmail.com>> wrote:
>>
>> Hi,
>>
>> This is my first time reviewing a document or responding to the 
>> group. So, with that introduction feel free to guide me along the way.
>>
>> Reading through the document, I had a few high-level questions first. 
>> I will have more detailed comments later, once I know I'm on the 
>> right track and I assume those comments I should just share with the 
>> mailing list?
>>
>> 1. Since the document is a "Best Practices" document, are the words 
>> "MUST" and "REQUIRED" and other definitiveÂ terms? Would instead 
>> SHOULD and RECOMMENDED be used?
>>
>> 2. Should other possible threats and vulnerabilitiesÂ be included? 
>> Meaning, is the list the definitiveÂ known list?
>>
>> Thanks!
>> -Jared
>> Skype:jaredljennings
>> Signal:+1 816.730.9540
>> WhatsApp:Â +1 816.678.4152
>>
>>
>>
>> On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig 
>> <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>> wrote:
>>
>>     Hi all,
>>
>>     this is a working group last call for "OAuth 2.0 Security Best
>>     Current Practice".
>>
>>     Here is the document:
>>     https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>>
>>     Please send you comments to the OAuth mailing list by Nov. 27, 2019.
>>     (We use a three week WGLC because of the IETF meeting.)
>>
>>     Ciao
>>     Hannes & Rifaat
>>
>>     IMPORTANT NOTICE: The contents of this email and any attachments
>>     are confidential and may also be privileged. If you are not the
>>     intended recipient, please notify the sender immediately and do
>>     not disclose the contents to any other person, use it for any
>>     purpose, or store or copy the information in any medium. Thank you.
>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth



--------------C6B714A198F958BE4E2A0210
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">Hello Jared,<br>
          <br>
          You raised the following question :<br>
          <b><br>
          </b></span><b><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">Â Â Â Â Â Â Â 
            Should other possible threats and vulnerabilities be
            included? Meaning, is the
            list the definitive known list?</span></b><br>
        <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"></span><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">
          <br>
          This list is certainly not a "definitive <i>known </i>list"
        </span>since there <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">exists an
            additional <i>known </i>threat that has
            been advertised to this list <br>
            for the fist time <b>exactly</b> 3 years ago. It is the
            right time to blow three candles !</span></span></p>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">This is not
            either "the best list of things that we have at this
            time", as Justin mentioned. </span></span></p>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US"></span>The
          current document only addresses external "attackers". The case
          of
          collusion between users is not mentioned. <br>
          <br>
          The first description of such a kind of attack, named the "<b>Alice
            and
            Bob Collusion</b>" attack, was mentioned on this list <br>
          <b>on November the 7
            th, 2016</b>. It is available at: <span style="color:blue"><a class="moz-txt-link-freetext" href="https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html">https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html</a><br>
          </span><br>
          Considering collaborative users is critical when considering
          age verification.
          If a user legitimately obtains one attribute demonstrating <br>
          that he is over 18
          and if that user voluntarily transmits such an attribute to
          another user that
          is below 18, the RP should be in a position <br>
          to detect that the attribute does
          not belong to that other user and should thus be in a position
          to reject it.<br>
          <br>
          It is often believed that protecting secret keys or private
          keys in a secure
          element is an efficient and sufficient way to prevent such a
          collusion <br>
          attack between
          users against a RP. However, this is not true. </span><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
              style="font-family:
              Calibri;mso-ansi-language:EN-US" lang="EN-US">There have
              been some implementations using OAuth and smart cards, but
              the
              simple addition <br>
              of these two elements does not necessarily provide a
              secure
              solution.Â </span></span><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
              style="font-family:
              Calibri;mso-ansi-language:EN-US" lang="EN-US"></span></span></span></p>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">The first user
          is in a position to perform
          all the cryptographic computations that the other user needs
          since it can
          perform any cryptographic computation <br>
          that the other user needs using secret or
          private key stored in his secure element.<br>
        </span><br>
        <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">Â Â Â Â Â Â 
          <b>Whatever kind of cryptographic is being used, when two
            users collaborate, a
            software-only solution will be unable to prevent the
            transmission </b></span><br>
        <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><b>Â Â Â Â Â Â  of an
            attribute of a user that possess it to another user that
            does not possess it. </b></span><br>
        <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"></span><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><b>
          </b><br>
        </span><span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US"></span>Additional
          functional properties
          are required for the secure element and the presence of those
          properties needs
          to be verified both by the RP <br>
          and the Authorization Server. There are six roles to be
          considered in order to be able to counter the Alice and Bob
          Collusion attack, namely:<br>
        </span></p>
      <ul>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Users (usually human users),</span></li>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Clients,</span></li>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Secure Elements (SE),</span></li>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Authorization Servers (AS),</span></li>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Relying Parties (RP), and</span></li>
        <li><span style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US">
            Secure Element Providers (SEP).</span></li>
      </ul>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">
          Note: Since RFC 6819 (OAuth 2.0 Threat Model and Security
          Considerations<b>) </b>does
          not include any figure, a figure illustrating these roles
          would be really
          helpful for the readers.<br>
          <br>
          As a consequence, the protocols SHALL support exchanges where
          computations
          performed by the secure elements are part of the protocols.</span><br>
        <span style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
            style="font-family:
            Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
              style="font-family:
              Calibri;mso-ansi-language:EN-US" lang="EN-US"></span></span></span></p>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">
          I understand that it may be embarrassing to describe in this
          document an attack
          that cannot be countered using any of the OAuth 2.0 Security
          Best Current
          Practices <br>
          ... but this is not a reason to conceal user's collaborative
          attacks
          in this document.<br>
          <br>
          The fact is that any (secure) solution to the ABC attack SHALL
          be based on the
          use of secure elements and hence CANNOT be based on the use of
          a software
          only solution, <br>
          whatever kind of cryptographic algorithms would be used.</span></p>
      <p class="MsoNormal" style="margin-top:6.0pt"><span
          style="font-family:
          Calibri;mso-ansi-language:EN-US" lang="EN-US">
          I believe that some of the material provided both in this
          email and in the
          email from November the 7 th, 2016 should be incorporated into
          this document <br>
          in
          order to address this missing threat.<br>
          <br>
          Denis<br>
          <br>
        </span></p>
    </div>
    <blockquote type="cite"
      cite="mid:3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      1. Normative MUST/REQUIRED is fine in a BCP.Â 
      <div class=""><br class="">
      </div>
      <div class="">2. This is not the definitive list, but instead the
        best list of things that we have at this time. There will be
        more attacks, and more mitigations for those attacks.</div>
      <div class=""><br class="">
      </div>
      <div class="">Â â€” Justin<br class="">
        <div><br class="">
          <blockquote type="cite" class="">
            <div class="">On Nov 6, 2019, at 3:16 PM, Jared Jennings
              &lt;<a href="mailto:jaredljennings@gmail.com" class=""
                moz-do-not-send="true">jaredljennings@gmail.com</a>&gt;
              wrote:</div>
            <br class="Apple-interchange-newline">
            <div class="">
              <meta http-equiv="Content-Type" content="text/html;
                charset=UTF-8" class="">
              <div dir="ltr" class="">Hi,
                <div class=""><br class="">
                </div>
                <div class="">This is my first time reviewing a document
                  or responding to the group. So, with that introduction
                  feel free to guide me along the way.</div>
                <div class=""><br class="">
                </div>
                <div class="">Reading through the document, I had a few
                  high-level questions first. I will have more detailed
                  comments later, once I know I'm on the right track and
                  I assume those comments I should just share with the
                  mailing list?</div>
                <div class=""><br class="">
                </div>
                <div class="">1. Since the document is a "Best
                  Practices" document, are the words "MUST" and
                  "REQUIRED" and other definitiveÂ terms? Would instead
                  SHOULD and RECOMMENDED be used?</div>
                <div class=""><br class="">
                </div>
                <div class="">2. Should other possible threats and
                  vulnerabilitiesÂ be included? Meaning, is the list the
                  definitiveÂ known list?</div>
                <div class=""><br class="">
                </div>
                <div class="">Thanks!<br class="" clear="all">
                  <div class="">
                    <div dir="ltr" class="gmail_signature"
                      data-smartmail="gmail_signature">-Jared</div>
                  </div>
                  <div class="gmail_signature"
                    data-smartmail="gmail_signature"><a
                      href="Skype:jaredljennings" class=""
                      moz-do-not-send="true">Skype:jaredljennings</a></div>
                  <div class="gmail_signature"
                    data-smartmail="gmail_signature">Signal:+1
                    816.730.9540</div>
                  <div class="gmail_signature"
                    data-smartmail="gmail_signature">WhatsApp:Â +1
                    816.678.4152</div>
                  <div class="gmail_signature"
                    data-smartmail="gmail_signature"><br class="">
                  </div>
                  <br class="">
                </div>
              </div>
              <br class="">
              <div class="gmail_quote">
                <div dir="ltr" class="gmail_attr">On Wed, Nov 6, 2019 at
                  2:27 AM Hannes Tschofenig &lt;<a
                    href="mailto:Hannes.Tschofenig@arm.com" class=""
                    moz-do-not-send="true">Hannes.Tschofenig@arm.com</a>&gt;
                  wrote:<br class="">
                </div>
                <blockquote class="gmail_quote" style="margin:0px 0px
                  0px 0.8ex;border-left:1px solid
                  rgb(204,204,204);padding-left:1ex">Hi all,<br class="">
                  <br class="">
                  this is a working group last call for "OAuth 2.0
                  Security Best Current Practice".<br class="">
                  <br class="">
                  Here is the document:<br class="">
                  <a
                    href="https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13"
                    rel="noreferrer" target="_blank" class=""
                    moz-do-not-send="true">https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13</a><br
                    class="">
                  <br class="">
                  Please send you comments to the OAuth mailing list by
                  Nov. 27, 2019.<br class="">
                  (We use a three week WGLC because of the IETF
                  meeting.)<br class="">
                  <br class="">
                  Ciao<br class="">
                  Hannes &amp; Rifaat<br class="">
                  <br class="">
                  IMPORTANT NOTICE: The contents of this email and any
                  attachments are confidential and may also be
                  privileged. If you are not the intended recipient,
                  please notify the sender immediately and do not
                  disclose the contents to any other person, use it for
                  any purpose, or store or copy the information in any
                  medium. Thank you.<br class="">
                  <br class="">
                  _______________________________________________<br
                    class="">
                  OAuth mailing list<br class="">
                  <a href="mailto:OAuth@ietf.org" target="_blank"
                    class="" moz-do-not-send="true">OAuth@ietf.org</a><br
                    class="">
                  <a href="https://www.ietf.org/mailman/listinfo/oauth"
                    rel="noreferrer" target="_blank" class=""
                    moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a><br
                    class="">
                </blockquote>
              </div>
              _______________________________________________<br
                class="">
              OAuth mailing list<br class="">
              <a href="mailto:OAuth@ietf.org" class=""
                moz-do-not-send="true">OAuth@ietf.org</a><br class="">
              <a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br class="">
            </div>
          </blockquote>
        </div>
        <br class="">
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------C6B714A198F958BE4E2A0210--


From nobody Thu Nov  7 05:25:09 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D069312083C for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 05:24:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mMTcA9Kk-Npe for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 05:24:58 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3580F120864 for <oauth@ietf.org>; Thu,  7 Nov 2019 05:24:57 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id 37E8120BCA for <oauth@ietf.org>; Thu,  7 Nov 2019 13:24:55 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1573133095; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WHfa3nXkzq6K8NWLwPD71G7oJhMjio27lZR/V4xNuJQ=; b=E0Si1VGUcPIVn4jFDnkneFWadO2OK0pb+esq6r42auXtJ5C0T0qEK8O7F1GSmtLtT58H6W 19Xu+OyY07eXq/rj0aFGp9J82pH6P19TdjOM7tWu86xqwHF6G4SipOfBlX+VYRbzYk8Iac r413QGBC95JQ94AOg4D70k0fz/aiG7w=
To: oauth@ietf.org
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de>
Date: Thu, 7 Nov 2019 14:24:54 +0100
MIME-Version: 1.0
In-Reply-To: <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr>
Content-Type: multipart/alternative; boundary="------------153C61E1EF8929F9ECEB272B"
Content-Language: de-DE
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1573133095; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WHfa3nXkzq6K8NWLwPD71G7oJhMjio27lZR/V4xNuJQ=; b=gZGyDWerKqW+4TH7lIgfZibWWz4nSvrAzlSGHQhnUPQp5FFY4skQGPsyyzI7rHmFYgbXoz lKyVwMNaJs4pX4ZuA+TbTpk9hPAbwwDwjw7bnzkdqV+ja/z3aZbHwDxhMMquCzHEoxyPi2 dzVZ9fZDL0O7hF82vrPEBTqQAobayZE=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1573133095; a=rsa-sha256; cv=none; b=X+5N/QI4JnxOddRNwBZhBNzzk0mTQ6ZNfkyNH+TfN+m7vLinc95wsF3VrPo/trQgpXu78r5NDVY2qMUMxO2R/pcPTTO2v+JoGjWX3O1De+V86GbgULtPv8HCPwcdWtB2NW37wFmC5qOgIuBj/zQMHL3l27LceveuELen1GJliyo=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/fOMfbuUNljLK2hi4f9qXseiJMUw>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 13:25:08 -0000

This is a multi-part message in MIME format.
--------------153C61E1EF8929F9ECEB272B
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

Hi Denis,

Am 07.11.19 um 09:16 schrieb Denis:
>
> Â Â Â Â Â Â  *Whatever kind of cryptographic is being used, when two users
> collaborate, a software-only solution will be unable to prevent the
> transmission *
> *Â Â Â Â Â Â  of an attribute of a user that possess it to another user that
> does not possess it. *
>
To stay in OAuth lingo, what you are saying is: Two collaborating
clients can exchange their access tokens and use them.

Is that a correct summary of your attack?

-Daniel



--------------153C61E1EF8929F9ECEB272B
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Hi Denis,<br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Am 07.11.19 um 09:16 schrieb Denis:<br>
    </div>
    <blockquote type="cite"
      cite="mid:d021c84a-36f3-f371-2903-2b6051ee654f@free.fr">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div class="moz-cite-prefix"><br>
        <p class="MsoNormal" style="margin-top:6.0pt"> <span
            style="font-family: Calibri;mso-ansi-language:EN-US"
            lang="EN-US">Â Â Â Â Â Â  <b>Whatever kind of cryptographic is
              being used, when two users collaborate, a software-only
              solution will be unable to prevent the transmission </b></span><br>
          <span style="font-family: Calibri;mso-ansi-language:EN-US"
            lang="EN-US"><b>Â Â Â Â Â Â  of an attribute of a user that
              possess it to another user that does not possess it. </b></span><br>
        </p>
      </div>
    </blockquote>
    <p>To stay in OAuth lingo, what you are saying is: Two collaborating
      clients can exchange their access tokens and use them.<br>
    </p>
    <p>Is that a correct summary of your attack?</p>
    <p>-Daniel<br>
    </p>
    <p><br>
    </p>
  </body>
</html>

--------------153C61E1EF8929F9ECEB272B--


From nobody Thu Nov  7 23:38:13 2019
Return-Path: <denis.ietf@free.fr>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF6F212009E for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 23:38:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level: 
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N-pUYqiJc68m for <oauth@ietfa.amsl.com>; Thu,  7 Nov 2019 23:38:10 -0800 (PST)
Received: from smtp.smtpout.orange.fr (smtp13.smtpout.orange.fr [80.12.242.135]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8205A12003E for <oauth@ietf.org>; Thu,  7 Nov 2019 23:38:09 -0800 (PST)
Received: from [192.168.1.11] ([90.79.49.31]) by mwinf5d72 with ME id PKe62100G0gNo7u03Ke6ux; Fri, 08 Nov 2019 08:38:07 +0100
X-ME-Helo: [192.168.1.11]
X-ME-Auth: ZGVuaXMucGlua2FzQG9yYW5nZS5mcg==
X-ME-Date: Fri, 08 Nov 2019 08:38:07 +0100
X-ME-IP: 90.79.49.31
To: Daniel Fett <fett@danielfett.de>, oauth@ietf.org
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de>
From: Denis <denis.ietf@free.fr>
Message-ID: <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr>
Date: Fri, 8 Nov 2019 08:38:07 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de>
Content-Type: multipart/alternative; boundary="------------628A7CF4E5224EC905CAC7CD"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/zxP_X6YV5t5OPZu--bIx2kGjeoc>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 07:38:12 -0000

This is a multi-part message in MIME format.
--------------628A7CF4E5224EC905CAC7CD
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Daniel,

No. It is not a correct summary. One client can allow another client to 
get an access token that belongs to it.
The key point is that a software only solution can't prevent this 
collaborative attack and since, at this time,
the OAuth WG is not considering the use of secure elements, the attack 
cannot be countered.

Please have a look at: 
https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html

Denis

> Hi Denis,
>
> Am 07.11.19 um 09:16 schrieb Denis:
>>
>> *Whatever kind of cryptographic is being used, when two users 
>> collaborate, a software-only solution will be unable to prevent the 
>> transmission *
>> *Â Â Â Â Â Â  of an attribute of a user that possess it to another user 
>> that does not possess it. *
>>
> To stay in OAuth lingo, what you are saying is: Two collaborating 
> clients can exchange their access tokens and use them.
>
> Is that a correct summary of your attack?
>
> -Daniel
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth



--------------628A7CF4E5224EC905CAC7CD
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Daniel,</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">No. It is not a correct summary. One
      client can allow another client to get an access token that
      belongs to it.</div>
    <div class="moz-cite-prefix">The key point is that a software only
      solution can't prevent this collaborative attack and since, at
      this time, <br>
      the OAuth WG is not considering the use of secure elements, the
      attack cannot be countered.</div>
    <div class="moz-cite-prefix"><br>
    </div>
    Please have a look at: <span style="font-family:
      Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
        style="color:blue"><a class="moz-txt-link-freetext"
          href="https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html">https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html</a></span></span>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">
      <div class="moz-cite-prefix">Denis<br>
        <span style="font-family: Calibri;mso-ansi-language:EN-US"
          lang="EN-US"><span style="color:blue"></span></span></div>
    </div>
    <div class="moz-cite-prefix"><span style="font-family:
        Calibri;mso-ansi-language:EN-US" lang="EN-US"><span
          style="color:blue"></span></span></div>
    <div class="moz-cite-prefix">Â  <br>
    </div>
    <blockquote type="cite"
      cite="mid:8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div class="moz-cite-prefix">Hi Denis,<br>
      </div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">Am 07.11.19 um 09:16 schrieb Denis:<br>
      </div>
      <blockquote type="cite"
        cite="mid:d021c84a-36f3-f371-2903-2b6051ee654f@free.fr">
        <meta http-equiv="Content-Type" content="text/html;
          charset=UTF-8">
        <div class="moz-cite-prefix"><br>
          <p class="MsoNormal" style="margin-top:6.0pt"> <span
              style="font-family: Calibri;mso-ansi-language:EN-US"
              lang="EN-US">Â Â Â Â Â Â  <b>Whatever kind of cryptographic is
                being used, when two users collaborate, a software-only
                solution will be unable to prevent the transmission </b></span><br>
            <span style="font-family: Calibri;mso-ansi-language:EN-US"
              lang="EN-US"><b>Â Â Â Â Â Â  of an attribute of a user that
                possess it to another user that does not possess it. </b></span><br>
          </p>
        </div>
      </blockquote>
      <p>To stay in OAuth lingo, what you are saying is: Two
        collaborating clients can exchange their access tokens and use
        them.<br>
      </p>
      <p>Is that a correct summary of your attack?</p>
      <p>-Daniel<br>
      </p>
      <p><br>
      </p>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------628A7CF4E5224EC905CAC7CD--


From nobody Fri Nov  8 00:34:29 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC33D120170 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 00:34:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dq4FGs36vHH3 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 00:34:25 -0800 (PST)
Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDC8A1200FA for <oauth@ietf.org>; Fri,  8 Nov 2019 00:34:25 -0800 (PST)
Received: by mail-qk1-x72c.google.com with SMTP id d13so4572883qko.3 for <oauth@ietf.org>; Fri, 08 Nov 2019 00:34:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2JdqeRh+lwE9sJv8OHtNVAnaRM3yCiMo2qlju4DI948=; b=kq+Og8yorgiGyqG7xX0vZc1ny70rZlTGGAJhZ8JVcKgH5qc8TPSSfxg/y88PJbzLBG Xv6TLFOC1cZ88xJ7uwsEEIjE0kKMYoOLXYQadcVGb8MDYIqZwdINZhJ5yIgEE9hnIaB4 vQpJBSunZw7l/9sJNEssigXhwR6HUR8Wqqb6mepvxnYdZlxuZ6H4dQXExzPsNno1At4v ZmJeKyG10q6G5tb51TMvA31UYJTbNpGEsiWdmcUqh1NL/AQ+Lr4h65MBik9VC7qW8YUM tYwPsQux28f0W1YQmCMWm0l7GMZDdgrSDGMzfEobHOF5I5YplZ8jCUxbW3MMX2lObsxI u5FA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2JdqeRh+lwE9sJv8OHtNVAnaRM3yCiMo2qlju4DI948=; b=sY5+06ifDfJ6Mg2ZKMtDUZrF6jVzXz4JpV9S34YmNqH8yMInKHR1Z37g3oGUBnOCsn G6DaHYRhsb9SceDbQHpF8QhTSLoemfuHAbgrefypdlyGw9iXjz47QNr54cDShCkblwQB iuAStfGzA1uP6yvwXChi+xp0/JvqgblCC60SHOncm9vSe192eApiFldPka3NOWO/ViVX cnQ1eA4mgmjKo1uSnOUINCCjkPVH6DMeHDmEcr07D75FysACALTkdOahPRuFajimH7XI 1cfIn5zBf5diJVslba8gLaH1DT8puLnqlwKcY2CLKFsFBy2wk6ZSA0jjcXdfBFyZXrmE ta5Q==
X-Gm-Message-State: APjAAAU/XG9yqWdlK4xN9fcFhllGvRT/b4E0Je/qHxac3sIEwQpXGiT9 jEV/NkX4QmbVY8qwt7TBKcctyYINNwIiVQfsg7JTRw==
X-Google-Smtp-Source: APXvYqwygy92m6p90r7PCTfng+DwMhRwD1+A/v4fUNMEu4R9SQ2IgOXONFAeQeOfKeQD/CADXzEEiAVbC1P0RFyOzdQ=
X-Received: by 2002:a37:a5c7:: with SMTP id o190mr7689485qke.478.1573202064716;  Fri, 08 Nov 2019 00:34:24 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de> <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr>
In-Reply-To: <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr>
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Fri, 8 Nov 2019 08:34:13 +0000
Message-ID: <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com>
To: Denis <denis.ietf@free.fr>
Cc: Daniel Fett <fett@danielfett.de>, "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003a55850596d1a697"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ShceTtt5QZ5fDlUz2nPkTBdT4Y4>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 08:34:28 -0000

--0000000000003a55850596d1a697
Content-Type: text/plain; charset="UTF-8"

one client can always share the protected data with another client once
retrieved, regardless of pop or secure elements

Hans.

On Fri, Nov 8, 2019 at 8:38 AM Denis <denis.ietf@free.fr> wrote:

> Daniel,
>
> No. It is not a correct summary. One client can allow another client to
> get an access token that belongs to it.
> The key point is that a software only solution can't prevent this
> collaborative attack and since, at this time,
> the OAuth WG is not considering the use of secure elements, the attack
> cannot be countered.
>
> Please have a look at:
> https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html
>
> Denis
>
>
> Hi Denis,
>
> Am 07.11.19 um 09:16 schrieb Denis:
>
>
>        *Whatever kind of cryptographic is being used, when two users
> collaborate, a software-only solution will be unable to prevent the
> transmission *
> *       of an attribute of a user that possess it to another user that
> does not possess it. *
>
> To stay in OAuth lingo, what you are saying is: Two collaborating clients
> can exchange their access tokens and use them.
>
> Is that a correct summary of your attack?
>
> -Daniel
>
>
>
> _______________________________________________
> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


-- 
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--0000000000003a55850596d1a697
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">one client can always share the protected data with anothe=
r client once retrieved, regardless of pop or secure elements<div><br></div=
><div>Hans.</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" clas=
s=3D"gmail_attr">On Fri, Nov 8, 2019 at 8:38 AM Denis &lt;<a href=3D"mailto=
:denis.ietf@free.fr">denis.ietf@free.fr</a>&gt; wrote:<br></div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex">
 =20
   =20
 =20
  <div bgcolor=3D"#FFFFFF">
    <div>Daniel,</div>
    <div><br>
    </div>
    <div>No. It is not a correct summary. One
      client can allow another client to get an access token that
      belongs to it.</div>
    <div>The key point is that a software only
      solution can&#39;t prevent this collaborative attack and since, at
      this time, <br>
      the OAuth WG is not considering the use of secure elements, the
      attack cannot be countered.</div>
    <div><br>
    </div>
    Please have a look at: <span style=3D"font-family:Calibri" lang=3D"EN-U=
S"><span style=3D"color:blue"><a href=3D"https://www.ietf.org/mail-archive/=
web/oauth/current/msg16767.html" target=3D"_blank">https://www.ietf.org/mai=
l-archive/web/oauth/current/msg16767.html</a></span></span>
    <div><br>
    </div>
    <div>
      <div>Denis<br>
        <span style=3D"font-family:Calibri" lang=3D"EN-US"><span style=3D"c=
olor:blue"></span></span></div>
    </div>
    <div><span style=3D"font-family:Calibri" lang=3D"EN-US"><span style=3D"=
color:blue"></span></span></div>
    <div>=C2=A0 <br>
    </div>
    <blockquote type=3D"cite">
     =20
      <div>Hi Denis,<br>
      </div>
      <div><br>
      </div>
      <div>Am 07.11.19 um 09:16 schrieb Denis:<br>
      </div>
      <blockquote type=3D"cite">
       =20
        <div><br>
          <p class=3D"MsoNormal" style=3D"margin-top:6pt"> <span style=3D"f=
ont-family:Calibri" lang=3D"EN-US">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <b>=
Whatever kind of cryptographic is
                being used, when two users collaborate, a software-only
                solution will be unable to prevent the transmission </b></s=
pan><br>
            <span style=3D"font-family:Calibri" lang=3D"EN-US"><b>=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0 of an attribute of a user that
                possess it to another user that does not possess it. </b></=
span><br>
          </p>
        </div>
      </blockquote>
      <p>To stay in OAuth lingo, what you are saying is: Two
        collaborating clients can exchange their access tokens and use
        them.<br>
      </p>
      <p>Is that a correct summary of your attack?</p>
      <p>-Daniel<br>
      </p>
      <p><br>
      </p>
      <br>
      <fieldset></fieldset>
      <pre>_______________________________________________
OAuth mailing list
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=
=3D"ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zma=
rtzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=
=3D"font-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" ta=
rget=3D"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></div=
>

--0000000000003a55850596d1a697--


From nobody Fri Nov  8 04:50:22 2019
Return-Path: <daniel@utilityapi.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76E8A1200C5 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 04:50:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=utilityapi.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wAqsoaIsc2Ol for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 04:50:17 -0800 (PST)
Received: from mail-qv1-xf2b.google.com (mail-qv1-xf2b.google.com [IPv6:2607:f8b0:4864:20::f2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83B5F120086 for <oauth@ietf.org>; Fri,  8 Nov 2019 04:50:17 -0800 (PST)
Received: by mail-qv1-xf2b.google.com with SMTP id g12so2110498qvy.12 for <oauth@ietf.org>; Fri, 08 Nov 2019 04:50:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=utilityapi.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=nrmA2b5oip4kC0RuyZmSkw+7F/ozylD/sLqM2Gf0aVA=; b=sV2ROlOkO9ZZjf8aPm8b12I7YW7dHQhYICwLhdG30nwu56hBbOsYgNOvCYYQAJenwq W1Y6nq+S8aoO+dl0cXYTnEwvk+skRIdwX3Rpq4NRoLgqt1JeHEwbMBxaFuDTsAF9MSbB JQYnDA1ELfSGtJZ9yKgj5UUwpM1StCwRccO6Q=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=nrmA2b5oip4kC0RuyZmSkw+7F/ozylD/sLqM2Gf0aVA=; b=sAKLYRgp/dqwB9Ei7XlP/wQcsomArHpuCbJ0zJ2U2nnS4NhguodO1tWpcHM4ZwpCIb 8d6gZNK+DLsh3ZdXgWDi05lgyVAfft7jYtO1k/8KvYUTu9mPwcbfXZT/vYBWS9vt9kE9 /OYR7EieaRvgAUDQ4V/GogGXW5k7LM9/3K1PDfQ9kMD6OVxpkqEwHe3zAjuBf+fuoBSO 4fCOCfs/WMFbmsM9B61brTGefaNrW441bxVSY0XKIhDeTnJaLUzOynrjABwwUwb6lp7R 3/5If6c/UtuxiW8oOZ1nJpxSWsnbqTolFNjP++Z7lDcF4ahIrof847Uoy+MupDDNixG0 3AWQ==
X-Gm-Message-State: APjAAAXnkG+380tQvjDumUXukL8HDF83Gb08Y3uV1jdfC1siRuwcG269 RvhTLVH8XBDsmwX1jbCGqYi1n6vpsfy1jWIjrDMG+3n+VmQ=
X-Google-Smtp-Source: APXvYqxTWwMj7OvA3FARC0g90V4YFtRwW5kKA8QT6Xmmhb9rhLyRLT1fnz3DfnfB2ldQiyZd5sJpmVsPHR48vECe6ls=
X-Received: by 2002:a0c:b88f:: with SMTP id y15mr9287880qvf.161.1573217416166;  Fri, 08 Nov 2019 04:50:16 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
In-Reply-To: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
From: Daniel Roesler <daniel@utilityapi.com>
Date: Fri, 8 Nov 2019 06:49:40 -0600
Message-ID: <CAF2Zz1RPt4sfoNuPMLJOPJPUCVo1Go8VvJNJSuM88Eouc9KSMA@mail.gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/YMznTv-14c47Q2s1vQ1Y2pu58A0>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 12:50:20 -0000

Howdy,

In the "3.1 Protecting Redirect-Based Flows" > "3.1.1. Authorization
Code Grant" section, is there guidance on when it is appropriate (if
ever) to automatically generate a new authorization code and redirect
back to the client?

A recent exploit[1] on Github's OAuth implementation was practical
because if you make an authorization request and the resource owner is
already authenticated and the scope is already authorized, Github will
silently generate a new authorization code and redirect the user back
to the redirect_uri without asking them to click "Authorize" again.

How the exploit worked:

1. The client makes an ajax HEAD request to the OAuth authorization
endpoint, which will silently create the authorization grant (this was
the security exploit that was patched).

2. However, since the ajax response was blocked via CORS, the client
couldn't receive the authorization code in the response parameters.

3. So, the client then redirected the user to Github's authorization
endpoint with the same authorization code request (only this time as a
real GET redirect).

4. Github instantly redirected the user back to the client's
redirect_uri with a new authorization code and without asking for any
user interaction.

It seems strange to me that OAuth should allow for transparent
authorization code redirects without resource owner confirmation. This
situation only comes up when something weird is happening, such as
when a client loses their valid access|refresh_token, but isn't that
all the more reason to clarify that you should always ask for resource
owner confirmation of the scope, even in scenarios where you are just
re-authorizing the same scope as before?

Had Github asked for confirmation on step 4 above, the practicality of
the HEAD exploit would have been reduced because the user would have
been presented with an unexpected Allow/Deny Github OAuth dialogue,
possibly alerting them to the fact that something strange was going
on.

Anyway, I'm trying to find guidance on transparent redirects for
authorization code grants. There's a whole host of both security and
application logic issues that could come up from such behavior, so I'd
like to ask for clarification in best practices.

[1]: https://blog.teddykatz.com/2019/11/05/github-oauth-bypass.html

Daniel Roesler
Co-founder & CTO, UtilityAPI
daniel@utilityapi.com



On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig
<Hannes.Tschofenig@arm.com> wrote:
>
> Hi all,
>
> this is a working group last call for "OAuth 2.0 Security Best Current Pr=
actice".
>
> Here is the document:
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>
> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> (We use a three week WGLC because of the IETF meeting.)
>
> Ciao
> Hannes & Rifaat
>
> IMPORTANT NOTICE: The contents of this email and any attachments are conf=
idential and may also be privileged. If you are not the intended recipient,=
 please notify the sender immediately and do not disclose the contents to a=
ny other person, use it for any purpose, or store or copy the information i=
n any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Fri Nov  8 05:13:52 2019
Return-Path: <denis.ietf@free.fr>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FD7A120133 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 05:13:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level: 
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L7xyr0ZI3nxr for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 05:13:48 -0800 (PST)
Received: from smtp.smtpout.orange.fr (smtp04.smtpout.orange.fr [80.12.242.126]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B28B0120125 for <oauth@ietf.org>; Fri,  8 Nov 2019 05:13:47 -0800 (PST)
Received: from [192.168.1.11] ([90.79.49.31]) by mwinf5d07 with ME id PRDk210030gNo7u03RDks5; Fri, 08 Nov 2019 14:13:45 +0100
X-ME-Helo: [192.168.1.11]
X-ME-Auth: ZGVuaXMucGlua2FzQG9yYW5nZS5mcg==
X-ME-Date: Fri, 08 Nov 2019 14:13:45 +0100
X-ME-IP: 90.79.49.31
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Cc: "oauth@ietf.org" <oauth@ietf.org>
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de> <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr> <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com>
From: Denis <denis.ietf@free.fr>
Message-ID: <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr>
Date: Fri, 8 Nov 2019 14:13:45 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------C07DB0AA502FF4F249FE20DD"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/s8FuRLQgy0S7FNQAIBIXJUdF6mY>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 13:13:50 -0000

This is a multi-part message in MIME format.
--------------C07DB0AA502FF4F249FE20DD
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

Hello Hans,

You wrote:

> one client can always share the protected data with another client 
> once retrieved, regardless of pop or secure elements

No, there exist means that prevent a client to share the protected data 
with another client , simply because the client cannot access to it.
The protected data is placed inside the secure element and thus a client 
has no way to extract it for the benefit of another client.

The protected data is used by the secure element in such a way so that 
it cannot be used for the benefit of another user.

But we are already in the field of the solutions and no more in the 
field of the requirements.

Denis

>
> Hans.
>
> On Fri, Nov 8, 2019 at 8:38 AM Denis <denis.ietf@free.fr 
> <mailto:denis.ietf@free.fr>> wrote:
>
>     Daniel,
>
>     No. It is not a correct summary. One client can allow another
>     client to get an access token that belongs to it.
>     The key point is that a software only solution can't prevent this
>     collaborative attack and since, at this time,
>     the OAuth WG is not considering the use of secure elements, the
>     attack cannot be countered.
>
>     Please have a look at:
>     https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html
>
>     Denis
>
>>     Hi Denis,
>>
>>     Am 07.11.19 um 09:16 schrieb Denis:
>>>
>>>     *Whatever kind of cryptographic is being used, when two users
>>>     collaborate, a software-only solution will be unable to prevent
>>>     the transmission *
>>>     *of an attribute of a user that possess it to another user that
>>>     does not possess it. *
>>>
>>     To stay in OAuth lingo, what you are saying is: Two collaborating
>>     clients can exchange their access tokens and use them.
>>
>>     Is that a correct summary of your attack?
>>
>>     -Daniel
>>
>>
>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org  <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>
>
>     _______________________________________________
>     OAuth mailing list
>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>     https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> -- 
> hans.zandbelt@zmartzone.eu <mailto:hans.zandbelt@zmartzone.eu>
> ZmartZone IAM - www.zmartzone.eu <http://www.zmartzone.eu>



--------------C07DB0AA502FF4F249FE20DD
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Hello Hans,</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">You wrote:</div>
    <br>
    <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">one client can always share the protected data with
        another client once retrieved, regardless of pop or secure
        elements</div>
    </blockquote>
    <p>No, there exist means that prevent a client to share the
      protected data with another client , simply because the client
      cannot access to it.<br>
      The protected data is placed inside the secure element and thus a
      client has no way to extract it for the benefit of another client.
      <br>
    </p>
    <p>The protected data is used by the secure element in such a way so
      that it cannot be used for the benefit of another user.</p>
    <p>But we are already in the field of the solutions and no more in
      the field of the requirements.<br>
    </p>
    <p>Denis</p>
    <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
      <div dir="ltr">
        <div><br>
        </div>
        <div>Hans.</div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Fri, Nov 8, 2019 at 8:38 AM
          Denis &lt;<a href="mailto:denis.ietf@free.fr"
            moz-do-not-send="true">denis.ietf@free.fr</a>&gt; wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div bgcolor="#FFFFFF">
            <div>Daniel,</div>
            <div><br>
            </div>
            <div>No. It is not a correct summary. One client can allow
              another client to get an access token that belongs to it.</div>
            <div>The key point is that a software only solution can't
              prevent this collaborative attack and since, at this time,
              <br>
              the OAuth WG is not considering the use of secure
              elements, the attack cannot be countered.</div>
            <div><br>
            </div>
            Please have a look at: <span style="font-family:Calibri"
              lang="EN-US"><span style="color:blue"><a
                  href="https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html"
                  target="_blank" moz-do-not-send="true">https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html</a></span></span>
            <div><br>
            </div>
            <div>
              <div>Denis<br>
                <span style="font-family:Calibri" lang="EN-US"><span
                    style="color:blue"></span></span></div>
            </div>
            <div><span style="font-family:Calibri" lang="EN-US"><span
                  style="color:blue"></span></span></div>
            <div>Â  <br>
            </div>
            <blockquote type="cite">
              <div>Hi Denis,<br>
              </div>
              <div><br>
              </div>
              <div>Am 07.11.19 um 09:16 schrieb Denis:<br>
              </div>
              <blockquote type="cite">
                <div><br>
                  <p class="MsoNormal" style="margin-top:6pt"> <span
                      style="font-family:Calibri" lang="EN-US">Â Â Â Â Â Â  <b>Whatever
                        kind of cryptographic is being used, when two
                        users collaborate, a software-only solution will
                        be unable to prevent the transmission </b></span><br>
                    <span style="font-family:Calibri" lang="EN-US"><b>Â Â Â Â Â Â 
                        of an attribute of a user that possess it to
                        another user that does not possess it. </b></span><br>
                  </p>
                </div>
              </blockquote>
              <p>To stay in OAuth lingo, what you are saying is: Two
                collaborating clients can exchange their access tokens
                and use them.<br>
              </p>
              <p>Is that a correct summary of your attack?</p>
              <p>-Daniel<br>
              </p>
              <p><br>
              </p>
              <br>
              <fieldset></fieldset>
              <pre>_______________________________________________
OAuth mailing list
<a href="mailto:OAuth@ietf.org" target="_blank" moz-do-not-send="true">OAuth@ietf.org</a>
<a href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
            </blockquote>
            <p><br>
            </p>
          </div>
          _______________________________________________<br>
          OAuth mailing list<br>
          <a href="mailto:OAuth@ietf.org" target="_blank"
            moz-do-not-send="true">OAuth@ietf.org</a><br>
          <a href="https://www.ietf.org/mailman/listinfo/oauth"
            rel="noreferrer" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a><br>
        </blockquote>
      </div>
      <br clear="all">
      <div><br>
      </div>
      -- <br>
      <div dir="ltr" class="gmail_signature">
        <div dir="ltr">
          <div>
            <div dir="ltr">
              <div dir="ltr">
                <div style="font-size:small"><a
                    href="mailto:hans.zandbelt@zmartzone.eu"
                    target="_blank" moz-do-not-send="true">hans.zandbelt@zmartzone.eu</a></div>
                <div style="font-size:small">ZmartZone IAM - <a
                    href="http://www.zmartzone.eu" target="_blank"
                    moz-do-not-send="true">www.zmartzone.eu</a><br>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------C07DB0AA502FF4F249FE20DD--


From nobody Fri Nov  8 05:37:34 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 263CE12006F for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 05:37:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 40cT-s5dAUHV for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 05:37:30 -0800 (PST)
Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DDF812003F for <oauth@ietf.org>; Fri,  8 Nov 2019 05:37:30 -0800 (PST)
Received: by mail-qk1-x72b.google.com with SMTP id q70so5219982qke.12 for <oauth@ietf.org>; Fri, 08 Nov 2019 05:37:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=rvXQ/N9lJvedaIPbh+gdfNgifwbOzdddGjlrXC5WMvI=; b=tVDUZmXIAMtgVCBFdbysdSkOmHzYCz0wJya0cgcWDAKfHXVbDT/O3XWj23PhkjNT/D 0cPB1ucmyhFbPBzvdnrM4ujhqZFkJgS49MBWYnO3m8L2jHJWMhtd2qxbaoN8pmjnkBN5 S2Z1kQMZEoemXcfGDHMlpgVLQJtBahol4pdnX4aj0qDWoJxzUAWxQ4QBAQHoTljZxsQQ qmzIF2tqOkRNZsYIxdgSTLRDELGWyoWZo74e5vOx/ecml/DcCfRUZaNx5Czgy54XWeSe +SZ6rpLUBL3YvV7l54paHcfieS21/XsuoYPK4027s8xUTQ9W53FNCcDl48novSeDgDq0 ga/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=rvXQ/N9lJvedaIPbh+gdfNgifwbOzdddGjlrXC5WMvI=; b=nSTzoW8baZ2USTEjjgpLMOfIADuO6KyCUUeXhqvU97jfB+PtkwcQseSmraW1YXbLcF oNPW/qcw1kprQdejK5kQAY9HgfIZ6SWN93OnWpU4qajeTN7rDsr5qo+Mil5oETXjd6Ys 9tuodt5hsfsEKxQ/1prCpa9ArOBY5TldMbCQoQfNCF5z3Lt+noo0z5J556nkEVueQBMO ISoBmOXfQHelTY5P60l/BNEpfVHGf17AfCTPOjh71pKKGOIJUmqt0SE4mzVXK9a0ewOV U5Su8JVUNI6w2JBE7Kk7AEul2TQnn30Bw+9wobpcXYn+r5KQGtxoqrJ/4azkG3DIoRp8 Y4vQ==
X-Gm-Message-State: APjAAAX7vewr4jTYX4WrZUTB06YvyANOIetG9vHMS45p1cHFPUTAqVp2 Ya9toMTEx2txrCi22MJjyWT43mbDDy6+A3/Bbkn0cw==
X-Google-Smtp-Source: APXvYqxkBsHyfqsfqgB8byuwQRRbJy0y61UwFXkVWmN/fknJ1F0tlmRO+LnbqfEbMVhMp5qurjqTPMk8gvW5l29XT9g=
X-Received: by 2002:a37:a5c7:: with SMTP id o190mr8902957qke.478.1573220249143;  Fri, 08 Nov 2019 05:37:29 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de> <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr> <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com> <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr>
In-Reply-To: <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr>
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Fri, 8 Nov 2019 14:37:18 +0100
Message-ID: <CA+iA6uioyqExsnONWEVYGyU-OSgqLcbkTMa+CyyjyVZEunaEqw@mail.gmail.com>
To: Denis <denis.ietf@free.fr>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001aa1b30596d5e234"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/gOidyp0k88N-54rD0w4tRX2ylAY>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 13:37:33 -0000

--0000000000001aa1b30596d5e234
Content-Type: text/plain; charset="UTF-8"

screenshot...

Hans.

On Fri, Nov 8, 2019 at 2:13 PM Denis <denis.ietf@free.fr> wrote:

> Hello Hans,
>
> You wrote:
>
> one client can always share the protected data with another client once
> retrieved, regardless of pop or secure elements
>
> No, there exist means that prevent a client to share the protected data
> with another client , simply because the client cannot access to it.
> The protected data is placed inside the secure element and thus a client
> has no way to extract it for the benefit of another client.
>
> The protected data is used by the secure element in such a way so that it
> cannot be used for the benefit of another user.
>
> But we are already in the field of the solutions and no more in the field
> of the requirements.
>
> Denis
>
>
> Hans.
>
> On Fri, Nov 8, 2019 at 8:38 AM Denis <denis.ietf@free.fr> wrote:
>
>> Daniel,
>>
>> No. It is not a correct summary. One client can allow another client to
>> get an access token that belongs to it.
>> The key point is that a software only solution can't prevent this
>> collaborative attack and since, at this time,
>> the OAuth WG is not considering the use of secure elements, the attack
>> cannot be countered.
>>
>> Please have a look at:
>> https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html
>>
>> Denis
>>
>>
>> Hi Denis,
>>
>> Am 07.11.19 um 09:16 schrieb Denis:
>>
>>
>>        *Whatever kind of cryptographic is being used, when two users
>> collaborate, a software-only solution will be unable to prevent the
>> transmission *
>> *       of an attribute of a user that possess it to another user that
>> does not possess it. *
>>
>> To stay in OAuth lingo, what you are saying is: Two collaborating clients
>> can exchange their access tokens and use them.
>>
>> Is that a correct summary of your attack?
>>
>> -Daniel
>>
>>
>>
>> _______________________________________________
>> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>
>
> --
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu
>
>
>

-- 
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--0000000000001aa1b30596d5e234
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">screenshot...<div><br></div><div>Hans.</div></div><br><div=
 class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 8,=
 2019 at 2:13 PM Denis &lt;<a href=3D"mailto:denis.ietf@free.fr">denis.ietf=
@free.fr</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le=
ft:1ex">
 =20
   =20
 =20
  <div bgcolor=3D"#FFFFFF">
    <div>Hello Hans,</div>
    <div><br>
    </div>
    <div>You wrote:</div>
    <br>
    <blockquote type=3D"cite">
     =20
      <div dir=3D"ltr">one client can always share the protected data with
        another client once retrieved, regardless of pop or secure
        elements</div>
    </blockquote>
    <p>No, there exist means that prevent a client to share the
      protected data with another client , simply because the client
      cannot access to it.<br>
      The protected data is placed inside the secure element and thus a
      client has no way to extract it for the benefit of another client.
      <br>
    </p>
    <p>The protected data is used by the secure element in such a way so
      that it cannot be used for the benefit of another user.</p>
    <p>But we are already in the field of the solutions and no more in
      the field of the requirements.<br>
    </p>
    <p>Denis</p>
    <blockquote type=3D"cite">
      <div dir=3D"ltr">
        <div><br>
        </div>
        <div>Hans.</div>
      </div>
      <br>
      <div class=3D"gmail_quote">
        <div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 8, 2019 at 8:38 A=
M
          Denis &lt;<a href=3D"mailto:denis.ietf@free.fr" target=3D"_blank"=
>denis.ietf@free.fr</a>&gt; wrote:<br>
        </div>
        <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex=
;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div bgcolor=3D"#FFFFFF">
            <div>Daniel,</div>
            <div><br>
            </div>
            <div>No. It is not a correct summary. One client can allow
              another client to get an access token that belongs to it.</di=
v>
            <div>The key point is that a software only solution can&#39;t
              prevent this collaborative attack and since, at this time,
              <br>
              the OAuth WG is not considering the use of secure
              elements, the attack cannot be countered.</div>
            <div><br>
            </div>
            Please have a look at: <span style=3D"font-family:Calibri" lang=
=3D"EN-US"><span style=3D"color:blue"><a href=3D"https://www.ietf.org/mail-=
archive/web/oauth/current/msg16767.html" target=3D"_blank">https://www.ietf=
.org/mail-archive/web/oauth/current/msg16767.html</a></span></span>
            <div><br>
            </div>
            <div>
              <div>Denis<br>
                <span style=3D"font-family:Calibri" lang=3D"EN-US"><span st=
yle=3D"color:blue"></span></span></div>
            </div>
            <div><span style=3D"font-family:Calibri" lang=3D"EN-US"><span s=
tyle=3D"color:blue"></span></span></div>
            <div>=C2=A0 <br>
            </div>
            <blockquote type=3D"cite">
              <div>Hi Denis,<br>
              </div>
              <div><br>
              </div>
              <div>Am 07.11.19 um 09:16 schrieb Denis:<br>
              </div>
              <blockquote type=3D"cite">
                <div><br>
                  <p class=3D"MsoNormal" style=3D"margin-top:6pt"> <span st=
yle=3D"font-family:Calibri" lang=3D"EN-US">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 <b>Whatever
                        kind of cryptographic is being used, when two
                        users collaborate, a software-only solution will
                        be unable to prevent the transmission </b></span><b=
r>
                    <span style=3D"font-family:Calibri" lang=3D"EN-US"><b>=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
                        of an attribute of a user that possess it to
                        another user that does not possess it. </b></span><=
br>
                  </p>
                </div>
              </blockquote>
              <p>To stay in OAuth lingo, what you are saying is: Two
                collaborating clients can exchange their access tokens
                and use them.<br>
              </p>
              <p>Is that a correct summary of your attack?</p>
              <p>-Daniel<br>
              </p>
              <p><br>
              </p>
              <br>
              <fieldset></fieldset>
              <pre>_______________________________________________
OAuth mailing list
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
            </blockquote>
            <p><br>
            </p>
          </div>
          _______________________________________________<br>
          OAuth mailing list<br>
          <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
          <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"no=
referrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
        </blockquote>
      </div>
      <br clear=3D"all">
      <div><br>
      </div>
      -- <br>
      <div dir=3D"ltr">
        <div dir=3D"ltr">
          <div>
            <div dir=3D"ltr">
              <div dir=3D"ltr">
                <div style=3D"font-size:small"><a href=3D"mailto:hans.zandb=
elt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div>
                <div style=3D"font-size:small">ZmartZone IAM - <a href=3D"h=
ttp://www.zmartzone.eu" target=3D"_blank">www.zmartzone.eu</a><br>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <p><br>
    </p>
  </div>

</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=
=3D"ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zma=
rtzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=
=3D"font-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" ta=
rget=3D"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></div=
>

--0000000000001aa1b30596d5e234--


From nobody Fri Nov  8 06:30:10 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44586120807 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 06:30:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E-x0XrusooKP for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 06:30:07 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCC7012008C for <oauth@ietf.org>; Fri,  8 Nov 2019 06:30:06 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id AEEEB21600 for <oauth@ietf.org>; Fri,  8 Nov 2019 14:30:03 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1573223403; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Zy1yDmbnsWcIswebQRR1ufVSiyVNUcN8R56zjVgAsDs=; b=MPH11ftLTWPOK17S4YIMXE43F1os9Hexlcoyx+ga371JVb4HjF0k/KY2xRk3VhQisk7uP/ 3Qo3nyAMPiVOPyGDvN3hu2HKKpAkEjGe4GlsRC6IH7XWm28ECxdUZ3jKa3imflY1bKhSsu NQ2sbdV0IhC02pS1e9O3B3WSV5snFvw=
To: oauth@ietf.org
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de> <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr> <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com> <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de>
Date: Fri, 8 Nov 2019 15:30:02 +0100
MIME-Version: 1.0
In-Reply-To: <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr>
Content-Type: multipart/alternative; boundary="------------F5A6A3B163F63804E825A631"
Content-Language: de-DE
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1573223404; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Zy1yDmbnsWcIswebQRR1ufVSiyVNUcN8R56zjVgAsDs=; b=QCYumfmEr03mOm0VE+V7ekNktER4MMs665PBh4TeaonfM7fIq+1CnucEwU7Cu72raNOLni rkPXJRsXsRj68TphcOJDHUbD5E4jG807+DJW1akybTz61plAKFNWqd5AysPdjzKMQfAefk 6wYZmBYY/TfMaSRe4rx81dHZJDtDk/4=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1573223404; a=rsa-sha256; cv=none; b=VJupvm92kFgjx3UXXdIm8SL/VHEuMpJ2L5ovQnHFS5z1B7i7S2+KpAMvRlGvJJWjrH6WS+g1WjanVHGeOiEfU9l3qw6/rjr1d8BTvcgz0+td0Fib/Mqp9+cmyCGHVopfz4YrInp1wvFuHueFAlRR6+HNY8VlPLTvglrqj8/AjS8=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/32rm5_94P6welBeG0IyHgxXJNLg>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 14:30:09 -0000

This is a multi-part message in MIME format.
--------------F5A6A3B163F63804E825A631
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

I have the feeling that this attack aims at breaking a security property
that OAuth does not claim to fulfill (and that nobody expects OAuth to
fulfill):

"Given two colluding clients A and B, where A has obtained an access
token T, B cannot use T to access protected resources."
(analogously for two users U_A and U_B of the clients, where the users
have some session with a backend client.)

And there are good reasons why this is not captured by the security
property (Hans' screenshot, for example).

As far as I know, this property is neither achieved by classical
first-party session-based authentication/authorization nor by any other
web-based mechanism, or is it?

-Daniel

Am 08.11.19 um 14:13 schrieb Denis:
> Hello Hans,
>
> You wrote:
>
>> one client can always share the protected data with another client
>> once retrieved, regardless of pop or secure elements
>
> No, there exist means that prevent a client to share the protected
> data with another client , simply because the client cannot access to it.
> The protected data is placed inside the secure element and thus a
> client has no way to extract it for the benefit of another client.
>
> The protected data is used by the secure element in such a way so that
> it cannot be used for the benefit of another user.
>
> But we are already in the field of the solutions and no more in the
> field of the requirements.
>
> Denis
>
>>
>> Hans.
>>
>> On Fri, Nov 8, 2019 at 8:38 AM Denis <denis.ietf@free.fr
>> <mailto:denis.ietf@free.fr>> wrote:
>>
>>     Daniel,
>>
>>     No. It is not a correct summary. One client can allow another
>>     client to get an access token that belongs to it.
>>     The key point is that a software only solution can't prevent this
>>     collaborative attack and since, at this time,
>>     the OAuth WG is not considering the use of secure elements, the
>>     attack cannot be countered.
>>
>>     Please have a look at:
>>     https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html
>>
>>     Denis
>>     Â 
>>>     Hi Denis,
>>>
>>>     Am 07.11.19 um 09:16 schrieb Denis:
>>>>
>>>>     Â Â Â Â Â Â  *Whatever kind of cryptographic is being used, when two
>>>>     users collaborate, a software-only solution will be unable to
>>>>     prevent the transmission *
>>>>     *Â Â Â Â Â Â  of an attribute of a user that possess it to another
>>>>     user that does not possess it. *
>>>>
>>>     To stay in OAuth lingo, what you are saying is: Two
>>>     collaborating clients can exchange their access tokens and use them.
>>>
>>>     Is that a correct summary of your attack?
>>>
>>>     -Daniel
>>>
>>>
>>>
>>>     _______________________________________________
>>>     OAuth mailing list
>>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>     https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>> -- 
>> hans.zandbelt@zmartzone.eu <mailto:hans.zandbelt@zmartzone.eu>
>> ZmartZone IAM - www.zmartzone.eu <http://www.zmartzone.eu>
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth



--------------F5A6A3B163F63804E825A631
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">I have the feeling that this attack
      aims at breaking a security property that OAuth does not claim to
      fulfill (and that nobody expects OAuth to fulfill):</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">"Given two colluding clients A and B,
      where A has obtained an access token T, B cannot use T to access
      protected resources."</div>
    (analogously for two users U_A and U_B of the clients, where the
    users have some session with a backend client.)<br>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">And there are good reasons why this is
      not captured by the security property (Hans' screenshot, for
      example).</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">As far as I know, this property is
      neither achieved by classical first-party session-based
      authentication/authorization nor by any other web-based mechanism,
      or is it?</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">-Daniel<br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Am 08.11.19 um 14:13 schrieb Denis:<br>
    </div>
    <blockquote type="cite"
      cite="mid:ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div class="moz-cite-prefix">Hello Hans,</div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">You wrote:</div>
      <br>
      <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
        <meta http-equiv="content-type" content="text/html;
          charset=UTF-8">
        <div dir="ltr">one client can always share the protected data
          with another client once retrieved, regardless of pop or
          secure elements</div>
      </blockquote>
      <p>No, there exist means that prevent a client to share the
        protected data with another client , simply because the client
        cannot access to it.<br>
        The protected data is placed inside the secure element and thus
        a client has no way to extract it for the benefit of another
        client. <br>
      </p>
      <p>The protected data is used by the secure element in such a way
        so that it cannot be used for the benefit of another user.</p>
      <p>But we are already in the field of the solutions and no more in
        the field of the requirements.<br>
      </p>
      <p>Denis</p>
      <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
        <div dir="ltr">
          <div><br>
          </div>
          <div>Hans.</div>
        </div>
        <br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Fri, Nov 8, 2019 at 8:38
            AM Denis &lt;<a href="mailto:denis.ietf@free.fr"
              moz-do-not-send="true">denis.ietf@free.fr</a>&gt; wrote:<br>
          </div>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px
            0.8ex;border-left:1px solid
            rgb(204,204,204);padding-left:1ex">
            <div bgcolor="#FFFFFF">
              <div>Daniel,</div>
              <div><br>
              </div>
              <div>No. It is not a correct summary. One client can allow
                another client to get an access token that belongs to
                it.</div>
              <div>The key point is that a software only solution can't
                prevent this collaborative attack and since, at this
                time, <br>
                the OAuth WG is not considering the use of secure
                elements, the attack cannot be countered.</div>
              <div><br>
              </div>
              Please have a look at: <span style="font-family:Calibri"
                lang="EN-US"><span style="color:blue"><a
                    href="https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html"
                    target="_blank" moz-do-not-send="true">https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html</a></span></span>
              <div><br>
              </div>
              <div>
                <div>Denis<br>
                  <span style="font-family:Calibri" lang="EN-US"><span
                      style="color:blue"></span></span></div>
              </div>
              <div><span style="font-family:Calibri" lang="EN-US"><span
                    style="color:blue"></span></span></div>
              <div>Â  <br>
              </div>
              <blockquote type="cite">
                <div>Hi Denis,<br>
                </div>
                <div><br>
                </div>
                <div>Am 07.11.19 um 09:16 schrieb Denis:<br>
                </div>
                <blockquote type="cite">
                  <div><br>
                    <p class="MsoNormal" style="margin-top:6pt"> <span
                        style="font-family:Calibri" lang="EN-US">Â Â Â Â Â Â 
                        <b>Whatever kind of cryptographic is being used,
                          when two users collaborate, a software-only
                          solution will be unable to prevent the
                          transmission </b></span><br>
                      <span style="font-family:Calibri" lang="EN-US"><b>Â Â Â Â Â Â 
                          of an attribute of a user that possess it to
                          another user that does not possess it. </b></span><br>
                    </p>
                  </div>
                </blockquote>
                <p>To stay in OAuth lingo, what you are saying is: Two
                  collaborating clients can exchange their access tokens
                  and use them.<br>
                </p>
                <p>Is that a correct summary of your attack?</p>
                <p>-Daniel<br>
                </p>
                <p><br>
                </p>
                <br>
                <fieldset></fieldset>
                <pre>_______________________________________________
OAuth mailing list
<a href="mailto:OAuth@ietf.org" target="_blank" moz-do-not-send="true">OAuth@ietf.org</a>
<a href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
              </blockquote>
              <p><br>
              </p>
            </div>
            _______________________________________________<br>
            OAuth mailing list<br>
            <a href="mailto:OAuth@ietf.org" target="_blank"
              moz-do-not-send="true">OAuth@ietf.org</a><br>
            <a href="https://www.ietf.org/mailman/listinfo/oauth"
              rel="noreferrer" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a><br>
          </blockquote>
        </div>
        <br clear="all">
        <div><br>
        </div>
        -- <br>
        <div dir="ltr" class="gmail_signature">
          <div dir="ltr">
            <div>
              <div dir="ltr">
                <div dir="ltr">
                  <div style="font-size:small"><a
                      href="mailto:hans.zandbelt@zmartzone.eu"
                      target="_blank" moz-do-not-send="true">hans.zandbelt@zmartzone.eu</a></div>
                  <div style="font-size:small">ZmartZone IAM - <a
                      href="http://www.zmartzone.eu" target="_blank"
                      moz-do-not-send="true">www.zmartzone.eu</a><br>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </blockquote>
      <p><br>
      </p>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------F5A6A3B163F63804E825A631--


From nobody Fri Nov  8 12:01:46 2019
Return-Path: <david@alkaline-solutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B79C6120C7A for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 12:01:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.227
X-Spam-Level: **
X-Spam-Status: No, score=2.227 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, RDNS_NONE=0.793, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7GpVVYIEEnJj for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 12:01:43 -0800 (PST)
Received: from alkaline-solutions.com (unknown [IPv6:2600:3c00::f03c:91ff:fe93:6974]) by ietfa.amsl.com (Postfix) with ESMTP id 73C6E120B23 for <oauth@ietf.org>; Fri,  8 Nov 2019 12:01:27 -0800 (PST)
Received: from [IPv6:2601:282:202:b210:bc69:2824:515c:c2c2] (unknown [IPv6:2601:282:202:b210:bc69:2824:515c:c2c2]) by alkaline-solutions.com (Postfix) with ESMTPSA id A2B9C31628; Fri,  8 Nov 2019 20:01:25 +0000 (UTC)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.2\))
From: David Waite <david@alkaline-solutions.com>
In-Reply-To: <CAF2Zz1RPt4sfoNuPMLJOPJPUCVo1Go8VvJNJSuM88Eouc9KSMA@mail.gmail.com>
Date: Fri, 8 Nov 2019 13:01:25 -0700
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <E15A89A1-F7C6-4466-BAD9-232C98C0D14A@alkaline-solutions.com>
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAF2Zz1RPt4sfoNuPMLJOPJPUCVo1Go8VvJNJSuM88Eouc9KSMA@mail.gmail.com>
To: Daniel Roesler <daniel=40utilityapi.com@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3608.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/2WdqO1YlaP-CZQrGHVuYE1SSKpk>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 20:01:45 -0000

Hello Daniel!

> 1. The client makes an ajax HEAD request to the OAuth authorization
> endpoint, which will silently create the authorization grant (this was
> the security exploit that was patched).

> Anyway, I'm trying to find guidance on transparent redirects for
> authorization code grants. There's a whole host of both security and
> application logic issues that could come up from such behavior, so I'd
> like to ask for clarification in best practices.

OAuth does not provide a way to recover from an expired access token =
barring a refresh token, which also can be invalidated. In particular, =
the only front channel =E2=80=98continuation=E2=80=99 parameter I know =
of is =E2=80=98id_token_hint=E2=80=99 in OIDC.

There are deployments today (admittedly mostly using implicit flow) =
which do not have refresh tokens. A mandate that you SHOULD ask for =
re-consent would be a recommendation that they have to interrupt the =
user periodically to continue access - which would just create another =
security vs usability decision.

Per your point above, the actual security issue was that GitHub 1) had =
the authorization endpoint serve double-duty and 2) treated HEAD =
requests as a quasi GET/POST to create a grant in their database to the =
client without user confirmation. The solution for this is not to ask =
the user to re-confirm on every request..

That said, it does make sense for some deployments to periodically =
invalidate a refresh token, even for the purpose of bringing the user =
back to re-consent permissions (aka self-audit). An application could =
theoretically distinguish from tokens granted by the protected user =
needing to be invalidated to drive the user to re-consent, and =
operationally granted tokens which are assumed to be actively managed =
and not tied to any user account.

-DW

> On Nov 8, 2019, at 5:49 AM, Daniel Roesler =
<daniel=3D40utilityapi.com@dmarc.ietf.org> wrote:
>=20
> Howdy,
>=20
> In the "3.1 Protecting Redirect-Based Flows" > "3.1.1. Authorization
> Code Grant" section, is there guidance on when it is appropriate (if
> ever) to automatically generate a new authorization code and redirect
> back to the client?
>=20
> A recent exploit[1] on Github's OAuth implementation was practical
> because if you make an authorization request and the resource owner is
> already authenticated and the scope is already authorized, Github will
> silently generate a new authorization code and redirect the user back
> to the redirect_uri without asking them to click "Authorize" again.
>=20
> How the exploit worked:
>=20
>=20
> 2. However, since the ajax response was blocked via CORS, the client
> couldn't receive the authorization code in the response parameters.
>=20
> 3. So, the client then redirected the user to Github's authorization
> endpoint with the same authorization code request (only this time as a
> real GET redirect).
>=20
> 4. Github instantly redirected the user back to the client's
> redirect_uri with a new authorization code and without asking for any
> user interaction.
>=20
> It seems strange to me that OAuth should allow for transparent
> authorization code redirects without resource owner confirmation. This
> situation only comes up when something weird is happening, such as
> when a client loses their valid access|refresh_token, but isn't that
> all the more reason to clarify that you should always ask for resource
> owner confirmation of the scope, even in scenarios where you are just
> re-authorizing the same scope as before?
>=20
> Had Github asked for confirmation on step 4 above, the practicality of
> the HEAD exploit would have been reduced because the user would have
> been presented with an unexpected Allow/Deny Github OAuth dialogue,
> possibly alerting them to the fact that something strange was going
> on.
>=20
>=20
> [1]: https://blog.teddykatz.com/2019/11/05/github-oauth-bypass.html
>=20
> Daniel Roesler
> Co-founder & CTO, UtilityAPI
> daniel@utilityapi.com
>=20
>=20
>=20
> On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig
> <Hannes.Tschofenig@arm.com> wrote:
>>=20
>> Hi all,
>>=20
>> this is a working group last call for "OAuth 2.0 Security Best =
Current Practice".
>>=20
>> Here is the document:
>> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>>=20
>> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
>> (We use a three week WGLC because of the IETF meeting.)
>>=20
>> Ciao
>> Hannes & Rifaat
>>=20
>> IMPORTANT NOTICE: The contents of this email and any attachments are =
confidential and may also be privileged. If you are not the intended =
recipient, please notify the sender immediately and do not disclose the =
contents to any other person, use it for any purpose, or store or copy =
the information in any medium. Thank you.
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Fri Nov  8 14:36:20 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDB13120072 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 14:36:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z5fhhU-rra-O for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 14:36:16 -0800 (PST)
Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 697CB120025 for <oauth@ietf.org>; Fri,  8 Nov 2019 14:36:15 -0800 (PST)
Received: by mail-lf1-x12b.google.com with SMTP id z24so2704067lfh.6 for <oauth@ietf.org>; Fri, 08 Nov 2019 14:36:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Q/gufay13bIRqF30wqakmXIGcfByk4PvlyNJvZ5IC+U=; b=JwCzp8JiGa5IFs5VC1hQfUMv10ZDW6VMsGCL4K84llxDb1eEbFh9jODr1Jpyy6Ousj EuMoFmmGVoNYzbbFRFlVvNYp5YIEc9KWbdRrlMIOUQ6u95BxyL49rteQgF8M9LfKUoYD wHuBv8tyrO+h/CVrvOGhmtSPJzKL6cz+sqG1xSd3P6VDy+dcNIRJ12s+TmVEjn//S71T Ioh+HTKsOlkSvsEd3Jd1dA9U5msh2tJ8KSVoG+/nyLJ978kB5peBe0I2IaanXwVooPeP OxiNWLl22+Isdc64VzPkmXblWiYH6wucYsa80XnVcDQZuCCuhBoe7eJzqytUsmj7+txL JdBA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Q/gufay13bIRqF30wqakmXIGcfByk4PvlyNJvZ5IC+U=; b=MEMaUbf7e3Y0YlKIzD5zr+rHa5yWuipc+dMCdCneRgtRd9GagEBvoYMRFPgZQ1vin2 7J3jgc6w4OHYbXESIn03N12M+RIbexBt4p/m9vrHJIQPHYICY1i2+h55NHjQdf+1PiNL WB07+c2CNpxVj8kc9VPJU6WMApbXB4JxARBHVF0Y5X20LFSS1JzM+W5BgGokxKPI2sxe UqEDYonv0UDLqcR9d3T7lkXSjxCyTdHqlxCg9a8DZh72DFndEPvi49nJSR9v0WTRzlmK IthnN9F4uFmm4WQy0lPVxtZRk9TEjNj5chXbaocIycXEd8udThHxHo+Z+dODStWWSYLF iBKg==
X-Gm-Message-State: APjAAAUQX1F6gkBsiRu6BrbhL8bmJ6pjbfUNUjq7ryI8EafBlzYcCyYJ x5GLxpIIWdD5kI9/sd0X9rzGJ29jawBYo4RgYyakIi80IS6pnE+XViLv8w0K4Zw94WdOFK0H5ST Q97cDfoIy2O7rGw==
X-Google-Smtp-Source: APXvYqyypmuHZi3HIfXr7u2Xzw5Vje6kNJ7MwVxqokr72ONA9t+PrWM/OQdRBFO+jYCaMt9HaI5ZbhCcSvAuy4Uahko=
X-Received: by 2002:a19:f811:: with SMTP id a17mr7928771lff.132.1573252573566;  Fri, 08 Nov 2019 14:36:13 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360BBDDDF8362B40C97AF18FAB10@VI1PR08MB5360.eurprd08.prod.outlook.com> <736340BF-B33D-4407-81AF-532C947F1243@xmlgrrl.com> <AM0PR08MB5345B19B0AF2304AE8E110CAFAB00@AM0PR08MB5345.eurprd08.prod.outlook.com> <CA+k3eCR_ga1c1Cts0RY6Vy8AEgwjD2TaqOeWStkwQ6udqnkn2Q@mail.gmail.com> <CAAP42hCf2fQO29q3vCH8U7sJWpQ94AiE4BCvMWqYxqxe-erYyw@mail.gmail.com>
In-Reply-To: <CAAP42hCf2fQO29q3vCH8U7sJWpQ94AiE4BCvMWqYxqxe-erYyw@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 8 Nov 2019 15:35:46 -0700
Message-ID: <CA+k3eCRZ8ySJYFDTb=NbMZ=oVuFrMr5h82uazPsOmjD=XDY6Xg@mail.gmail.com>
To: William Denniss <wdenniss=40google.com@dmarc.ietf.org>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ca32f20596dd686b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/_GjSqlqKDTrNFbb_BIr_tV4M7-0>
Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 22:36:19 -0000

--000000000000ca32f20596dd686b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are welcome. I'm always happy to be able to help with a major
contribution such as this one :)

I did read through the draft for WGLC back in September though and that was
the only issue that jumped out at me.


On Wed, Nov 6, 2019 at 6:15 PM William Denniss <wdenniss=3D
40google.com@dmarc.ietf.org> wrote:

>
> On Wed, Sep 25, 2019 at 3:54 PM Brian Campbell <bcampbell=3D
> 40pingidentity.com@dmarc.ietf.org> wrote:
>
>> Just noticed that something is missing in
>> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02#sectio=
n-5
>> where it has just, "(Section 4.1.4 of )"
>>
>
> Thank you for catching this Brian. It was meant to read Section 4.1.4 of
> RFC 6749.
>
> I've updated this in my local copy, will get posted in version 04.
>
>
>>
>> On Thu, Sep 12, 2019 at 8:40 AM Hannes Tschofenig <
>> Hannes.Tschofenig@arm.com> wrote:
>>
>>> Thanks for the correction; yes =E2=80=93 the most recent version is -02=
 and I
>>> posted an old link.
>>>
>>>
>>>
>>>
>>>
>>> *From:* Eve Maler <eve@xmlgrrl.com>
>>> *Sent:* Donnerstag, 12. September 2019 16:16
>>> *To:* Hannes Tschofenig <Hannes.Tschofenig@arm.com>
>>> *Subject:* Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
>>>
>>>
>>>
>>> I think you mean
>>> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02?
>>>
>>> Eve Maler (sent from my iPad) | cell +1 425 345 6756 <(425)%20345-6756>
>>>
>>>
>>> On Sep 11, 2019, at 4:22 AM, Hannes Tschofenig <
>>> Hannes.Tschofenig@arm.com <Hannes...Tschofenig@arm.com>> wrote:
>>>
>>> Hi all,
>>>
>>>
>>>
>>> We are starting a WGLC on the "OAuth 2.0 Incremental Authorization"
>>> draft. You can find the document here:
>>>
>>> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-01
>>>
>>>
>>>
>>> Please review the document and provide feedback.
>>>
>>>
>>>
>>> The WGLC will end September 25th, 2019.
>>>
>>>
>>>
>>> Ciao
>>>
>>> Hannes & Rifaat
>>>
>>> IMPORTANT NOTICE: The contents of this email and any attachments are
>>> confidential and may also be privileged. If you are not the intended
>>> recipient, please notify the sender immediately and do not disclose the
>>> contents to any other person, use it for any purpose, or store or copy =
the
>>> information in any medium. Thank you.
>>>
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>>> IMPORTANT NOTICE: The contents of this email and any attachments are
>>> confidential and may also be privileged. If you are not the intended
>>> recipient, please notify the sender immediately and do not disclose the
>>> contents to any other person, use it for any purpose, or store or copy =
the
>>> information in any medium. Thank you.
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>>
>> *CONFIDENTIALITY NOTICE: This email may contain confidential and
>> privileged material for the sole use of the intended recipient(s). Any
>> review, use, distribution or disclosure by others is strictly
>> prohibited...  If you have received this communication in error, please
>> notify the sender immediately by e-mail and delete the message and any f=
ile
>> attachments from your computer. Thank you.*
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000ca32f20596dd686b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>You are welcome. I&#39;m always happy to be able to h=
elp with a major contribution such as this one :) <br></div><div><br></div>=
<div>I did read through the draft for WGLC back in September though and tha=
t was the only issue that jumped out at me. <br></div><div><br></div><br><d=
iv class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov =
6, 2019 at 6:15 PM William Denniss &lt;wdenniss=3D<a href=3D"mailto:40googl=
e.com@dmarc.ietf.org">40google.com@dmarc.ietf.org</a>&gt; wrote:<br></div><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div><br>=
</div><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On W=
ed, Sep 25, 2019 at 3:54 PM Brian Campbell &lt;bcampbell=3D<a href=3D"mailt=
o:40pingidentity.com@dmarc.ietf.org" target=3D"_blank">40pingidentity.com@d=
marc.ietf.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex"><div dir=3D"ltr">Just noticed that  something is missing in <a=
 href=3D"https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02#=
section-5" target=3D"_blank">https://tools.ietf.org/html/draft-ietf-oauth-i=
ncremental-authz-02#section-5</a> where it has just, &quot;(Section 4.1.4 o=
f )&quot; <br></div></blockquote><div><br></div><div>Thank you for catching=
 this Brian. It was meant to read Section 4.1.4 of RFC 6749.</div><div><br>=
</div><div>I&#39;ve updated this in my local copy, will get posted in versi=
on 04.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1=
ex"><div dir=3D"ltr"></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" =
class=3D"gmail_attr">On Thu, Sep 12, 2019 at 8:40 AM Hannes Tschofenig &lt;=
<a href=3D"mailto:Hannes.Tschofenig@arm.com" target=3D"_blank">Hannes.Tscho=
fenig@arm.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex">





<div lang=3D"EN-GB">
<div>
<p class=3D"MsoNormal">Thanks for the correction; yes =E2=80=93 the most re=
cent version is -02 and I posted an old link.
<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<div style=3D"border-color:rgb(225,225,225) currentcolor currentcolor;borde=
r-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm"=
>
<p class=3D"MsoNormal"><b><span lang=3D"EN-US">From:</span></b><span lang=
=3D"EN-US"> Eve Maler &lt;<a href=3D"mailto:eve@xmlgrrl.com" target=3D"_bla=
nk">eve@xmlgrrl.com</a>&gt;
<br>
<b>Sent:</b> Donnerstag, 12. September 2019 16:16<br>
<b>To:</b> Hannes Tschofenig &lt;<a href=3D"mailto:Hannes.Tschofenig@arm.co=
m" target=3D"_blank">Hannes.Tschofenig@arm.com</a>&gt;<br>
<b>Subject:</b> Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-0=
1<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12pt">I think you mean=C2=A0<=
a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-02=
" target=3D"_blank">https://tools.ietf.org/html/draft-ietf-oauth-incrementa=
l-authz-02</a>?<u></u><u></u></p>
<div id=3D"gmail-m_-6825732910997201306gmail-m_1435676697572774595gmail-m_-=
4075814296889357178AppleMailSignature">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:13pt">Eve Maler (sent from =
my iPad) |=C2=A0cell <a href=3D"tel:(425)%20345-6756" value=3D"+14253456756=
" target=3D"_blank">+1 425 345 6756</a></span><u></u><u></u></p>
</div>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12pt"><br>
On Sep 11, 2019, at 4:22 AM, Hannes Tschofenig &lt;<a href=3D"mailto:Hannes=
...Tschofenig@arm.com" target=3D"_blank">Hannes.Tschofenig@arm.com</a>&gt; =
wrote:<u></u><u></u></p>
</div>
<blockquote style=3D"margin-top:5pt;margin-bottom:5pt">
<div>
<p class=3D"MsoNormal">Hi all,<u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">We are starting a WGLC on the &quot;OAuth 2.0 Increm=
ental Authorization&quot; draft. You can find the document here:<u></u><u><=
/u></p>
<p class=3D"MsoNormal"><a href=3D"https://tools.ietf.org/html/draft-ietf-oa=
uth-incremental-authz-01" target=3D"_blank">https://tools.ietf.org/html/dra=
ft-ietf-oauth-incremental-authz-01</a><u></u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">Please review the document and provide feedback.<u><=
/u><u></u></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">The WGLC will end September 25th, 2019.<u></u><u></u=
></p>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
<p class=3D"MsoNormal">Ciao<u></u><u></u></p>
<p class=3D"MsoNormal">Hannes &amp; Rifaat<u></u><u></u></p>
<p class=3D"MsoNormal">IMPORTANT NOTICE: The contents of this email and any=
 attachments are confidential and may also be privileged. If you are not th=
e intended recipient, please notify the sender immediately and do not discl=
ose the contents to any other person,
 use it for any purpose, or store or copy the information in any medium. Th=
ank you.
<u></u><u></u></p>
</div>
</blockquote>
<blockquote style=3D"margin-top:5pt;margin-bottom:5pt">
<div>
<p class=3D"MsoNormal">_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><u></u><u></u></p>
</div>
</blockquote>
</div>
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose,
 or store or copy the information in any medium. Thank you.
</div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor non=
e 0px;vertical-align:baseline;background:rgb(255,255,255) none repeat scrol=
l 0% 0%;font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,=
&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Ne=
ue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><span style=3D"margin:0px;pa=
dding:0px;border:0px none;outline:currentcolor none 0px;vertical-align:base=
line;background:transparent none repeat scroll 0% 0%;font-family:proxima-no=
va-zendesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,=
Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-s=
erif;font-weight:600"><font size=3D"2">CONFIDENTIALITY NOTICE: This email m=
ay contain confidential and privileged material for the sole use of the int=
ended recipient(s). Any review, use, distribution or disclosure by others i=
s strictly prohibited...=C2=A0 If you have received this communication in e=
rror, please notify the sender immediately by e-mail and delete the message=
 and any file attachments from your computer. Thank you.</font></span></i>_=
______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>
</blockquote></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000ca32f20596dd686b--


From nobody Fri Nov  8 15:48:13 2019
Return-Path: <jaredljennings@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2B33120124 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 15:48:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ld3yaOF0JQk1 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 15:48:09 -0800 (PST)
Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4180D12011E for <oauth@ietf.org>; Fri,  8 Nov 2019 15:48:09 -0800 (PST)
Received: by mail-ed1-x52d.google.com with SMTP id s10so6825108edi.5 for <oauth@ietf.org>; Fri, 08 Nov 2019 15:48:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=NcABLTHdtHz3yRMtnbY2sqlpfCbGzNW8pYaoLMyPsb0=; b=ZPPwaYi/fD9jNek54FBjJWDzgDZ6OPpl5x/2kAzQN8sk9h16u9fnM0zIAvnnj7cNCL 9cJqiSOvWuNgWpnPUtX6V2/iDbns1IEiEB9kzYfmxY5P6Cud0nD8rfKoXkmbHlQZ14po 16gYp+SbQ3sp8g8L/yHNTZGLj6sqXzvs3bmAy36jG4wjXLVjHy8w71aVpcmcbmfBEtAD ajSLv0R8CGzPBcVdk8Vq9ptdXvIxn5v9Szd9sOSEzajL2X7tiZ5nz9xVSs+CTPvC7FTD zWeFbYKdulKXLuN/M+sNr8/vhcqzFT9d3TYGCsQLpEXjOOYoynTUo42IZARtzbrfxn9i Ax4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=NcABLTHdtHz3yRMtnbY2sqlpfCbGzNW8pYaoLMyPsb0=; b=j4GqHzsNzfXjfOTAjHDupvjIhpQhZZc/krSo+Hgr1YpZBPOpwImM+3Q9m/6wAfFBZl 8XvOrZLBVA8/58GlFzUrixKS8X+kn+lDLbfTAxf2KPX+iAJxZqsTcZCTn/z804RQlZer B4ctgp9ze9DuM+GfYL6juXiVs/t7LOzG+hyvSDh0+ixX5Zil2Jlu9TZMfP580oAy0o5K zyHfBPBZxQEbNDvheJ3+u1OTXiMMaVLheLpf19cknlCFNL9Oi4z+3tPiBZI1LlxVtqOX aHq5FLkd4U0Vszenvm3Pk3/l1DR/FTP1OqJMO3uEDeR7Oy2PURzl/TxECU0aDyBlVV2h 5kkA==
X-Gm-Message-State: APjAAAVIK+QHfzjjNhtAwXKwxQqZuKEglPjHZsrmUsto2XlIq2b2/ksS cMD41pyKudf3HLIJY3Yfo+hWHCaUlG7cjTLGC35wDz5QmmI=
X-Google-Smtp-Source: APXvYqwtDvkeVc2s98ZciB591BGtarG5HwQ4pVRbiuveV0A03EJAmbv7An2O9fHf/8sx+pdWX/AdLJybs12ekE5immc=
X-Received: by 2002:a17:906:4d99:: with SMTP id s25mr11810384eju.187.1573256887281;  Fri, 08 Nov 2019 15:48:07 -0800 (PST)
MIME-Version: 1.0
From: Jared Jennings <jaredljennings@gmail.com>
Date: Fri, 8 Nov 2019 17:47:56 -0600
Message-ID: <CAMVRk+Lirr1onpMn7XaraX7kmK6H3SQXX92WJahbsx9tcOXHQA@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="000000000000e82f0c0596de69aa"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/__7rTLxv0Yv-HQQkVKfIUDWrZiA>
Subject: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 : JJennings
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 23:48:12 -0000

--000000000000e82f0c0596de69aa
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

A few comments and changes that I think should be made or would read more
clearly.

3.1 Paragraph #2
Should probably read either of the following

Clients SHOULD avoid forwarding the user's browser to a URI obtained
   from a query parameter since such a function could be utilized to
   exfiltrate authorization codes and access tokens.  If there is a
   strong need for this kind of *redirect*, clients are advised to
   implement appropriate countermeasures against open redirection, e.g.,
   as described by OWASP [owasp
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#ref-owasp>=
].

or

Clients SHOULD avoid forwarding the user's browser to a URI obtained
   from a query parameter since such a function could be utilized to
   exfiltrate authorization codes and access tokens.  If there is a
   strong need for *these* kind of redirects, clients are advised to
   implement appropriate countermeasures against open redirection, e.g.,
   as described by OWASP [owasp
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#ref-owasp>=
].


3.1.1
Last Paragraph
Either should start with AS, like the others or server should be uppercase?

 Authorization servers SHOULD furthermore consider the recommendations
   given in [RFC6819], Section 4.4.1.1
<https://tools.ietf.org/html/rfc6819#section-4.4.1.1>, on
authorization code replay
   prevention.


4.4.1, 4.5.2
The beginnings of each bullet list should be capitalized? (The)

4.8.1.3
Should maybe read

An audience restriction essentially restricts access tokens to a
particular resource server. The authorization server

   associates the access token with the particular resource server and
thus a resource server SHOULD verify the
   intended audience. If the access token fails the intended audience
validation, the resource server must refuse

   to serve the respective request.


....

The client SHOULD to tell the authorization server the intended
resource server.  The proposed
   mechanism [I-D.ietf-oauth-resource-indicators
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#ref-I-D.ie=
tf-oauth-resource-indicators>]
could be used or by encoding the
   information in the scope value.


...

   Audience restriction may seem easier to use since it does not require
any crypto on the client-side. Still, since every access token is bound to
a specific resource server, the client also needs to obtain a single
RS-specific access token when accessing several resource servers.
 [I-D.ietf-oauth-token-binding] has the same property since different token
binding ids must be associated with the access token.  Using
[I-D.ietf-oauth-mtls], on the other hand, allows a client to use the access
token at multiple resource servers.

4.8.2 I think would read better with the following
An attacker may compromise a resource server to gain access and to other
resources of the respective deployment. Such a compromise may range from
partial access to the system, e.g., its log files, to full control of the
respective server.

If the attacker were able to gain full control, including shell access, it
would be able to circumvent all controls and access resources. It would
also obtain other access tokens held on the compromised system, which would
potentially be valid to access other resource servers.

Preventing server breaches by hardening and monitoring server systems is
considered a standard operational procedure and, therefore, out of the
scope of this document. This section focuses on the impact of such
 OAuth-related breaches and the replaying of captured access tokens.

4.9.1
Attackers could try to utilize a user=E2=80=99s trust in the authorization =
server
(and its URL in particular) for performing phishing attacks.

 [RFC6749], Section 4.1.2.1, already prevents open redirects by stating the
AS MUST NOT automatically redirect the user agent in case of an invalid
combination of client_id and redirect_uri.

However, as described in [I-D.ietf-oauth-closing-redirectors], an attacker
could also utilize a correctly registered redirect URI to perform phishing
attacks. It could, for example, register a client via dynamic client
registration [RFC7591] and intentionally send an erroneous authorization
request, e.g., by using an invalid scope value, thus redirecting
instructing the AS to redirect the client to the desired phishing site.

The AS MUST take precautions to prevent this threat. Based on its risk
assessment, the AS needs to decide whether it can trust the redirect URI
and SHOULD only automatically redirect the user agent if it trusts the
redirect URI. If the URI is not trusted, it MAY inform the user and rely on
the user to make the correct decision.


4.9.2
Clients MUST NOT expose URLs, which could be utilized as an open
redirector. Attackers may use an open redirector to produce URLs that
appear to point to the client, which might trick users into trusting the
URL and following it in their browser. Another abuse case is to produce
URLs pointing to the client and utilize them to impersonate a client with
an authorization server.

The client should only expose a URL, if the target URL(s) is whitelisted or
if the origin of the request can be confirmed.


4.11 (last paragraph)
If an attacker was able to get access to the internal network between proxy
and application server, the attacker could also try to circumvent security
controls in place. It is, therefore, essential to ensure the authenticity
of the communicating entities. Furthermore, the communication link between
reverse proxy and application server must be protected against
eavesdropping, injection, and replay of messages.


P.S. I am out for the next 8 days and will not be able to respond to any
comments or questions until after the 15th.

-Jared
Skype:jaredljennings
Signal:+1 816.730.9540
WhatsApp: +1 816.678.4152

--000000000000e82f0c0596de69aa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>A few comments and changes that I think should be mad=
e or would read more clearly.</div><div><br></div><div>3.1 Paragraph #2</di=
v><div>Should probably read either of the following</div><div><pre class=3D=
"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0=
px;break-before:page;color:rgb(0,0,0)">Clients SHOULD avoid forwarding the =
user&#39;s browser to a URI obtained
   from a query parameter since such a function could be utilized to
   exfiltrate authorization codes and access tokens.  If there is a
   strong need for this kind of <b>redirect</b>, clients are advised to
   implement appropriate countermeasures against open redirection, e.g.,
   as described by OWASP [<a href=3D"https://tools.ietf.org/html/draft-ietf=
-oauth-security-topics-13#ref-owasp" title=3D"&quot;Open Web Application Se=
curity Project Home Page&quot;">owasp</a>].</pre></div>or<div><pre class=3D=
"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0=
px;break-before:page;color:rgb(0,0,0)">Clients SHOULD avoid forwarding the =
user&#39;s browser to a URI obtained
   from a query parameter since such a function could be utilized to
   exfiltrate authorization codes and access tokens.  If there is a
   strong need for <b>these</b> kind of redirects, clients are advised to
   implement appropriate countermeasures against open redirection, e.g.,
   as described by OWASP [<a href=3D"https://tools.ietf.org/html/draft-ietf=
-oauth-security-topics-13#ref-owasp" title=3D"&quot;Open Web Application Se=
curity Project Home Page&quot;">owasp</a>].</pre></div><div><br></div><div>=
3.1.1</div><div>Last Paragraph</div><div>Either should start with AS, like =
the others or server should be uppercase?</div><div><br></div><div><pre cla=
ss=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bot=
tom:0px;break-before:page;color:rgb(0,0,0)"> Authorization servers SHOULD f=
urthermore consider the recommendations
   given in <a href=3D"https://tools.ietf.org/html/rfc6819#section-4.4.1.1"=
>[RFC6819], Section=C2=A04.4.1.1</a>, on authorization code replay
   prevention.</pre></div><div><br></div><div>4.4.1, 4.5.2</div><div>The be=
ginnings of each bullet list should be capitalized? (The)</div><div><br></d=
iv><div>4.8.1.3</div><div>Should maybe read</div><div><pre class=3D"gmail-n=
ewpage" style=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0px;break=
-before:page;color:rgb(0,0,0)">An audience restriction essentially restrict=
s access tokens to a particular resource server. The authorization server</=
pre><pre class=3D"gmail-newpage" style=3D"font-size:13.3333px;margin-top:0p=
x;margin-bottom:0px;break-before:page;color:rgb(0,0,0)">   associates the a=
ccess token with the particular resource server and thus a resource server =
SHOULD verify the
   intended audience. If the access token fails the intended audience valid=
ation, the resource server must refuse</pre><pre class=3D"gmail-newpage" st=
yle=3D"font-size:13.3333px;margin-top:0px;margin-bottom:0px;break-before:pa=
ge;color:rgb(0,0,0)">   to serve the respective request. </pre></div><div><=
br></div><div>....</div><div><pre class=3D"gmail-newpage" style=3D"font-siz=
e:13.3333px;margin-top:0px;margin-bottom:0px;break-before:page;color:rgb(0,=
0,0)">The client SHOULD to tell the authorization server the intended resou=
rce server.  The proposed
   mechanism [<a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-secur=
ity-topics-13#ref-I-D.ietf-oauth-resource-indicators" title=3D"&quot;Resour=
ce Indicators for OAuth 2.0&quot;">I-D.ietf-oauth-resource-indicators</a>] =
could be used or by encoding the
   information in the scope value.</pre></div><div><br></div><div>...</div>=
<div><br><font face=3D"monospace">=C2=A0 =C2=A0Audience restriction may see=
m easier to use since it does not require any crypto on the client-side. St=
ill, since every access token is bound to a specific resource server, the c=
lient also needs to obtain a single RS-specific access token when accessing=
 several resource servers. =C2=A0[I-D.ietf-oauth-token-binding] has the sam=
e property since different token binding ids must be associated with the ac=
cess token.=C2=A0 Using [I-D.ietf-oauth-mtls], on the other hand, allows a =
client to use the access token at multiple resource servers.</font><br></di=
v><div><br></div><div>4.8.2 I think would read better with the following</d=
iv><div><font face=3D"monospace">An attacker may compromise a resource serv=
er to gain access and to other resources of the respective deployment. Such=
 a compromise may range from partial access to the system, e.g., its log fi=
les, to full control of the respective server.<br><br>If the attacker were =
able to gain full control, including shell access, it would be able to circ=
umvent all controls and access resources. It would also obtain other access=
 tokens held on the compromised system, which would potentially be valid to=
 access other resource servers.<br><br>Preventing server breaches by harden=
ing and monitoring server systems is considered a standard operational proc=
edure and, therefore, out of the scope of this document. This section focus=
es on the impact of such =C2=A0OAuth-related breaches and the replaying of =
captured access tokens.</font><br></div><div><br></div><div>4.9.1</div><div=
><font face=3D"monospace">Attackers could try to utilize a user=E2=80=99s t=
rust in the authorization server (and its URL in particular) for performing=
 phishing attacks.<br><br>=C2=A0[RFC6749], Section 4.1.2.1, already prevent=
s open redirects by stating the AS MUST NOT automatically redirect the user=
 agent in case of an invalid combination of client_id and redirect_uri. <br=
><br>However, as described in [I-D.ietf-oauth-closing-redirectors], an atta=
cker could also utilize a correctly registered redirect URI to perform phis=
hing attacks. It could, for example, register a client via dynamic client r=
egistration [RFC7591] and intentionally send an erroneous authorization req=
uest, e.g., by using an invalid scope value, thus redirecting instructing t=
he AS to redirect the client to the desired phishing site.<br><br>The AS MU=
ST take precautions to prevent this threat. Based on its risk assessment, t=
he AS needs to decide whether it can trust the redirect URI and SHOULD only=
 automatically redirect the user agent if it trusts the redirect URI. If th=
e URI is not trusted, it MAY inform the user and rely on the user to make t=
he correct decision.</font><br></div><div><br></div><div><br></div><div>4.9=
.2</div><div><font face=3D"monospace">Clients MUST NOT expose URLs, which c=
ould be utilized as an open redirector. Attackers may use an open redirecto=
r to produce URLs that appear to point to the client, which might trick use=
rs into trusting the URL and following it in their browser. Another abuse c=
ase is to produce URLs pointing to the client and utilize them to impersona=
te a client with an authorization server. <br><br>The client should only ex=
pose a URL, if the target URL(s) is whitelisted or if the origin of the req=
uest can be confirmed.</font><br></div><div><br></div><div><br></div><div>4=
.11 (last paragraph)</div><div><font face=3D"monospace">If an attacker was =
able to get access to the internal network between proxy and application se=
rver, the attacker could also try to circumvent security controls in place.=
 It is, therefore, essential to ensure the authenticity of the communicatin=
g entities. Furthermore, the communication link between reverse proxy and a=
pplication server must be protected against eavesdropping, injection, and r=
eplay of messages.</font><br></div><div><br></div><div><br></div><div>P.S. =
I am out for the next 8 days and will not be able to respond to any comment=
s or questions until after the 15th.</div><div><br clear=3D"all"><div><div =
dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><d=
iv dir=3D"ltr"><div>-Jared</div><div><div>Skype:jaredljennings</div><div>Si=
gnal:+1 816.730.9540</div><div>WhatsApp:=C2=A0+1 816.678.4152</div></div></=
div></div></div></div></div>

--000000000000e82f0c0596de69aa--


From nobody Fri Nov  8 16:19:21 2019
Return-Path: <prvs=2093a0bae=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AA2012022C for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 16:19:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level: 
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IfUVaQV4_XD6 for <oauth@ietfa.amsl.com>; Fri,  8 Nov 2019 16:19:16 -0800 (PST)
Received: from smtp-fw-9102.amazon.com (smtp-fw-9102.amazon.com [207.171.184.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01970120047 for <oauth@ietf.org>; Fri,  8 Nov 2019 16:19:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1573258756; x=1604794756; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Duswh7DSgad4fEgDQgvAEf2a6Dlbo0z3WJbynqgNj9U=; b=NAl96/Bkk4aJ/SqEhg0o4RVclVX0SQ6YQpWjCIWLq6VHr54b7E9xYIwF 6FcLU9GxnyVfaL1CQ2jgteXo8+AbDQ+NSIiEenziHX2SKv9+ISZ7BG4vs w1ptwCNzj9si+JC+cHJtK1l3wA8JD7qAqCnkWS04WYXY42UgLrl5Euv69 Q=;
IronPort-SDR: q+17cYoO90lusga61WP1hp5ZHmuk92Osr2E4ki62iaL9IbX61el94mbGzQ1t1TGk4OKKhhynx7 +AC2O0TevFtQ==
X-IronPort-AV: E=Sophos;i="5.68,283,1569283200"; d="scan'208,217";a="5418804"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-2a-8549039f.us-west-2.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9102.sea19.amazon.com with ESMTP; 09 Nov 2019 00:19:13 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan2.pdx.amazon.com [10.170.41.162]) by email-inbound-relay-2a-8549039f.us-west-2.amazon.com (Postfix) with ESMTPS id 290E1A1EF2; Sat,  9 Nov 2019 00:19:13 +0000 (UTC)
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Sat, 9 Nov 2019 00:19:12 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Sat, 9 Nov 2019 00:19:12 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Sat, 9 Nov 2019 00:19:12 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, "William Denniss" <wdenniss=40google.com@dmarc.ietf.org>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
Thread-Index: AdVogknoAnP654JhQ3S9QtbLhNiL0gA8kmmAAADNjSACnxMgAAhFKkYAAF8HVwD//5bJAA==
Date: Sat, 9 Nov 2019 00:19:12 +0000
Message-ID: <E996A4E7-5F72-485D-AB67-652BDA2B9C94@amazon.com>
References: <VI1PR08MB5360BBDDDF8362B40C97AF18FAB10@VI1PR08MB5360.eurprd08.prod.outlook.com> <736340BF-B33D-4407-81AF-532C947F1243@xmlgrrl.com> <AM0PR08MB5345B19B0AF2304AE8E110CAFAB00@AM0PR08MB5345.eurprd08.prod.outlook.com> <CA+k3eCR_ga1c1Cts0RY6Vy8AEgwjD2TaqOeWStkwQ6udqnkn2Q@mail.gmail.com> <CAAP42hCf2fQO29q3vCH8U7sJWpQ94AiE4BCvMWqYxqxe-erYyw@mail.gmail.com> <CA+k3eCRZ8ySJYFDTb=NbMZ=oVuFrMr5h82uazPsOmjD=XDY6Xg@mail.gmail.com>
In-Reply-To: <CA+k3eCRZ8ySJYFDTb=NbMZ=oVuFrMr5h82uazPsOmjD=XDY6Xg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.161.174]
Content-Type: multipart/alternative; boundary="_000_E996A4E75F72485DAB67652BDA2B9C94amazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/j5sSy5FiuJ1aWuqYexDXpUQzFAM>
Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Nov 2019 00:19:19 -0000

--_000_E996A4E75F72485DAB67652BDA2B9C94amazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_E996A4E75F72485DAB67652BDA2B9C94amazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <6A3837705D195C4988FF166C9D1966E5@amazon.com>
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4
bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo
dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo
dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp
dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l
dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg
bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj
ZQ0KCXtmb250LWZhbWlseTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgMCA1IDAgMCAwIDAgMCAwIDA7
fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIg
NiA5IDQgMiA1IDggMyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0
aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt
ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQt
ZmFjZQ0KCXtmb250LWZhbWlseToiXEBNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkgNCAy
IDUgOCAzIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2Ut
MToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdv
ZSBVSSI7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5p
dGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFy
Z2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglm
b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJs
aW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3Jh
dGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJ
e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9u
OnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s
aW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0
b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OkNvbnNvbGFzO30N
CnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJh
Z3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdp
bi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCglt
YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi
Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5t
c29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1h
bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv
Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD
YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBl
OnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv
bG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUt
bmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K
CW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29s
YXM7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u
dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47
DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7
cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7
bXNvLWxpc3QtaWQ6MTg5OTM2NDc4MzsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlz
dC10ZW1wbGF0ZS1pZHM6NzA1MzAzMDYwIDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4
NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0
IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy
LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0K
CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0
b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6
LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21h
bi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv
c2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7
bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0
Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51
bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv
LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz
dCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNv
LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsN
Cgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWIt
c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu
dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs
cGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt
cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJ
e21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv
cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6
LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206
MGluO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1
ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+QSBmZXcgaXNzdWVzIEkgbm90aWNlZDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPG9sIHN0eWxlPSJtYXJnaW4t
dG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo
IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5UaGVyZSBp
cyBubyBub3JtYXRpdmUgdGV4dCBkZXNjcmliaW5nIEFTIGJlaGF2aW9yIHdoZW4gaW5jbHVkZV9n
cmFudGVkX3Njb3BlcyBpcyDigJxmYWxzZeKAnSBvciBvbWl0dGVkLiBJIHN1Z2dlc3QgYWRkaW5n
IHRoZSBmb2xsb3dpbmcgdG8gdGhlIHBhcmFtZXRlcuKAmXMgZGVmaW5pdGlvbiBpbiBzZWN0aW9u
IDQ6PGJyPg0KPGJyPg0KPGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPldoZW4g
4oCcZmFsc2XigJ0gb3Igb21pdHRlZCwgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIFNIT1VMRCBO
T1QgaW5jbHVkZSBzY29wZXMgdGhhdCB3ZXJlIG5vdCBleHBsaWNpdGx5IHNwZWNpZmllZCBpbiB0
aGUgYXV0aG9yaXphdGlvbiByZXF1ZXN0Ljxicj4NCjxicj4NCjwvc3Bhbj48L2I+PG86cD48L286
cD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSJhIj4NCjxsaSBj
bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDps
MCBsZXZlbDIgbGZvMSI+SGF2aW5nIHdyaXR0ZW4gdGhlIGFib3ZlLCBJIHJlYWxpemUgaXQgY29u
ZmxpY3RzIHdpdGggU2VjdGlvbiAzLjMgb2YgNjc0OSwgd2hpY2ggc3RhdGVzIOKAnFt0XWhlIGF1
dGhvcml6YXRpb24gc2VydmVyIE1BWSBmdWxseSBvciBwYXJ0aWFsbHkgaWdub3JlIHRoZSBzY29w
ZSByZXF1ZXN0ZWQgYnkgdGhlIGNsaWVudOKApi7igJ0NCiBJ4oCZbSBub3Qgc3VyZSBvZmZoYW5k
IGhvdyB0byByZXNvbHZlIHRoYXQuPG86cD48L286cD48L2xpPjwvb2w+DQo8L2xpPjwvb2w+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxvbCBzdHlsZT0ibWFy
Z2luLXRvcDowaW4iIHN0YXJ0PSIyIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFn
cmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+UmVn
YXJkaW5nIHNlY3Rpb24gNi4xLCBJIGRvbuKAmXQgdGhpbmsgd2UgY2FuIGFzc3VtZSB0aGF0IGFu
IGFjY2Vzc19kZW5pZWQganVzdCBpbmRpY2F0ZXMgYSByZWplY3Rpb24gb2YgdGhlIGluY3JlbWVu
dGFsIHJlcXVlc3QuIERlcGVuZGluZyBvbiB0aGUgY29uc2VudCBpbnRlcmZhY2UgcHJlc2VudGVk
IHRvIHRoZQ0KIGVuZCB1c2VyLCBpdCBtYXkgbWFrZSBtb3JlIHNlbnNlIGZvciB0aGUgQVMgdG8g
aW50ZXJwcmV0IHRoZSBkZW5pYWwgYXMgYSByZXRyYWN0aW9uIG9mIHRoZSBleGlzdGluZyBncmFu
dCBhcyB3ZWxsLiBFbmQgdXNlcnMgbWF5IGV4cGVjdCB0aGF0IHRvIGJlIHRoZSBjYXNlLCBwYXJ0
aWN1bGFybHkgaWYgdGhlIGV4aXN0aW5nIHNjb3BlcyBhcmUgbGlzdGVkIGluIHRoZSBjb25zZW50
IGRpc3BsYXkgYWxvbmdzaWRlIHRoZSBhZGRpdGlvbmFsIG9uZXMNCiBiZWluZyByZXF1ZXN0ZWQu
IEnigJltIG5vdCBzdXJlIHdlIG5lZWQgbm9ybWF0aXZlIGNoYW5nZXMsIGJ1dCBzb21lIG5vbi1u
b3JtYXRpdmUgZ3VpZGFuY2UgaGlnaGxpZ2h0aW5nIHRoaXMgd291bGQgYmUgaGVscGZ1bC48YnI+
DQo8YnI+DQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls
ZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5bTklUXSBFeHRyYSDi
gJxzaG91bGTigJ0gaW4gdGhlIDQ8c3VwPnRoPC9zdXA+IHNlbnRlbmNlIG9mIDYuMS48YnI+DQo8
YnI+DQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i
bWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5JIGRpc2FncmVlIHdpdGgg
dGhlIGZpcnN0IHNlbnRlbmNlIG9mIHNlY3Rpb24gOC4yLiBJZiB0aGUgcHJvY2VzcyBvZiByZXF1
ZXN0aW5nIGNvbnNlbnQgaXMgcGFydGljdWxhcmx5IGV4cGVuc2l2ZSAoZS5nLiwgaWYgdGhlIGNs
aWVudCBpcyBhbiBJb1QgZGV2aWNlIG9yIG90aGVyd2lzZSBoYXMgbGltaXRlZCBpbnB1dC9vdXRw
dXQNCiBhbmQgaXMgdXNpbmcgdGhlIGRldmljZSBhdXRob3JpemF0aW9uIGdyYW50KSwgdGhlbiBp
dCBtYXkgYmUgYXBwcm9wcmlhdGUgZm9yIHRoZSBjbGllbnQgdG8gZGV0ZXJtaW5lIHdoaWNoIGZl
YXR1cmVzIHRoZSBlbmQgdXNlciB3YW50cyB0byBlbmFibGUgYW5kIG1ha2UgYSBzaW5nbGUgYXV0
aG9yaXphdGlvbiByZXF1ZXN0IGZvciBhbGwgb2YgdGhlIG5lY2Vzc2FyeSBzY29wZXMuDQo8YnI+
DQo8YnI+DQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls
ZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5UaGVyZSBpcyBubyBn
dWFyYW50ZWUgdGhhdCB0aGUgcmVzb3VyY2Ugb3duZXIgaW4gdGhlIGluY3JlbWVudGFsIGF1dGhv
cml6YXRpb24gZ3JhbnQgaXMgdGhlIHNhbWUgYXMgdGhlIHJlc291cmNlIG93bmVyIGluIHRoZSBv
cmlnaW5hbCBhdXRob3JpemF0aW9uIGdyYW50LiBGb3IgZXhhbXBsZSwgdGhlIGVuZCB1c2VyDQog
bWF5IGxvZyBpbnRvIEFjY291bnQgQSBvcmlnaW5hbGx5LCBidXQgQWNjb3VudCBCIGZvciB0aGUg
aW5jcmVtZW50YWwgYXV0aG9yaXphdGlvbiwgZWl0aGVyIGludGVudGlvbmFsbHkgb3IgYnkgYWNj
aWRlbnQuIEFzIGl0IHN0YW5kcywgdGhlIGNsaWVudCBoYXMgbm8gd2F5IG9mIGtub3dpbmcgdGhh
dCB0aGlzIGhhcyBoYXBwZW5lZC4gSSBkb27igJl0IHRoaW5rIHRoZXJlIGlzIGEgbm9ybWF0aXZl
IGZpeCBmb3IgdGhpcywgYnV0IGl0IHNob3VsZCBiZQ0KIGNhbGxlZCBvdXQgYXMgYSBuZXcgZmFp
bHVyZSBtb2RlIHRoYXQgZ2V0cyBpbnRyb2R1Y2VkIHdoZW4gc3dpdGNoaW5nIGZyb20gYnVsayB0
byBpbmNyZW1lbnRhbCBhdXRob3JpemF0aW9uLjxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPuKAkyZuYnNwOzxvOnA+PC9v
OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTIuMHB0Ij5Bbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuPG86cD48L286cD48L3NwYW4+PC9w
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkFX
UyBJZGVudGl0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v
cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu
YnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg
I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9t
OiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5P
QXV0aCAmbHQ7b2F1dGgtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIEJyaWFuIENh
bXBiZWxsICZsdDtiY2FtcGJlbGw9NDBwaW5naWRlbnRpdHkuY29tQGRtYXJjLmlldGYub3JnJmd0
Ozxicj4NCjxiPkRhdGU6IDwvYj5GcmlkYXksIE5vdmVtYmVyIDgsIDIwMTkgYXQgMjozNiBQTTxi
cj4NCjxiPlRvOiA8L2I+V2lsbGlhbSBEZW5uaXNzICZsdDt3ZGVubmlzcz00MGdvb2dsZS5jb21A
ZG1hcmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5vYXV0aCAmbHQ7b2F1dGhAaWV0Zi5v
cmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbT0FVVEgtV0ddIFdHTEMgb24gZHJhZnQt
aWV0Zi1vYXV0aC1pbmNyZW1lbnRhbC1hdXRoei0wMTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv
ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPllvdSBhcmUgd2VsY29t
ZS4gSSdtIGFsd2F5cyBoYXBweSB0byBiZSBhYmxlIHRvIGhlbHAgd2l0aCBhIG1ham9yIGNvbnRy
aWJ1dGlvbiBzdWNoIGFzIHRoaXMgb25lIDopDQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkaWQgcmVhZCB0aHJvdWdoIHRoZSBkcmFmdCBm
b3IgV0dMQyBiYWNrIGluIFNlcHRlbWJlciB0aG91Z2ggYW5kIHRoYXQgd2FzIHRoZSBvbmx5IGlz
c3VlIHRoYXQganVtcGVkIG91dCBhdCBtZS4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIE5vdiA2LCAyMDE5IGF0IDY6MTUgUE0gV2lsbGlh
bSBEZW5uaXNzICZsdDt3ZGVubmlzcz08YSBocmVmPSJtYWlsdG86NDBnb29nbGUuY29tQGRtYXJj
LmlldGYub3JnIj40MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpw
PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl
ci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJn
aW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2VkLCBTZXAgMjUsIDIwMTkgYXQgMzo1NCBQTSBCcmlh
biBDYW1wYmVsbCAmbHQ7YmNhbXBiZWxsPTxhIGhyZWY9Im1haWx0bzo0MHBpbmdpZGVudGl0eS5j
b21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MHBpbmdpZGVudGl0eS5jb21AZG1h
cmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr
cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7
cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6
MGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5KdXN0IG5vdGljZWQgdGhhdCBzb21l
dGhpbmcgaXMgbWlzc2luZyBpbiA8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv
ZHJhZnQtaWV0Zi1vYXV0aC1pbmNyZW1lbnRhbC1hdXRoei0wMiNzZWN0aW9uLTUiIHRhcmdldD0i
X2JsYW5rIj4NCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9hdXRoLWlu
Y3JlbWVudGFsLWF1dGh6LTAyI3NlY3Rpb24tNTwvYT4gd2hlcmUgaXQgaGFzIGp1c3QsICZxdW90
OyhTZWN0aW9uIDQuMS40IG9mICkmcXVvdDsNCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Js
b2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFuayB5b3UgZm9yIGNh
dGNoaW5nIHRoaXMgQnJpYW4uIEl0IHdhcyBtZWFudCB0byByZWFkIFNlY3Rpb24gNC4xLjQgb2Yg
UkZDIDY3NDkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y
bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPkkndmUgdXBkYXRlZCB0aGlzIGluIG15IGxvY2FsIGNvcHksIHdpbGwgZ2V0IHBvc3Rl
ZCBpbiB2ZXJzaW9uIDA0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0
eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6
MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gVGh1LCBTZXAgMTIsIDIwMTkgYXQgODo0MCBBTSBIYW5u
ZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5j
b20iIHRhcmdldD0iX2JsYW5rIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsgd3Jv
dGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u
ZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4w
cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy
Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPlRoYW5rcyBmb3IgdGhlIGNv
cnJlY3Rpb247IHllcyDigJMgdGhlIG1vc3QgcmVjZW50IHZlcnNpb24gaXMgLTAyIGFuZCBJIHBv
c3RlZCBhbiBvbGQgbGluay4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t
bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPiZuYnNwOzxvOnA+PC9v
OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w
OnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbjtib3JkZXIt
Y29sb3I6Y3VycmVudGNvbG9yIGN1cnJlbnRjb2xvciI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz
dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i
PjxiPkZyb206PC9iPiBFdmUgTWFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpldmVAeG1sZ3JybC5j
b20iIHRhcmdldD0iX2JsYW5rIj5ldmVAeG1sZ3JybC5jb208L2E+Jmd0Ow0KPGJyPg0KPGI+U2Vu
dDo8L2I+IERvbm5lcnN0YWcsIDEyLiBTZXB0ZW1iZXIgMjAxOSAxNjoxNjxicj4NCjxiPlRvOjwv
Yj4gSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5p
Z0Bhcm0uY29tIiB0YXJnZXQ9Il9ibGFuayI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4m
Z3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbT0FVVEgtV0ddIFdHTEMgb24gZHJhZnQtaWV0
Zi1vYXV0aC1pbmNyZW1lbnRhbC1hdXRoei0wMTxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPjwvbzpw
Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9
Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh
biBsYW5nPSJFTi1HQiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIu
MHB0Ij48c3BhbiBsYW5nPSJFTi1HQiI+SSB0aGluayB5b3UgbWVhbiZuYnNwOzxhIGhyZWY9Imh0
dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9hdXRoLWluY3JlbWVudGFsLWF1
dGh6LTAyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0
LWlldGYtb2F1dGgtaW5jcmVtZW50YWwtYXV0aHotMDI8L2E+PzxvOnA+PC9vOnA+PC9zcGFuPjwv
cD4NCjxkaXYgaWQ9ImdtYWlsLW1fLTY4MjU3MzI5MTA5OTcyMDEzMDZnbWFpbC1tXzE0MzU2NzY2
OTc1NzI3NzQ1OTVnbWFpbC1tXy00MDc1ODE0Mjk2ODg5MzU3MTc4QXBwbGVNYWlsU2lnbmF0dXJl
Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0
OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls
ZT0iZm9udC1zaXplOjEzLjBwdCI+RXZlIE1hbGVyIChzZW50IGZyb20gbXkgaVBhZCkgfCZuYnNw
O2NlbGwNCjxhIGhyZWY9InRlbDooNDI1KSUyMDM0NS02NzU2IiB0YXJnZXQ9Il9ibGFuayI+JiM0
MzsxIDQyNSAzNDUgNjc1NjwvYT48L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+PC9vOnA+
PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg
c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3Bh
biBsYW5nPSJFTi1HQiI+PGJyPg0KT24gU2VwIDExLCAyMDE5LCBhdCA0OjIyIEFNLCBIYW5uZXMg
VHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy4uLi5Uc2Nob2ZlbmlnQGFybS5j
b20iIHRhcmdldD0iX2JsYW5rIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsgd3Jv
dGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy
Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLUdCIj5IaSBhbGwsPG86cD48L286cD48L3NwYW4+PC9w
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z
by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7PG86cD48
L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t
dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1H
QiI+V2UgYXJlIHN0YXJ0aW5nIGEgV0dMQyBvbiB0aGUgJnF1b3Q7T0F1dGggMi4wIEluY3JlbWVu
dGFsIEF1dGhvcml6YXRpb24mcXVvdDsgZHJhZnQuIFlvdSBjYW4gZmluZCB0aGUgZG9jdW1lbnQg
aGVyZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i
bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu
IGxhbmc9IkVOLUdCIj48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt
aWV0Zi1vYXV0aC1pbmNyZW1lbnRhbC1hdXRoei0wMSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v
dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9hdXRoLWluY3JlbWVudGFsLWF1dGh6LTAx
PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt
c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g
bGFuZz0iRU4tR0IiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPlBsZWFzZSByZXZpZXcgdGhlIGRvY3VtZW50IGFu
ZCBwcm92aWRlIGZlZWRiYWNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t
bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPlRoZSBXR0xDIHdpbGwg
ZW5kIFNlcHRlbWJlciAyNXRoLCAyMDE5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv
dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu
PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0
bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0IiPkNpYW88bzpw
PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp
bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO
LUdCIj5IYW5uZXMgJmFtcDsgUmlmYWF0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1HQiI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNv
bnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFs
IGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQg
cmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5DQogdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8g
bm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9y
IGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVk
aXVtLiBUaGFuayB5b3UuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYmxvY2tx
dW90ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206
NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv
cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tR0Ii
Pl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KT0F1
dGggbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOk9BdXRoQGlldGYub3JnIiB0YXJn
ZXQ9Il9ibGFuayI+T0F1dGhAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cu
aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vYXV0aCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v
d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb2F1dGg8L2E+PG86cD48L286cD48L3NwYW4+
PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxzcGFuIGxhbmc9IkVOLUdCIj5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp
cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv
IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs
ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo
ZSBjb250ZW50cw0KIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us
IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv
dS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpPQXV0
aCBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86T0F1dGhAaWV0Zi5vcmciIHRhcmdl
dD0iX2JsYW5rIj5PQXV0aEBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5p
ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29hdXRoIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93
d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vYXV0aDwvYT48bzpwPjwvbzpwPjwvcD4NCjwv
YmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+PGk+PHNw
YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVv
dDs7Y29sb3I6IzU1NTU1NTtib3JkZXI6bm9uZSB3aW5kb3d0ZXh0IDEuMHB0O3BhZGRpbmc6MGlu
Ij5DT05GSURFTlRJQUxJVFkgTk9USUNFOiBUaGlzIGVtYWlsIG1heSBjb250YWluIGNvbmZpZGVu
dGlhbCBhbmQgcHJpdmlsZWdlZCBtYXRlcmlhbCBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRl
bmRlZCByZWNpcGllbnQocykuIEFueSByZXZpZXcsDQogdXNlLCBkaXN0cmlidXRpb24gb3IgZGlz
Y2xvc3VyZSBieSBvdGhlcnMgaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4uLiZuYnNwOyBJZiB5b3Ug
aGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkg
dGhlIHNlbmRlciBpbW1lZGlhdGVseSBieSBlLW1haWwgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZSBh
bmQgYW55IGZpbGUgYXR0YWNobWVudHMgZnJvbSB5b3VyIGNvbXB1dGVyLiBUaGFuayB5b3UuPC9z
cGFuPjwvaT48L2I+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X188YnI+DQpPQXV0aCBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86T0F1dGhAaWV0
Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5PQXV0aEBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo
dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29hdXRoIiB0YXJnZXQ9Il9ibGFu
ayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vYXV0aDwvYT48bzpwPjwv
bzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8
L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+PGk+PHNwYW4gc3R5
bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDs7Y29s
b3I6IzU1NTU1NTtib3JkZXI6bm9uZSB3aW5kb3d0ZXh0IDEuMHB0O3BhZGRpbmc6MGluIj5DT05G
SURFTlRJQUxJVFkgTk9USUNFOiBUaGlzIGVtYWlsIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBh
bmQgcHJpdmlsZWdlZCBtYXRlcmlhbCBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCBy
ZWNpcGllbnQocykuIEFueSByZXZpZXcsDQogdXNlLCBkaXN0cmlidXRpb24gb3IgZGlzY2xvc3Vy
ZSBieSBvdGhlcnMgaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4uJm5ic3A7IElmIHlvdSBoYXZlIHJl
Y2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2Vu
ZGVyIGltbWVkaWF0ZWx5IGJ5IGUtbWFpbCBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlIGFuZCBhbnkg
ZmlsZSBhdHRhY2htZW50cyBmcm9tIHlvdXIgY29tcHV0ZXIuIFRoYW5rIHlvdS48L3NwYW4+PC9p
PjwvYj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo=

--_000_E996A4E75F72485DAB67652BDA2B9C94amazoncom_--


From nobody Sat Nov  9 09:44:18 2019
Return-Path: <daniel@utilityapi.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDB7A12001E for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 09:44:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=utilityapi.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a140u8coiyPt for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 09:44:12 -0800 (PST)
Received: from mail-qk1-x730.google.com (mail-qk1-x730.google.com [IPv6:2607:f8b0:4864:20::730]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF0C21200DF for <oauth@ietf.org>; Sat,  9 Nov 2019 09:44:11 -0800 (PST)
Received: by mail-qk1-x730.google.com with SMTP id e187so7892462qkf.4 for <oauth@ietf.org>; Sat, 09 Nov 2019 09:44:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=utilityapi.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=e6TJWKAYP/dHJPibCnJcVVI2vWj7gj/g1nseScT22HE=; b=VK+rOWWzzV4y+BzqCuIj0Zpsch67LRD4QETxeuHbU2n+3cW9iiOZFkfWBEgrVff9pv YYAiUyCU92hwDlSlufLQcvrIN/uvE4mrsMbKwjadD3KPmgQ69pTVCCPrTbYWgXmHbZa2 8ubK5XDP/B7KDNctYaTXSXXRbonuGAeKpBbiY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=e6TJWKAYP/dHJPibCnJcVVI2vWj7gj/g1nseScT22HE=; b=EQzI8ChtAjZoYUHHSXEIQOs33PMUHdmiVvUzYNYBVt986fUmoo9xb8JSHVOHg+B4E+ KEjiY2vdBRzFnsY2W5G7SD1fRzAKlO7AR1k2eWrC8+cWkL3cdyrg4xBQrz4jM62PkbkD OQDAo1tbM0+McAXAp05Nb96hozv9DRL+eENNZq2y3VJgjtfj9+/99KU2y+Lna9qZ/pq9 p1Fnw9aocMV/bLtsSPX8QGxTGU+6N2NBFaEV5KX/GnnPAOF01g0JMAgEFuCTrkN7a4ys and3CqZ8kvS/ydShTipQdAxe0v4PDeaQYWFi7O4qPUqyclYAi1tb8qytSkvkHkSObDdi jQJw==
X-Gm-Message-State: APjAAAXCnqu60su999xu6BF+X0ywefMeIj53ObNeDJK3kAyM81wRVClY SlAUxKUzIEM/hdCwOPBY9D3jjTzmasgEUUHQ3trUAGK6
X-Google-Smtp-Source: APXvYqzrKKljhWpCuzDLwn17cVOpAwmhhngqWONgp+uV/onB//0g4OZk1AUzuTnI99qzFA5hazBPN9aTPKib/5/faEM=
X-Received: by 2002:a37:424a:: with SMTP id p71mr2931321qka.194.1573321450570;  Sat, 09 Nov 2019 09:44:10 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAF2Zz1RPt4sfoNuPMLJOPJPUCVo1Go8VvJNJSuM88Eouc9KSMA@mail.gmail.com> <E15A89A1-F7C6-4466-BAD9-232C98C0D14A@alkaline-solutions.com>
In-Reply-To: <E15A89A1-F7C6-4466-BAD9-232C98C0D14A@alkaline-solutions.com>
From: Daniel Roesler <daniel@utilityapi.com>
Date: Sat, 9 Nov 2019 11:43:34 -0600
Message-ID: <CAF2Zz1Sy3Ut9fPRQ7WUV=DjJGaJAAwzLdwZkxKXSHdH=O9D0ug@mail.gmail.com>
To: David Waite <david@alkaline-solutions.com>
Cc: Daniel Roesler <daniel=40utilityapi.com@dmarc.ietf.org>,  "oauth@ietf.org" <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/BIcEPHw4CnpeT_jr73OJem2e_mY>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Nov 2019 17:44:17 -0000

Howdy DW,

Thanks very much for your response! It's totally understandable that
the authorization server should ask for re-confirm if the
refresh_token is no longer valid, and it's also understandable that if
you're using implicit flow with only an access_token that you don't
need to ask for re-confirm every time.

However, I'm specifically interested in authorization code flow
situations where an authorization request is made despite the client
already having a valid grant. It's an atypical request for the client
to make, since they theoretically should already have valid
access/refresh_tokens, but when it does happen, what is the
authorization server supposed to do? Is it bad for them to
auto-redirect back with another authorization code without asking the
user to confirm again? Shouldn't they treat the authorization request
the same way they treat all other authorization requests (by asking
for user confirmation)?

It seems there are situations where this transparent redirect behavior
can be dangerous[1][2] or misleading[3].

[1]: Issuing a new authorization code without requiring confirmation
from the user is what allowed Github's HEAD exploit to be practical
because it allowed the client to exfiltrate the authorization code
without user interaction. Had Github always requested user to click
Allow, even though the user would have already granted access through
the HEAD exploit, the client wouldn't be able to obtain the
authorization code without user interaction. I understand that fixing
the HEAD exploit in the first place is the first and best solution,
but the lack of user interaction is what elevated this exploit from
high to critical.

[2]: For users that have multiple accounts with a client (e.g.
personal, anonymous, work, etc.), if an authorization server
auto-redirects for repeated authorization requests, once that user
connects one account via OAuth to the client, the client can then
attempt authorization requests for other accounts and see which ones
get auto-redirect back. This can, without user interaction,
potentially de-anonymize or map different accounts on the client to
the same user that the user didn't necessarily want to be mapped.

[3]: Privacy regulations are adding more and more for users to
"opt-in" to various types of data access or data sharing, and
sometimes consent requirements for the client don't line up with the
expiration/revocation timelines of the authorization server (e.g.
clients may be required to get an opt-in annually, even if the
authorization server grant never expires). Clients are assuming that
using the redirect back with an authorization code is proof of consent
for their privacy compliance records (it is called Open Authorization,
after all). However, with transparent redirects in the authorization
code flow, this isn't necessarily true and you can no longer rely on
OAuth as a valid mechanism for proving user consent.

I realize that it's open to the authorization server to issue
authorization codes how they see fit. It just strikes me as odd that
there's not a lot of guidance around when transparent redirects are
safe, when user interaction should occur, and the risks and
implications of both behaviors.

Daniel Roesler
Co-founder & CTO, UtilityAPI
daniel@utilityapi.com
On Fri, Nov 8, 2019 at 2:02 PM David Waite <david@alkaline-solutions.com> w=
rote:
>
> Hello Daniel!
>
> > 1. The client makes an ajax HEAD request to the OAuth authorization
> > endpoint, which will silently create the authorization grant (this was
> > the security exploit that was patched).
>
> > Anyway, I'm trying to find guidance on transparent redirects for
> > authorization code grants. There's a whole host of both security and
> > application logic issues that could come up from such behavior, so I'd
> > like to ask for clarification in best practices.
>
> OAuth does not provide a way to recover from an expired access token barr=
ing a refresh token, which also can be invalidated. In particular, the only=
 front channel =E2=80=98continuation=E2=80=99 parameter I know of is =E2=80=
=98id_token_hint=E2=80=99 in OIDC.
>
> There are deployments today (admittedly mostly using implicit flow) which=
 do not have refresh tokens. A mandate that you SHOULD ask for re-consent w=
ould be a recommendation that they have to interrupt the user periodically =
to continue access - which would just create another security vs usability =
decision.
>
> Per your point above, the actual security issue was that GitHub 1) had th=
e authorization endpoint serve double-duty and 2) treated HEAD requests as =
a quasi GET/POST to create a grant in their database to the client without =
user confirmation. The solution for this is not to ask the user to re-confi=
rm on every request..
>
> That said, it does make sense for some deployments to periodically invali=
date a refresh token, even for the purpose of bringing the user back to re-=
consent permissions (aka self-audit). An application could theoretically di=
stinguish from tokens granted by the protected user needing to be invalidat=
ed to drive the user to re-consent, and operationally granted tokens which =
are assumed to be actively managed and not tied to any user account.
>
> -DW
>
> > On Nov 8, 2019, at 5:49 AM, Daniel Roesler <daniel=3D40utilityapi.com@d=
marc.ietf.org> wrote:
> >
> > Howdy,
> >
> > In the "3.1 Protecting Redirect-Based Flows" > "3.1.1. Authorization
> > Code Grant" section, is there guidance on when it is appropriate (if
> > ever) to automatically generate a new authorization code and redirect
> > back to the client?
> >
> > A recent exploit[1] on Github's OAuth implementation was practical
> > because if you make an authorization request and the resource owner is
> > already authenticated and the scope is already authorized, Github will
> > silently generate a new authorization code and redirect the user back
> > to the redirect_uri without asking them to click "Authorize" again.
> >
> > How the exploit worked:
> >
> >
> > 2. However, since the ajax response was blocked via CORS, the client
> > couldn't receive the authorization code in the response parameters.
> >
> > 3. So, the client then redirected the user to Github's authorization
> > endpoint with the same authorization code request (only this time as a
> > real GET redirect).
> >
> > 4. Github instantly redirected the user back to the client's
> > redirect_uri with a new authorization code and without asking for any
> > user interaction.
> >
> > It seems strange to me that OAuth should allow for transparent
> > authorization code redirects without resource owner confirmation. This
> > situation only comes up when something weird is happening, such as
> > when a client loses their valid access|refresh_token, but isn't that
> > all the more reason to clarify that you should always ask for resource
> > owner confirmation of the scope, even in scenarios where you are just
> > re-authorizing the same scope as before?
> >
> > Had Github asked for confirmation on step 4 above, the practicality of
> > the HEAD exploit would have been reduced because the user would have
> > been presented with an unexpected Allow/Deny Github OAuth dialogue,
> > possibly alerting them to the fact that something strange was going
> > on.
> >
> >
> > [1]: https://blog.teddykatz.com/2019/11/05/github-oauth-bypass.html
> >
> > Daniel Roesler
> > Co-founder & CTO, UtilityAPI
> > daniel@utilityapi.com
> >
> >
> >
> > On Wed, Nov 6, 2019 at 2:27 AM Hannes Tschofenig
> > <Hannes.Tschofenig@arm.com> wrote:
> >>
> >> Hi all,
> >>
> >> this is a working group last call for "OAuth 2.0 Security Best Current=
 Practice".
> >>
> >> Here is the document:
> >> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
> >>
> >> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> >> (We use a three week WGLC because of the IETF meeting.)
> >>
> >> Ciao
> >> Hannes & Rifaat
> >>
> >> IMPORTANT NOTICE: The contents of this email and any attachments are c=
onfidential and may also be privileged. If you are not the intended recipie=
nt, please notify the sender immediately and do not disclose the contents t=
o any other person, use it for any purpose, or store or copy the informatio=
n in any medium. Thank you.
> >>
> >> _______________________________________________
> >> OAuth mailing list
> >> OAuth@ietf.org
> >> https://www.ietf.org/mailman/listinfo/oauth
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Sat Nov  9 12:08:36 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CFAF1200B7 for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 12:08:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id haS993C0rrR6 for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 12:08:30 -0800 (PST)
Received: from mail-wm1-x32b.google.com (mail-wm1-x32b.google.com [IPv6:2a00:1450:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05F2B1200CE for <oauth@ietf.org>; Sat,  9 Nov 2019 12:08:30 -0800 (PST)
Received: by mail-wm1-x32b.google.com with SMTP id t26so9510970wmi.4 for <oauth@ietf.org>; Sat, 09 Nov 2019 12:08:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=KcyY3oWfFPnjsP/f6zx7P1yTSglOMAZqfspwpi50YVw=; b=1kX1S9tup/IY9+hdgbdIkXOzA8EX4LjqxXreFI0CtQNARvces56ZOn7IU9q2kNvNjK 7oeZpSxPtiq7Rgh/9j7PEQixJR26u+i3O0XYyXTjyHmMMPCwMBFHP2jsPqXstwU8cAvg RHNRZQqa9tS+mtKDzJEMb/zJnOLOh07Di7by2AMD32JElwY0KCJIPYJ6AN1/Jpj5spAh Vok8M7KHG4bHJLboN1piPt4vqj6rLMpxQDXA38DoUNvwJGsWP5Cgg30rot1yg0uZMsV2 Z/WnZtB/Ua/Ajtklb9mKt1Vm25drpdOSrXJfiurfSw7SemzTmh4k39Ccf5svDWWR07Md yP9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=KcyY3oWfFPnjsP/f6zx7P1yTSglOMAZqfspwpi50YVw=; b=k3MNtBBv0/m+JgPkbqoe48kUoRnkYAwS3LY56sQc/JW4ELK9WKmmMRq2NnB2kEWwe0 24XomK6zHnNiMQq2btp7u0+jk5srXj1XE078BmsqU0SWcN+Jrb4Ry4ATf3Po+TXy16cT QiGhNESK0mwEoFWHMdi6ICm1ndIeY+sii51eKwzj74dcHNFMyzd/FJR1PEkhdsWcEZQo 3/rd0bYQv5glQ4ku+Nkuc8aXD+XKTMi0Gt2KY34hZbT1fLY9U2VsVcARCjtg4cD4M/aR eX03iFWGeticUoe+ycisjt61eFk13raz1+3CD0RHlCfzOsD12tmyUxOOZD2lrbfGfhG3 iBCg==
X-Gm-Message-State: APjAAAXJyfVmUdDA2Edn03UNyDS8c366YLq3LwnCoSqxi04JNuL/kyHD R9fgngGOwOXTWE/qjHecDz3rBUsqan7Lpg==
X-Google-Smtp-Source: APXvYqzrehdZs3GeKT7m2nSZK4FYuN6Z/e3mt1HGjrql1SrP2qXHcj1TfJCGYxR7oFbyMywwfon+JA==
X-Received: by 2002:a05:600c:230d:: with SMTP id 13mr12733087wmo.159.1573330108161;  Sat, 09 Nov 2019 12:08:28 -0800 (PST)
Received: from [192.168.71.116] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id h205sm11761680wmf.35.2019.11.09.12.08.26 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 09 Nov 2019 12:08:27 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-8EB01663-90B3-455E-967A-8A61F063F069
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Sat, 9 Nov 2019 21:08:25 +0100
Message-Id: <1399DBC5-B92B-4F76-B657-386C0AF93672@lodderstedt.net>
References: <CAF2Zz1Sy3Ut9fPRQ7WUV=DjJGaJAAwzLdwZkxKXSHdH=O9D0ug@mail.gmail.com>
Cc: David Waite <david@alkaline-solutions.com>, "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <CAF2Zz1Sy3Ut9fPRQ7WUV=DjJGaJAAwzLdwZkxKXSHdH=O9D0ug@mail.gmail.com>
To: Daniel Roesler <daniel=40utilityapi.com@dmarc.ietf.org>
X-Mailer: iPad Mail (17A860)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lzCuvftKVAUG0NmIPiMeqXVfqUw>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Nov 2019 20:08:33 -0000

--Apple-Mail-8EB01663-90B3-455E-967A-8A61F063F069
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Daniel,

> Am 09.11.2019 um 18:44 schrieb Daniel Roesler <daniel=3D40utilityapi.com@d=
marc.ietf.org>:
>=20
> I realize that it's open to the authorization server to issue
> authorization codes how they see fit. It just strikes me as odd that
> there's not a lot of guidance around when transparent redirects are
> safe, when user interaction should occur, and the risks and
> implications of both behaviors.

User consent is more difficult than it looks on first sight. That=E2=80=99s t=
he reason why it is hard to come up with general guidance.

To start with, user consent is not a security measure per se. It is a measur=
e to establish the legal basis for access to services and data on behalf of t=
he resource owner. It is important to gather the consent but also to enforce=
 this consent (typically by the RS) and ensure that only the legit client is=
 able to use the tokens issued based on a certain consent (scope). That=E2=80=
=99s were various security pieces come into play.

If AS and client belong to the same legal entity, there is typically no need=
 to gather consent since the user already consented to the terms and privacy=
 policy of the respective service provider. So automatic code issuance is fi=
ne as long as the user is sufficiently authenticated (policy determine by RS=
).

If AS and client belong to different legal entities, the AS can ask every ti=
me - that=E2=80=99s on the super safe side but inconvenient. That=E2=80=99s w=
hy ASs may store the consent and avoid another dialog, if the same client as=
ks again for the same scope.

But what does =E2=80=9Esame client=E2=80=9C mean? Is it the client_id? Sound=
s reasonable for a web app, but would also mean instances of the same native=
 app residing on different devices could share the consent. That=E2=80=99s g=
reat from a convenience perspective but the AS has to really make sure it=E2=
=80=99s the same user on the other device using the 3rd party app and it=E2=80=
=99s the same app again otherwise an attacker could easily abuse the grant.

This in turn would call for client authentication, which in this case (same c=
lient_id shared among instances) means the OAuth dialog must happen in a bac=
kend otherwise the secret could be obtained by an attacker from the installe=
d app.

I hear =E2=80=9Cdynamic client registration=E2=80=9D to give every instance c=
lient_id and secret? Well, looks like an alternative, but one needs to estab=
lish the relationship to the legal entity in a secure manner, otherwise shar=
ing the consent is dangerous. Software statements or registration access tok=
ens are the means at hand but both are shared secrets one would need to depl=
oy with all app instances ... not advisable at all.

Let=E2=80=99s talk about =E2=80=9Csame scope=E2=80=9D: equality can be defin=
ed as byte level string equality or by interpreting the scope. The first app=
roach will cause another user consent dialog if the order of the scope value=
s change (or just a space is added). The latter approach is highly implement=
ation specific since left undefined in RFC 6749.

In the case of Open Banking and similar scenarios, this scope will be fine g=
rained, dynamic or even transactional meaning storing a consent and issuing a=
nother code in subsequent authorization transactions might be possible but s=
cope value specific.

Constraints regarding the duration of a consent can easily be enforced by th=
e AS. It just won=E2=80=99t issue further codes or access tokens (in case of=
 refresh token grant) if the consent needs to be refreshed.

bottom line: to define when an AS can issue an authorization code without as=
king for user consent again is easy. Implementing a policy that is secure an=
d convenient is not.

We are working on more sophisticated ways to represent and compare scopes (h=
ttps://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03). The client ident=
ification problem will most likely stay.

kind regards,
Torsten.=

--Apple-Mail-8EB01663-90B3-455E-967A-8A61F063F069
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">Hi Daniel,</div><div dir=3D=
"ltr"><br><blockquote type=3D"cite">Am 09.11.2019 um 18:44 schrieb Daniel Ro=
esler &lt;daniel=3D40utilityapi.com@dmarc.ietf.org&gt;:<br><br></blockquote>=
</div><blockquote type=3D"cite"><div dir=3D"ltr"><span>I realize that it's o=
pen to the authorization server to issue</span><br><span>authorization codes=
 how they see fit. It just strikes me as odd that</span><br><span>there's no=
t a lot of guidance around when transparent redirects are</span><br><span>sa=
fe, when user interaction should occur, and the risks and</span><br><span>im=
plications of both behaviors.</span></div></blockquote><div><br></div><div>U=
ser consent is more difficult than it looks on first sight. That=E2=80=99s t=
he reason why it is hard to come up with general guidance.</div><div><br></d=
iv>To start with, user consent is not a security measure per se. It is a mea=
sure to establish the legal basis for access to services and data on behalf o=
f the resource owner. It is important to gather the consent but also to enfo=
rce this consent (typically by the RS) and ensure that only the legit client=
 is able to use the tokens issued based on a certain consent (scope). That=E2=
=80=99s were various security pieces come into play.<div><br></div><div>If A=
S and client belong to the same legal entity, there is typically no need to g=
ather consent since the user already consented to the terms and privacy poli=
cy of the respective service provider. So automatic code issuance is fine as=
 long as the user is sufficiently authenticated (policy determine by RS).<di=
v><div><br></div><div>If AS and client belong to different legal entities, t=
he AS can ask every time - that=E2=80=99s on the super safe side but inconve=
nient. That=E2=80=99s why ASs may store the consent and avoid another dialog=
, if the same client asks again for the same scope.</div><div><div><br></div=
><div>But what does =E2=80=9Esame client=E2=80=9C mean? Is it the client_id?=
 Sounds reasonable for a web app, but would also mean instances of the same n=
ative app residing on different devices could share the consent. That=E2=80=99=
s great from a convenience perspective but the AS has to really make sure it=
=E2=80=99s the same user on the other device using the 3rd party app and it=E2=
=80=99s the same app again otherwise an attacker could easily abuse the gran=
t.</div><div><br></div><div>This in turn would call for client authenticatio=
n, which in this case (same client_id shared among instances) means the OAut=
h dialog must happen in a backend otherwise the secret could be obtained by a=
n attacker from the installed app.</div><div><br></div><div>I hear =E2=80=9C=
dynamic client registration=E2=80=9D to give every instance client_id and se=
cret? Well, looks like an alternative, but one needs to establish the relati=
onship to the legal entity in a secure manner, otherwise sharing the consent=
 is dangerous. Software statements or registration access tokens are the mea=
ns at hand but both are shared secrets one would need to deploy with all app=
 instances ... not advisable at all.</div><div><br></div><div>Let=E2=80=99s t=
alk about =E2=80=9Csame scope=E2=80=9D: equality can be defined as byte leve=
l string equality or by interpreting the scope. The first approach will caus=
e another user consent dialog if the order of the scope values change (or ju=
st a space is added). The latter approach is highly implementation specific s=
ince left undefined in RFC 6749.</div><div><br></div><div>In the case of Ope=
n Banking and similar scenarios, this scope will be fine grained, dynamic or=
 even transactional meaning storing a consent and issuing another code in su=
bsequent authorization transactions might be possible but scope value specif=
ic.</div><div><br></div><div>Constraints regarding the duration of a consent=
 can easily be enforced by the AS. It just won=E2=80=99t issue further codes=
 or access tokens (in case of refresh token grant) if the consent needs to b=
e refreshed.</div><div><br></div><div>bottom line: to define when an AS can i=
ssue an authorization code without asking for user consent again is easy. Im=
plementing a policy that is secure and convenient is not.</div></div></div><=
/div><div><br></div><div>We are working on more sophisticated ways to repres=
ent and compare scopes (<a href=3D"https://tools.ietf.org/html/draft-lodders=
tedt-oauth-rar-03">https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-0=
3</a>). The client identification problem will most likely stay.</div><div><=
br></div><div>kind regards,</div><div>Torsten.</div></body></html>=

--Apple-Mail-8EB01663-90B3-455E-967A-8A61F063F069--


From nobody Sat Nov  9 13:23:21 2019
Return-Path: <david@alkaline-solutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83B511200F5 for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 13:23:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.228
X-Spam-Level: **
X-Spam-Status: No, score=2.228 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_SBL_CSS=3.335, RDNS_NONE=0.793, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yIR4dkNdiVfZ for <oauth@ietfa.amsl.com>; Sat,  9 Nov 2019 13:23:17 -0800 (PST)
Received: from alkaline-solutions.com (unknown [IPv6:2600:3c00::f03c:91ff:fe93:6974]) by ietfa.amsl.com (Postfix) with ESMTP id EDF921200D8 for <oauth@ietf.org>; Sat,  9 Nov 2019 13:23:16 -0800 (PST)
Received: from [IPv6:2601:282:202:b210:d04a:cd30:9359:28fa] (unknown [IPv6:2601:282:202:b210:d04a:cd30:9359:28fa]) by alkaline-solutions.com (Postfix) with ESMTPSA id 8A6C0315C0; Sat,  9 Nov 2019 21:23:15 +0000 (UTC)
From: David Waite <david@alkaline-solutions.com>
Message-Id: <AD20EC2C-4445-4D95-B18F-3A69F311CC36@alkaline-solutions.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_41E13083-D4D9-48AF-A88C-1B85736384BE"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.2\))
Date: Sat, 9 Nov 2019 14:23:15 -0700
In-Reply-To: <1399DBC5-B92B-4F76-B657-386C0AF93672@lodderstedt.net>
Cc: Daniel Roesler <daniel=40utilityapi.com@dmarc.ietf.org>, "oauth@ietf.org" <oauth@ietf.org>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
References: <CAF2Zz1Sy3Ut9fPRQ7WUV=DjJGaJAAwzLdwZkxKXSHdH=O9D0ug@mail.gmail.com> <1399DBC5-B92B-4F76-B657-386C0AF93672@lodderstedt.net>
X-Mailer: Apple Mail (2.3608.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/cZ_AnzS0SjtTmjSvxXePs3nWuWU>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Nov 2019 21:23:19 -0000

--Apple-Mail=_41E13083-D4D9-48AF-A88C-1B85736384BE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Nov 9, 2019, at 1:08 PM, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
> But what does =E2=80=9Esame client=E2=80=9C mean? Is it the client_id? =
Sounds reasonable for a web app, but would also mean instances of the =
same native app residing on different devices could share the consent. =
That=E2=80=99s great from a convenience perspective but the AS has to =
really make sure it=E2=80=99s the same user on the other device using =
the 3rd party app and it=E2=80=99s the same app again otherwise an =
attacker could easily abuse the grant.
>=20
> This in turn would call for client authentication, which in this case =
(same client_id shared among instances) means the OAuth dialog must =
happen in a backend otherwise the secret could be obtained by an =
attacker from the installed app.

<pipes back in>

Very true, and this is one reason why in Native Apps and Web Apps =
deployments (which use public clients) the AS may use the ability to =
redirect to a unique redirect URI as a form of lightweight =
identifier/ownership proof. That means some forms of redirect URI where =
you cannot provide unique ownership (custom schemes on most platforms, =
localhost redirects) should understand that other software can imitate =
the given client to the user, and that as a result allowed =
authorizations might be reduced and SSO/consent should be more carefully =
managed.

> I hear =E2=80=9Cdynamic client registration=E2=80=9D to give every =
instance client_id and secret? Well, looks like an alternative, but one =
needs to establish the relationship to the legal entity in a secure =
manner, otherwise sharing the consent is dangerous. Software statements =
or registration access tokens are the means at hand but both are shared =
secrets one would need to deploy with all app instances ... not =
advisable at all.

As DCR gives you the means to uniquely identify a client, I would expect =
each instance to be represented as a separate client. That brings you up =
from =E2=80=98consent on every token request by every client instance=E2=80=
=99 to =E2=80=98consent once for each client instance=E2=80=99. You =
could still use something like unique redirect URI or platform =
attestation to make it 'consent once per client=E2=80=99.

DCR does give you another handle for tracking a client instance across =
authorization requests, which can be otherwise difficult in the scenario =
public clients relying on a browser user agent. A native app may be able =
to persist that better than say what you get via browser storage.

> Let=E2=80=99s talk about =E2=80=9Csame scope=E2=80=9D: equality can be =
defined as byte level string equality or by interpreting the scope. The =
first approach will cause another user consent dialog if the order of =
the scope values change (or just a space is added). The latter approach =
is highly implementation specific since left undefined in RFC 6749.
>=20
> In the case of Open Banking and similar scenarios, this scope will be =
fine grained, dynamic or even transactional meaning storing a consent =
and issuing another code in subsequent authorization transactions might =
be possible but scope value specific.
>=20
> Constraints regarding the duration of a consent can easily be enforced =
by the AS. It just won=E2=80=99t issue further codes or access tokens =
(in case of refresh token grant) if the consent needs to be refreshed.
>=20
> bottom line: to define when an AS can issue an authorization code =
without asking for user consent again is easy. Implementing a policy =
that is secure and convenient is not.
>=20
> We are working on more sophisticated ways to represent and compare =
scopes (https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03 =
<https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03>). The =
client identification problem will most likely stay.

One of the benefits of the OAuth abstraction is that it puts the =
authorization business logic (including things like presentation) =
squarely in the hands of the AS. OAuth gives the flexibility for the AS =
to implement that logic appropriately, as well as to evolve that logic =
without impacting the protocol contract with the clients/protected =
resources.

That there even is consent is part of that business requirements on an =
organization, so it would be difficult to give formal recommendations =
outside of business needs (e.g. regulatory compliance). Outside that, =
recommendations would be non-prescriptive considerations for AS =
implementors, such as =E2=80=9Climit the scopes available to a client =
based on client need, client audit, business relationship, and =
regulatory restrictions/requirements=E2=80=9D

There are also cases where general user interaction (e.g. =
non-transparent SSO/authorization) is technically desirable, such as =
fortifying the AS from being classified as a tracker in Safari ITP or =
ensuring Universal Links will work on iOS.  If you are requiring the =
user click to continue as a technical solution, you might decide to use =
that as an opportunity for information or informed consent as well.

-DW=

--Apple-Mail=_41E13083-D4D9-48AF-A88C-1B85736384BE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">On =
Nov 9, 2019, at 1:08 PM, Torsten Lodderstedt &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" =
class=3D"">torsten@lodderstedt.net</a>&gt; wrote:<br =
class=3D""><div><blockquote type=3D"cite" class=3D"">But what does =
=E2=80=9Esame client=E2=80=9C mean? Is it the client_id? Sounds =
reasonable for a web app, but would also mean instances of the same =
native app residing on different devices could share the consent. =
That=E2=80=99s great from a convenience perspective but the AS has to =
really make sure it=E2=80=99s the same user on the other device using =
the 3rd party app and it=E2=80=99s the same app again otherwise an =
attacker could easily abuse the grant.<br class=3D""><div class=3D""><div =
dir=3D"auto" class=3D""><div class=3D""><div class=3D""><div =
class=3D""><div class=3D""><br class=3D""></div><div class=3D"">This in =
turn would call for client authentication, which in this case (same =
client_id shared among instances) means the OAuth dialog must happen in =
a backend otherwise the secret could be obtained by an attacker from the =
installed app.</div></div></div></div></div></div></blockquote><div><br =
class=3D""></div><div>&lt;pipes back in&gt;</div><div><br =
class=3D""></div>Very true, and this is one reason why in Native Apps =
and Web Apps deployments (which use public clients) the AS may use the =
ability to redirect to a unique redirect URI as a form of lightweight =
identifier/ownership proof. That means some forms of redirect URI where =
you cannot provide unique ownership (custom schemes on most platforms, =
localhost redirects) should understand that other software can imitate =
the given client to the user, and that as a result allowed =
authorizations might be reduced and SSO/consent should be more carefully =
managed.</div><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div dir=3D"auto" class=3D""><div class=3D""><div =
class=3D""><div class=3D""><div class=3D"">I hear =E2=80=9Cdynamic =
client registration=E2=80=9D to give every instance client_id and =
secret? Well, looks like an alternative, but one needs to establish the =
relationship to the legal entity in a secure manner, otherwise sharing =
the consent is dangerous. Software statements or registration access =
tokens are the means at hand but both are shared secrets one would need =
to deploy with all app instances ... not advisable at =
all.</div></div></div></div></div></blockquote><div><br =
class=3D""></div>As DCR gives you the means to uniquely identify a =
client, I would expect each instance to be represented as a separate =
client. That brings you up from =E2=80=98consent on every token request =
by every client instance=E2=80=99 to =E2=80=98consent once for each =
client instance=E2=80=99. You could still use something like unique =
redirect URI or platform attestation to make it 'consent once per =
client=E2=80=99.</div><div><br class=3D""></div><div>DCR does give you =
another handle for tracking a client instance across authorization =
requests, which can be otherwise difficult in the scenario public =
clients relying on a browser user agent. A native app may be able to =
persist that better than say what you get via browser =
storage.</div><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div dir=3D"auto" class=3D""><div class=3D""><div =
class=3D""><div class=3D""><div class=3D"">Let=E2=80=99s talk about =
=E2=80=9Csame scope=E2=80=9D: equality can be defined as byte level =
string equality or by interpreting the scope. The first approach will =
cause another user consent dialog if the order of the scope values =
change (or just a space is added). The latter approach is highly =
implementation specific since left undefined in RFC 6749.</div><div =
class=3D""><br class=3D""></div><div class=3D"">In the case of Open =
Banking and similar scenarios, this scope will be fine grained, dynamic =
or even transactional meaning storing a consent and issuing another code =
in subsequent authorization transactions might be possible but scope =
value specific.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Constraints regarding the duration of a consent can easily be =
enforced by the AS. It just won=E2=80=99t issue further codes or access =
tokens (in case of refresh token grant) if the consent needs to be =
refreshed.</div><div class=3D""><br class=3D""></div><div =
class=3D"">bottom line: to define when an AS can issue an authorization =
code without asking for user consent again is easy. Implementing a =
policy that is secure and convenient is not.</div></div></div></div><div =
class=3D""><br class=3D""></div><div class=3D"">We are working on more =
sophisticated ways to represent and compare scopes (<a =
href=3D"https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03" =
class=3D"">https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03</a>)=
. The client identification problem will most likely =
stay.</div></div></blockquote><div><br class=3D""></div>One of the =
benefits of the OAuth abstraction is that it puts the authorization =
business logic (including things like presentation) squarely in the =
hands of the AS. OAuth gives the flexibility for the AS to implement =
that logic appropriately, as well as to evolve that logic without =
impacting the protocol contract with the clients/protected =
resources.</div><div><br class=3D""></div><div>That there even is =
consent is part of that business requirements on an organization, so it =
would be difficult to give formal recommendations outside of business =
needs (e.g. regulatory compliance). Outside that, recommendations would =
be non-prescriptive considerations for AS implementors, such as =E2=80=9Cl=
imit the scopes available to a client based on client need, client =
audit, business relationship, and regulatory =
restrictions/requirements=E2=80=9D</div><div><br =
class=3D""></div><div>There are also cases where general user =
interaction (e.g. non-transparent SSO/authorization) is technically =
desirable, such as fortifying the AS from being classified as a tracker =
in Safari ITP or ensuring Universal Links will work on iOS. &nbsp;If you =
are requiring the user click to continue as a technical solution, you =
might decide to use that as an opportunity for information or informed =
consent as well.</div><div><br =
class=3D""></div><div>-DW</div></body></html>=

--Apple-Mail=_41E13083-D4D9-48AF-A88C-1B85736384BE--


From nobody Sun Nov 10 13:02:52 2019
Return-Path: <Lee_McGovern@swissre.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D95312016E for <oauth@ietfa.amsl.com>; Sun, 10 Nov 2019 13:02:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YooD9L1BnsMS for <oauth@ietfa.amsl.com>; Sun, 10 Nov 2019 13:02:46 -0800 (PST)
Received: from esa4.hc1106-67.c3s2.iphmx.com (esa4.hc1106-67.c3s2.iphmx.com [139.138.62.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85276120129 for <oauth@ietf.org>; Sun, 10 Nov 2019 13:02:46 -0800 (PST)
IronPort-SDR: X48paAzDTzD9VCLgZeSB+LcEkivsgvtU2pgpt4x0CJ3qsH9gRLGqlfo99jO70YgeHQEoSDyCXP omYMJY6YhbT8hJC5UcwIyXxBcVo9bNuqEOgBDxijW/e0rEW9hPyoFJ+qUuNVfwpjdlN1kV83Dp rDXq1QF/xGEvkVZNQliDQDb+cg7LhowTr1DXr1KGINTs1pXEWeylmoboqagfcL30EVvsd4wJCl D0wBRb+H7rWSPpAyI9q+yDlbzXNYHlzdYOvLXt7VVGaoQ7/I+0+8XbsIJMWINcyP3b2KCSNhaj JUA=
X-Amp-Result: SKIPPED(no attachment in message)
Received: from edge.swissre.com ([193.246.239.101]) by esa4.hc1106-67.c3s2.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 10 Nov 2019 21:02:42 +0000
Received: from CHRP5009.corp.gwpnet.com (10.53.1.44) by edge.swissre.com (193.246.239.101) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 22:02:46 +0100
Received: from CHRP5009.corp.gwpnet.com (10.53.1.44) by CHRP5009.corp.gwpnet.com (10.53.1.44) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 22:02:39 +0100
Received: from CHRP5009.corp.gwpnet.com ([fe80::39a1:59b8:2e6a:5da6]) by CHRP5009.corp.gwpnet.com ([fe80::39a1:59b8:2e6a:5da6%15]) with mapi id 15.00.1473.003; Sun, 10 Nov 2019 22:02:39 +0100
From: Lee McGovern <Lee_McGovern@swissre.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: WGLC for "OAuth 2.0 Security Best Current Practice"
Thread-Index: AdWYChqDeqcGGMY1SK6hr9VAlkPFWg==
Date: Sun, 10 Nov 2019 21:02:38 +0000
Message-ID: <8541e349285c4ad78caaa95aa6e8c104@CHRP5009.corp.gwpnet.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Enabled=True; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_SiteId=45597f60-6e37-4be7-acfb-4c9e23b261ea; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Owner=Lee_McGovern@swissre.com; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_SetDate=2019-11-10T21:02:37.4752144Z; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Name=Internal; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Application=Microsoft Azure Information Protection; MSIP_Label_90c2fedb-0da6-4717-8531-d16a1b9930f4_Extended_MSFT_Method=Automatic; Sensitivity=Internal
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.62.28.10]
x-rcom-deduphash: a5a01191-b7f7-4c2c-b363-55041b73dc0d
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-GBS-PROC: 15NGs9aROBRTCeaacTtz4Erx9lEiGKWQH/n3y5o7xOw=
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/901t-2NPZMdm3w5bUjbfbJTzLbU>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Nov 2019 21:02:50 -0000

3.1 - "Clients MUST memorize which authorization server they sent an author=
ization request to" - is memorize the best synonym here, perhaps store or r=
etain is more aligned with computational language?

3.1.2 How does the draft https://tools.ietf.org/html/draft-parecki-oauth-br=
owser-based-apps-02 align with this guidance and will a future BCP update i=
nclude a direct reference to the final published version of this spec?

3.5, 3.6 Since there is a reference to the MTLS draft could there also be s=
ome guidance on the usage of token exchange best practise and also for the =
contents of the access token to be aligned https://tools.ietf.org/html/draf=
t-ietf-oauth-access-token-jwt-02


----------------------------------------------------------------------

Date: Wed, 6 Nov 2019 08:26:49 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Subject: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current
	Practice"
Message-ID:
	<VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outloo=
k.com>
	=

Content-Type: text/plain; charset=3D"us-ascii"

Hi all,

this is a working group last call for "OAuth 2.0 Security Best Current Prac=
tice".

Here is the document:
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13

Please send you comments to the OAuth mailing list by Nov. 27, 2019.
(We use a three week WGLC because of the IETF meeting.)

Ciao
Hannes & Rifaat

IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.




This e-mail, including attachments, is intended for the person(s) or compan=
y named and may contain confidential and/or legally privileged information.

Unauthorized disclosure, copying or use of this information may be unlawful=
 and is prohibited. If you are not the intended recipient, please delete th=
is message and notify the sender.
All incoming and outgoing e-mail messages are stored in the Swiss Re Electr=
onic Message Repository.
If you do not wish the retention of potentially private e-mails by Swiss Re=
, we strongly advise you not to use the Swiss Re e-mail account for any pri=
vate, non-business related communications.


From nobody Sun Nov 10 16:51:39 2019
Return-Path: <david@alkaline-solutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD8D7120802 for <oauth@ietfa.amsl.com>; Sun, 10 Nov 2019 16:51:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.108
X-Spam-Level: 
X-Spam-Status: No, score=-1.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfpXZZz2eAH1 for <oauth@ietfa.amsl.com>; Sun, 10 Nov 2019 16:51:32 -0800 (PST)
Received: from alkaline-solutions.com (unknown [IPv6:2600:3c00::f03c:91ff:fe93:6974]) by ietfa.amsl.com (Postfix) with ESMTP id 7F16B12001A for <oauth@ietf.org>; Sun, 10 Nov 2019 16:51:32 -0800 (PST)
Received: from [IPv6:2601:282:202:b210:bc69:2824:515c:c2c2] (unknown [IPv6:2601:282:202:b210:bc69:2824:515c:c2c2]) by alkaline-solutions.com (Postfix) with ESMTPSA id 15310315B6; Mon, 11 Nov 2019 00:51:31 +0000 (UTC)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.2\))
From: David Waite <david@alkaline-solutions.com>
In-Reply-To: <8541e349285c4ad78caaa95aa6e8c104@CHRP5009.corp.gwpnet.com>
Date: Sun, 10 Nov 2019 17:51:30 -0700
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <A67D0E09-4FCE-4794-892B-4914050AB5C6@alkaline-solutions.com>
References: <8541e349285c4ad78caaa95aa6e8c104@CHRP5009.corp.gwpnet.com>
To: Lee McGovern <Lee_McGovern@swissre.com>
X-Mailer: Apple Mail (2.3608.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Cri7-IKqVkvds_pS6Bwbm7MT7Qw>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 00:51:35 -0000

On Nov 10, 2019, at 2:02 PM, Lee McGovern <Lee_McGovern@swissre.com> =
wrote:
>=20
>=20
> 3.1 - "Clients MUST memorize which authorization server they sent an =
authorization request to" - is memorize the best synonym here, perhaps =
store or retain is more aligned with computational language?

Store, retain, persist are all common.

>=20
> 3.1.2 How does the draft =
https://tools.ietf.org/html/draft-parecki-oauth-browser-based-apps-02 =
align with this guidance and will a future BCP update include a direct =
reference to the final published version of this spec?

The dependency will be the other way - Browser-Based Apps will inform AS =
and RS implementors/operators what they need to do to allow javascript =
clients, and browser clients will have guidance toward meeting the =
Security BCP, where possible. Other drafts like DPoP exist to try to =
reduce the delta between the security BCP and what is feasible to deploy =
in browsers today.

> 3.5, 3.6 Since there is a reference to the MTLS draft could there also =
be some guidance on the usage of token exchange best practise and also =
for the contents of the access token to be aligned =
https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-02
>=20

-DW


From nobody Mon Nov 11 01:58:00 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51BB912080F for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 01:57:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2qKRGB0ErNOK for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 01:57:50 -0800 (PST)
Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 291B4120152 for <oauth@ietf.org>; Mon, 11 Nov 2019 01:57:49 -0800 (PST)
Received: by mail-qk1-x729.google.com with SMTP id e187so10647752qkf.4 for <oauth@ietf.org>; Mon, 11 Nov 2019 01:57:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=vI3DlaUymBlaJ0dNRHlWd4qdyc3tEo1ilJN0HUU4CDU=; b=I4F8isvR2UKY0xn3GqgRLEBNNXrB/nMHmiq5AFfNtGJ8krhocyqsNkHRUTWkODCNnE Yjx81v4OWppDQT82RlB1DqUPB4Zt+pb0S9E2w2aaYJD8pqsYqI/zQeRmzcEtW10ynZsS CuSIdNaMReamrWHDo2uVNEEQWIBnjakJbqdLiEqhWp8IQ74/q2SuAojPeNDsK8ny+Hv2 wZmDD3+d1mRq80uk4+mR8nJ9GJ3uCrawE6HhOnqTuKa6yK1zRywe35YmbJc+jQqtaXgG O85lRFPH3OuGh/Ar7l5ZpCaK1gTvM9Slb3WV+CPoi67zKBtS0fdjh5NzR+YXse2cmtfS H6Dw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=vI3DlaUymBlaJ0dNRHlWd4qdyc3tEo1ilJN0HUU4CDU=; b=RRfDny9SIOcIZ+S9buHXqqHKZbTwvWyXHX9nkna3mgWJgX11cT/Ng90P6+JINvGf5v FTOh9Hv6XVkExMaDM1rYCK2UePhsTFGH979uygypmBZMF0ZltENM56venJWuXRrtbFSz 0o9QYF3y58IIrel8HSH4AAqrb/hqI1qOj2kRJPulrI8NddL08mnxU+3Vy2ODhXcxoo9e XlBDhMBpNGTLZC9G4RAHwfbUD2ISOeBiQCw4IuWs4L/DIvkLZrq2S9/rTXPa6Zg85MYS zz8Qe3Cb2C+Mb4t224wMGRLIetqkShjDIRTYVILs8dnOpc7RDZctPsbmn3m11RC67MYb zLJA==
X-Gm-Message-State: APjAAAV4ppmHBboQAEVQGD/gKqh6qdyIDfcXf3itfXuE1/6+gi3AEJnd bVNF3JycRFclhL+xiWfvGdP1c0JDf/bE1DCLJsAkkYgW
X-Google-Smtp-Source: APXvYqzGi3b9Jq877KWuIjVJcGrO9Nn2R+ZgqZvHrW3XkCHh4zgTd2hGGdQhM8CEM5D1bCwpgY526pq7bvwr1lDIT1g=
X-Received: by 2002:a37:84a:: with SMTP id 71mr9301083qki.423.1573466268369; Mon, 11 Nov 2019 01:57:48 -0800 (PST)
MIME-Version: 1.0
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Mon, 11 Nov 2019 10:57:37 +0100
Message-ID: <CA+iA6ujhZub-_Ys-owBDRvueRWuSaotQRqa=o8w0sy7afEzvFw@mail.gmail.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fe161d05970f2939"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/gXN1zfxQPIHyMYsrDLkzU4BFYVw>
Subject: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [2/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 09:57:53 -0000

--000000000000fe161d05970f2939
Content-Type: text/plain; charset="UTF-8"

Hi,

Please find my feedback on page 11-20 below.

Hans.

P14
4.2.4 For an RP there should be more explicit text and guidance about
having a single dedicated immutatable redirect URI per client that
"demultiplexes" access to the protected resource by storing the original
location that the user agent was trying to access in the state associated
with the authorization request.

P15
same section 4.2.4, 2nd paragraph: if I'm correct the text about
authorization codes being single use only and revoke access tokens on 2nd
use is not different from the original RFC is it? If so, why repeat here?

3rd paragraph: why not a MUST for invalidating state (and randomizing it
for that matter) but only a SHOULD?

P16
4.3.2 the "postmessage communication" is mentioned here without any context
or explanation; I guess this refers to the OIDC session management spec
somehow?

4.4 Mixup: I would like to emphasize here that the mixup attack works
perfectly fine against two statically configured OPs, to avoid the
impression that it is somehow applicable in dynamic scenarios only.

P17
About the description of the mixup attack: as long as the attacker is able
to trigger a request (by having the user click a link) and read the
query/POST parameters on the A-AS (perhaps from the logs) he can execute a
mixup attack by starting from the A-AS rather than the H-AS (as
demonstrated in the OAuth 2.0 security workshop in Darmstadt December
2016). Perhaps this can be made more explicit.

-- 
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--000000000000fe161d05970f2939
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>Please find my feedback on page 11-=
20 below.</div><div><br></div><div>Hans.<br clear=3D"all"><div><br></div><d=
iv>P14</div><div>4.2.4 For an RP there should be more explicit text and gui=
dance about having a single dedicated immutatable redirect URI per client t=
hat &quot;demultiplexes&quot; access to the protected resource by storing t=
he original location that the user agent was trying to access in the state =
associated with the authorization request.</div><div><br></div><div>P15</di=
v><div>same section 4.2.4, 2nd paragraph: if I&#39;m correct the text about=
 authorization codes being single use only and revoke access tokens on 2nd =
use is not different from the original RFC is it? If so, why repeat here?</=
div><div><br></div><div>3rd paragraph: why not a MUST for invalidating stat=
e (and randomizing it for that matter) but only a SHOULD?</div><div><br></d=
iv><div>P16</div><div>4.3.2 the &quot;postmessage communication&quot; is me=
ntioned here without any context or explanation; I guess this refers=C2=A0t=
o the OIDC session management=C2=A0spec somehow?</div><div><br></div><div>4=
.4 Mixup: I would like to emphasize here that the mixup attack works perfec=
tly fine against two statically configured OPs, to avoid the impression tha=
t it is somehow applicable in dynamic scenarios=C2=A0only.=C2=A0</div><div>=
<br></div><div>P17</div><div>About the description of the mixup attack: as =
long as the attacker is able to trigger a request (by having the user click=
 a link) and read the query/POST parameters on the A-AS (perhaps from the l=
ogs) he can execute a mixup attack by starting from the A-AS rather than th=
e H-AS (as demonstrated in the OAuth 2.0 security workshop in Darmstadt Dec=
ember 2016). Perhaps this can be made more explicit.</div><div><br></div>--=
 <br><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_sig=
nature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=3D"ltr"><div style=
=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=
=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=3D"font-size:sma=
ll">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" target=3D"_blank">w=
ww.zmartzone.eu</a><br></div></div></div></div></div></div></div></div>

--000000000000fe161d05970f2939--


From nobody Mon Nov 11 09:10:32 2019
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FBA8120955; Mon, 11 Nov 2019 09:10:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.369
X-Spam-Level: 
X-Spam-Status: No, score=-0.369 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bjk_9tDQ6nzo; Mon, 11 Nov 2019 09:10:29 -0800 (PST)
Received: from mail-lf1-x129.google.com (mail-lf1-x129.google.com [IPv6:2a00:1450:4864:20::129]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDF0E1209C8; Mon, 11 Nov 2019 09:10:28 -0800 (PST)
Received: by mail-lf1-x129.google.com with SMTP id z12so10440290lfj.9; Mon, 11 Nov 2019 09:10:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6l2uuL6v++h89DzlneO5qxQ+e6UasPxyy6+Evd+Ms3E=; b=G2cwZJxKIcd7lJaHiCxI0aiz1AZpMW+VqKfKx8yLyWWVJuqZcsp/8RRbpwTe6q2OhE TDuWYFVCa330o3Jix9J3bB2GyxdZD4p9CZsT6Zhfc6aCpBEUgf0vTS+YZ7ypWUWEux8H 50Jy177z72ElxO4c6cUTqrSoLHtikGdfh6jv18FzLlOZUzZEQ1wrQ+gCNUpYZFxdSJ7z UwXs7IXB4rSvPyReCqsAvo7jdnrU3P32o7Nop87L2uTwA0vTbmFsL6Rx0htRfGjFHhOO Hofo1VcjSFXHYazxWNPxSpeaC8adOYLX071paZ+Z/+XJR/P0EgyK+lI2DC6qcZzszcEk SZ3A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6l2uuL6v++h89DzlneO5qxQ+e6UasPxyy6+Evd+Ms3E=; b=Tesp+pS/Sy3A90quTLZDZ9sTVQRMznwtKLU67XSlADomvox92bL/Znqg4CYAf5go4Y omZKQYghQkhocUIbhHHmsfiDx8FNqqwIatNHwlf3jk9sBT1+j6UNtxyctiJwD23RInhW 6JDp3UOGBAtLxzXWyuU1SR+e6+fJBib2Xryt0StW5ezGXgWIAmcSKi7Kj+sciyzSIyNh 94+VkBwwRGCWj1sCHLfx18G0cahqO5eFNBDXLZbOFCY3lzS/mAGZ1kpnYVSNvrV74aXK syQfRqvv6wFMrHrfsQqxhWAAvi9d5BCtDUN8DEsEjASwZgR5hgjuuq678q7g6kRwXXVS EILw==
X-Gm-Message-State: APjAAAW2n3Y8xz7A2C3lTC4v2ey15lTfm48w+UF8TTr2zVqU0DK+CRj/ LVD4GpFeH8VId03hPNCwcERmeoew/o1xkNkjHqamMqWKLcE=
X-Google-Smtp-Source: APXvYqxGRSmbRKkoH3P5AObQ9+IZM3x22cNGj8KDIq92wUq1EvZHA058uKv7chHX+iGLYcOS2MaYRtf71EBSuQfIvaQ=
X-Received: by 2002:a19:6108:: with SMTP id v8mr15941743lfb.160.1573492226665;  Mon, 11 Nov 2019 09:10:26 -0800 (PST)
MIME-Version: 1.0
References: <CAD9ie-snTrsJUd76_sfZLsN6mVOQt+8z0MazSYe3bGDvnsMUJw@mail.gmail.com> <213B6F9D-5737-4C20-AA87-1581C0F401ED@lodderstedt.net> <CAD9ie-uo8HgbMKbGP5sU3voqBWDRLnZKRj8mg1tGOejUAqvHtA@mail.gmail.com> <CAC9EAEF-4537-48E2-92AD-BAD5742A87A3@mit.edu> <CAD9ie-s5wr0S3sigWXV616_ZxU0oq92WbeVgMuTpgQ052FXXOw@mail.gmail.com> <0580261D-1003-4279-992A-542B30B3355D@amazon.com>
In-Reply-To: <0580261D-1003-4279-992A-542B30B3355D@amazon.com>
From: Dick Hardt <dick.hardt@gmail.com>
Date: Mon, 11 Nov 2019 09:10:15 -0800
Message-ID: <CAD9ie-vP5GNwjG6kqYzcGoP9qeqdwS=im0kkU3Lg40vvdj4dOA@mail.gmail.com>
To: txauth@ietf.org, oauth@ietf.org
Cc: Justin Richer <jricher@mit.edu>, Torsten Lodderstedt <torsten@lodderstedt.net>,  Yaron Sheffer <yaronf.ietf@gmail.com>, "Richard Backman, Annabelle" <richanna@amazon.com>
Content-Type: multipart/alternative; boundary="0000000000003a33460597153551"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/O3_j-cxmyM06HM1p01RGhMXsvso>
Subject: [OAUTH-WG] Tx Auth BOF agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 17:10:31 -0000

--0000000000003a33460597153551
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello Everyone, see agenda below:

Monday Nov-18-2019 1330

TxAuth Bof Agenda

Introduction and Context   Chairs 10 min

Limitations and Feature Requests

Limitations of OAuth       Justin 10 min
Limitations of OAuth       Torsten 5 min
Feature Requests           Torsten 5 min
Feature Requests           Justin 10 min
Non Authorize Features  Annabelle 15 min

Proposals

OAuth XYZ [1]              Justin 20 min
RAR & PAR [2]             Torsten 20 min

Discussion                 Chairs 15 min

Next Steps                 Chairs 10 min

[1] https://datatracker.ietf.org/doc/draft-richer-transactional-authz/

[2] Rich and Pushed Authorization Requests
https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/



=E1=90=A7

--0000000000003a33460597153551
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><font face=3D"monospace">Hello Everyone, see agenda b=
elow:</font></div><div><font face=3D"monospace"><br></font></div><div><font=
 face=3D"monospace">Monday Nov-18-2019 1330<br></font></div><div><font face=
=3D"monospace"><br></font></div><div><font face=3D"monospace">TxAuth Bof Ag=
enda<br><br>Introduction and Context=C2=A0 =C2=A0Chairs 		10 min<br><br>Lim=
itations and Feature Requests<br><br>Limitations of OAuth=C2=A0 =C2=A0 =C2=
=A0 =C2=A0Justin		10 min<br>Limitations of OAuth=C2=A0 =C2=A0 =C2=A0 =C2=A0=
Torsten		 5 min<br>Feature Requests=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0Torsten		 5 min<br>Feature Requests=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0Justin		10 min <br>Non Authorize Features=C2=A0 Annabelle	15 min<br><=
br>Proposals<br><br>OAuth XYZ [1]=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 Justin		20 min<br>RAR &amp; PAR [2]=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0Torsten		20 min	<br><br>Discussion=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Chairs		15 min<br><br>Next Steps=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Chairs		10 min<b=
r><br>[1] <a href=3D"https://datatracker.ietf.org/doc/draft-richer-transact=
ional-authz/">https://datatracker.ietf.org/doc/draft-richer-transactional-a=
uthz/</a><br><br>[2] Rich and Pushed Authorization Requests<br><a href=3D"h=
ttps://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/">https://datat=
racker.ietf.org/doc/draft-lodderstedt-oauth-rar/</a><br><a href=3D"https://=
datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/">https://datatracker.=
ietf.org/doc/draft-lodderstedt-oauth-par/</a><br></font></div><div><br></di=
v><div><font face=3D"monospace"><br></font></div><div><font face=3D"monospa=
ce"><br></font></div><div class=3D"gmail_quote"><blockquote class=3D"gmail_=
quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,=
204);padding-left:1ex"><div lang=3D"EN-US"><div class=3D"gmail-m_-966421437=
040631011WordSection1"><div><blockquote style=3D"border-top:none;border-rig=
ht:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0=
in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in"><div><div>
</div>
</div>
</blockquote>
</div>
</div>
</div>

</blockquote></div></div><div hspace=3D"streak-pt-mark" style=3D"max-height=
:1px"><img alt=3D"" style=3D"width:0px;max-height:0px;overflow:hidden" src=
=3D"https://mailfoogae.appspot.com/t?sender=3DaZGljay5oYXJkdEBnbWFpbC5jb20%=
3D&amp;type=3Dzerocontent&amp;guid=3D5ecf1f3c-1d58-4a0d-9b9d-194fd1a15aa3">=
<font color=3D"#ffffff" size=3D"1">=E1=90=A7</font></div>

--0000000000003a33460597153551--


From nobody Mon Nov 11 09:22:49 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D64D01208C0 for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 09:22:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VdKqlwPYGjKy for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 09:22:45 -0800 (PST)
Received: from mail-il1-x12e.google.com (mail-il1-x12e.google.com [IPv6:2607:f8b0:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C050120180 for <oauth@ietf.org>; Mon, 11 Nov 2019 09:22:45 -0800 (PST)
Received: by mail-il1-x12e.google.com with SMTP id i6so12751237ilr.11 for <oauth@ietf.org>; Mon, 11 Nov 2019 09:22:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=b8ezXvKh7D4Z5yL1Dhrj+/vA4biOZTKmSN5xa0uuiVM=; b=URbRZX1KlXhrnKN5CZ+oGja0OD55/Yoh0K3ZGJtBVAShTI0kITe7VCrjP8n6ma9RJx OpHJb/nCqeqCmVmLerXW3XaSteSzFAXU1A0iAYlFT5WspmwU2m0/GxcxtFB0txQRD8Kk qHIDNXpAsM0nufohrt/i0ihvgm6itOQOhlZdoDIhOvyDzWhlFiwaVWSqB77yXDqm6zyi olcNnrwQm9J5XjlSjknYksRrtsu8xOHwiJmlbXVS7KEtu3K1aFCLzboDFF1ciS8Omx6K OSutXNPrW6vmUoOlOZHDYU4WYFJqTtOz2OkEMUHZgB4VReUkFo+InWLR4hkStAFrgN6m Dacw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=b8ezXvKh7D4Z5yL1Dhrj+/vA4biOZTKmSN5xa0uuiVM=; b=iT5Hba5Il8FXbwdx7Cq74RX/3+oIC6I449yLivngx30qP6FBuQF46vC+RgJlHcnvf5 Zg3z2JveO6moW+57dMmbd+w1osOKJzynfGmQn81AL8os7qpmpnUwwOCMAcurT030o618 3TsfM4ZrgPsrJb7OLV0Uz73BO0z0PJkbCiWwxoT23m74gIS7lykzYB6lUDVrizB1bf4Z 9IJ9Ywwj7CRm0pR3t+vQPJRfUedTMvTSimtzAQB/+Sk+XedwJFopwKp1yIjzSnMIEG25 7aOZQmFkBYKtdAavEiM1Mmjec1AiI3p1x9dzqhuao/uVDoCG9YEb0sBQi1gBdO06MJIS sPsA==
X-Gm-Message-State: APjAAAXKnsuQupshabG+jFRuwPYN6XC6UtU06HKeCBGHUkNTBM5DiBCp blt6JODXLmsCrO3N1Lct5bjzACxvgVBQGCbR/6SU6eCO
X-Google-Smtp-Source: APXvYqzaDuxfQBC2+i1j0N0d0HQrVAsPTPb0o7kIVVIZDtqfcpX6APx39YJEVRmfev1fdXK9rE5FuK2TNGoj6ECi+MA=
X-Received: by 2002:a92:9cce:: with SMTP id x75mr31355697ill.31.1573492963591;  Mon, 11 Nov 2019 09:22:43 -0800 (PST)
MIME-Version: 1.0
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Mon, 11 Nov 2019 12:22:31 -0500
Message-ID: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000026cbc305971561af"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Agzjk7QE0VHi12T68e-4hHLVnWM>
Subject: [OAUTH-WG] OAuth WG Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 17:22:48 -0000

--00000000000026cbc305971561af
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

All,

We did not receive any comments about the draft agenda.

Here is the agenda for next week:
https://datatracker.ietf.org/doc/agenda-106-oauth/


*Wednesday=E2=80=99s Agenda*

Chairs Update (15 min)
Security Topics =E2=80=93 Torsten (15 min)
Browser-based Apps =E2=80=93 Aaron (30 min)
TXAuth update =E2=80=93 Dick/Justin (15 min)
DPoP =E2=80=93 Brian (15 min)


*Thursday=E2=80=99s Agenda*

Rich Authorization =E2=80=93 Torsten (20 min)
Pushed Authorization =E2=80=93 Torsten (20 min)
Client Intermediary Metadata =E2=80=93 Aaron (20 min)
Authorization Framework: Claims =E2=80=93 Travis (20 min)
10 minutes buffer


Regards,
 Rifaat & Hannes

--00000000000026cbc305971561af
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">All,<div><br></div><div>We did not receive any comments ab=
out the draft agenda.</div><div><br></div><div>Here is the agenda=C2=A0for =
next week:<br></div><div><a href=3D"https://datatracker.ietf.org/doc/agenda=
-106-oauth/">https://datatracker.ietf.org/doc/agenda-106-oauth/</a>=C2=A0=
=C2=A0<br></div><div><br></div><div><br></div><blockquote style=3D"margin:0=
 0 0 40px;border:none;padding:0px"><div><b>Wednesday=E2=80=99s Agenda</b></=
div><div><br></div><div>Chairs Update (15 min)</div><div>Security Topics =
=E2=80=93 Torsten (15 min)</div><div>Browser-based Apps =E2=80=93 Aaron (30=
 min)</div><div>TXAuth update =E2=80=93 Dick/Justin (15 min)</div><div>DPoP=
 =E2=80=93 Brian (15 min)</div><div><br></div><div><br></div><div><b>Thursd=
ay=E2=80=99s Agenda</b></div><div><br></div><div>Rich Authorization =E2=80=
=93 Torsten (20 min)</div><div>Pushed Authorization =E2=80=93 Torsten (20 m=
in)</div><div>Client Intermediary Metadata =E2=80=93 Aaron (20 min)</div><d=
iv>Authorization Framework: Claims =E2=80=93 Travis (20 min)</div><div>10 m=
inutes buffer</div></blockquote><div><br></div><div>Regards,<br></div><div>=
=C2=A0Rifaat &amp; Hannes</div><div><br></div></div>

--00000000000026cbc305971561af--


From nobody Mon Nov 11 14:37:42 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AABE120122 for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 14:37:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sOYD4ULuqn3Y for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 14:37:38 -0800 (PST)
Received: from mail-lf1-x136.google.com (mail-lf1-x136.google.com [IPv6:2a00:1450:4864:20::136]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D67B4120020 for <oauth@ietf.org>; Mon, 11 Nov 2019 14:37:37 -0800 (PST)
Received: by mail-lf1-x136.google.com with SMTP id j14so2549037lfk.6 for <oauth@ietf.org>; Mon, 11 Nov 2019 14:37:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=IXf4yrtCC0t8t8tgbU0vRk4sLczRwX1JeF/x9z3JfXw=; b=CHqFPAyd+vpsl6UReVH0eEM7SAtPx23m09qyMWOCR6K8BH3sl8oSbA68gDqVIOdfxq pYdLXiUmrfYTLtDFfOT+Wlwx8OiikHx2Uns3oP0M6hefsCYViKGvGuPUu5tFGdCZd0Ap npMrAu9xOP1VjeiGY/lLcKnAMp+Cnq0OHkDoPJbLMsogq1o/KOS3drMSTZ7/NwPbqtPH yS9q3uDFmU3Q3ww7/pRW7hCaxudqwjv4oBPXX2r4KzUaaB+LLJ1HExpVXd7jk/nRR7Jp xKw34P7n6F6GMVJtuct/E8eC9PMPASx7ssSU2B8EcZ9pC/zhoeZRxPjCKDHGmXy/LOiS w9kg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=IXf4yrtCC0t8t8tgbU0vRk4sLczRwX1JeF/x9z3JfXw=; b=KKRDa9yvd9anc9E3cMsoKjoWI7fuSI7z5uUgw5NKuxlxlhzoyodDawlPZGgr31F2Tl vLxBdxChK+dBf2eI1wrDAkbXuJp3kfQHiZzRZvpC59GjPH15moPFed5ilDwVaus6jb05 OzKXJjGBnLiNGAv1P+b0HttAbZreEUIUaVKQQGPvOmtuizmqppeA1EcExuYzKccvsAb+ emzlkKqdxPkyztrshozsfxkkJU9rgczQUaYitqIp+gllihpZVVXuqSOxBvMM5JhLr57+ j5IHiGestFLUZHFrhFTvdTWcFe8/eXzKJZaNj/yKSscKSzAEMeccUbVb4GVMy1myX/Xt ksaw==
X-Gm-Message-State: APjAAAX25c9xyCU7yrKVXPlXI/SUd/vn2+gSmvdcR1kpbmur8djDp4co VeIa34mWBHOMtmh3wPSObToIpD+R2HKP0OGx7ZtV8PY2RBwT8r1LUiFUw8UW+KIRTQ9oQ0rswMF 1yOoDfJ+RcVmarQ==
X-Google-Smtp-Source: APXvYqwfbzf+X1Qo4u38e/Awc7ALuleWBtAmfIDQxFguE6hq96mOvbXsQoLF6xz4Nu9R1tSII7Iu2+9o7Tt/dZiGVyY=
X-Received: by 2002:a19:6b04:: with SMTP id d4mr17480283lfa.10.1573511855966;  Mon, 11 Nov 2019 14:37:35 -0800 (PST)
MIME-Version: 1.0
References: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com>
In-Reply-To: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 11 Nov 2019 15:37:09 -0700
Message-ID: <CA+k3eCS1oZ-Y=Pvzze9s3fruJK2gZHm39H4N0A0f9dXS2ThVMw@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000039a557059719c718"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uaMnGSDWCCTL3HnuWCTs26wEQlg>
Subject: Re: [OAUTH-WG] OAuth WG Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 22:37:41 -0000

--00000000000039a557059719c718
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

With a relatively short 15 minutes and the last time slot of the Wednesday
meeting, I'm a little worried that the DPoP presentation and discussion
will get rushed or truncated due to time constraints and/or overrun. Can I
make a preemptive request for use of that buffer time on Thursday at the
top of that session, if needed, to finish up?

On Mon, Nov 11, 2019 at 10:23 AM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
wrote:

> All,
>
> We did not receive any comments about the draft agenda.
>
> Here is the agenda for next week:
> https://datatracker.ietf.org/doc/agenda-106-oauth/
>
>
> *Wednesday=E2=80=99s Agenda*
>
> Chairs Update (15 min)
> Security Topics =E2=80=93 Torsten (15 min)
> Browser-based Apps =E2=80=93 Aaron (30 min)
> TXAuth update =E2=80=93 Dick/Justin (15 min)
> DPoP =E2=80=93 Brian (15 min)
>
>
> *Thursday=E2=80=99s Agenda*
>
> Rich Authorization =E2=80=93 Torsten (20 min)
> Pushed Authorization =E2=80=93 Torsten (20 min)
> Client Intermediary Metadata =E2=80=93 Aaron (20 min)
> Authorization Framework: Claims =E2=80=93 Travis (20 min)
> 10 minutes buffer
>
>
> Regards,
>  Rifaat & Hannes
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--00000000000039a557059719c718
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">With a relatively short 15 minutes and the last time slot =
of the Wednesday meeting, I&#39;m a little worried that the DPoP presentati=
on and discussion will get rushed or truncated due to time constraints and/=
or overrun. Can I make a preemptive request for use of that buffer time on =
Thursday at the top of that session, if needed, to finish up? <br></div><br=
><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, N=
ov 11, 2019 at 10:23 AM Rifaat Shekh-Yusef &lt;<a href=3D"mailto:rifaat.iet=
f@gmail.com">rifaat.ietf@gmail.com</a>&gt; wrote:<br></div><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r=
gb(204,204,204);padding-left:1ex"><div dir=3D"ltr">All,<div><br></div><div>=
We did not receive any comments about the draft agenda.</div><div><br></div=
><div>Here is the agenda=C2=A0for next week:<br></div><div><a href=3D"https=
://datatracker.ietf.org/doc/agenda-106-oauth/" target=3D"_blank">https://da=
tatracker.ietf.org/doc/agenda-106-oauth/</a>=C2=A0=C2=A0<br></div><div><br>=
</div><div><br></div><blockquote style=3D"margin:0px 0px 0px 40px;border:me=
dium none;padding:0px"><div><b>Wednesday=E2=80=99s Agenda</b></div><div><br=
></div><div>Chairs Update (15 min)</div><div>Security Topics =E2=80=93 Tors=
ten (15 min)</div><div>Browser-based Apps =E2=80=93 Aaron (30 min)</div><di=
v>TXAuth update =E2=80=93 Dick/Justin (15 min)</div><div>DPoP =E2=80=93 Bri=
an (15 min)</div><div><br></div><div><br></div><div><b>Thursday=E2=80=99s A=
genda</b></div><div><br></div><div>Rich Authorization =E2=80=93 Torsten (20=
 min)</div><div>Pushed Authorization =E2=80=93 Torsten (20 min)</div><div>C=
lient Intermediary Metadata =E2=80=93 Aaron (20 min)</div><div>Authorizatio=
n Framework: Claims =E2=80=93 Travis (20 min)</div><div>10 minutes buffer</=
div></blockquote><div><br></div><div>Regards,<br></div><div>=C2=A0Rifaat &a=
mp; Hannes</div><div><br></div></div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--00000000000039a557059719c718--


From nobody Mon Nov 11 14:49:35 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A0E4120841 for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 14:49:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g9UpuGoU0o3a for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 14:49:30 -0800 (PST)
Received: from mail-io1-xd32.google.com (mail-io1-xd32.google.com [IPv6:2607:f8b0:4864:20::d32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E9FA120048 for <oauth@ietf.org>; Mon, 11 Nov 2019 14:49:16 -0800 (PST)
Received: by mail-io1-xd32.google.com with SMTP id k13so8038680ioa.9 for <oauth@ietf.org>; Mon, 11 Nov 2019 14:49:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=eDR2VQFKbYXNYJHLzRK4Mru1a0Q3jvsZphOz+dcLZTI=; b=q4f/9ldIc7/afhxqrKl6ccF0EGjndEa3wDHTvHY4LZV8+544UJ7R6RFiHd6YWk3hvI mjhzuy6WnEHW8z36yedCHiN08vygdT8dt7+19vvBtQ/STXEbq4NSy6yKEcesVCG5nlxn dIehPbKXSPJtwhhdcDJrscJ697tiCT2A2NhyiFvOEZTml2KBC9Vhw0D5/8G0L945RYr1 U2l6UfhnIo0LRVmovin+09CB98ujdaCrvwVYRZMgp1V0Kb5oLMVWnAjy10Tn26KL8qDd VN0X620tWxVwzzMnlD5mEjXjF636twfWK56DlRDrJBr8yZGT2GihuZsTYgBr4TOKZCrK qNgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=eDR2VQFKbYXNYJHLzRK4Mru1a0Q3jvsZphOz+dcLZTI=; b=c1KEkNQuWsjuGnh7DgE6JuC4we86/ORcLo0fNt/HEDNUehAh39OCpXW7a/jScKu5VE Y/TvQKv4GINdfB2EjLXXbRjK8Sa7ZJ1+gaHUbmEjOiprDrGj1vkFdK+9haF3NRJlDtn/ LWYR/Tf3afSz0RcOrFtG82U15nE+Ttkv4By6XFFYAn1hxJ2uSxxWPY3cBOTg1vb9otmd DKQvz/f+Gg/R7oX1xk0TkP+21GWxpu5S/oXUlG+D6N5/ziHqbhST8/+Pwtjh9dMZ8oyC 0MJZawLHGW2hDCrwulORh9Jeve96k2LlbgOCtWW+kosQeirUlnJRkWI3wZWbZhqVx0AG HSHQ==
X-Gm-Message-State: APjAAAXU55omtKZ/z4dz1UbH0Zy1/dnjbbMiMAZAp3O1yBGDpuJUFbPW oUVUjuzOEbrqsyqrCEqR7/pOIoR2Sv2nCOV4QnI=
X-Google-Smtp-Source: APXvYqzVdu8H4nbd4yf8Fthyk37EgcjdoPVID6g2rMAgOartF6nz4oY2+yTX7sGv6Jr0I1PKFFKW7u/XWsoy3oCHYng=
X-Received: by 2002:a02:a810:: with SMTP id f16mr1556665jaj.73.1573512555273;  Mon, 11 Nov 2019 14:49:15 -0800 (PST)
MIME-Version: 1.0
References: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com> <CA+k3eCS1oZ-Y=Pvzze9s3fruJK2gZHm39H4N0A0f9dXS2ThVMw@mail.gmail.com>
In-Reply-To: <CA+k3eCS1oZ-Y=Pvzze9s3fruJK2gZHm39H4N0A0f9dXS2ThVMw@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Mon, 11 Nov 2019 17:49:01 -0500
Message-ID: <CAGL6epKOersfByONzZXytVFCC1BTg=gBUR5N12YtK=KOcf0DCw@mail.gmail.com>
To: Brian Campbell <bcampbell@pingidentity.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e821cd059719f013"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/sS99kHWFwjzz_QRrlyVk-SWnhQM>
Subject: Re: [OAUTH-WG] OAuth WG Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 22:49:33 -0000

--000000000000e821cd059719f013
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Sure. It's yours.

Regards,
 Rifaat


On Mon, Nov 11, 2019 at 5:37 PM Brian Campbell <bcampbell@pingidentity.com>
wrote:

> With a relatively short 15 minutes and the last time slot of the Wednesda=
y
> meeting, I'm a little worried that the DPoP presentation and discussion
> will get rushed or truncated due to time constraints and/or overrun. Can =
I
> make a preemptive request for use of that buffer time on Thursday at the
> top of that session, if needed, to finish up?
>
> On Mon, Nov 11, 2019 at 10:23 AM Rifaat Shekh-Yusef <rifaat.ietf@gmail.co=
m>
> wrote:
>
>> All,
>>
>> We did not receive any comments about the draft agenda.
>>
>> Here is the agenda for next week:
>> https://datatracker.ietf.org/doc/agenda-106-oauth/
>>
>>
>> *Wednesday=E2=80=99s Agenda*
>>
>> Chairs Update (15 min)
>> Security Topics =E2=80=93 Torsten (15 min)
>> Browser-based Apps =E2=80=93 Aaron (30 min)
>> TXAuth update =E2=80=93 Dick/Justin (15 min)
>> DPoP =E2=80=93 Brian (15 min)
>>
>>
>> *Thursday=E2=80=99s Agenda*
>>
>> Rich Authorization =E2=80=93 Torsten (20 min)
>> Pushed Authorization =E2=80=93 Torsten (20 min)
>> Client Intermediary Metadata =E2=80=93 Aaron (20 min)
>> Authorization Framework: Claims =E2=80=93 Travis (20 min)
>> 10 minutes buffer
>>
>>
>> Regards,
>>  Rifaat & Hannes
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.*

--000000000000e821cd059719f013
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Sure. It&#39;s yours.<div><br></div><div>Regards,</div><di=
v>=C2=A0Rifaat</div><div><br></div></div><br><div class=3D"gmail_quote"><di=
v dir=3D"ltr" class=3D"gmail_attr">On Mon, Nov 11, 2019 at 5:37 PM Brian Ca=
mpbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com">bcampbell@pingiden=
tity.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le=
ft:1ex"><div dir=3D"ltr">With a relatively short 15 minutes and the last ti=
me slot of the Wednesday meeting, I&#39;m a little worried that the DPoP pr=
esentation and discussion will get rushed or truncated due to time constrai=
nts and/or overrun. Can I make a preemptive request for use of that buffer =
time on Thursday at the top of that session, if needed, to finish up? <br><=
/div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">O=
n Mon, Nov 11, 2019 at 10:23 AM Rifaat Shekh-Yusef &lt;<a href=3D"mailto:ri=
faat.ietf@gmail.com" target=3D"_blank">rifaat.ietf@gmail.com</a>&gt; wrote:=
<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr=
">All,<div><br></div><div>We did not receive any comments about the draft a=
genda.</div><div><br></div><div>Here is the agenda=C2=A0for next week:<br><=
/div><div><a href=3D"https://datatracker.ietf.org/doc/agenda-106-oauth/" ta=
rget=3D"_blank">https://datatracker.ietf.org/doc/agenda-106-oauth/</a>=C2=
=A0=C2=A0<br></div><div><br></div><div><br></div><blockquote style=3D"margi=
n:0px 0px 0px 40px;border:medium none;padding:0px"><div><b>Wednesday=E2=80=
=99s Agenda</b></div><div><br></div><div>Chairs Update (15 min)</div><div>S=
ecurity Topics =E2=80=93 Torsten (15 min)</div><div>Browser-based Apps =E2=
=80=93 Aaron (30 min)</div><div>TXAuth update =E2=80=93 Dick/Justin (15 min=
)</div><div>DPoP =E2=80=93 Brian (15 min)</div><div><br></div><div><br></di=
v><div><b>Thursday=E2=80=99s Agenda</b></div><div><br></div><div>Rich Autho=
rization =E2=80=93 Torsten (20 min)</div><div>Pushed Authorization =E2=80=
=93 Torsten (20 min)</div><div>Client Intermediary Metadata =E2=80=93 Aaron=
 (20 min)</div><div>Authorization Framework: Claims =E2=80=93 Travis (20 mi=
n)</div><div>10 minutes buffer</div></blockquote><div><br></div><div>Regard=
s,<br></div><div>=C2=A0Rifaat &amp; Hannes</div><div><br></div></div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i></blockquote></div>

--000000000000e821cd059719f013--


From nobody Mon Nov 11 15:29:02 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 904AC1200E3 for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 15:29:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7YcnezuPPa8c for <oauth@ietfa.amsl.com>; Mon, 11 Nov 2019 15:28:58 -0800 (PST)
Received: from mail-io1-xd2c.google.com (mail-io1-xd2c.google.com [IPv6:2607:f8b0:4864:20::d2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5613D120088 for <oauth@ietf.org>; Mon, 11 Nov 2019 15:28:58 -0800 (PST)
Received: by mail-io1-xd2c.google.com with SMTP id q83so16578807iod.1 for <oauth@ietf.org>; Mon, 11 Nov 2019 15:28:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to;  bh=uzEN3M1JzMIk8Wt+ywHvP9TO+IJ5MR06USlkFON+y7o=; b=PgDEUfeSxQRaVhHlrxzk+44KUxCFfQXHKxFipcksTNkrOvLC+EXCDjVcUZf96NRtBL nI+IawVgV1Lo7LxlzVWdWBdKGGRTifEhu1Md7ly0oJ+BQYDYLCBM4VlFSTumcGCkFPnZ 3z6i2+cUaPbtYImCBEBPVSNM4526oeY4hhL2hzrmtQgBWkXL/tqYr774jlRO1GcQ2snC 1/TovoEMv6nInueXUcL2YoZSy9JHSjwfQi6lRmdbB+yf6trqsWZvi91AHwfTHTxDu01/ E/0pSTkLoHZVZHvRrFiQSWBS0nFHX2hn1+Hn16TGm/mMb4alJUT3D0nVaG8Jf/DvU1GQ keYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=uzEN3M1JzMIk8Wt+ywHvP9TO+IJ5MR06USlkFON+y7o=; b=oGfURZouLqRuIHEXmuuCtjH44+sWS+XHrOiviPZ3siPBrv4XMlS/ttFpweGPZxp1W+ SMOz42rVRMFtbEwsMS44heThPlqVqCLITTZ8y342Ev7JNHs4qhtPtFIhgxAVJR+6tVzf WpwpgqCoKj9z0hcTUVGhWGq/F/DY3BkvpvuGwEYoHfKKJhAqeBvuMqKIM5btC9uYgxod s0MAqaOE8AxfxIkWcvJigZ6FQJC7ya3e/lDUfjJeiwBmh20m7pEpURfj1WD1Mm3YKfVr vBEXDjfpSolCnlw9HNPLIzRhRJLes1ODfUsb7awUa/kwaPRvpPnHUHtFd2uvtifKIhXz GOUQ==
X-Gm-Message-State: APjAAAXYqxr2t4DVQpPMu0zC6Jc8vqQ4/xFtMZKGANjHvzYxrlwL083e 65K9gxH0BrQkApOXOVUOYYG1I4fdPtAP/u/lOn8icLZa
X-Google-Smtp-Source: APXvYqzCY9PGCUL7vNiUlg/7Rp/b18otIvVoHrxPmo+zHVpe+GuX07i8gW4R8w1+FdOyWLMx04JCt7siPG9oj9Qt9W8=
X-Received: by 2002:a5e:8b4d:: with SMTP id z13mr2889741iom.36.1573514937274;  Mon, 11 Nov 2019 15:28:57 -0800 (PST)
MIME-Version: 1.0
References: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com>
In-Reply-To: <CAGL6epK2oTbLiUsceeGbqhkqSh-6iR=M+O_wqUxXcZAu5JfYEg@mail.gmail.com>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Mon, 11 Nov 2019 18:28:46 -0500
Message-ID: <CAGL6epLZ2acFqAv2gK6L-CoV+YPaDVcboVP_v6cONt2uHajcgw@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e2960a05971a7edb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/euNOWxWlzy5Hz-BnLJ_3tFuIEiE>
Subject: Re: [OAUTH-WG] OAuth WG Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 23:29:00 -0000

--000000000000e2960a05971a7edb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Here is the updated agenda:

   Wednesday=E2=80=99s Agenda

Chairs Update (15 min)
Security Topics =E2=80=93 Torsten (15 min)
Browser-based Apps =E2=80=93 Aaron (30 min)
TXAuth update =E2=80=93 Dick/Justin (15 min)
DPoP =E2=80=93 Brian (15 min)


   Thursday=E2=80=99s Agenda

DPoP - Brian (10 min)
Rich Authorization =E2=80=93 Torsten (20 min)
Pushed Authorization =E2=80=93 Torsten (20 min)
Client Intermediary Metadata =E2=80=93 Aaron (20 min)
Authorization Framework: Claims =E2=80=93 Travis (20 min)


Regards,
 Rifaat



On Mon, Nov 11, 2019 at 12:22 PM Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
wrote:

> All,
>
> We did not receive any comments about the draft agenda.
>
> Here is the agenda for next week:
> https://datatracker.ietf.org/doc/agenda-106-oauth/
>
>
> *Wednesday=E2=80=99s Agenda*
>
> Chairs Update (15 min)
> Security Topics =E2=80=93 Torsten (15 min)
> Browser-based Apps =E2=80=93 Aaron (30 min)
> TXAuth update =E2=80=93 Dick/Justin (15 min)
> DPoP =E2=80=93 Brian (15 min)
>
>
> *Thursday=E2=80=99s Agenda*
>
> Rich Authorization =E2=80=93 Torsten (20 min)
> Pushed Authorization =E2=80=93 Torsten (20 min)
> Client Intermediary Metadata =E2=80=93 Aaron (20 min)
> Authorization Framework: Claims =E2=80=93 Travis (20 min)
> 10 minutes buffer
>
>
> Regards,
>  Rifaat & Hannes
>
>

--000000000000e2960a05971a7edb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Here is the updated agenda:<div><br></div><div><pre style=
=3D"box-sizing:border-box;overflow:auto;font-family:&quot;PT Mono&quot;,Mon=
aco,monospace;font-size:14px;padding:10px;margin-top:0px;margin-bottom:10.5=
px;line-height:1.214;color:rgb(0,0,0);word-break:break-all;background-color=
:rgb(255,253,245);border:1px solid rgb(204,204,204);border-radius:4px">   W=
ednesday=E2=80=99s Agenda

Chairs Update (15 min)
Security Topics =E2=80=93 Torsten (15 min)
Browser-based Apps =E2=80=93 Aaron (30 min)
TXAuth update =E2=80=93 Dick/Justin (15 min)
DPoP =E2=80=93 Brian (15 min)


   Thursday=E2=80=99s Agenda

DPoP - Brian (10 min)
Rich Authorization =E2=80=93 Torsten (20 min)
Pushed Authorization =E2=80=93 Torsten (20 min)
Client Intermediary Metadata =E2=80=93 Aaron (20 min)
Authorization Framework: Claims =E2=80=93 Travis (20 min)</pre></div><div><=
br></div><div>Regards,</div><div>=C2=A0Rifaat</div><div><br></div><div><br>=
</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_=
attr">On Mon, Nov 11, 2019 at 12:22 PM Rifaat Shekh-Yusef &lt;<a href=3D"ma=
ilto:rifaat.ietf@gmail.com">rifaat.ietf@gmail.com</a>&gt; wrote:<br></div><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">All,<div>=
<br></div><div>We did not receive any comments about the draft agenda.</div=
><div><br></div><div>Here is the agenda=C2=A0for next week:<br></div><div><=
a href=3D"https://datatracker.ietf.org/doc/agenda-106-oauth/" target=3D"_bl=
ank">https://datatracker.ietf.org/doc/agenda-106-oauth/</a>=C2=A0=C2=A0<br>=
</div><div><br></div><div><br></div><blockquote style=3D"margin:0px 0px 0px=
 40px;border:none;padding:0px"><div><b>Wednesday=E2=80=99s Agenda</b></div>=
<div><br></div><div>Chairs Update (15 min)</div><div>Security Topics =E2=80=
=93 Torsten (15 min)</div><div>Browser-based Apps =E2=80=93 Aaron (30 min)<=
/div><div>TXAuth update =E2=80=93 Dick/Justin (15 min)</div><div>DPoP =E2=
=80=93 Brian (15 min)</div><div><br></div><div><br></div><div><b>Thursday=
=E2=80=99s Agenda</b></div><div><br></div><div>Rich Authorization =E2=80=93=
 Torsten (20 min)</div><div>Pushed Authorization =E2=80=93 Torsten (20 min)=
</div><div>Client Intermediary Metadata =E2=80=93 Aaron (20 min)</div><div>=
Authorization Framework: Claims =E2=80=93 Travis (20 min)</div><div>10 minu=
tes buffer</div></blockquote><div><br></div><div>Regards,<br></div><div>=C2=
=A0Rifaat &amp; Hannes</div><div><br></div></div>
</blockquote></div>

--000000000000e2960a05971a7edb--


From nobody Tue Nov 12 01:19:29 2019
Return-Path: <denis.ietf@free.fr>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB2701201E3 for <oauth@ietfa.amsl.com>; Tue, 12 Nov 2019 01:19:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level: 
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 74lQMGZOIGMu for <oauth@ietfa.amsl.com>; Tue, 12 Nov 2019 01:19:25 -0800 (PST)
Received: from smtp.smtpout.orange.fr (smtp04.smtpout.orange.fr [80.12.242.126]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62CE9120046 for <oauth@ietf.org>; Tue, 12 Nov 2019 01:19:24 -0800 (PST)
Received: from [192.168.1.11] ([90.79.49.31]) by mwinf5d07 with ME id QxKM2100E0gNo7u03xKMJ0; Tue, 12 Nov 2019 10:19:22 +0100
X-ME-Helo: [192.168.1.11]
X-ME-Auth: ZGVuaXMucGlua2FzQG9yYW5nZS5mcg==
X-ME-Date: Tue, 12 Nov 2019 10:19:22 +0100
X-ME-IP: 90.79.49.31
From: Denis <denis.ietf@free.fr>
To: oauth@ietf.org
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAMVRk++o2MdndK37FfADzEZJx988o=PvPWN_mhdgDK=OU1dtow@mail.gmail.com> <3ECDBBC5-F183-4227-857A-A95C53C74274@mit.edu> <d021c84a-36f3-f371-2903-2b6051ee654f@free.fr> <8324a1d3-2fe8-430c-facc-1f3c5d7db260@danielfett.de> <21a36a19-1f24-25d9-9478-1e282a1bea19@free.fr> <CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com> <ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr> <9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de>
Message-ID: <91777738-cbac-ad52-8226-01712f336952@free.fr>
Date: Tue, 12 Nov 2019 10:19:22 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de>
Content-Type: multipart/alternative; boundary="------------D8FCC4A2B0B9830F6459F117"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Gc8T8mRkF5vJT7fV3uSc66B_9Fs>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Nov 2019 09:19:28 -0000

This is a multi-part message in MIME format.
--------------D8FCC4A2B0B9830F6459F117
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

Daniel,

> I have the feeling that this attack aims at breaking a security 
> property that OAuth does not claim to fulfill (and that nobody expects 
> OAuth to fulfill):

The first comment sent to the list was to ask whether the list of 
attacks was complete. IMO, the list should not be limited to the attacks 
that can be mitigated
using best current practices, but should include all /known /kinds of 
attacks.

At the moment a reader might get the impression that all /known /types 
of attacks have been analyzed and considered.

The document even refers to formal methods (which might impress some 
readers), but when looking at the perimeter of the model that has been 
used,
it is obvious that the ABC attack could not be discovered and thus 
considered.

> "Given two colluding clients A and B, where A has obtained an access 
> token T, B cannot use T to access protected resources."
> (analogously for two users U_A and U_B of the clients, where the users 
> have some session with a backend client.)
>
> And there are good reasons why this is not captured by the security 
> property (Hans' screenshot, for example).
???
> As far as I know, this property is neither achieved by classical 
> first-party session-based authentication/authorization nor by any 
> other web-based mechanism, or is it?

Please refer back to what I said, i.e."Whatever kind of cryptographic is 
being used, when two users collaborate, a software-only solution will be 
unable to prevent
the transmission of an attribute of a user that possess it to another 
user that does not possess it"and you will get the response. Since OAuth 
is a software based solution,
it is unable to counter clients collusion attacks. Adding a secure 
element to only protect private/secret keys is ineffective to counter 
clients collusion attacks.

For potential implementers, it is important to know the limitations of a 
protocol before implementing it.

Denis

> -Daniel
>
> Am 08.11.19 um 14:13 schrieb Denis:
>> Hello Hans,
>>
>> You wrote:
>>
>>> one client can always share the protected data with another client 
>>> once retrieved, regardless of pop or secure elements
>>
>> No, there exist means that prevent a client to share the protected 
>> data with another client , simply because the client cannot access to it.
>> The protected data is placed inside the secure element and thus a 
>> client has no way to extract it for the benefit of another client.
>>
>> The protected data is used by the secure element in such a way so 
>> that it cannot be used for the benefit of another user.
>>
>> But we are already in the field of the solutions and no more in the 
>> field of the requirements.
>>
>> Denis
>>
>>>
>>> Hans.
>>>
>>> On Fri, Nov 8, 2019 at 8:38 AM Denis <denis.ietf@free.fr 
>>> <mailto:denis.ietf@free.fr>> wrote:
>>>
>>>     Daniel,
>>>
>>>     No. It is not a correct summary. One client can allow another
>>>     client to get an access token that belongs to it.
>>>     The key point is that a software only solution can't prevent
>>>     this collaborative attack and since, at this time,
>>>     the OAuth WG is not considering the use of secure elements, the
>>>     attack cannot be countered.
>>>
>>>     Please have a look at:
>>>     https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html
>>>
>>>     Denis
>>>
>>>>     Hi Denis,
>>>>
>>>>     Am 07.11.19 um 09:16 schrieb Denis:
>>>>>
>>>>>     *Whatever kind of cryptographic is being used, when two users
>>>>>     collaborate, a software-only solution will be unable to
>>>>>     prevent the transmission *
>>>>>     *of an attribute of a user that possess it to another user
>>>>>     that does not possess it. *
>>>>>
>>>>     To stay in OAuth lingo, what you are saying is: Two
>>>>     collaborating clients can exchange their access tokens and use
>>>>     them.
>>>>
>>>>     Is that a correct summary of your attack?
>>>>
>>>>     -Daniel
>>>>
>>>>
>>>>
>>>>     _______________________________________________
>>>>     OAuth mailing list
>>>>     OAuth@ietf.org  <mailto:OAuth@ietf.org>
>>>>     https://www.ietf.org/mailman/listinfo/oauth
>>>
>>>
>>>     _______________________________________________
>>>     OAuth mailing list
>>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>     https://www.ietf.org/mailman/listinfo/oauth
>>>
>>>
>>>
>>> -- 
>>> hans.zandbelt@zmartzone.eu <mailto:hans.zandbelt@zmartzone.eu>
>>> ZmartZone IAM - www.zmartzone.eu <http://www.zmartzone.eu>
>>
>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth



--------------D8FCC4A2B0B9830F6459F117
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Daniel,</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote type="cite"
      cite="mid:9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div class="moz-cite-prefix">I have the feeling that this attack
        aims at breaking a security property that OAuth does not claim
        to fulfill (and that nobody expects OAuth to fulfill):</div>
    </blockquote>
    <p>The first comment sent to the list was to ask whether the list of
      attacks was complete. IMO, the list should not be limited to the
      attacks that can be mitigated <br>
      using best current practices, but should include all <i>known </i>kinds
      of attacks. <br>
    </p>
    <p>At the moment a reader might get the impression that all <i>known
      </i>types of attacks have been analyzed and considered.</p>
    <p>The document even refers to formal methods (which might impress
      some readers), but when looking at the perimeter of the model that
      has been used, <br>
      it is obvious that the ABC attack could not be discovered and thus
      considered.</p>
    <blockquote type="cite"
      cite="mid:9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de">
      <div class="moz-cite-prefix">"Given two colluding clients A and B,
        where A has obtained an access token T, B cannot use T to access
        protected resources."</div>
      (analogously for two users U_A and U_B of the clients, where the
      users have some session with a backend client.)<br>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">And there are good reasons why this
        is not captured by the security property (Hans' screenshot, for
        example).</div>
    </blockquote>
    ???<br>
    <blockquote type="cite"
      cite="mid:9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de">
      <div class="moz-cite-prefix">As far as I know, this property is
        neither achieved by classical first-party session-based
        authentication/authorization nor by any other web-based
        mechanism, or is it?</div>
    </blockquote>
    <p>Please refer back to what I said, i.e."<span
        style="font-family:Calibri" lang="EN-US"> Whatever kind of
        cryptographic is being used, when two users collaborate, a
        software-only solution will be unable to prevent <br>
        the transmissionÂ </span><span style="font-family:Calibri"
        lang="EN-US"> of an attribute of a user that possess it to
        another user that does not possess it"and you will get the
        response. Since OAuth is a software based solution, <br>
        it is unable to counter clients collusion attacks. Adding a
        secure element to only protect private/secret keys is
        ineffective </span><span style="font-family:Calibri"
        lang="EN-US">to counter clients collusion attacks.</span></p>
    <p>For potential implementers, it is important to know the
      limitations of a protocol before implementing it.<br>
      <span style="font-family:Calibri" lang="EN-US"></span><span
        style="font-family:Calibri" lang="EN-US"></span></p>
    <p>Denis<br>
    </p>
    <blockquote type="cite"
      cite="mid:9927a0d5-6202-3375-4ff3-2ee510beb814@danielfett.de">
      <div class="moz-cite-prefix">-Daniel<br>
      </div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">Am 08.11.19 um 14:13 schrieb Denis:<br>
      </div>
      <blockquote type="cite"
        cite="mid:ff668a74-52f9-3ac9-acf0-ad3e27e98ea9@free.fr">
        <meta http-equiv="Content-Type" content="text/html;
          charset=UTF-8">
        <div class="moz-cite-prefix">Hello Hans,</div>
        <div class="moz-cite-prefix"><br>
        </div>
        <div class="moz-cite-prefix">You wrote:</div>
        <br>
        <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
          <meta http-equiv="content-type" content="text/html;
            charset=UTF-8">
          <div dir="ltr">one client can always share the protected data
            with another client once retrieved, regardless of pop or
            secure elements</div>
        </blockquote>
        <p>No, there exist means that prevent a client to share the
          protected data with another client , simply because the client
          cannot access to it.<br>
          The protected data is placed inside the secure element and
          thus a client has no way to extract it for the benefit of
          another client. <br>
        </p>
        <p>The protected data is used by the secure element in such a
          way so that it cannot be used for the benefit of another user.</p>
        <p>But we are already in the field of the solutions and no more
          in the field of the requirements.<br>
        </p>
        <p>Denis</p>
        <blockquote type="cite"
cite="mid:CA+iA6uhqVf9B2VxzS7cFx_ATSymB9gsAk0ebpjdv99ymW6RjXA@mail.gmail.com">
          <div dir="ltr">
            <div><br>
            </div>
            <div>Hans.</div>
          </div>
          <br>
          <div class="gmail_quote">
            <div dir="ltr" class="gmail_attr">On Fri, Nov 8, 2019 at
              8:38 AM Denis &lt;<a href="mailto:denis.ietf@free.fr"
                moz-do-not-send="true">denis.ietf@free.fr</a>&gt; wrote:<br>
            </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
              0.8ex;border-left:1px solid
              rgb(204,204,204);padding-left:1ex">
              <div bgcolor="#FFFFFF">
                <div>Daniel,</div>
                <div><br>
                </div>
                <div>No. It is not a correct summary. One client can
                  allow another client to get an access token that
                  belongs to it.</div>
                <div>The key point is that a software only solution
                  can't prevent this collaborative attack and since, at
                  this time, <br>
                  the OAuth WG is not considering the use of secure
                  elements, the attack cannot be countered.</div>
                <div><br>
                </div>
                Please have a look at: <span
                  style="font-family:Calibri" lang="EN-US"><span
                    style="color:blue"><a
                      href="https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html"
                      target="_blank" moz-do-not-send="true">https://www.ietf.org/mail-archive/web/oauth/current/msg16767.html</a></span></span>
                <div><br>
                </div>
                <div>
                  <div>Denis<br>
                    <span style="font-family:Calibri" lang="EN-US"><span
                        style="color:blue"></span></span></div>
                </div>
                <div><span style="font-family:Calibri" lang="EN-US"><span
                      style="color:blue"></span></span></div>
                <div>Â  <br>
                </div>
                <blockquote type="cite">
                  <div>Hi Denis,<br>
                  </div>
                  <div><br>
                  </div>
                  <div>Am 07.11.19 um 09:16 schrieb Denis:<br>
                  </div>
                  <blockquote type="cite">
                    <div><br>
                      <p class="MsoNormal" style="margin-top:6pt"> <span
                          style="font-family:Calibri" lang="EN-US">Â Â Â Â Â Â 
                          <b>Whatever kind of cryptographic is being
                            used, when two users collaborate, a
                            software-only solution will be unable to
                            prevent the transmission </b></span><br>
                        <span style="font-family:Calibri" lang="EN-US"><b>Â Â Â Â Â Â 
                            of an attribute of a user that possess it to
                            another user that does not possess it. </b></span><br>
                      </p>
                    </div>
                  </blockquote>
                  <p>To stay in OAuth lingo, what you are saying is: Two
                    collaborating clients can exchange their access
                    tokens and use them.<br>
                  </p>
                  <p>Is that a correct summary of your attack?</p>
                  <p>-Daniel<br>
                  </p>
                  <p><br>
                  </p>
                  <br>
                  <fieldset></fieldset>
                  <pre>_______________________________________________
OAuth mailing list
<a href="mailto:OAuth@ietf.org" target="_blank" moz-do-not-send="true">OAuth@ietf.org</a>
<a href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
                </blockquote>
                <p><br>
                </p>
              </div>
              _______________________________________________<br>
              OAuth mailing list<br>
              <a href="mailto:OAuth@ietf.org" target="_blank"
                moz-do-not-send="true">OAuth@ietf.org</a><br>
              <a href="https://www.ietf.org/mailman/listinfo/oauth"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a><br>
            </blockquote>
          </div>
          <br clear="all">
          <div><br>
          </div>
          -- <br>
          <div dir="ltr" class="gmail_signature">
            <div dir="ltr">
              <div>
                <div dir="ltr">
                  <div dir="ltr">
                    <div style="font-size:small"><a
                        href="mailto:hans.zandbelt@zmartzone.eu"
                        target="_blank" moz-do-not-send="true">hans.zandbelt@zmartzone.eu</a></div>
                    <div style="font-size:small">ZmartZone IAM - <a
                        href="http://www.zmartzone.eu" target="_blank"
                        moz-do-not-send="true">www.zmartzone.eu</a><br>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </blockquote>
        <p><br>
        </p>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org" moz-do-not-send="true">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth" moz-do-not-send="true">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
      </blockquote>
      <p><br>
      </p>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------D8FCC4A2B0B9830F6459F117--


From nobody Wed Nov 13 01:17:17 2019
Return-Path: <denis.ietf@free.fr>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C0D1208B6 for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 01:17:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level: 
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gIm8xR0tQ2wE for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 01:17:13 -0800 (PST)
Received: from smtp.smtpout.orange.fr (smtp08.smtpout.orange.fr [80.12.242.130]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A5301208B5 for <oauth@ietf.org>; Wed, 13 Nov 2019 01:17:12 -0800 (PST)
Received: from [192.168.1.11] ([90.79.49.31]) by mwinf5d16 with ME id RMH92100J0gNo7u03MH9xh; Wed, 13 Nov 2019 10:17:10 +0100
X-ME-Helo: [192.168.1.11]
X-ME-Auth: ZGVuaXMucGlua2FzQG9yYW5nZS5mcg==
X-ME-Date: Wed, 13 Nov 2019 10:17:10 +0100
X-ME-IP: 90.79.49.31
To: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, oauth <oauth@ietf.org>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com>
From: Denis <denis.ietf@free.fr>
Message-ID: <f1b61e85-d7e3-7a66-9e85-caaa94726ebf@free.fr>
Date: Wed, 13 Nov 2019 10:17:09 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------2CEB5D99FA92756A7E7B1E47"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/WC8jCC-U3bAhlBHEVRLAdSOuY98>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2019 09:17:16 -0000

This is a multi-part message in MIME format.
--------------2CEB5D99FA92756A7E7B1E47
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Hello Brian,

Section 2 states:

 Â Â  Under the attacker model defined in [I-D.ietf-oauth-security-topics],
 Â Â  the mechanism defined by this specification aims to prevent token
 Â Â  replay at a different endpoint.

 Â Â  More precisely, if an adversary is able to get hold of an access
 Â Â  token or refresh token because it set up a counterfeit authorization
 Â Â  server or resource server, the adversary is not able to replay the
 Â Â  respective token at another authorization or resource server.

The problem to be solved is NOT to prevent token replay at a different 
endpoint, but to prevent token replay at the same or a different endpoint.

The text is only considering an adversary, but is omitting to consider 
collusion attacks between clients.

Since [I-D.ietf-oauth-security-topics] is "OAuth 2.0 Security Best 
Current Practice", the comments I sent to the list are applicable to 
this document too.
DPoP is not able to counter collusion attacks between clients and this 
should be clearly advertised in the abstract, in the main objectives 
(section 2)
and in the security considerations (section 9).

Denis

> Hello WG,
>
> Just a quick note to let folks know that -03 of the DPoP draft was 
> published earlier today. The usual various document links are in the 
> forwarded message below and the relevant snippet from the doc history 
> with a summary of the changes is included here for convenience.
>
> Hopefully folks will have time to read the (relativity) short document 
> before the meeting(s) in Singapore where (spoiler alert) I plan to ask 
> that the WG consider adoption of the draft.
>
> Thanks,
>
> Â -03
> Â  Â o Â rework the text around uniqueness requirements on the jti claim in
> Â  Â  Â  the DPoP proof JWT
> Â  Â o Â make tokens a bit smaller by using "htm", "htu", and "jkt" rather
> Â  Â  Â  than "http_method", "http_uri", and "jkt#S256" respectively
> Â  Â o Â more explicit recommendation to use mTLS if that is available
> Â  Â o Â added David Waite as co-author
> Â  Â o Â editorial updates
>
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net 
> <mailto:torsten@lodderstedt.net>>, Michael Jones <mbj@microsoft.com 
> <mailto:mbj@microsoft.com>>, John Bradley <ve7jtb@ve7jtb.com 
> <mailto:ve7jtb@ve7jtb..com>>, Brian Campbell 
> <bcampbell@pingidentity.com <mailto:bcampbell@pingidentity.com>>, 
> David Waite <david@alkaline-solutions.com 
> <mailto:david@alkaline-solutions.com>>, Daniel Fett 
> <mail@danielfett.de <mailto:mail@danielfett.de>>
>
>
>
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>
> Name:Â  Â  Â  Â  Â  Â draft-fett-oauth-dpop
> Revision:Â  Â  Â  Â 03
> Title:Â  Â  Â  Â  Â  OAuth 2.0 Demonstration of Proof-of-Possession at the 
> Application Layer (DPoP)
> Document date:Â  2019-10-30
> Group:Â  Â  Â  Â  Â  Individual Submission
> Pages:Â  Â  Â  Â  Â  15
> URL: https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt
> Status: https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized: https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized: https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop
> Diff: https://www.ietf.org/rfcdiff?url2=draft-fett-oauth-dpop-03
>
> Abstract:
> Â  Â This document describes a mechanism for sender-constraining OAuth 2.0
> Â  Â tokens via a proof-of-possession mechanism on the application level.
> Â  Â This mechanism allows for the detection of replay attacks with access
> Â  Â and refresh tokens.
>
>
>
>
> Please note that it may take a couple of minutes from the time of 
> submission
> until the htmlized version and diff are available at tools.ietf.org 
> <http://tools.ietf.org>.
>
> The IETF Secretariat
>
>
> /CONFIDENTIALITY NOTICE: This email may contain confidential and 
> privileged material for the sole use of the intended recipient(s). Any 
> review, use, distribution or disclosure by others is strictly 
> prohibited..Â  If you have received this communication in error, please 
> notify the sender immediately by e-mail and delete the message and any 
> file attachments from your computer. Thank you./
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth



--------------2CEB5D99FA92756A7E7B1E47
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Hello Brian,</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Section 2 states:</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Â Â  Under the attacker model defined in
      [I-D.ietf-oauth-security-topics],<br>
      Â Â  the mechanism defined by this specification aims to prevent
      token<br>
      Â Â  replay at a different endpoint.<br>
      <br>
      Â Â  More precisely, if an adversary is able to get hold of an
      access<br>
      Â Â  token or refresh token because it set up a counterfeit
      authorization<br>
      Â Â  server or resource server, the adversary is not able to replay
      the<br>
      Â Â  respective token at another authorization or resource server.<br>
      <br>
    </div>
    <div class="moz-cite-prefix">The problem to be solved is NOT to
      prevent token replay at a different endpoint, but to prevent token
      replay at the same or a different endpoint.</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">The text is only considering an
      adversary, but is omitting to consider collusion attacks between
      clients.<br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Since [I-D.ietf-oauth-security-topics]
      is "OAuth 2.0 Security Best Current Practice", the comments I sent
      to the list are applicable to this document too.</div>
    <div class="moz-cite-prefix">DPoP is not able to counter collusion
      attacks between clients and this should be clearly advertised in
      the abstract, in the main objectives (section 2) <br>
      and in the security considerations (section 9).</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Denis<br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote type="cite"
cite="mid:CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div>Hello WG, <br>
        </div>
        <div><br>
        </div>
        <div>Just a quick note to let folks know that -03 of the DPoP
          draft was published earlier today. The usual various document
          links are in the forwarded message below and the relevant
          snippet from the doc history with a summary of the changes is
          included here for convenience. <br>
        </div>
        <div><br>
        </div>
        <div>Hopefully folks will have time to read the (relativity)
          short document before the meeting(s) in Singapore where
          (spoiler alert) I plan to ask that the WG consider adoption of
          the draft. <br>
        </div>
        <div><br>
        </div>
        <div>Thanks,</div>
        <div><br>
          Â -03<br>
          Â  Â o Â rework the text around uniqueness requirements on the
          jti claim in<br>
          Â  Â  Â  the DPoP proof JWT<br>
          Â  Â o Â make tokens a bit smaller by using "htm", "htu", and
          "jkt" rather<br>
          Â  Â  Â  than "http_method", "http_uri", and "jkt#S256"
          respectively<br>
          Â  Â o Â more explicit recommendation to use mTLS if that is
          available<br>
          Â  Â o Â added David Waite as co-author<br>
          Â  Â o Â editorial updates</div>
        <div>
          <div><br>
            <div class="gmail_quote">
              <div dir="ltr" class="gmail_attr">---------- Forwarded
                message ---------<br>
                From: <span dir="auto">&lt;<a
                    href="mailto:internet-drafts@ietf.org"
                    target="_blank" moz-do-not-send="true">internet-drafts@ietf.org</a>&gt;</span><br>
                Date: Thu, Oct 31, 2019 at 11:53 AM<br>
                Subject: New Version Notification for
                draft-fett-oauth-dpop-03.txt<br>
                To: Torsten Lodderstedt &lt;<a
                  href="mailto:torsten@lodderstedt.net" target="_blank"
                  moz-do-not-send="true">torsten@lodderstedt.net</a>&gt;,
                Michael Jones &lt;<a href="mailto:mbj@microsoft.com"
                  target="_blank" moz-do-not-send="true">mbj@microsoft.com</a>&gt;,
                John Bradley &lt;<a href="mailto:ve7jtb@ve7jtb..com"
                  target="_blank" moz-do-not-send="true">ve7jtb@ve7jtb.com</a>&gt;,
                Brian Campbell &lt;<a
                  href="mailto:bcampbell@pingidentity.com"
                  target="_blank" moz-do-not-send="true">bcampbell@pingidentity.com</a>&gt;,
                David Waite &lt;<a
                  href="mailto:david@alkaline-solutions.com"
                  target="_blank" moz-do-not-send="true">david@alkaline-solutions.com</a>&gt;,
                Daniel Fett &lt;<a href="mailto:mail@danielfett.de"
                  target="_blank" moz-do-not-send="true">mail@danielfett.de</a>&gt;<br>
              </div>
              <br>
              <br>
              <br>
              A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
              has been successfully submitted by Brian Campbell and
              posted to the<br>
              IETF repository.<br>
              <br>
              Name:Â  Â  Â  Â  Â  Â draft-fett-oauth-dpop<br>
              Revision:Â  Â  Â  Â 03<br>
              Title:Â  Â  Â  Â  Â  OAuth 2.0 Demonstration of
              Proof-of-Possession at the Application Layer (DPoP)<br>
              Document date:Â  2019-10-30<br>
              Group:Â  Â  Â  Â  Â  Individual Submission<br>
              Pages:Â  Â  Â  Â  Â  15<br>
              URL:Â  Â  Â  Â  Â  Â  <a
                href="https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>
              Status:Â  Â  Â  Â  Â <a
                href="https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/</a><br>
              Htmlized:Â  Â  Â  Â <a
                href="https://tools.ietf.org/html/draft-fett-oauth-dpop-03"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://tools.ietf.org/html/draft-fett-oauth-dpop-03</a><br>
              Htmlized:Â  Â  Â  Â <a
                href="https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop</a><br>
              Diff:Â  Â  Â  Â  Â  Â <a
                href="https://www.ietf.org/rfcdiff?url2=draft-fett-oauth-dpop-03"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://www.ietf.org/rfcdiff?url2=draft-fett-oauth-dpop-03</a><br>
              <br>
              Abstract:<br>
              Â  Â This document describes a mechanism for
              sender-constraining OAuth 2.0<br>
              Â  Â tokens via a proof-of-possession mechanism on the
              application level.<br>
              Â  Â This mechanism allows for the detection of replay
              attacks with access<br>
              Â  Â and refresh tokens.<br>
              <br>
              <br>
              <br>
              <br>
              Please note that it may take a couple of minutes from the
              time of submission<br>
              until the htmlized version and diff are available at <a
                href="http://tools.ietf.org" rel="noreferrer"
                target="_blank" moz-do-not-send="true">tools.ietf.org</a>.<br>
              <br>
              The IETF Secretariat<br>
              <br>
            </div>
          </div>
        </div>
      </div>
      <br>
      <i
style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,&quot;Segoe
        UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica
        Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><span
style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe
          UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica
          Neue&quot;,Arial,sans-serif;font-weight:600"><font size="2">CONFIDENTIALITY
            NOTICE: This email may contain confidential and privileged
            material for the sole use of the intended recipient(s). Any
            review, use, distribution or disclosure by others is
            strictly prohibited..Â  If you have received this
            communication in error, please notify the sender immediately
            by e-mail and delete the message and any file attachments
            from your computer. Thank you.</font></span></i>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------2CEB5D99FA92756A7E7B1E47--


From nobody Wed Nov 13 04:27:29 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7847E12086B for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 04:27:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R3EYIdwNi50Q for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 04:27:25 -0800 (PST)
Received: from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com [IPv6:2a00:1450:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 859D912085F for <oauth@ietf.org>; Wed, 13 Nov 2019 04:27:25 -0800 (PST)
Received: by mail-wr1-x42b.google.com with SMTP id b18so652968wrj.8 for <oauth@ietf.org>; Wed, 13 Nov 2019 04:27:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:content-transfer-encoding:mime-version:subject:message-id:date :to; bh=DrpfPDWXOQn8ZgOgeciT2SX/ZD+oDyeDRScTfYtNxQo=; b=D9e8fyhpyvMFR0QFj3UYk3U2Xa4QhCB2AEBNw6ubwfBJnENIosJaF+hV7ewwHSvvpy BAx64xIA12ct0fG5Og38Synuzs2B3O2pb6bdG3x4jB0GjohZeQfJs1SI13mFjJ+Zjnvc MvmiW9h3ACayOG5AlB9V6KmqMq5ABM685xuGg=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=DrpfPDWXOQn8ZgOgeciT2SX/ZD+oDyeDRScTfYtNxQo=; b=ZG3oq27lyDXkVDb2bEejWT+PRdmifAiDaXa1GNhfBf44Y/NXDCC82reCNQ7yJnvcKX o5hPDZDRQp2MAK4kdcsVaQkZRxqWEcZ06w5L5fTe041W1794zsYsQ55FDP1Z9SWvAA6V UHH3MKlrj+pconAl13CqAq5ejlBWrLlGKPveqtKsYx10wnBqaTKnUp269dwkZokeTRl6 4BpL8qUhJHJB5jDwrQaOmWRWGx+vds1ePeQZIehs0mR5uNBxolMmLwGuMJyPo+SkW7Pm q+0YiBZKMED8Wv0Z4iF+avpcyDOwRjmOB/aLrfeFUoYr0SHe00EFqR4aT4Qz9IR+V47W NQKg==
X-Gm-Message-State: APjAAAW+ELmQXBFsFldkI8OS/e6oZSsQnTLJZ6ZmorU2EaXC6kUEoyId hNEnoeifF1Q0vM7mtcbhI84gEocNobAd6rk5w/2hrYGhuxDEdkGrSrQjdGe72/yx7rgeJfFt5cq XPeCi0y80sqkTdOQSngjkosowJN2pQ39i/plnwSsagBuac4gItMySZcwmz7vbvRo=
X-Google-Smtp-Source: APXvYqw5KHUOx906i8PbKc8Xm/UDfQEudIXOqdGA25/GHQjgzxas4jUDiPgYQ2oUaXEI+u26gtfw0Q==
X-Received: by 2002:a5d:640b:: with SMTP id z11mr2510313wru.195.1573648043627;  Wed, 13 Nov 2019 04:27:23 -0800 (PST)
Received: from [192.168.2.130] (77-44-110-214.xdsl.murphx.net. [77.44.110.214]) by smtp.gmail.com with ESMTPSA id u7sm2991923wre.59.2019.11.13.04.27.22 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 13 Nov 2019 04:27:23 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Message-Id: <98CFFD2C-AB86-4FCF-A8AD-A825056B5CEB@forgerock.com>
Date: Wed, 13 Nov 2019 12:27:18 +0000
To: oauth <oauth@ietf.org>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/X0JvbcN_ZjoOhbiHT6yJ4tldEpY>
Subject: [OAUTH-WG] Recent spam
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2019 12:27:27 -0000

It appears that overnight some spam was sent out that spoofed my email =
address and appeared to be a reply to a genuine (old) message on this =
mailing list. It appears some people are then hitting "Reply All" and so =
generating additional messages to the OAuth WG mailing list asking to be =
unsubscribed.

I've checked my own machines and there is no sign of any of them being =
compromised to send the emails, and there's no trace of any such email =
in my account's Sent folder - it seems to have been a straightforward =
email address spoofing. I've asked our IT department to double-check our =
DMARC/DKIM/SPF settings just to be sure.

Based on the responses I've received, the only people who seemed to =
received the original spam messages (not the responses) all have =
"@sympatico.ca" addresses, so it might also be the case that this ISP is =
not validating incoming emails correctly. I have emailed the ISP to =
alert them to this, so hopefully the issue will be corrected soon if so.

-- Neil=


From nobody Wed Nov 13 04:41:34 2019
Return-Path: <rifaat.ietf@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A920D12087F for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 04:41:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TmluEssPhdAr for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 04:41:30 -0800 (PST)
Received: from mail-io1-xd30.google.com (mail-io1-xd30.google.com [IPv6:2607:f8b0:4864:20::d30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1395D120872 for <oauth@ietf.org>; Wed, 13 Nov 2019 04:41:30 -0800 (PST)
Received: by mail-io1-xd30.google.com with SMTP id k1so2351852ioj.6 for <oauth@ietf.org>; Wed, 13 Nov 2019 04:41:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=EGM67fb/rL7E2NChjGgVkaYTn3nRDpNeCU77mUMSCUQ=; b=ePrLdsgBPvcSGaQeYeeV3LoCayBdbwQmTDcjYQieBGq1kiRU+F/qG6G7UxGyCaaeaS jCvev08qvvViKMe7oIMa9hiKI6IADT2Wdwjqwnaq6FFdOmXUPnetdKpJUufwXOH1BRwr X/GbhJeIDYehu0i41I+obmYRitqnRWKm1wzCdSbgyg8+zvXqItfL48bbg3tu+JAc+usR WBH+z0KOxo99ESTyCKK6gGf3pI9jnim7ry0/Ym/EnHy+7ALfNVuc1pFcK7hSEUnDYaYX xcVDSyPnj22fB+4z35Xj7JFzeO0ZlTzZbe7dgt58xVERfs5Y8faJ/1VHGCsmApe1XIsd FGcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=EGM67fb/rL7E2NChjGgVkaYTn3nRDpNeCU77mUMSCUQ=; b=DWnIrm/8IVQXVhe6vx6BrfyytvpwUpSfd8oBrIYkfGQXKl1VpDWtX+siaUM2sKgf+I DIYu/+PEfz4eHsPmINnn9Z7CAFEZY3xhwiywCENR7SdSIrx2YrV3VuFnni/5+UqBJPxj MvLrZjL3V6DbasHkLz/QkXwZAFVTkU9qpLfj+U4tjOOXN27tbVfTtfkWe5z4TW7Gm4yZ FMep1Z2vWmbY3A1VDW3PrWUpwv3AJrWB6Q1JRUX6Xorg7Z3cLUCjDM+5KhKyvLzZlvlU EIHuUXREMWllTkhwqaw7rdIOTgAA+X5zaE8JhChp5xzenBQv4tiJ8W221Xvpwy/nMUOf LJTA==
X-Gm-Message-State: APjAAAX0qfrD9xpI/qvzYFaY+p4pyXwiXFZYkwqNhR2jTXR/IWn/zzuO OjaN+ZwmqUkwoqYyJUZTVSjgMTMVVjqLqlTaUPg=
X-Google-Smtp-Source: APXvYqy+yRRwfQqwRXPvshLguqFH4dtexPE9XeNn1dc/oCQl8GahA2k/KjGJxBRoqFYSeE1dyXRUzFdyS6ftFokwCcg=
X-Received: by 2002:a02:b48:: with SMTP id 69mr2625902jad.25.1573648889326; Wed, 13 Nov 2019 04:41:29 -0800 (PST)
MIME-Version: 1.0
References: <98CFFD2C-AB86-4FCF-A8AD-A825056B5CEB@forgerock.com>
In-Reply-To: <98CFFD2C-AB86-4FCF-A8AD-A825056B5CEB@forgerock.com>
From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Wed, 13 Nov 2019 07:41:18 -0500
Message-ID: <CAGL6epKp_BTkNCkeu=qVov+wCoSvVc76migXYVXSdxMitze6EA@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000caf05059739afa3"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/x4OIqvdcivJL5kdYwi0zIrzb5JE>
Subject: Re: [OAUTH-WG] Recent spam
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2019 12:41:33 -0000

--0000000000000caf05059739afa3
Content-Type: text/plain; charset="UTF-8"

Thanks Neil,

The chairs are aware of the issue, as we receive notifications to
approve these messages sent by non-members.
We have been receiving these emails for few weeks now, and Glen from IETF
IT is also aware of the issue and he took some measures to try to address
this.
Glen also contacted the ISP but unfortunately he did not hear back from
them.

Regards,
 Rifaat


On Wed, Nov 13, 2019 at 7:27 AM Neil Madden <neil.madden@forgerock.com>
wrote:

> It appears that overnight some spam was sent out that spoofed my email
> address and appeared to be a reply to a genuine (old) message on this
> mailing list. It appears some people are then hitting "Reply All" and so
> generating additional messages to the OAuth WG mailing list asking to be
> unsubscribed.
>
> I've checked my own machines and there is no sign of any of them being
> compromised to send the emails, and there's no trace of any such email in
> my account's Sent folder - it seems to have been a straightforward email
> address spoofing. I've asked our IT department to double-check our
> DMARC/DKIM/SPF settings just to be sure.
>
> Based on the responses I've received, the only people who seemed to
> received the original spam messages (not the responses) all have "@
> sympatico.ca" addresses, so it might also be the case that this ISP is
> not validating incoming emails correctly. I have emailed the ISP to alert
> them to this, so hopefully the issue will be corrected soon if so.
>
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--0000000000000caf05059739afa3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Thanks Neil,</div><div><br></div><div>The chairs are =
aware of the issue, as we receive notifications to approve=C2=A0these messa=
ges sent by non-members.<br></div><div>We have been receiving these emails =
for few weeks now, and Glen from IETF IT is also aware of the issue and he =
took some measures to try to address this.</div><div>Glen also contacted th=
e ISP but unfortunately=C2=A0he did not hear back from them.</div><div><br>=
</div><div>Regards,</div><div>=C2=A0Rifaat</div><div><br></div></div><br><d=
iv class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov =
13, 2019 at 7:27 AM Neil Madden &lt;<a href=3D"mailto:neil.madden@forgerock=
.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; wrote:<br></div><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex">It appears that overnight =
some spam was sent out that spoofed my email address and appeared to be a r=
eply to a genuine (old) message on this mailing list. It appears some peopl=
e are then hitting &quot;Reply All&quot; and so generating additional messa=
ges to the OAuth WG mailing list asking to be unsubscribed.<br>
<br>
I&#39;ve checked my own machines and there is no sign of any of them being =
compromised to send the emails, and there&#39;s no trace of any such email =
in my account&#39;s Sent folder - it seems to have been a straightforward e=
mail address spoofing. I&#39;ve asked our IT department to double-check our=
 DMARC/DKIM/SPF settings just to be sure.<br>
<br>
Based on the responses I&#39;ve received, the only people who seemed to rec=
eived the original spam messages (not the responses) all have &quot;@<a hre=
f=3D"http://sympatico.ca" rel=3D"noreferrer" target=3D"_blank">sympatico.ca=
</a>&quot; addresses, so it might also be the case that this ISP is not val=
idating incoming emails correctly. I have emailed the ISP to alert them to =
this, so hopefully the issue will be corrected soon if so.<br>
<br>
-- Neil<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--0000000000000caf05059739afa3--


From nobody Wed Nov 13 09:27:25 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC89F12097B for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 09:27:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xZGvt47MkL1m for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 09:27:16 -0800 (PST)
Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 812FA12004F for <oauth@ietf.org>; Wed, 13 Nov 2019 09:27:16 -0800 (PST)
Received: by mail-wr1-x436.google.com with SMTP id f2so3312342wrs.11 for <oauth@ietf.org>; Wed, 13 Nov 2019 09:27:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=/PQlbfOfyWkzKr8E/OZb9+HDQnx7AZl3kTxNBFuxWbs=; b=mob3OR3RlPg7+sRldigsNS4myl63pq3KvGtk1CdPXRJm2qtemLP62jsXvwad3UyW1D fyJ0ieuiEchPz1d3pwsybTe5Qpkh+vWVW5qUZSUTNYqDlDuMlNA6v28YS4okXVaraIaL Q0GSgqn8Q9uVaXYsLWgYiXvIdsOfn02jlZB7v+mr2TQuzE6XelBiABcvouoU73hakRwx HrQJV7EzjXMJaRxdPGLeymBEtzWYLqCcyGLU5ucUMoLdG7r87WBh7oI6IoHOJbXFyuqg 2YIkOrs+vRPqmki5G8YzE910W4FAbHVqBKKNK/3DoVjW7DeWsj9PyHxGV9TWAUUazjBz Zgzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=/PQlbfOfyWkzKr8E/OZb9+HDQnx7AZl3kTxNBFuxWbs=; b=rVJLLan/cXyZmyu4g/0/Q7CzM+9ZFzFkSwDu5t1x7ea0PCyRJN8Bq0ya+N6jT4WGvU IxvLMFl2TZBABmTDBSTtXKwnh2NSa6IqxtwvLUInHOduzL9+w1b0XDnULb6bm6X9C3FG tsktmOMI5kuvdvJYXsludVGAnWg+xBxuCYfYkQ2YqSR4nqJvrX0n9X0cE1kCGjjN8+1E LR4zuO/mC3Ta6qP/oWkL3rPDXs7S7yEWw0K/gRFD5HaIpSt914AE7HJBgwCmHjDEi6CI pcKveiQCBW+LH1JbWbivpggjHXtk5S2ZaenjngGi40LI9WhqLR5M793zlCkaAtoaE9+D 4L2w==
X-Gm-Message-State: APjAAAX2tBTKFyir9IuHQ52PPVCBqulm2FTiG3ween9hODrH0jPdGgfX zQxgxUUPlTSLOiZj9YAVVjkx1w==
X-Google-Smtp-Source: APXvYqzOm4vr63GO9TKwa6yBrkAaXf0zbIWC0BZdMkzAhKfUzXAZr/RT24GOO5gbywJkRTX8LAdSHw==
X-Received: by 2002:adf:f6cf:: with SMTP id y15mr3663831wrp.97.1573666034893;  Wed, 13 Nov 2019 09:27:14 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id w12sm2963316wmi.17.2019.11.13.09.27.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 13 Nov 2019 09:27:13 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <4D1D8767-1327-4A31-B8DD-05E638E7DCB4@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_488EA5FF-C20A-4DE7-96A4-20A58A226F57"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Wed, 13 Nov 2019 18:27:12 +0100
In-Reply-To: <CAD9ie-vP5GNwjG6kqYzcGoP9qeqdwS=im0kkU3Lg40vvdj4dOA@mail.gmail.com>
Cc: txauth@ietf.org, oauth@ietf.org, Justin Richer <jricher@mit.edu>, Yaron Sheffer <yaronf.ietf@gmail.com>, Annabelle Backman <richanna@amazon.com>
To: Dick Hardt <dick.hardt@gmail.com>
References: <CAD9ie-snTrsJUd76_sfZLsN6mVOQt+8z0MazSYe3bGDvnsMUJw@mail.gmail.com> <213B6F9D-5737-4C20-AA87-1581C0F401ED@lodderstedt.net> <CAD9ie-uo8HgbMKbGP5sU3voqBWDRLnZKRj8mg1tGOejUAqvHtA@mail.gmail.com> <CAC9EAEF-4537-48E2-92AD-BAD5742A87A3@mit.edu> <CAD9ie-s5wr0S3sigWXV616_ZxU0oq92WbeVgMuTpgQ052FXXOw@mail.gmail.com> <0580261D-1003-4279-992A-542B30B3355D@amazon.com> <CAD9ie-vP5GNwjG6kqYzcGoP9qeqdwS=im0kkU3Lg40vvdj4dOA@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/8Jv89kzkIssXVyOMoSGBFhoGlus>
Subject: Re: [OAUTH-WG] Tx Auth BOF agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2019 17:27:19 -0000

--Apple-Mail=_488EA5FF-C20A-4DE7-96A4-20A58A226F57
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

wfm

> On 11. Nov 2019, at 18:10, Dick Hardt <dick.hardt@gmail.com> wrote:
>=20
> Hello Everyone, see agenda below:
>=20
> Monday Nov-18-2019 1330
>=20
> TxAuth Bof Agenda
>=20
> Introduction and Context   Chairs 10 min
>=20
> Limitations and Feature Requests
>=20
> Limitations of OAuth       Justin	10 min
> Limitations of OAuth       Torsten	5 min
> Feature Requests           Torsten	5 min
> Feature Requests           Justin	10 min=20
> Non Authorize Features  Annabelle	15 min
>=20
> Proposals
>=20
> OAuth XYZ [1]              Justin	20 min
> RAR & PAR [2]             Torsten	20 min=09
>=20
> Discussion                 Chairs	15 min
>=20
> Next Steps                 Chairs	10 min
>=20
> [1] https://datatracker.ietf.org/doc/draft-richer-transactional-authz/
>=20
> [2] Rich and Pushed Authorization Requests
> https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
> https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-par/
>=20
>=20
>=20
> =E1=90=A7


--Apple-Mail=_488EA5FF-C20A-4DE7-96A4-20A58A226F57
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ
KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH
EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV
U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw
MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx
EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj
dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq
KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb
M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L
bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH
fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB
AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy
/AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH
MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv
bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6
Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM
AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh
Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi
tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp
VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7
T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI
9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI
ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon
M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ
z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx
CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv
cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G
CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
Fw0xOTExMTMxNzI3MTJaMC8GCSqGSIb3DQEJBDEiBCC5U0hoGU4jbqiWlhxRYFmbgkrT8eYS0Z5a
bvPdzonTRjCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0
ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl
IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ
BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx
GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1
dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG
SIb3DQEBAQUABIIBAB6GVRIIOT/+YZHYldaUedgszLH8CgQNLQH2Uu3UsRpR/tgl3QaMVpP9/bAk
4B0NLbNHAKc6p+dIFciAcHKW3QY9KLN9xRE1Vh1kfXdND1DYCYCsoEd248BZrhpi11OxHnrpNgwZ
Nid8xMASxKdH8f/pwN5w/uN4UYGkuJjWm2RsKdY3Rucb7eZI57Mp8qkzT23QB9hPTC29SkogXWBy
6+z2SOjwGRCeTsvd6Y5K1Ymnl8+LKBsMdCYMZqxp0OCM1SZrT48EOI3ENrhMOcc+YdmrdbFbR5w6
Ud4rwOwwhaqbx0WHso5Wrr3t1myzRUM+7sx+JBXmbdgHHkfQGHDLSn4AAAAAAAA=
--Apple-Mail=_488EA5FF-C20A-4DE7-96A4-20A58A226F57--


From nobody Wed Nov 13 14:28:10 2019
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1494120119 for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 14:28:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wm_zBm1LoKjO for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 14:28:07 -0800 (PST)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50AA612004E for <oauth@ietf.org>; Wed, 13 Nov 2019 14:28:07 -0800 (PST)
Received: by rfc-editor.org (Postfix, from userid 30) id 187A6F40705; Wed, 13 Nov 2019 14:28:01 -0800 (PST)
To: mbj@microsoft.com, ve7jtb@ve7jtb.com, n-sakimura@nri.co.jp, rdd@cert.org,  kaduk@mit.edu, Hannes.Tschofenig@gmx.net, rifaat.ietf@gmail.com
X-PHP-Originating-Script: 30:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: ememisya@vt.edu, oauth@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset=UTF-8
Message-Id: <20191113222801.187A6F40705@rfc-editor.org>
Date: Wed, 13 Nov 2019 14:28:01 -0800 (PST)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/dqA3VFgRnG9LYJUUuDeMYLElv5U>
Subject: [OAUTH-WG] [Technical Errata Reported] RFC7519 (5906)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2019 22:28:09 -0000

The following errata report has been submitted for RFC7519,
"JSON Web Token (JWT)".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5906

--------------------------------------
Type: Technical
Reported by: Erdem Memisyazici <ememisya@vt.edu>

Section: 7.2

Original Text
-------------
   Finally, note that it is an application decision which algorithms may
   be used in a given context.  Even if a JWT can be successfully
   validated, unless the algorithms used in the JWT are acceptable to
   the application, it SHOULD reject the JWT.

Corrected Text
--------------
   Finally, note that it is an application decision which algorithms may
   be used in a given context.  Even if a JWT can be successfully
   validated, unless the algorithms used in the JWT are acceptable to
   the application, it MUST reject the JWT.

Notes
-----
A vulnerability exists in certain implementations in the wild where applications simply look for valid JWT tokens which includes the "none" algorithm (https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a).  A fairly popular library is auth0's java-jwt and at verification (https://github.com/auth0/java-jwt/blob/master/lib/src/main/java/com/auth0/jwt/JWTVerifier.java) quite reasonably you cannot initialize the class without an algorithm.  Given all capital SHOULD may be interpreted as a recommendation and as this RFC dictates the algorithm "none" MUST be implemented as a default algorithm under Section 8, one could argue JWTVerifier in the example doesn't have to verifyAlgorithm leading to the vulnerability pointed out in the first article while still complying by the specification.  There is no good reason why an algorithm unacceptable to the application must not be rejected as it does more harm than good and all popular library implementations interpret it as such.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC7519 (draft-ietf-oauth-json-web-token-32)
--------------------------------------
Title               : JSON Web Token (JWT)
Publication Date    : May 2015
Author(s)           : M. Jones, J. Bradley, N. Sakimura
Category            : PROPOSED STANDARD
Source              : Web Authorization Protocol
Area                : Security
Stream              : IETF
Verifying Party     : IESG


From rkelly@mozilla.com  Wed Nov 13 23:31:27 2019
Return-Path: <rkelly@mozilla.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A33EE120859 for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 23:31:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mozilla.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tLL9QVWYRUk5 for <oauth@ietfa.amsl.com>; Wed, 13 Nov 2019 23:31:24 -0800 (PST)
Received: from mail-vs1-xe31.google.com (mail-vs1-xe31.google.com [IPv6:2607:f8b0:4864:20::e31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15D6112011E for <oauth@ietf.org>; Wed, 13 Nov 2019 23:31:23 -0800 (PST)
Received: by mail-vs1-xe31.google.com with SMTP id j85so3207281vsd.11 for <oauth@ietf.org>; Wed, 13 Nov 2019 23:31:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla.com; s=google;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=l41jEYYoMfF2TR4TEW0gBBb0UPUWP03+ViDon6tZ2uk=; b=QSC5pGAqZVJi02oo5PIPFvPVe+N/nr5GQbT1O+d1aTajnj2wawFitVqC2E86in+tsO +F+yC8VHr77t3CbqUc2JZiWECbChYu70RuV1fe/mRFEcx0ubwjwE0X47t8Y+qs3OEGpy k/MbS8f/xwaK7cYIhqsZfR3gfpTtsmhGazJq0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=l41jEYYoMfF2TR4TEW0gBBb0UPUWP03+ViDon6tZ2uk=; b=s55R8q2M7pXYi6g04k/6+0ytTpIiKvXmTMi07thMv3jOuTsEgYHvkVF87tuuGlu1zR 2LzI26zxk2AmTEWrnFI406+1nMCaGczyBtSztJ00TlBNJg1McY82GEkQwYvYvbWSfduf U9wAV4tk2HbFbppuUcb6Qc2d5EFx7S5+MUxUvj8vfL+xMSX4dpJ+d3yAXxHucdUWiw+H JKBDtdhP0urkFpkJeTU/5rg+xqq1H8yBTthTy9Y063nmvauvommWTYdmWzdIgAgkdguy 3J6FL6BnHKnUZH+vybihhl0Zpw9H08+SOQs4hPZKFoNyHYUVsOsynRn83OZX4AMkrlVj xLcQ==
X-Gm-Message-State: APjAAAX9svduGUGOk6EkuaNBMbiLKSlcHckf5nLljeP646gnP2uEb86P yzDQmc6JL5ih1F1d+CXY0Z+HvkfvTimVWb46k/8df0VYQx4=
X-Google-Smtp-Source: APXvYqwLdjExp8BrQ/n/xYNjmjY0QRNKGNqaR2jCoxEa6PKkbyUWf2GBCjoKgVxdZtU7N5vlK8VqQy52p18cv0hY0Zc=
X-Received: by 2002:a67:e055:: with SMTP id n21mr214014vsl.93.1573716682912; Wed, 13 Nov 2019 23:31:22 -0800 (PST)
MIME-Version: 1.0
References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com> <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net>
In-Reply-To: <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net>
From: Ryan Kelly <rfkelly@mozilla.com>
Date: Thu, 14 Nov 2019 18:31:11 +1100
Message-ID: <CAB3n-Ya+WMrNdtBMfciCOQipjHfounNo0MThJObGmS7_XfzJmA@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000dcd104059749773e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/fLJq34nmwTWpmJY7CkoRjzU6N8o>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-lodderstedt-oauth-rar-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 07:33:03 -0000

--000000000000dcd104059749773e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

(I've been lurking on this list for a while but I don't think I've posted
here before, so...hi! I'm Ryan and I work on Firefox Accounts and related
systems at Mozilla).

Thanks for working on this!  It's an interesting and timely read for me as
we're starting to bump up against some limitations of the `scope`
parameter. I have some initial feedback below, and will hopefully be able
to send through more as I dig in in more detail.

  Cheers,

      Ryan

---

* Section 2.3: Relationship to "resource" parameter

The potential interactions between "locations" and "resource" seem very
complex and I'm not at all sure I understood them.

Paragraph 2 says that "locations" should take precedence over "resource"
when both appear in the authorization request, but doesn't explain what
this means in concrete terms. Can a client make a subsequent token request
that passes a value from "locations" in the "resource" parameter, even
though it wasn't specified in the "resource" parameter of the authorization
request?

In Paragraph 3, how should the AS deal with authorization details objects
that do not have a "locations" element? Should they be included regardless
of "resource"? What if the "resource" parameter refers to a value that was
present in "locations" but not in "resource" during the initial
authorization request?

The "matches as prefix of one of the URLs" part of Paragraph 3 seems a bit
unclear as well, given that there is no requirement that the "locations"
elements be well-formed URLs. Is this is simple string prefix match, or
some sort of path matching based on the components of the URL?

As a purely stylistic comment, I also found the example in this section a
bit artificial - I struggled to think of *why* a client might request an
authorization code with one set of authorization details, but then use the
"resource" parameter to immediately reduce them when exchanging the code
for a token. I wonder if using a refresh_token grant as part of the example
could help make it clearer, similar to what's done in
oauth-resource-indicators-08 Section 2.2.


* Section 3: Using "authorization_details"

Intuitively, I would expect to be able to use "authorization_details" in a
token request using grant_type=3Drefresh_token, in the same way that I can
specify "scope". Section 3 doesn't seem to take a definitive stance on this
- IIUC Section 3.1 doesn't apply because this is not an authorization
request, and Section 3.3 seems to discourage it in favour of using the
"resource" parameter. Do you intend for this parameter to be allowed in
conjunction with a refresh token?



On Tue, 5 Nov 2019 at 03:48, Torsten Lodderstedt <torsten@lodderstedt.net>
wrote:

> Hi all,
>
> a new (significantly enhanced) revision of draft-lodderstedt-oauth-rar wa=
s
> just published. Here is the list of changes:
>
> =E2=80=A2 Reworked examples to illustrate privacy preserving use
> of authorization_details
> =E2=80=A2 Added text on audience restriction
> =E2=80=A2 Added description of relationship between scope and authorizati=
on_details
> =E2=80=A2 Added text on token request & response and authorization_detail=
s
> =E2=80=A2 Added text on how authorization details are conveyed to RSs by =
JWTs or
> token endpoint response
> =E2=80=A2 Added description of relationship
> between claims and authorization_details
> =E2=80=A2 Added more example from different sectors
> =E2=80=A2 Clarified string comparison to be byte-exact without collation
>
> Thanks a lot for all contributions and the review feedback so far. I will
> present this draft in Singapore and would appreciate if the WG would
> consider this draft for adoption.
>
> best regards,
> Torsten.
>
> Begin forwarded message:
>
> *From: *internet-drafts@ietf.org
> *Subject: **New Version Notification for
> draft-lodderstedt-oauth-rar-03.txt*
> *Date: *4. November 2019 at 17:43:01 CET
> *To: *"Justin Richer" <ietf@justin.richer.org>, "Torsten Lodderstedt" <
> torsten@lodderstedt.net>, "Brian Campbell" <bcampbell@pingidentity.com>
>
>
> A new version of I-D, draft-lodderstedt-oauth-rar-03.txt
> has been successfully submitted by Torsten Lodderstedt and posted to the
> IETF repository.
>
> Name: draft-lodderstedt-oauth-rar
> Revision: 03
> Title: OAuth 2.0 Rich Authorization Requests
> Document date: 2019-11-03
> Group: Individual Submission
> Pages: 30
> URL:
> https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-03.txt
> Status:
> https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
> Htmlized:       https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-0=
3
> Htmlized:
> https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-rar
> Diff:
> https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03
>
> Abstract:
>   This document specifies a new parameter "authorization_details" that
>   is used to carry fine grained authorization data in the OAuth
>   authorization request.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000dcd104059749773e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">
<div dir=3D"ltr"><br></div><div dir=3D"ltr"><br>Hi,<br><br>(I&#39;ve been l=
urking on this list for a while but I don&#39;t think I&#39;ve posted here =
before, so...hi! I&#39;m Ryan and I work on Firefox Accounts and related sy=
stems at Mozilla).<br><br>Thanks for working on this!=C2=A0 It&#39;s an int=
eresting and timely read for me as we&#39;re starting to bump up against so=
me limitations of the `scope` parameter. I have some initial feedback below=
, and will hopefully be able to send through more as I dig in in more detai=
l.<br><br>=C2=A0 Cheers,<br><br>=C2=A0 =C2=A0 =C2=A0 Ryan<br><br>---<br><br=
>* Section 2.3: Relationship to &quot;resource&quot; parameter<br><br>The p=
otential interactions between &quot;locations&quot; and &quot;resource&quot=
; seem very complex and I&#39;m not at all sure I understood them.<br><br>P=
aragraph 2 says that &quot;locations&quot; should take precedence over &quo=
t;resource&quot; when both appear in the authorization request, but doesn&#=
39;t explain what this means in concrete terms. Can a client make a subsequ=
ent token request that passes a value from &quot;locations&quot; in the &qu=
ot;resource&quot; parameter, even though it wasn&#39;t specified in the &qu=
ot;resource&quot; parameter of the authorization request?<br><br>In Paragra=
ph 3, how should the AS deal with authorization details objects that do not=
 have a &quot;locations&quot; element? Should they be included regardless o=
f &quot;resource&quot;? What if the &quot;resource&quot; parameter refers t=
o a value that was present in &quot;locations&quot; but not in &quot;resour=
ce&quot; during the initial authorization request?<br><br>The &quot;matches=
 as prefix of one of the URLs&quot; part of Paragraph 3 seems a bit unclear=
 as well, given that there is no requirement that the &quot;locations&quot;=
 elements be well-formed URLs. Is this is simple string prefix match, or so=
me sort of path matching based on the components of the URL?<br><br>As a pu=
rely stylistic comment, I also found the example in this section a bit arti=
ficial - I struggled to think of *why* a client might request an authorizat=
ion code with one set of authorization details, but then use the &quot;reso=
urce&quot; parameter to immediately reduce them when exchanging the code fo=
r a token. I wonder if using a refresh_token grant as part of the example c=
ould help make it clearer, similar to what&#39;s done in oauth-resource-ind=
icators-08 Section 2.2.<br><br><br>* Section 3: Using &quot;authorization_d=
etails&quot;<br><br>Intuitively, I would expect to be able to use &quot;aut=
horization_details&quot; in a token request using grant_type=3Drefresh_toke=
n, in the same way that I can specify &quot;scope&quot;. Section 3 doesn&#3=
9;t seem to take a definitive stance on this - IIUC Section 3.1 doesn&#39;t=
 apply because this is not an authorization request, and Section 3.3 seems =
to discourage it in favour of using the &quot;resource&quot; parameter. Do =
you intend for this parameter to be allowed in conjunction with a refresh t=
oken?</div><div dir=3D"ltr"><br></div>

<div><br></div><div><br></div><div class=3D"gmail_quote"><div dir=3D"ltr" c=
lass=3D"gmail_attr">On Tue, 5 Nov 2019 at 03:48, Torsten Lodderstedt &lt;<a=
 href=3D"mailto:torsten@lodderstedt.net">torsten@lodderstedt.net</a>&gt; wr=
ote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px=
 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style=
=3D"overflow-wrap: break-word;">Hi all,<div><br></div><div>a new (significa=
ntly enhanced) revision of draft-lodderstedt-oauth-rar was just published. =
Here is the list of changes:</div><div><br></div><div><div><span style=3D"w=
hite-space:pre-wrap">	</span>=E2=80=A2 Reworked examples to illustrate priv=
acy preserving use of=C2=A0authorization_details<br></div><div><span style=
=3D"white-space:pre-wrap">	</span>=E2=80=A2 Added text on audience restrict=
ion<br></div><div><span style=3D"white-space:pre-wrap">	</span>=E2=80=A2 Ad=
ded description of relationship between=C2=A0scope=C2=A0and=C2=A0authorizat=
ion_details<br></div><div><span style=3D"white-space:pre-wrap">	</span>=E2=
=80=A2 Added text on token request &amp; response and=C2=A0authorization_de=
tails<br></div><div><span style=3D"white-space:pre-wrap">	</span>=E2=80=A2 =
Added text on how authorization details are conveyed to RSs by JWTs or toke=
n endpoint response<br></div><div><span style=3D"white-space:pre-wrap">	</s=
pan>=E2=80=A2 Added description of relationship between=C2=A0claims=C2=A0an=
d=C2=A0authorization_details<br></div><div><span style=3D"white-space:pre-w=
rap">	</span>=E2=80=A2 Added more example from different sectors<br></div><=
div><span style=3D"white-space:pre-wrap">	</span>=E2=80=A2 Clarified string=
 comparison to be byte-exact without collation</div><div><br></div><div>Tha=
nks a lot for all contributions and the review feedback so far. I will pres=
ent this draft in Singapore and would appreciate if the WG would consider t=
his draft for adoption.=C2=A0</div><div><br></div><div>best regards,</div><=
div>Torsten.=C2=A0</div><div><br><blockquote type=3D"cite"><div>Begin forwa=
rded message:</div><br><div style=3D"margin:0px"><span style=3D"font-family=
:-webkit-system-font,Helvetica Neue,Helvetica,sans-serif;color:rgb(0,0,0)">=
<b>From: </b></span><span style=3D"font-family:-webkit-system-font,Helvetic=
a Neue,Helvetica,sans-serif"><a href=3D"mailto:internet-drafts@ietf.org" ta=
rget=3D"_blank">internet-drafts@ietf.org</a><br></span></div><div style=3D"=
margin:0px"><span style=3D"font-family:-webkit-system-font,Helvetica Neue,H=
elvetica,sans-serif;color:rgb(0,0,0)"><b>Subject: </b></span><span style=3D=
"font-family:-webkit-system-font,Helvetica Neue,Helvetica,sans-serif"><b>Ne=
w Version Notification for draft-lodderstedt-oauth-rar-03.txt</b><br></span=
></div><div style=3D"margin:0px"><span style=3D"font-family:-webkit-system-=
font,Helvetica Neue,Helvetica,sans-serif;color:rgb(0,0,0)"><b>Date: </b></s=
pan><span style=3D"font-family:-webkit-system-font,Helvetica Neue,Helvetica=
,sans-serif">4. November 2019 at 17:43:01 CET<br></span></div><div style=3D=
"margin:0px"><span style=3D"font-family:-webkit-system-font,Helvetica Neue,=
Helvetica,sans-serif;color:rgb(0,0,0)"><b>To: </b></span><span style=3D"fon=
t-family:-webkit-system-font,Helvetica Neue,Helvetica,sans-serif">&quot;Jus=
tin Richer&quot; &lt;<a href=3D"mailto:ietf@justin.richer.org" target=3D"_b=
lank">ietf@justin.richer.org</a>&gt;, &quot;Torsten Lodderstedt&quot; &lt;<=
a href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodders=
tedt.net</a>&gt;, &quot;Brian Campbell&quot; &lt;<a href=3D"mailto:bcampbel=
l@pingidentity.com" target=3D"_blank">bcampbell@pingidentity.com</a>&gt;<br=
></span></div><br><div><div><br>A new version of I-D, draft-lodderstedt-oau=
th-rar-03.txt<br>has been successfully submitted by Torsten Lodderstedt and=
 posted to the<br>IETF repository.<br><br>Name:<span style=3D"white-space:p=
re-wrap">	</span><span style=3D"white-space:pre-wrap">	</span>draft-lodders=
tedt-oauth-rar<br>Revision:<span style=3D"white-space:pre-wrap">	</span>03<=
br>Title:<span style=3D"white-space:pre-wrap">	</span><span style=3D"white-=
space:pre-wrap">	</span>OAuth 2.0 Rich Authorization Requests<br>Document d=
ate:<span style=3D"white-space:pre-wrap">	</span>2019-11-03<br>Group:<span =
style=3D"white-space:pre-wrap">	</span><span style=3D"white-space:pre-wrap"=
>	</span>Individual Submission<br>Pages:<span style=3D"white-space:pre-wrap=
">	</span><span style=3D"white-space:pre-wrap">	</span>30<br>URL: =C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<a href=3D"https:/=
/www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-03.txt" target=3D=
"_blank">https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-0=
3.txt</a><br>Status: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<a hre=
f=3D"https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/" target=
=3D"_blank">https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/</=
a><br>Htmlized: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<a href=3D"https://tool=
s.ietf.org/html/draft-lodderstedt-oauth-rar-03" target=3D"_blank">https://t=
ools.ietf.org/html/draft-lodderstedt-oauth-rar-03</a><br>Htmlized: =C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<a href=3D"https://datatracker.ietf.org/doc/h=
tml/draft-lodderstedt-oauth-rar" target=3D"_blank">https://datatracker.ietf=
.org/doc/html/draft-lodderstedt-oauth-rar</a><br>Diff: =C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0<a href=3D"https://www.ietf.org/r=
fcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03" target=3D"_blank">https://www=
.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03</a><br><br>Abstract=
:<br> =C2=A0=C2=A0This document specifies a new parameter &quot;authorizati=
on_details&quot; that<br> =C2=A0=C2=A0is used to carry fine grained authori=
zation data in the OAuth<br> =C2=A0=C2=A0authorization request.<br><br><br>=
<br><br>Please note that it may take a couple of minutes from the time of s=
ubmission<br>until the htmlized version and diff are available at <a href=
=3D"http://tools.ietf.org" target=3D"_blank">tools.ietf.org</a>.<br><br>The=
 IETF Secretariat<br><br></div></div></blockquote></div><br></div></div>___=
____________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>

--000000000000dcd104059749773e--


From nobody Thu Nov 14 03:20:45 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C91381200A4 for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 03:20:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KMBAus46CtFq for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 03:20:39 -0800 (PST)
Received: from mail-wr1-x442.google.com (mail-wr1-x442.google.com [IPv6:2a00:1450:4864:20::442]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E65EA120046 for <oauth@ietf.org>; Thu, 14 Nov 2019 03:20:38 -0800 (PST)
Received: by mail-wr1-x442.google.com with SMTP id b18so4531236wrj.8 for <oauth@ietf.org>; Thu, 14 Nov 2019 03:20:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=g2Y26yft43XcNK2G5mFlUelnD+phmZ4eO6GVKSn6bDM=; b=BrVZ7BEXUJg2GCV4kaqwAQmtSphnM3JH3uURWq/8vNjll8X31qX3xz2PKFgKb0BvrP 6qwZa7nYFepjz3ZOxN6WsizlS2FfR9aWi26UM22mlq9ln3KVS0Etu5dIES0RfTDlwrT3 dlox0jjwAjbpSPbP2AB1yP+64nY/7SftaTMqY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=g2Y26yft43XcNK2G5mFlUelnD+phmZ4eO6GVKSn6bDM=; b=ULQbDLhe2B1sOmGNcfIHr6k+d6tlneP2EoUgsF3itkQDjOrp+7r143TKxpxG05KovA 3tZLLedfnK9t53F7fCSCJPfaGExzrXJFEvMzNCdGxUVn7K6Te1V3Lcqg2WPeDgsxHjVr roGBgalABQlQ8lE8j7y7gqBVHZVn2qZfNPsThzZe0Zxfrj7IsCKv29C1v4iG8QRQ7yST i7XAfLt7jFo5AVKIL0HPAMh7+KyUdZgk8L7/21Qallqp7EyY6iI6owkjyvtdGC19blBn FjspdKpKPOOlLXB3yijAECb5mC6jkWQdgvnaHA9e/a1Y16hQP4p716tDMLmxZxbqxBIZ CVEA==
X-Gm-Message-State: APjAAAW8GvaNUpQm/gdnT9d0i4heI2Z/7apN2gRDm9E7M/isa1QIa7XM e3J8yk+X34mITCC++nTSBiCNeeBcKsI=
X-Google-Smtp-Source: APXvYqzsdikef67TkGFtZgHtOUCD7uGAgwvUqmzx1OoLBsvO1mBmZWkLFzTJLp6wzUBtSTijpFh36w==
X-Received: by 2002:adf:c50a:: with SMTP id q10mr8198286wrf.374.1573730436894;  Thu, 14 Nov 2019 03:20:36 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id 17sm5034479wmg.19.2019.11.14.03.20.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Nov 2019 03:20:36 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_3F7BD996-851E-43CD-99CF-4DFAB9E0D9A8"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Thu, 14 Nov 2019 11:20:35 +0000
In-Reply-To: <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com>
Cc: oauth <oauth@ietf.org>
To: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1Zltt75p5taPw0DRmhoKLbavu9s>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 11:20:43 -0000

--Apple-Mail=_3F7BD996-851E-43CD-99CF-4DFAB9E0D9A8
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

I can't attend Singapore either in person or remotely due to other =
commitments. I broadly support adoption of this draft, but I have some =
comments/suggestions about it.

Section 2 lists the main objective as being to harden against =
compromised/malicious AS or RS, which may attempt to replay captured =
tokens elsewhere. While this is a good idea, a casual reader might =
wonder why a simple audience claim in the access token/introspection =
response is not sufficient to prevent this. Because interactions between =
the client and RS are supposed to be over TLS, is the intended threat =
model one in which these protections have broken down? ("counterfeit" in =
the description suggests this). Or is the motivation that clients want =
to get a single broad-scoped access token (for usability/performance =
reasons) and use it to access multiple resource servers without giving =
each of them the ability to replay the token to the other servers? Or =
are we thinking of a phishing-type vulnerability were a general-purpose =
client might accidentally visit a malicious site which prompts for an =
access token that the client then blindly goes off and gets? (UMA?) It's =
not clear to me which of these scenarios is being considered, so it =
would be good to tighten up this section.

Another potential motivation is for mobile apps. Some customers of ours =
would like to tie access/refresh tokens to private key material =
generated on a secure element in the device, that can only be accessed =
after local biometric authentication (e.g. TouchID/FaceID on iOS). I =
have suggested using mTLS cert-bound tokens for this, but have heard =
some pushback due to the difficulty of configuring support for client =
certs across diverse infrastructure. A simple JWT-based solution like =
DPoP could fill this need.

My main concerns with the draft though are about efficiency and =
scalability of the proposed approach:

1. The requirement to use public key signatures, along with the =
anti-replay nonce, means that the RS is required to perform an expensive =
signature verification check on every request. That is not going to =
scale up well. While there are more efficient schemes like Ed25519 now, =
these are still typically an order of magnitude slower than HMAC and the =
latency and CPU overhead is likely to be a non-starter for many APIs =
(especially when you're billed by CPU usage). Public key signatures are =
also notoriously fragile (see e.g. the history of nonce reuse/leakage =
vulnerabilities in ECDSA or=20

2. The advice for the RS to store a set of previously used nonces to =
prevent replay will also hamper scalability, especially in large =
deployments where such state would need to be replicated to all servers =
(or use sticky load balancing, which comes with its own problems). This =
violates the statelessness of HTTP, and it also potentially breaks =
idempotency of operations: Think of the case where the JWT validation =
and replay protection is done at an API gateway but then the call to the =
backend API server fails for a transient reason. The client (or a =
proxy/library) cannot simply replay the (idempotent) request in this =
case because it will be rejected by the gateway. It must instead =
recreate the DPoP JWT, incurring additional overheads.

3. Minor: The use of a custom header for communicating the DPoP proof =
will require additional CORS configuration on top of that already done =
for the Authorization header, and so adds a small amount of additional =
friction for adoption. Given that CORS configuration changes often =
require approval by a security team, this may make more of an impact =
than you'd expect.

It's also not clear to me exactly what threat the anti-replay nonce is =
protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.

I have a tentative suggestion for an alternative design which avoids =
these problems, but at a cost of potentially more complexity elsewhere. =
I'll summarise it here for consideration:

1. The client obtains an access token in the normal way. When calling =
the token endpoint it provides an EC/okp public key as the confirmation =
key to be associated with the access/refresh tokens.

2. The first time the client calls an RS it passes its access token in =
the Authorization: Bearer header as normal. (If the RS doesn't support =
DPoP then this would just succeed and no further action is required by =
the client - allowing clients to opportunistically ask for DPoP without =
needing a priori knowledge of RS capabilities).

3. The RS introspects the access token and learns the EC public key =
associated with the access token. As there is no DPoP proof with the =
access token, the RS will generate a challenge in the following way:
    o The RS generates an ephemeral EC key pair for the same curve as =
the confirmation key (e.g. P-256 or X25519).
    o The RS stores the ephemeral private key somewhere, associated with =
this access token (see below for a scalable implementation choice)
    o The RS encodes the ephemeral public key into a JWK (epk) and =
base64url-encodes it. It uses this as a challenge to the client by =
sending back a 401 response with WWW-Authenticate: DPoP <encoded-epk>

4. The client decodes the epk challenge and performs an ECDH key =
agreement between its private key and the challenge epk as per the =
method described for the existing JWA ECDH-ES encryption algorithm. =
Rather than deriving an AES key however, it derives a HMAC key for =
HS256. The "apu" value is set to the access token (string value as ASCII =
bytes) and the "apv" value is set to the hostname of the RS (e.g. =
"api.example.com <http://api.example.com/>"). This ensures that the =
derived key is cryptographically bound to the context in which it is =
used.

5. The client uses the HMAC key to create a DPoP proof JWT much like the =
one in the current draft, but signed using the HS256 key. If a "kid" =
field was present in the challenge JWK sent by the RS then the same =
value MUST be used in the "kid" header of this discharge JWT. It retries =
its original request sending Authorization: DPoP <hmac-jwt> =
at=3D<access_token>.

6. The RS uses its stored ephemeral private key to derive the same HMAC =
key and verify the DPoP discharge JWT. If it validates and all fields =
are correct then the request is allowed.

Efficient implementation trick:
Because the client is required to copy and "kid" value from the =
challenge JWK, the RS can preemptively carry out the ECDH key agreement =
immediately and generate the derived HMAC key. The RS can then encrypt =
this derived key using a local authenticated encryption key (e.g. =
AES-GCM) and use that encrypted value as the "kid" value in the =
challenge (perhaps along with some context or an expiry time). That way =
the RS only needs to decrypt this kid value rather than performing the =
ECDH key agreement on every request. This also avoids the need for the =
RS to store any per-client state locally.

The challenge-response nature of the scheme prevents traditional replay =
attacks in the case where a DPoP discharge JWT is accidentally leaked =
through server logs or some other flaw, without needing to store nonces =
on the server. Using the RS's hostname in the key derivation process =
prevents mitm attacks in a similar way to how FIDO/WebAuthn prevents =
this. Most importantly, once a HS256 key has been derived between a =
client and RS they can reuse that key for multiple requests, reducing =
the overhead of the ECDH key agreement step. Either side can decide as a =
matter of policy how long to let this occur and when to trigger a fresh =
challenge-response.

Because this fits within the standard HTTP authentication framework, it =
also requires no additional CORS configuration and is relatively easy to =
plug in to existing HTTP client libraries.

The main downside of this approach to me is the fact that you can't =
simply reuse an existing JWT library to implement it, and so it will =
take time for client libs to develop. (Although I think this might be =
achievable now with existing *COSE* libraries). This would increase the =
risk of people hand-rolling solutions, rather than using well-tested =
libraries. On the other hand, it uses fairly widely supported primitives =
so e.g. an implementation using WebCrypto is probably only a few dozen =
lines of code.

-- Neil


> On 31 Oct 2019, at 19:20, Brian Campbell =
<bcampbell=3D40pingidentity.com@dmarc.ietf.org> wrote:
>=20
> Hello WG,=20
>=20
> Just a quick note to let folks know that -03 of the DPoP draft was =
published earlier today. The usual various document links are in the =
forwarded message below and the relevant snippet from the doc history =
with a summary of the changes is included here for convenience.=20
>=20
> Hopefully folks will have time to read the (relativity) short document =
before the meeting(s) in Singapore where (spoiler alert) I plan to ask =
that the WG consider adoption of the draft.=20
>=20
> Thanks,
>=20
>  -03
>    o  rework the text around uniqueness requirements on the jti claim =
in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" =
rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
>=20
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net =
<mailto:torsten@lodderstedt.net>>, Michael Jones <mbj@microsoft.com =
<mailto:mbj@microsoft.com>>, John Bradley <ve7jtb@ve7jtb.com =
<mailto:ve7jtb@ve7jtb..com>>, Brian Campbell <bcampbell@pingidentity.com =
<mailto:bcampbell@pingidentity.com>>, David Waite =
<david@alkaline-solutions.com <mailto:david@alkaline-solutions.com>>, =
Daniel Fett <mail@danielfett.de <mailto:mail@danielfett.de>>
>=20
>=20
>=20
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>=20
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the =
Application Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            =
https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt =
<https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt>
> Status:         =
https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/ =
<https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/>
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03 =
<https://tools.ietf.org/html/draft-fett-oauth-dpop-03>
> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop =
<https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop>
> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03 =
<https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03>
>=20
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth =
2.0
>    tokens via a proof-of-possession mechanism on the application =
level.
>    This mechanism allows for the detection of replay attacks with =
access
>    and refresh tokens.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission
> until the htmlized version and diff are available at tools.ietf.org =
<http://tools.ietf.org/>.
>=20
> The IETF Secretariat
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_3F7BD996-851E-43CD-99CF-4DFAB9E0D9A8
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">I =
can't attend Singapore either in person or remotely due to other =
commitments. I broadly support adoption of this draft, but I have some =
comments/suggestions about it.<div class=3D""><br class=3D""></div><div =
class=3D"">Section 2 lists the main objective as being to harden against =
compromised/malicious AS or RS, which may attempt to replay captured =
tokens elsewhere. While this is a good idea, a casual reader might =
wonder why a simple audience claim in the access token/introspection =
response is not sufficient to prevent this. Because interactions between =
the client and RS are supposed to be over TLS, is the intended threat =
model one in which these protections have broken down? ("counterfeit" in =
the description suggests this). Or is the motivation that clients want =
to get a single broad-scoped access token (for usability/performance =
reasons) and use it to access multiple resource servers without giving =
each of them the ability to replay the token to the other servers? Or =
are we thinking of a phishing-type vulnerability were a general-purpose =
client might accidentally visit a malicious site which prompts for an =
access token that the client then blindly goes off and gets? (UMA?) It's =
not clear to me which of these scenarios is being considered, so it =
would be good to tighten up this section.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Another potential motivation is for =
mobile apps. Some customers of ours would like to tie access/refresh =
tokens to private key material generated on a secure element in the =
device, that can only be accessed after local biometric authentication =
(e.g. TouchID/FaceID on iOS). I have suggested using mTLS cert-bound =
tokens for this, but have heard some pushback due to the difficulty of =
configuring support for client certs across diverse infrastructure. A =
simple JWT-based solution like DPoP could fill this need.</div><div =
class=3D""><br class=3D""></div><div class=3D"">My main concerns with =
the draft though are about efficiency and scalability of the proposed =
approach:</div><div class=3D""><br class=3D""></div><div class=3D"">1. =
The requirement to use public key signatures, along with the anti-replay =
nonce, means that the RS is required to perform an expensive signature =
verification check on every request. That is not going to scale up well. =
While there are more efficient schemes like Ed25519 now, these are still =
typically an order of magnitude slower than HMAC and the latency and CPU =
overhead is likely to be a non-starter for many APIs (especially when =
you're billed by CPU usage). Public key signatures are also notoriously =
fragile (see e.g. the history of nonce reuse/leakage vulnerabilities in =
ECDSA or&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">2. The advice for the RS to store a set of previously used =
nonces to prevent replay will also hamper scalability, especially in =
large deployments where such state would need to be replicated to all =
servers (or use sticky load balancing, which comes with its own =
problems). This violates the statelessness of HTTP, and it also =
potentially breaks idempotency of operations: Think of the case where =
the JWT validation and replay protection is done at an API gateway but =
then the call to the backend API server fails for a transient reason. =
The client (or a proxy/library) cannot simply replay the (idempotent) =
request in this case because it will be rejected by the gateway. It must =
instead recreate the DPoP JWT, incurring additional overheads.</div><div =
class=3D""><br class=3D""></div><div class=3D"">3. Minor: The use of a =
custom header for communicating the DPoP proof will require additional =
CORS configuration on top of that already done for the Authorization =
header, and so adds a small amount of additional friction for adoption. =
Given that CORS configuration changes often require approval by a =
security team, this may make more of an impact than you'd =
expect.</div><div class=3D""><br class=3D""></div><div class=3D"">It's =
also not clear to me exactly what threat the anti-replay nonce is =
protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.</div><div class=3D""><br =
class=3D""></div><div class=3D"">I have a tentative suggestion for an =
alternative design which avoids these problems, but at a cost of =
potentially more complexity elsewhere. I'll summarise it here for =
consideration:</div><div class=3D""><br class=3D""></div><div =
class=3D"">1. The client obtains an access token in the normal way. When =
calling the token endpoint it provides an EC/okp public key as the =
confirmation key to be associated with the access/refresh =
tokens.</div><div class=3D""><br class=3D""></div><div class=3D"">2. The =
first time the client calls an RS it passes its access token in the =
Authorization: Bearer header as normal. (If the RS doesn't support DPoP =
then this would just succeed and no further action is required by the =
client - allowing clients to opportunistically ask for DPoP without =
needing a priori knowledge of RS capabilities).</div><div class=3D""><br =
class=3D""></div><div class=3D"">3. The RS introspects the access token =
and learns the EC public key associated with the access token. As there =
is no DPoP proof with the access token, the RS will generate a challenge =
in the following way:</div><div class=3D"">&nbsp; &nbsp; o The RS =
generates an ephemeral EC key pair for the same curve as the =
confirmation key (e.g. P-256 or X25519).</div><div class=3D"">&nbsp; =
&nbsp; o The RS stores the ephemeral private key somewhere, associated =
with this access token (see below for a scalable implementation =
choice)</div><div class=3D"">&nbsp; &nbsp; o The RS encodes the =
ephemeral public key into a JWK (epk) and base64url-encodes it. It uses =
this as a challenge to the client by sending back a 401 response with =
WWW-Authenticate: DPoP &lt;encoded-epk&gt;</div><div class=3D""><br =
class=3D""></div><div class=3D"">4. The client decodes the epk challenge =
and performs an ECDH key agreement between its private key and the =
challenge epk as per the method described for the existing JWA ECDH-ES =
encryption algorithm. Rather than deriving an AES key however, it =
derives a HMAC key for HS256. The "apu" value is set to the access token =
(string value as ASCII bytes) and the "apv" value is set to the hostname =
of the RS (e.g. "<a href=3D"http://api.example.com" =
class=3D"">api.example.com</a>"). This ensures that the derived key is =
cryptographically bound to the context in which it is used.</div><div =
class=3D""><br class=3D""></div><div class=3D"">5. The client uses the =
HMAC key to create a DPoP proof JWT much like the one in the current =
draft, but signed using the HS256 key. If a "kid" field was present in =
the challenge JWK sent by the RS then the same value MUST be used in the =
"kid" header of this discharge JWT. It retries its original request =
sending Authorization: DPoP &lt;hmac-jwt&gt; =
at=3D&lt;access_token&gt;.</div><div class=3D""><br class=3D""></div><div =
class=3D"">6. The RS uses its stored ephemeral private key to derive the =
same HMAC key and verify the DPoP discharge JWT. If it validates and all =
fields are correct then the request is allowed.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Efficient implementation =
trick:</div><div class=3D"">Because the client is required to copy and =
"kid" value from the challenge JWK, the RS can preemptively carry out =
the ECDH key agreement immediately and generate the derived HMAC key. =
The RS can then encrypt this derived key using a local authenticated =
encryption key (e.g. AES-GCM) and use that encrypted value as the "kid" =
value in the challenge (perhaps along with some context or an expiry =
time). That way the RS only needs to decrypt this kid value rather than =
performing the ECDH key agreement on every request. This also avoids the =
need for the RS to store any per-client state locally.</div><div =
class=3D""><br class=3D""></div><div class=3D"">The challenge-response =
nature of the scheme prevents traditional replay attacks in the case =
where a DPoP discharge JWT is accidentally leaked through server logs or =
some other flaw, without needing to store nonces on the server. Using =
the RS's hostname in the key derivation process prevents mitm attacks in =
a similar way to how FIDO/WebAuthn prevents this. Most importantly, once =
a HS256 key has been derived between a client and RS they can reuse that =
key for multiple requests, reducing the overhead of the ECDH key =
agreement step. Either side can decide as a matter of policy how long to =
let this occur and when to trigger a fresh challenge-response.</div><div =
class=3D""><br class=3D""></div><div class=3D"">Because this fits within =
the standard HTTP authentication framework, it also requires no =
additional CORS configuration and is relatively easy to plug in to =
existing HTTP client libraries.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The main downside of this approach to =
me is the fact that you can't simply reuse an existing JWT library to =
implement it, and so it will take time for client libs to develop. =
(Although I think this might be achievable now with existing *COSE* =
libraries). This would increase the risk of people hand-rolling =
solutions, rather than using well-tested libraries. On the other hand, =
it uses fairly widely supported primitives so e.g. an implementation =
using WebCrypto is probably only a few dozen lines of code.</div><div =
class=3D""><br class=3D""></div><div class=3D"">-- Neil</div><div =
class=3D""><div class=3D""><br class=3D"">
<div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 31 Oct 2019, at 19:20, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org" =
class=3D"">bcampbell=3D40pingidentity.com@dmarc.ietf.org</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div =
dir=3D"ltr" class=3D""><div class=3D"">Hello WG, <br class=3D""></div><div=
 class=3D""><br class=3D""></div><div class=3D"">Just a quick note to =
let folks know that -03 of the DPoP draft was published earlier today. =
The usual various document links are in the forwarded message below and =
the relevant snippet from the doc history with a summary of the changes =
is included here for convenience. <br class=3D""></div><div class=3D""><br=
 class=3D""></div><div class=3D"">Hopefully folks will have time to read =
the (relativity) short document before the meeting(s) in Singapore where =
(spoiler alert) I plan to ask that the WG consider adoption of the =
draft. <br class=3D""></div><div class=3D""><br class=3D""></div><div =
class=3D"">Thanks,</div><div class=3D""><br class=3D"">&nbsp;-03<br =
class=3D"">&nbsp; &nbsp;o &nbsp;rework the text around uniqueness =
requirements on the jti claim in<br class=3D"">&nbsp; &nbsp; &nbsp; the =
DPoP proof JWT<br class=3D"">&nbsp; &nbsp;o &nbsp;make tokens a bit =
smaller by using "htm", "htu", and "jkt" rather<br class=3D"">&nbsp; =
&nbsp; &nbsp; than "http_method", "http_uri", and "jkt#S256" =
respectively<br class=3D"">&nbsp; &nbsp;o &nbsp;more explicit =
recommendation to use mTLS if that is available<br class=3D"">&nbsp; =
&nbsp;o &nbsp;added David Waite as co-author<br class=3D"">&nbsp; =
&nbsp;o &nbsp;editorial updates</div><div class=3D""><div class=3D""><br =
class=3D""><div class=3D"gmail_quote"><div dir=3D"ltr" =
class=3D"gmail_attr">---------- Forwarded message ---------<br =
class=3D"">From: <span dir=3D"auto" class=3D"">&lt;<a =
href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank" =
class=3D"">internet-drafts@ietf.org</a>&gt;</span><br class=3D"">Date: =
Thu, Oct 31, 2019 at 11:53 AM<br class=3D"">Subject: New Version =
Notification for draft-fett-oauth-dpop-03.txt<br class=3D"">To: Torsten =
Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" =
target=3D"_blank" class=3D"">torsten@lodderstedt.net</a>&gt;, Michael =
Jones &lt;<a href=3D"mailto:mbj@microsoft.com" target=3D"_blank" =
class=3D"">mbj@microsoft.com</a>&gt;, John Bradley &lt;<a =
href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank" =
class=3D"">ve7jtb@ve7jtb.com</a>&gt;, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank" =
class=3D"">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a =
href=3D"mailto:david@alkaline-solutions.com" target=3D"_blank" =
class=3D"">david@alkaline-solutions.com</a>&gt;, Daniel Fett &lt;<a =
href=3D"mailto:mail@danielfett.de" target=3D"_blank" =
class=3D"">mail@danielfett.de</a>&gt;<br class=3D""></div><br =
class=3D""><br class=3D""><br class=3D"">
A new version of I-D, draft-fett-oauth-dpop-03.txt<br class=3D"">
has been successfully submitted by Brian Campbell and posted to the<br =
class=3D"">
IETF repository.<br class=3D"">
<br class=3D"">
Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br =
class=3D"">
Revision:&nbsp; &nbsp; &nbsp; &nbsp;03<br class=3D"">
Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; OAuth 2.0 Demonstration of =
Proof-of-Possession at the Application Layer (DPoP)<br class=3D"">
Document date:&nbsp; 2019-10-30<br class=3D"">
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br =
class=3D"">
Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br class=3D"">
URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a =
href=3D"https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt"=
 rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.t=
xt</a><br class=3D"">
Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/</a><br =
class=3D"">
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://tools.ietf.org/html/draft-fett-oauth-dpop-03</a><br =
class=3D"">
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop</a>=
<br class=3D"">
Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a=
><br class=3D"">
<br class=3D"">
Abstract:<br class=3D"">
&nbsp; &nbsp;This document describes a mechanism for sender-constraining =
OAuth 2.0<br class=3D"">
&nbsp; &nbsp;tokens via a proof-of-possession mechanism on the =
application level.<br class=3D"">
&nbsp; &nbsp;This mechanism allows for the detection of replay attacks =
with access<br class=3D"">
&nbsp; &nbsp;and refresh tokens.<br class=3D"">
<br class=3D"">
<br class=3D"">
<br class=3D"">
<br class=3D"">
Please note that it may take a couple of minutes from the time of =
submission<br class=3D"">
until the htmlized version and diff are available at <a =
href=3D"http://tools.ietf.org/" rel=3D"noreferrer" target=3D"_blank" =
class=3D"">tools.ietf.org</a>.<br class=3D"">
<br class=3D"">
The IETF Secretariat<br class=3D"">
<br class=3D"">
</div></div></div></div>

<br class=3D"">
<i =
style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:base=
line;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-u=
i,-apple-system,system-ui,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)" class=3D""><span =
style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:base=
line;background:transparent;font-family:proxima-nova-zendesk,system-ui,-ap=
ple-system,BlinkMacSystemFont,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;font-weight:600" class=3D""><font size=3D"2" =
class=3D"">CONFIDENTIALITY NOTICE: This email may contain confidential =
and privileged material for the sole use of the intended recipient(s). =
Any review, use, distribution or disclosure by others is strictly =
prohibited..&nbsp; If you have received this communication in error, =
please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank =
you.</font></span></i>_______________________________________________<br =
class=3D"">OAuth mailing list<br class=3D""><a =
href=3D"mailto:OAuth@ietf.org" class=3D"">OAuth@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth<br =
class=3D""></div></blockquote></div><br =
class=3D""></div></div></body></html>=

--Apple-Mail=_3F7BD996-851E-43CD-99CF-4DFAB9E0D9A8--


From nobody Thu Nov 14 09:41:24 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F25C5120A85 for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 09:41:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6c5Qj1F8MG-s for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 09:41:17 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34B15120932 for <oauth@ietf.org>; Thu, 14 Nov 2019 09:41:16 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id b18so5980310wrj.8 for <oauth@ietf.org>; Thu, 14 Nov 2019 09:41:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=s0vgGovA7R7Q7JDsV21PNodWtifiwyseEBNSSbAnCDg=; b=B0Zkt2b8QFLEKfyDnnGKtazSuCVfDZOVC0/SeGRswlL2gKYIZCduID5Hp7e0O/NEun hXrRCAw9EGaQgx7j/+O5dDcLfYSciutBBdfCxoywVSTDazR0KfNz24/Ee01xMrVpEPnr wVnjwtrs01i7fhz6bVDZKuSKQUqpdm2flJF79L5qT3iLHOH2rQxioiay6GW5ZbX//Sdx oHy2eRKA01+0vlijYqUldoRMUufRRkro3V4LsawFn3IxN0MyV3N5yAwY/ULzpLJLBADC tfzzVNx3oVs9sxfZzFIP4hfxm1Vb3VECZ6Y+k++c7Mzyqa1bMia4rzpUw/kx1jW3KHRD pdXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=s0vgGovA7R7Q7JDsV21PNodWtifiwyseEBNSSbAnCDg=; b=eREYCdESRVTHkJ5ln/8bfc5gCqxagdt9ic+u6iBbyzZXdjCXtI5IQiSzSj125ljCoE DnjWGDhXHy9jkmuvG07QdxMyueaQgiR3ahLeOTBcRcf5P0+TbfV9XHBTdjxr0eDWV2s5 oBtn8BdTzW/u36Xn0NsKrMmcEtChV8dl5yV5CI2xLaZMImD/iD1vr5xMsQQrLNisihZ+ mKFB2JszepO0BkJ7ZMneCuYMyrzJOZiQr7Skta7WAIvphIZoPK0RbcdlJ3zFFJix5YPq bqPKMWFH8w1jF1rq1aEVRLtXbS7c7z1yU3cdLzg8AUmMMWWE5NBiIWi3kZ71EIcAHrLr P+Ug==
X-Gm-Message-State: APjAAAWJVZLm3I1d/R90aRO8zcA9WaS/7FcigoSNc/WVcAfgB3Gg0Umq p+vidHSp8oGOZp80PzK/o+yr09wGypcE1g==
X-Google-Smtp-Source: APXvYqxSiMrR+jfwIGrqqbrgD/ri+y6jxl44oFFOyGTeHS6N+oYNYw3vOEmWxx5e9+IlxlTXF9+UvA==
X-Received: by 2002:a5d:4a50:: with SMTP id v16mr8952358wrs.85.1573753274231;  Thu, 14 Nov 2019 09:41:14 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id i71sm9424231wri.68.2019.11.14.09.41.12 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Nov 2019 09:41:13 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <0C42020B-C454-4427-BB99-45C8152D330A@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_23D0E45B-4662-4267-A204-4B24925B26B4"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Thu, 14 Nov 2019 18:41:12 +0100
In-Reply-To: <CAB3n-Ya+WMrNdtBMfciCOQipjHfounNo0MThJObGmS7_XfzJmA@mail.gmail.com>
Cc: oauth <oauth@ietf.org>
To: Ryan Kelly <rfkelly@mozilla.com>
References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com> <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net> <CAB3n-Ya+WMrNdtBMfciCOQipjHfounNo0MThJObGmS7_XfzJmA@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/4VMCxkWrr5UkGbe4exgconaRWpE>
Subject: Re: [OAUTH-WG] New Version Notification for draft-lodderstedt-oauth-rar-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 17:41:21 -0000

--Apple-Mail=_23D0E45B-4662-4267-A204-4B24925B26B4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Ryan,

> On 14. Nov 2019, at 08:31, Ryan Kelly <rfkelly@mozilla.com> wrote:
>=20
>=20
>=20
> Hi,
>=20
> (I've been lurking on this list for a while but I don't think I've =
posted here before, so...hi! I'm Ryan and I work on Firefox Accounts and =
related systems at Mozilla).

thanks a lot for posting your feedback!=20

>=20
> Thanks for working on this!  It's an interesting and timely read for =
me

Good to hear we are just in time :-)

> as we're starting to bump up against some limitations of the `scope` =
parameter. I have some initial feedback below, and will hopefully be =
able to send through more as I dig in in more detail.

please do

>=20
>   Cheers,
>=20
>       Ryan
>=20
> ---
>=20
> * Section 2.3: Relationship to "resource" parameter
>=20
> The potential interactions between "locations" and "resource" seem =
very complex and I'm not at all sure I understood them.
>=20
> Paragraph 2 says that "locations" should take precedence over =
"resource" when both appear in the authorization request, but doesn't =
explain what this means in concrete terms.

I see. This is related to the section 2.1. of =
draft-ietf-oauth-resource-indicators, where the use of the =
=E2=80=9Cresource=E2=80=9D parameter in the authorization request is =
described as=20

"When the "resource" parameter is used in an authorization request to
   the authorization endpoint, it indicates the identity of the
   protected resource(s) to which access is being requested.=E2=80=9D

The =E2=80=9Clocations" elements of the authorisation details objects do =
the same but on a more detailed level. That=E2=80=99s why this =
information shall take precedence. Given there could be authorisation =
details objects that do not contain a locations element, it nevertheless =
could be useful to use =E2=80=9Cresource=E2=80=9D in parallel.

However, one could also argue that client using locations should do you =
consequently and not use the =E2=80=9Cresource=E2=80=9D parameter in the =
authorization request.

> Can a client make a subsequent token request that passes a value from =
"locations" in the "resource" parameter, even though it wasn't specified =
in the "resource" parameter of the authorization request?

yes. At the token endpoint, the =E2=80=9Cresource=E2=80=9D parameter is =
the only way to describe what resource server the client want to use the =
token at.

draft-lodderstedt-oauth-rar does not use an alternative parameter at the =
token endpoint, it in some ways utilises the existing =E2=80=9Cresource=E2=
=80=9D parameter. Or put the other way around, it makes the semantics of =
the =E2=80=9Cresource=E2=80=9D parameter more explicit.=20

Where draft-ietf-oauth-resource-indicators states

"To
   the extent possible, when issuing access tokens, the authorization
   server should downscope the scope value associated with an access
   token to the value the respective resource is able to process and
   needs to know.=E2=80=9D=20

draft-lodderstedt-oauth-rar makes that more explicit/transparent by =
requiring=20

"The AS will select all authorization
   details object where the "resource" string matches as prefix of one
   of the URLs provided in the respective "locations" element."

>=20
> In Paragraph 3, how should the AS deal with authorization details =
objects that do not have a "locations" element? Should they be included =
regardless of "resource=E2=80=9D?

That=E2=80=99s a very good question. I see to options:=20
- those elements are assigned to any access token
- those elements are assigned to an access token in case there was no =
=E2=80=9Cresource=E2=80=9D parameter included in the token request.=20

I=E2=80=99m leaning towards the latter approach.=20

> What if the "resource" parameter refers to a value that was present in =
"locations" but not in "resource" during the initial authorization =
request?

See above - since locations take precedence, those locations shall =
match.=20

>=20
> The "matches as prefix of one of the URLs" part of Paragraph 3 seems a =
bit unclear as well, given that there is no requirement that the =
"locations" elements be well-formed URLs. Is this is simple string =
prefix match, or some sort of path matching based on the components of =
the URL?

simple string match

>=20
> As a purely stylistic comment, I also found the example in this =
section a bit artificial - I struggled to think of *why* a client might =
request an authorization code with one set of authorization details, but =
then use the "resource" parameter to immediately reduce them when =
exchanging the code for a token. I wonder if using a refresh_token grant =
as part of the example could help make it clearer, similar to what's =
done in oauth-resource-indicators-08 Section 2.2.

I think asking for an access token for a single resource server is just =
consequent, since it ensures all access tokens are tightly audience =
restricted. But you are making a good point, a further example utilising =
the refresh token to obtain another access token for the other resource =
server will certainly make things clearer.


>=20
>=20
> * Section 3: Using "authorization_details"
>=20
> Intuitively, I would expect to be able to use "authorization_details" =
in a token request using grant_type=3Drefresh_token, in the same way =
that I can specify "scope". Section 3 doesn't seem to take a definitive =
stance on this - IIUC Section 3.1 doesn't apply because this is not an =
authorization request, and Section 3.3 seems to discourage it in favour =
of using the "resource" parameter. Do you intend for this parameter to =
be allowed in conjunction with a refresh token?

What would be the use case for passing an authorization details =
parameter to the token request with a refresh token? The client =
shouldn=E2=80=99t be able to change the authorization details of the =
underlying grant, so using the =E2=80=9Cresource=E2=80=9D parameter to =
select another subset of the granted authorization details should be =
sufficient.=20

best regards,
Torsten.=20

>=20
>=20
>=20
> On Tue, 5 Nov 2019 at 03:48, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
> Hi all,
>=20
> a new (significantly enhanced) revision of draft-lodderstedt-oauth-rar =
was just published. Here is the list of changes:
>=20
> 	=E2=80=A2 Reworked examples to illustrate privacy preserving use =
of authorization_details
> 	=E2=80=A2 Added text on audience restriction
> 	=E2=80=A2 Added description of relationship between scope and =
authorization_details
> 	=E2=80=A2 Added text on token request & response and =
authorization_details
> 	=E2=80=A2 Added text on how authorization details are conveyed =
to RSs by JWTs or token endpoint response
> 	=E2=80=A2 Added description of relationship between claims and =
authorization_details
> 	=E2=80=A2 Added more example from different sectors
> 	=E2=80=A2 Clarified string comparison to be byte-exact without =
collation
>=20
> Thanks a lot for all contributions and the review feedback so far. I =
will present this draft in Singapore and would appreciate if the WG =
would consider this draft for adoption.=20
>=20
> best regards,
> Torsten.=20
>=20
>> Begin forwarded message:
>>=20
>> From: internet-drafts@ietf.org
>> Subject: New Version Notification for =
draft-lodderstedt-oauth-rar-03.txt
>> Date: 4. November 2019 at 17:43:01 CET
>> To: "Justin Richer" <ietf@justin.richer.org>, "Torsten Lodderstedt" =
<torsten@lodderstedt.net>, "Brian Campbell" <bcampbell@pingidentity.com>
>>=20
>>=20
>> A new version of I-D, draft-lodderstedt-oauth-rar-03.txt
>> has been successfully submitted by Torsten Lodderstedt and posted to =
the
>> IETF repository.
>>=20
>> Name:		draft-lodderstedt-oauth-rar
>> Revision:	03
>> Title:		OAuth 2.0 Rich Authorization Requests
>> Document date:	2019-11-03
>> Group:		Individual Submission
>> Pages:		30
>> URL:            =
https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-03.txt
>> Status:         =
https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
>> Htmlized:       =
https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03
>> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-rar
>> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03
>>=20
>> Abstract:
>>   This document specifies a new parameter "authorization_details" =
that
>>   is used to carry fine grained authorization data in the OAuth
>>   authorization request.
>>=20
>>=20
>>=20
>>=20
>> Please note that it may take a couple of minutes from the time of =
submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>=20
>> The IETF Secretariat
>>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_23D0E45B-4662-4267-A204-4B24925B26B4
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_23D0E45B-4662-4267-A204-4B24925B26B4--


From nobody Thu Nov 14 12:10:55 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0B1912004F for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 12:10:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id flKj6XgAIyJy for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 12:10:52 -0800 (PST)
Received: from mail-il1-x129.google.com (mail-il1-x129.google.com [IPv6:2607:f8b0:4864:20::129]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B1D012002E for <oauth@ietf.org>; Thu, 14 Nov 2019 12:10:52 -0800 (PST)
Received: by mail-il1-x129.google.com with SMTP id d83so6503248ilk.7 for <oauth@ietf.org>; Thu, 14 Nov 2019 12:10:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=tb6uSbiKcbJbxE/RnfpUibsiLjLvo8+xUEsVQ9Y9e6A=; b=iR9kfle3yaI/LOmonsBYG15GPRc9haQ14pG8gMfwvdG/2F9ZUfPCxsMCP4yzpSC2KV lHXnDyOeMNLVccFrFDOU7Z3mzM8TmWfRU5B8grqaO1Zmymtv2iXoyzG5dgGOyOUFCTX6 vr8CAys1+dhciqwAh74kA8+utysyWRNAu3bpKRvFNF31xYrcBVWwPf10zb1RSizptC8M nur6dX8hpSu5XcLi47cgSeL4c4tKPLcRJTxBa9EO5Y+Ch9oZXroctEojt9p8AGzQLXH8 euQixlN3QbMWMh40uxiUixCBwFHBdUIDAgeeMQdWM0ZpGGp6kgGR6btgpB4TY35fpj5f iQHA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=tb6uSbiKcbJbxE/RnfpUibsiLjLvo8+xUEsVQ9Y9e6A=; b=Mon2ZAy6qNzL+16uqg4iFkA5NPLxC2b++RkrwLjqdKDKPnEKu+37U3i7Xj0plrAwVd P9V5LosVgV2nCSd0/aQbIklQD3qjVchRGcfHY9umsJhP0CzxI4pBoN8dWxTC5jodse5g zM64u604CHIz33FxgejtaUxGeqxTQKJPEWq2NXZ14QEw+1NjZdZmHrfhoKiJ+W50XPsj 34P9OiYSWbZdFkgvadXU9OWz/lke7Lc3FaRGnDiWaGyi7tgLB6EvBxzr3hTNuh+pHPrF 4+1MOq7LuG3sX9usOl9bDnAxdm4K0t5+N1HszHBzXxQsXOdavrZqFlGhkLIDUSaixM0d EdpA==
X-Gm-Message-State: APjAAAUPi3Fu8CMx5WXThQnGtO4JQP4yajhJ8NbkHsn+MfaK0rA45SLQ 6i7e+WGmGpVHrKMn3cY+G7EpZnsgBY4=
X-Google-Smtp-Source: APXvYqzaTPuGtaQumAHzsmQD3pxCTaooWgGrlZlGV/EO3U2nWG61j+BetlwzRcZxsr9VzXFRAf2l6g==
X-Received: by 2002:a05:6e02:789:: with SMTP id q9mr11123850ils.96.1573762251091;  Thu, 14 Nov 2019 12:10:51 -0800 (PST)
Received: from mail-il1-f182.google.com (mail-il1-f182.google.com. [209.85.166.182]) by smtp.gmail.com with ESMTPSA id r1sm632008iod.69.2019.11.14.12.10.50 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 14 Nov 2019 12:10:50 -0800 (PST)
Received: by mail-il1-f182.google.com with SMTP id n18so6509358ilt.9 for <oauth@ietf.org>; Thu, 14 Nov 2019 12:10:50 -0800 (PST)
X-Received: by 2002:a92:5ac1:: with SMTP id b62mr12847085ilg.46.1573762249944;  Thu, 14 Nov 2019 12:10:49 -0800 (PST)
MIME-Version: 1.0
From: Aaron Parecki <aaron@parecki.com>
Date: Thu, 14 Nov 2019 12:10:38 -0800
X-Gmail-Original-Message-ID: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com>
Message-ID: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com>
To: OAuth WG <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ppE5Iixvf_5aXhx0dk9YKCjL9jA>
Subject: [OAUTH-WG] authorization code injection - draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 20:10:55 -0000

I read through the authorization code injection section
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.5
but didn't see a mention of this explicitly...

The guidance in 3.1.1 recommends using PKCE for confidential clients.
Section 3.1 says that  clients may use PKCE instead of "state" for
CSRF protection, in which case "'state' may be used again for its
original purpose".

My worry is that without using a unique state value per request, it
becomes less obvious that clients need to maintain state to avoid
being tricked into exchanging an attacker's authorization code.

If the client is using PKCE, then this isn't an issue of exchanging a
different valid authorization code. However it's an issue that the
client may leave itself open to attackers tricking it into exchanging
garbage authorization codes at the AS, possibly triggering rate limits
or security flags at the AS.

There is a partial sentence that hits on the point in 3.1, "clients
MUST only process redirect responses ... from the same user agent this
authorization request initiated with". My worry is that this isn't
enough guidance anymore if people are using non-random state values.
If clients are required to use a random state value, then they are
forced into a situation where they need to maintain state between
requests, which then prevents this problem.

Any thoughts on this? I am not sure exactly what the resolution should
be. I suppose either still requiring a random value in the "state"
parameter, or adding some guidance on how to link a redirect response
with an authorization request.

----
Aaron Parecki
aaronparecki.com


From nobody Thu Nov 14 12:40:43 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2708112002E for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 12:40:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5cjOVzpO5Cse for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 12:40:39 -0800 (PST)
Received: from mail-il1-x133.google.com (mail-il1-x133.google.com [IPv6:2607:f8b0:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE686120072 for <oauth@ietf.org>; Thu, 14 Nov 2019 12:40:37 -0800 (PST)
Received: by mail-il1-x133.google.com with SMTP id d83so6579342ilk.7 for <oauth@ietf.org>; Thu, 14 Nov 2019 12:40:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=n6B2r/Ru+1hbWpDNBSk8oxJwd6fuwBalqqpPHbc0sQw=; b=li8ifSbX4TM8nIDzQgmtrokTT3bU/Kqm1lPegJbser3Ws+fUITczkuJHzuMLgSdPUR lr+vYDyK1NSZWc9q/6rnsaacEjePF+HgTHVxosm8V7sZAgm3dCPcr6jX2FgSh+0v2mv+ tm92cZQq3+tWNro4YpEYXaAkD/CjIWgHL3GIj/HMliVi7v308sy6HcX2eSi99gnafXj6 kULQuNiRWcZyG6NU8dw2Vzb0CDKNG7vyv1cm8h9Dci4W9SbmlY3VuDKxVBxJ9O3oRzA/ YGZVpjkFjHD0Dk6uPMz2FCwtJli6XIdy0RCPn97c4C1MUuSiuPo6gvu/q6Ynkr3rLbNq qbqw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=n6B2r/Ru+1hbWpDNBSk8oxJwd6fuwBalqqpPHbc0sQw=; b=o/sKFoCLeGhJSxqhHYaxJ0/qpbAYHIoi6f1Y3MzDvtR9ikQhpq7MFV2XWrysLZmp8c ajf/34TsPcIarWtiXPQPXiFVf9+kmUxdIe0nexcsppNhGx/tHI7xJgPUVkmw++G8GHj4 A4xkFRLFf4ECy52pOqv4r6hbHDfBXAwJ6nomRd1X22QcEzsrFWHPsmI1FrUdvc5+k89B NV206ms5Jac2+Fdf36esRebhjVOtHRyAmkjfAuq6Xsc8Y7nSKK7g4EaVEOtAGm3OaQnr MHXxaHkKORsPKodT9pWbjZrterHO/gefqijGc9LQXIANMmn3g5R2s32qTN0exy3t9USL Q4dA==
X-Gm-Message-State: APjAAAUCl6ZkxeQ8E/uV9uIGzdD/2FCVo0JEwQySwo7L0IG765BYGt2H cSJ5cnIfvK4D3fmB82rGZ+wBkHEm/+s=
X-Google-Smtp-Source: APXvYqzfmrsT5PAaqn/MB5YaVa4DOizuzIfOk78pSGa8kQiwaU3KyBTzLqlkGs/CF6UzTOlqaWMbPA==
X-Received: by 2002:a05:6e02:d92:: with SMTP id i18mr3070268ilj.20.1573764036692;  Thu, 14 Nov 2019 12:40:36 -0800 (PST)
Received: from mail-il1-f179.google.com (mail-il1-f179.google.com. [209.85.166.179]) by smtp.gmail.com with ESMTPSA id f73sm946589ild.59.2019.11.14.12.40.28 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 14 Nov 2019 12:40:35 -0800 (PST)
Received: by mail-il1-f179.google.com with SMTP id q1so6580505ile.13 for <oauth@ietf.org>; Thu, 14 Nov 2019 12:40:28 -0800 (PST)
X-Received: by 2002:a92:5ac1:: with SMTP id b62mr12989271ilg.46.1573764027744;  Thu, 14 Nov 2019 12:40:27 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360BBDDDF8362B40C97AF18FAB10@VI1PR08MB5360.eurprd08.prod.outlook.com> <736340BF-B33D-4407-81AF-532C947F1243@xmlgrrl.com> <AM0PR08MB5345B19B0AF2304AE8E110CAFAB00@AM0PR08MB5345.eurprd08.prod.outlook.com> <CA+k3eCR_ga1c1Cts0RY6Vy8AEgwjD2TaqOeWStkwQ6udqnkn2Q@mail.gmail.com> <CAAP42hCf2fQO29q3vCH8U7sJWpQ94AiE4BCvMWqYxqxe-erYyw@mail.gmail.com> <CA+k3eCRZ8ySJYFDTb=NbMZ=oVuFrMr5h82uazPsOmjD=XDY6Xg@mail.gmail.com> <E996A4E7-5F72-485D-AB67-652BDA2B9C94@amazon.com>
In-Reply-To: <E996A4E7-5F72-485D-AB67-652BDA2B9C94@amazon.com>
From: Aaron Parecki <aaron@parecki.com>
Date: Thu, 14 Nov 2019 12:40:16 -0800
X-Gmail-Original-Message-ID: <CAGBSGjpxfywTNpkrCuZAjfSoWdu8v79BrF7ZveXR-2gpPf+P_w@mail.gmail.com>
Message-ID: <CAGBSGjpxfywTNpkrCuZAjfSoWdu8v79BrF7ZveXR-2gpPf+P_w@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/wgbbpS3JvCgDseo9gy2M1KG_seY>
Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 20:40:42 -0000

My comments below:

The term "client" and "app" appear in multiple places interchangeably.
Since "client" is the OAuth 2 term, the document should stick to that
and not use the more colloquial term, "app".

* Section 4: "without the app needing to..." should be "without the
client needing to..."
* Section 7.1: "an app could maintain" should be "a client should maintain"
* Section 8.1: "an app may offer" should be "a client may offer", and
a few more times in that paragraph

Section 8.2 mentions a pretty broad recommendation "... what would
reasonably be needed by a single feature" but then stops short. I feel
like this could use some elaboration perhaps with examples, since it
feels a bit too vague as is.

Section 9: Does including "public" in the
"incremental_authz_types_supported" value mean that the AS supports
the "existing_grant" parameter? It's not clear whether that is a 1:1
correlation, since section 5 says that it is only "NOT RECOMMENDED"
for public clients to automatically approve requests rather than "MUST
NOT". This could use some clarification on what it means exactly when
an AS advertises support for incremental authz. If this value does not
mean the "existing_grant" parameter is supported, do we instead need
some other way to indicate which type of incremental authz is
supported for public clients so that public clients know whether to
use existing_grant or include_granted_scopes?

----
Aaron Parecki
aaronparecki.com

On Fri, Nov 8, 2019 at 4:19 PM Richard Backman, Annabelle
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>
> A few issues I noticed:
>
>
>
> There is no normative text describing AS behavior when include_granted_sc=
opes is =E2=80=9Cfalse=E2=80=9D or omitted. I suggest adding the following =
to the parameter=E2=80=99s definition in section 4:
>
> When =E2=80=9Cfalse=E2=80=9D or omitted, the authorization server SHOULD =
NOT include scopes that were not explicitly specified in the authorization =
request.
>
> Having written the above, I realize it conflicts with Section 3.3 of 6749=
, which states =E2=80=9C[t]he authorization server MAY fully or partially i=
gnore the scope requested by the client=E2=80=A6.=E2=80=9D I=E2=80=99m not =
sure offhand how to resolve that.
>
>
>
> Regarding section 6.1, I don=E2=80=99t think we can assume that an access=
_denied just indicates a rejection of the incremental request. Depending on=
 the consent interface presented to the end user, it may make more sense fo=
r the AS to interpret the denial as a retraction of the existing grant as w=
ell. End users may expect that to be the case, particularly if the existing=
 scopes are listed in the consent display alongside the additional ones bei=
ng requested. I=E2=80=99m not sure we need normative changes, but some non-=
normative guidance highlighting this would be helpful.
>
> [NIT] Extra =E2=80=9Cshould=E2=80=9D in the 4th sentence of 6.1.
>
> I disagree with the first sentence of section 8.2. If the process of requ=
esting consent is particularly expensive (e.g., if the client is an IoT dev=
ice or otherwise has limited input/output and is using the device authoriza=
tion grant), then it may be appropriate for the client to determine which f=
eatures the end user wants to enable and make a single authorization reques=
t for all of the necessary scopes.
>
> There is no guarantee that the resource owner in the incremental authoriz=
ation grant is the same as the resource owner in the original authorization=
 grant. For example, the end user may log into Account A originally, but Ac=
count B for the incremental authorization, either intentionally or by accid=
ent. As it stands, the client has no way of knowing that this has happened.=
 I don=E2=80=99t think there is a normative fix for this, but it should be =
called out as a new failure mode that gets introduced when switching from b=
ulk to incremental authorization.
>
>
>
> =E2=80=93
>
> Annabelle Richard Backman
>
> AWS Identity
>
>
>
>
>
> From: OAuth <oauth-bounces@ietf.org> on behalf of Brian Campbell <bcampbe=
ll=3D40pingidentity.com@dmarc.ietf.org>
> Date: Friday, November 8, 2019 at 2:36 PM
> To: William Denniss <wdenniss=3D40google.com@dmarc.ietf.org>
> Cc: oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
>
>
>
> You are welcome. I'm always happy to be able to help with a major contrib=
ution such as this one :)
>
>
>
> I did read through the draft for WGLC back in September though and that w=
as the only issue that jumped out at me.
>
>
>
>
>
> On Wed, Nov 6, 2019 at 6:15 PM William Denniss <wdenniss=3D40google.com@d=
marc.ietf.org> wrote:
>
>
>
> On Wed, Sep 25, 2019 at 3:54 PM Brian Campbell <bcampbell=3D40pingidentit=
y.com@dmarc.ietf.org> wrote:
>
> Just noticed that something is missing in https://tools.ietf.org/html/dra=
ft-ietf-oauth-incremental-authz-02#section-5 where it has just, "(Section 4=
.1.4 of )"
>
>
>
> Thank you for catching this Brian. It was meant to read Section 4.1.4 of =
RFC 6749.
>
>
>
> I've updated this in my local copy, will get posted in version 04.
>
>
>
>
>
> On Thu, Sep 12, 2019 at 8:40 AM Hannes Tschofenig <Hannes.Tschofenig@arm.=
com> wrote:
>
> Thanks for the correction; yes =E2=80=93 the most recent version is -02 a=
nd I posted an old link.
>
>
>
>
>
> From: Eve Maler <eve@xmlgrrl.com>
> Sent: Donnerstag, 12. September 2019 16:16
> To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
> Subject: Re: [OAUTH-WG] WGLC on draft-ietf-oauth-incremental-authz-01
>
>
>
> I think you mean https://tools.ietf.org/html/draft-ietf-oauth-incremental=
-authz-02?
>
> Eve Maler (sent from my iPad) | cell +1 425 345 6756
>
>
> On Sep 11, 2019, at 4:22 AM, Hannes Tschofenig <Hannes.Tschofenig@arm.com=
> wrote:
>
> Hi all,
>
>
>
> We are starting a WGLC on the "OAuth 2.0 Incremental Authorization" draft=
. You can find the document here:
>
> https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-01
>
>
>
> Please review the document and provide feedback.
>
>
>
> The WGLC will end September 25th, 2019.
>
>
>
> Ciao
>
> Hannes & Rifaat
>
> IMPORTANT NOTICE: The contents of this email and any attachments are conf=
idential and may also be privileged. If you are not the intended recipient,=
 please notify the sender immediately and do not disclose the contents to a=
ny other person, use it for any purpose, or store or copy the information i=
n any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
> IMPORTANT NOTICE: The contents of this email and any attachments are conf=
idential and may also be privileged. If you are not the intended recipient,=
 please notify the sender immediately and do not disclose the contents to a=
ny other person, use it for any purpose, or store or copy the information i=
n any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> CONFIDENTIALITY NOTICE: This email may contain confidential and privilege=
d material for the sole use of the intended recipient(s). Any review, use, =
distribution or disclosure by others is strictly prohibited...  If you have=
 received this communication in error, please notify the sender immediately=
 by e-mail and delete the message and any file attachments from your comput=
er. Thank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> CONFIDENTIALITY NOTICE: This email may contain confidential and privilege=
d material for the sole use of the intended recipient(s). Any review, use, =
distribution or disclosure by others is strictly prohibited..  If you have =
received this communication in error, please notify the sender immediately =
by e-mail and delete the message and any file attachments from your compute=
r. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Thu Nov 14 13:02:48 2019
Return-Path: <glen@amsl.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FAF6120043 for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 13:02:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -104.2
X-Spam-Level: 
X-Spam-Status: No, score=-104.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2UjQKAlqbjYY for <oauth@ietfa.amsl.com>; Thu, 14 Nov 2019 13:02:44 -0800 (PST)
Received: from mail.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7072712002E for <oauth@ietf.org>; Thu, 14 Nov 2019 13:02:44 -0800 (PST)
Received: from mail.amsl.com (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTPS id 341D2202E94 for <oauth@ietf.org>; Thu, 14 Nov 2019 13:01:56 -0800 (PST)
Received: from mail-ot1-f54.google.com (mail-ot1-f54.google.com [209.85.210.54]) by c8a.amsl.com (Postfix) with ESMTPSA id 15E2E202EB0 for <oauth@ietf.org>; Thu, 14 Nov 2019 13:01:56 -0800 (PST)
Received: by mail-ot1-f54.google.com with SMTP id l14so6122346oti.10 for <oauth@ietf.org>; Thu, 14 Nov 2019 13:02:44 -0800 (PST)
X-Gm-Message-State: APjAAAXtjPOpxpC8kCmbxZvZ9jGa2CL6M8eUI8GhotxpdTJfyMRpO+j0 A1Y2AS0Si+BfCOJpPWLQHL4BlwG92pjSzMagBY0=
X-Google-Smtp-Source: APXvYqyXe+OPtlaA++Yyxy/V8TFL2VcodB7YtX5KG0/+dcghRVSU9whaMjCH4Z5+1uihM2w6bvUaU2HyN/I0Br0+jR8=
X-Received: by 2002:a05:6830:2316:: with SMTP id u22mr1526648ote.100.1573765363547;  Thu, 14 Nov 2019 13:02:43 -0800 (PST)
MIME-Version: 1.0
From: Glen <glen@amsl.com>
Date: Thu, 14 Nov 2019 13:02:32 -0800
X-Gmail-Original-Message-ID: <CABL0ig65gn35UctG29-zTAM7gy-_w+-3nSJyfn-idULq7zSGtg@mail.gmail.com>
Message-ID: <CABL0ig65gn35UctG29-zTAM7gy-_w+-3nSJyfn-idULq7zSGtg@mail.gmail.com>
To: oauth@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/u1Mi3Fcnhf4TyjRV3HENk-MQWg0>
Subject: Re: [OAUTH-WG] Recent Spam
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 21:02:47 -0000

All -

On Wed, 13 November 2019 12:41 UTC, Rifaat Shekh-Yusef
<rifaat.ietf@gmail.com> wrote:
> The chairs are aware of the issue, as we receive notifications to
> approve these messages sent by non-members.
> We have been receiving these emails for few weeks now, and Glen from IETF
> IT is also aware of the issue and he took some measures to try to address
>  this.  Glen also contacted the ISP but unfortunately he did not hear back from
> them.

I'm not on this list, but in the process of checking a few spam
complaints we've received, I noticed this message in the archive, and
wanted to clarify further:

The OAUTH list - along with about four other lists - was the victim of
a subscribe attack, in which large numbers of valid, harvested email
addresses were subscribed to the OAUTH list without the knowledge of
the account holders.  Sympatico.ca was one of the targeted domains, as
was AOL and GMAIL.

*sigh*

I have no idea what the attackers tried to gain - get the IETF
blacklisted with ISPs, perhaps?

It was relatively simple to remove the sympatico and AOL addresses,
but we have lots of legitimate users who use GMail, so I was hesitant
to try bulk-removing all of those addresses!

OAUTH - at 1003 members (currently) is one of the IETF's larger lists,
so there may be other people on here also who didn't ask to be signed
up.

As complaints come in, we're removing people, and as attacks come in
(and there are a TON of attacks against the IETF every day, which is
why I look the way I do) we block them, but it is something of a game
of leapfrog.   We appreciate everyone's patience as we continue to
deal with these ongoing, and bizarre, attacks.

Glen
--
Glen Barney
IT Director
AMS (IETF Secretariat)


From nobody Fri Nov 15 07:32:59 2019
Return-Path: <pquerna@apache.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 864DC12089C for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 07:32:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.899
X-Spam-Level: 
X-Spam-Status: No, score=-14.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, ENV_AND_HDR_SPF_MATCH=-0.5, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NRSr8FKt7Tih for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 07:32:54 -0800 (PST)
Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by ietfa.amsl.com (Postfix) with SMTP id 37D3C120890 for <oauth@ietf.org>; Fri, 15 Nov 2019 07:32:53 -0800 (PST)
Received: (qmail 71687 invoked by uid 99); 15 Nov 2019 15:32:52 -0000
Received: from Unknown (HELO mailrelay1-lw-us.apache.org) (10.10.3.42) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 15 Nov 2019 15:32:52 +0000
Received: from mail-qk1-f174.google.com (mail-qk1-f174.google.com [209.85.222.174]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id C09EE4FB6 for <oauth@ietf.org>; Fri, 15 Nov 2019 15:32:52 +0000 (UTC)
Received: by mail-qk1-f174.google.com with SMTP id 15so8396398qkh.6 for <oauth@ietf.org>; Fri, 15 Nov 2019 07:32:52 -0800 (PST)
X-Gm-Message-State: APjAAAXEQFnFAn6Im2uElv/L+2jQx13uonUl8tkcZPZnYYE+MK7dsU1Y bn1z7Yug/Mz+iOllNG+JLmB+EWAyoqlO/TWBYH9Yxw==
X-Google-Smtp-Source: APXvYqx1VxEIlICmxUlO4/ykTJ32QGLS1CvBpWGDKciUKmchGkdmEu86/PuIeQRoZ6a0Lfc+pAIUjZ4PZAExNf6r+o8=
X-Received: by 2002:a37:98e:: with SMTP id 136mr13432693qkj.184.1573831972144;  Fri, 15 Nov 2019 07:32:52 -0800 (PST)
MIME-Version: 1.0
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com>
In-Reply-To: <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com>
From: Paul Querna <pquerna@apache.org>
Date: Fri, 15 Nov 2019 07:32:40 -0800
X-Gmail-Original-Message-ID: <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
Message-ID: <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: oauth <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/gQXUV2Ei87Knm3a4seNUTLoS8yk>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Nov 2019 15:32:57 -0000

Echoing Neil's concerns, I posted this to the issue tracker:
https://github.com/danielfett/draft-dpop/issues/56

I've been talking to several large scale API operators about DPoP.  A
consistent concern is the CPU cost of doing an asymmetric key
validation on every HTTP Request at the RS.

Micro-benchmarks on this are easy to make, and at lower in the
protocol stack, eg TLS, there is only one asymmetric operation before
a symmetric key is exchanged, so maybe DPoP as it stands would be hard
to deploy.

I think the primary concern is at the RS level of validation.
Depending on the RS, the "work" of a request can be highly variable,
so adding a single asymmetric key operation could be a significant
portion of CPU usage at scale.

In my discussions, at the AS layer, there is a general belief that the
request rate and overhead of validating a DPoP signature can be OK.
(I work at Okta -- the AS CPU usage is important too, but we already
do a bunch of "other" expensive work on token requests, such that
adding one more EdDSA validate is a rounding error in the short term).

Supporting `HS256` or similar signing of the proof would be one way to
reduce the CPU usage concerns.

The challenge seems to be getting the symmetric key to the RS in a
distributed manner.

This use case could be scoped as a separate specification if that
makes the most sense, building upon DPoP.

Throwing out a potential scheme here:

- **5.  Token Request (Binding Tokens to a Public Key)**: The request
from the client is unchanged. If the AS decides this access token
should use a symmetric key it:
1) Returns the `token_type` as `DPoP+symmetric`
2) Adds a new field to the token response: `token_key`.  This should
be a symmetric key in JWK format, encrypted to the client's DPoP-bound
asymmetric key using JWE.  This means the client still must be able to
decrypt this JWE before proceeding using its private key.

- **6.  Resource Access (Proof of Possession for Access Tokens)**: The
DPoP Proof from the client would use the `token_key` issued by the AS.

- **7.  Public Key Confirmation**: Instead of the `jkt` claim, add a
new `cnf` claim type: JSON Encrypted Key or  `jek`.  The `jek` claim
would be an JWE encrypted value, containing the symmetric key used for
signing the `DPoP` proof header in the RS request.   The JWE
relationship between the AS and RS would be outside the scope of the
specification -- many AS's have registries of RS and their
capabilities, and might agree upon a symmetric key distribution system
ahead of time, in order to decrypt the `jek` confirmation.

I think this scheme would change RS validation of an DPoP-bound proof
from one asymmetric key verify, into two symmetric key operations: one
signature verify on the DPoP token, and potentially one symmetric
decrypt on the `jek` claim.

On Thu, Nov 14, 2019 at 3:20 AM Neil Madden <neil.madden@forgerock.com> wro=
te:
>
> I can't attend Singapore either in person or remotely due to other commit=
ments. I broadly support adoption of this draft, but I have some comments/s=
uggestions about it.
>
> Section 2 lists the main objective as being to harden against compromised=
/malicious AS or RS, which may attempt to replay captured tokens elsewhere.=
 While this is a good idea, a casual reader might wonder why a simple audie=
nce claim in the access token/introspection response is not sufficient to p=
revent this. Because interactions between the client and RS are supposed to=
 be over TLS, is the intended threat model one in which these protections h=
ave broken down? ("counterfeit" in the description suggests this). Or is th=
e motivation that clients want to get a single broad-scoped access token (f=
or usability/performance reasons) and use it to access multiple resource se=
rvers without giving each of them the ability to replay the token to the ot=
her servers? Or are we thinking of a phishing-type vulnerability were a gen=
eral-purpose client might accidentally visit a malicious site which prompts=
 for an access token that the client then blindly goes off and gets? (UMA?)=
 It's not clear to me which of these scenarios is being considered, so it w=
ould be good to tighten up this section.
>
> Another potential motivation is for mobile apps. Some customers of ours w=
ould like to tie access/refresh tokens to private key material generated on=
 a secure element in the device, that can only be accessed after local biom=
etric authentication (e.g. TouchID/FaceID on iOS). I have suggested using m=
TLS cert-bound tokens for this, but have heard some pushback due to the dif=
ficulty of configuring support for client certs across diverse infrastructu=
re. A simple JWT-based solution like DPoP could fill this need.
>
> My main concerns with the draft though are about efficiency and scalabili=
ty of the proposed approach:
>
> 1. The requirement to use public key signatures, along with the anti-repl=
ay nonce, means that the RS is required to perform an expensive signature v=
erification check on every request. That is not going to scale up well. Whi=
le there are more efficient schemes like Ed25519 now, these are still typic=
ally an order of magnitude slower than HMAC and the latency and CPU overhea=
d is likely to be a non-starter for many APIs (especially when you're bille=
d by CPU usage). Public key signatures are also notoriously fragile (see e.=
g. the history of nonce reuse/leakage vulnerabilities in ECDSA or
>
> 2. The advice for the RS to store a set of previously used nonces to prev=
ent replay will also hamper scalability, especially in large deployments wh=
ere such state would need to be replicated to all servers (or use sticky lo=
ad balancing, which comes with its own problems). This violates the statele=
ssness of HTTP, and it also potentially breaks idempotency of operations: T=
hink of the case where the JWT validation and replay protection is done at =
an API gateway but then the call to the backend API server fails for a tran=
sient reason. The client (or a proxy/library) cannot simply replay the (ide=
mpotent) request in this case because it will be rejected by the gateway. I=
t must instead recreate the DPoP JWT, incurring additional overheads.
>
> 3. Minor: The use of a custom header for communicating the DPoP proof wil=
l require additional CORS configuration on top of that already done for the=
 Authorization header, and so adds a small amount of additional friction fo=
r adoption. Given that CORS configuration changes often require approval by=
 a security team, this may make more of an impact than you'd expect.
>
> It's also not clear to me exactly what threat the anti-replay nonce is pr=
otecting against. It does nothing against the replay scenario discussed in =
section 2, as I understand it - which really seems to be more of a MitM sce=
nario. Given that the connection between the client and the RS is supposed =
to be over TLS, and TLS is already protected against replay attacks, I thin=
k this part needs to be better motivated given the obvious costs of impleme=
nting it.
>
> I have a tentative suggestion for an alternative design which avoids thes=
e problems, but at a cost of potentially more complexity elsewhere. I'll su=
mmarise it here for consideration:
>
> 1. The client obtains an access token in the normal way. When calling the=
 token endpoint it provides an EC/okp public key as the confirmation key to=
 be associated with the access/refresh tokens.
>
> 2. The first time the client calls an RS it passes its access token in th=
e Authorization: Bearer header as normal. (If the RS doesn't support DPoP t=
hen this would just succeed and no further action is required by the client=
 - allowing clients to opportunistically ask for DPoP without needing a pri=
ori knowledge of RS capabilities).
>
> 3. The RS introspects the access token and learns the EC public key assoc=
iated with the access token. As there is no DPoP proof with the access toke=
n, the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as the=
 confirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated with =
this access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and base64=
url-encodes it. It uses this as a challenge to the client by sending back a=
 401 response with WWW-Authenticate: DPoP <encoded-epk>
>
> 4. The client decodes the epk challenge and performs an ECDH key agreemen=
t between its private key and the challenge epk as per the method described=
 for the existing JWA ECDH-ES encryption algorithm. Rather than deriving an=
 AES key however, it derives a HMAC key for HS256. The "apu" value is set t=
o the access token (string value as ASCII bytes) and the "apv" value is set=
 to the hostname of the RS (e.g. "api.example.com"). This ensures that the =
derived key is cryptographically bound to the context in which it is used.
>
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the =
one in the current draft, but signed using the HS256 key. If a "kid" field =
was present in the challenge JWK sent by the RS then the same value MUST be=
 used in the "kid" header of this discharge JWT. It retries its original re=
quest sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
>
> 6. The RS uses its stored ephemeral private key to derive the same HMAC k=
ey and verify the DPoP discharge JWT. If it validates and all fields are co=
rrect then the request is allowed.
>
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the challenge=
 JWK, the RS can preemptively carry out the ECDH key agreement immediately =
and generate the derived HMAC key. The RS can then encrypt this derived key=
 using a local authenticated encryption key (e.g. AES-GCM) and use that enc=
rypted value as the "kid" value in the challenge (perhaps along with some c=
ontext or an expiry time). That way the RS only needs to decrypt this kid v=
alue rather than performing the ECDH key agreement on every request. This a=
lso avoids the need for the RS to store any per-client state locally.
>
> The challenge-response nature of the scheme prevents traditional replay a=
ttacks in the case where a DPoP discharge JWT is accidentally leaked throug=
h server logs or some other flaw, without needing to store nonces on the se=
rver. Using the RS's hostname in the key derivation process prevents mitm a=
ttacks in a similar way to how FIDO/WebAuthn prevents this. Most importantl=
y, once a HS256 key has been derived between a client and RS they can reuse=
 that key for multiple requests, reducing the overhead of the ECDH key agre=
ement step. Either side can decide as a matter of policy how long to let th=
is occur and when to trigger a fresh challenge-response.
>
> Because this fits within the standard HTTP authentication framework, it a=
lso requires no additional CORS configuration and is relatively easy to plu=
g in to existing HTTP client libraries.
>
> The main downside of this approach to me is the fact that you can't simpl=
y reuse an existing JWT library to implement it, and so it will take time f=
or client libs to develop. (Although I think this might be achievable now w=
ith existing *COSE* libraries). This would increase the risk of people hand=
-rolling solutions, rather than using well-tested libraries. On the other h=
and, it uses fairly widely supported primitives so e.g. an implementation u=
sing WebCrypto is probably only a few dozen lines of code.
>
> -- Neil
>
>
> On 31 Oct 2019, at 19:20, Brian Campbell <bcampbell=3D40pingidentity.com@=
dmarc.ietf.org> wrote:
>
> Hello WG,
>
> Just a quick note to let folks know that -03 of the DPoP draft was publis=
hed earlier today. The usual various document links are in the forwarded me=
ssage below and the relevant snippet from the doc history with a summary of=
 the changes is included here for convenience.
>
> Hopefully folks will have time to read the (relativity) short document be=
fore the meeting(s) in Singapore where (spoiler alert) I plan to ask that t=
he WG consider adoption of the draft.
>
> Thanks,
>
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
>
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <mbj@mic=
rosoft.com>, John Bradley <ve7jtb@ve7jtb.com>, Brian Campbell <bcampbell@pi=
ngidentity.com>, David Waite <david@alkaline-solutions.com>, Daniel Fett <m=
ail@danielfett.de>
>
>
>
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the App=
lication Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            https://www.ietf.org/internet-drafts/draft-fett-oauth-dpo=
p-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fett-oauth-dp=
op
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop=
-03
>
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>
>
>
>
> Please note that it may take a couple of minutes from the time of submiss=
ion
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> CONFIDENTIALITY NOTICE: This email may contain confidential and privilege=
d material for the sole use of the intended recipient(s). Any review, use, =
distribution or disclosure by others is strictly prohibited..  If you have =
received this communication in error, please notify the sender immediately =
by e-mail and delete the message and any file attachments from your compute=
r. Thank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Fri Nov 15 07:52:02 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8323D120891 for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 07:52:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZU50f5_KO596 for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 07:51:57 -0800 (PST)
Received: from mail-wm1-x336.google.com (mail-wm1-x336.google.com [IPv6:2a00:1450:4864:20::336]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D2A24120801 for <oauth@ietf.org>; Fri, 15 Nov 2019 07:51:56 -0800 (PST)
Received: by mail-wm1-x336.google.com with SMTP id q70so10126103wme.1 for <oauth@ietf.org>; Fri, 15 Nov 2019 07:51:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=rRHhME1EVKL8O4BxE+qfHbUrJ8AEVreQbVvqv6HiVtE=; b=g/99799JMLEKoMnWV3SeMrl6L4VHap+A6PnpAppXP2FyBTBxa5VavKwPMjFN7Gi8Uy qrSdzCG6MCGD2rKJEqQG/iLHeQKZc23MmnuxjK6351Vb397zyMr+nJv9z6CRl2m6Sssz /wF2eLasa48JKYfxG8a1YjR0LqLKVU9QL+CDKoim6rpa0+VURtYZZuCZufdUGOtK+gdD RpAVLj7fjBobZivJmixqb8sZ2t8d6wokbXNb/x8C67kncomwPC+hg2yV7jUwSog+GK+7 ArABR/LXnUMMDPbDNhtMUk3Kfwb/JiS4eibJpEbaivO6D2YmBla5TLvyzWCZOBk08Th+ 6xXQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=rRHhME1EVKL8O4BxE+qfHbUrJ8AEVreQbVvqv6HiVtE=; b=KGOU6xLXarM+yconTEwFKDvUcwRgwYrIO7NH2XaTSN5g47xoKAeXkKNbwQQkqMSzpe QAmOWQC6ihp6rq84mI1EXUitoFBRmjnkIkhRHlOidtv73iIlNQnZA0y/hr0oCIoaVcXq /bwbJb1VEV4BdsLteNrI62dc4zfTaWkkBW1r2BH1W72LuOF22kFGsi+OlMe/uxoas2jP Mi9BJTefW+XKWVEh1FI3r+RjoazHE7GqR9dW63kdyKE2xyyJwRSJbdN9acGIGJyuYGk+ cFeyUKvVFaXlV/ua14RL7rrqWHRfNcjlrrVhr7zUwerqRqnxMO4e3Dem0RyMRHQz8Q30 KMRw==
X-Gm-Message-State: APjAAAWC+jkJ4U7Ce6yCUGweiTo1NT1+I5hzMa6ZuIAyQ18MgROklXVd r9/lroPzFa/B2VALFndVkWAhMF/wd8EQRg==
X-Google-Smtp-Source: APXvYqxca4ogVvvqHb2Ly9FkXZKJ6CcmXOh1aeU7gfxSHSkX92w+zB8JNDgAth/hW/ZI8vUygxICmA==
X-Received: by 2002:a1c:dd45:: with SMTP id u66mr14940536wmg.12.1573833115064;  Fri, 15 Nov 2019 07:51:55 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id w19sm10109074wmk.36.2019.11.15.07.51.53 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 15 Nov 2019 07:51:54 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <97C1CF0C-451E-430F-8B35-AF8B5A4D2E2D@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_F8795AD9-EB68-4686-A774-431F5F312C77"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 15 Nov 2019 16:51:52 +0100
In-Reply-To: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com>
Cc: OAuth WG <oauth@ietf.org>
To: Aaron Parecki <aaron@parecki.com>
References: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/SiW3Fmonl_0aZ3coc4FLhUcxFls>
Subject: Re: [OAUTH-WG] authorization code injection - draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Nov 2019 15:52:01 -0000

--Apple-Mail=_F8795AD9-EB68-4686-A774-431F5F312C77
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Aaron,

> On 14. Nov 2019, at 21:10, Aaron Parecki <aaron@parecki.com> wrote:
>=20
> I read through the authorization code injection section
> =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
5
> but didn't see a mention of this explicitly...
>=20
> The guidance in 3.1.1 recommends using PKCE for confidential clients.

It=E2=80=99s a MUST for any client, not only confidential clients.=20

"Clients utilizing the authorization grant type MUST use PKCE =E2=80=A6"

> Section 3.1 says that  clients may use PKCE instead of "state" for
> CSRF protection, in which case "'state' may be used again for its
> original purpose".
>=20
> My worry is that without using a unique state value per request, it
> becomes less obvious that clients need to maintain state to avoid
> being tricked into exchanging an attacker's authorization code.

The PKCE verifier is a unique per request random value that needs to =
maintained in the state of the app as well. So beside it=E2=80=99s =
application for sender authentication and code replay detection, it also =
serves the role of state to detect CSRF. It just works differently in =
that the AS determines the response and the PCKE verifier don=E2=80=99t =
match and if that happens refuses to issue tokens.

>=20
> If the client is using PKCE, then this isn't an issue of exchanging a
> different valid authorization code. However it's an issue that the
> client may leave itself open to attackers tricking it into exchanging
> garbage authorization codes at the AS, possibly triggering rate limits
> or security flags at the AS.

You mean because it may send a PKCE verifier valid for the current =
transaction along with an infected code?

>=20
> There is a partial sentence that hits on the point in 3.1, "clients
> MUST only process redirect responses ... from the same user agent this
> authorization request initiated with". My worry is that this isn't
> enough guidance anymore if people are using non-random state values.

What is the relationship to the state value? The paragraph you cite is =
about mix up prevention and requires the client to memorize the AS it =
sent the user to.=20

> If clients are required to use a random state value, then they are
> forced into a situation where they need to maintain state between
> requests, which then prevents this problem.

Same holds true for PKCE.

>=20
> Any thoughts on this? I am not sure exactly what the resolution should
> be. I suppose either still requiring a random value in the "state"
> parameter, or adding some guidance on how to link a redirect response
> with an authorization request.

Potentially it is not obvious enough, but the linking is (indirectly) =
implemented using the PCKE verifier. =20

best regards,
Torsten.=20

>=20
> ----
> Aaron Parecki
> aaronparecki.com
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_F8795AD9-EB68-4686-A774-431F5F312C77
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ
KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH
EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV
U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw
MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx
EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj
dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq
KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb
M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L
bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH
fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB
AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy
/AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH
MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv
bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6
Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM
AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh
Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi
tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp
VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7
T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI
9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI
ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon
M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ
z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx
CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv
cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G
CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
Fw0xOTExMTUxNTUxNTJaMC8GCSqGSIb3DQEJBDEiBCDaTaOdVrmXRrqMX3XxrIJPulHb3j8sid5r
rsZtHwbFrDCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0
ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl
IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ
BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx
GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1
dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG
SIb3DQEBAQUABIIBAE0imAeDBhySt1NHz2sBWKrVB/knxMSVlOJFJb03KMrtp9SadfstL9Xt4YI+
btxorDV1u88eAGGzHAql8W+l7nRaLLm6ybsOCRG7eENdRGl+qfFtIk1/uIKucbbkgT/Go32CY7Wd
nTkKwlAAgfiPyntCrIcn3l7mPsZkJ0bmZ9MLgzGZKpYnm34uWpFMR64NzEKt71hv2fWaWiYIAD4M
E2xa/ePwEaJ85oYb3fCQBjqjPYp2kluAoXUpB37KZp+tdPiDTml+BlEb//edB0kNT3L5B4PKw/2z
4MVd7BZZSDDp8GELRoB+WN10iAmtDq7DTKOTIxrFd7nsEib1t2PSsecAAAAAAAA=
--Apple-Mail=_F8795AD9-EB68-4686-A774-431F5F312C77--


From nobody Fri Nov 15 08:45:58 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B30B1208DD for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 08:45:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8M0o2dSz1ATv for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 08:45:50 -0800 (PST)
Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BA281208E3 for <oauth@ietf.org>; Fri, 15 Nov 2019 08:45:32 -0800 (PST)
Received: by mail-wr1-x42f.google.com with SMTP id t1so11703870wrv.4 for <oauth@ietf.org>; Fri, 15 Nov 2019 08:45:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=5uOJYEO/hcLjDoS4/qz+BbFuf7isLcgalJkVEpCQtew=; b=L8IOIvuU86YFk9hg681N0NfKxbtMtS25q/0kwtcY6lAm/g5vvoJuAurCueIAgdkN3s 2RXQCKuEwP07MnUEyfeAV3/SbJg3kbgprfvLgC4mWGaZQZU2BiQqBxexy4iJLcvhqm65 AYAjKWS66bq6S+wkBpzKC+wTdMXpgk1cYgc1w=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=5uOJYEO/hcLjDoS4/qz+BbFuf7isLcgalJkVEpCQtew=; b=QDfXjYppBZuweMo6aZH3yzd3fe3tjsSyDXxBTZvhFUVdFZQooLo0jNiFJ1WUJyCFyi DXA3qcIVZBdIKL8e3/QI0PerekyzbmKtbbRc4TgNrInJdNPyKZqxzpCC3p2e5v82WNnx VjLaWygfD4PtUe+B9AXXYLz+inib/7l2Ous2P/hRAAgp0qwBwNMnZNaIaUv7y1wDl1wa 4tfciJa4PAFtQsvQSJA25vYDZKJ1wX7oM5uzpwmJcqjneyD66ZNKL+pMatLfxYgPExKn BsuiTHhg9lqlNc4lSDch5rcSBfFr0I6DwJ0Mb/CJYj8/hZc2UwC59UntYso+G3PLEkei 3pDQ==
X-Gm-Message-State: APjAAAWYJgwk8cBI6rllBL5ttEswW1b01wIy+bH96TOq10VhluYlqPoa X6dzF5twViFSxRHTtBsst4i3RMxheCw=
X-Google-Smtp-Source: APXvYqyDcCCiN6DJam6kf4UCXReSXg7yihIsW100RcdldWz8cIcMxmSesTZDssT5GQGFzke4tlKU0A==
X-Received: by 2002:adf:f60e:: with SMTP id t14mr15793783wrp.292.1573836330520;  Fri, 15 Nov 2019 08:45:30 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id z6sm12636149wro.18.2019.11.15.08.45.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 15 Nov 2019 08:45:29 -0800 (PST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
From: Neil Madden <neil.madden@forgerock.com>
In-Reply-To: <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
Date: Fri, 15 Nov 2019 16:45:27 +0000
Cc: oauth <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <697A5E82-CD50-4F06-B5C3-7C95A3550BAE@forgerock.com>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
To: Paul Querna <pquerna@apache.org>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ZFw678d5cAD1mDp81KNb8DtaM3Q>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Nov 2019 16:45:56 -0000

A few comments below.

On 15 Nov 2019, at 15:32, Paul Querna <pquerna@apache.org> wrote:
>=20
> Echoing Neil's concerns, I posted this to the issue tracker:
> https://github.com/danielfett/draft-dpop/issues/56
>=20
> I've been talking to several large scale API operators about DPoP.  A
> consistent concern is the CPU cost of doing an asymmetric key
> validation on every HTTP Request at the RS.
>=20
> Micro-benchmarks on this are easy to make, and at lower in the
> protocol stack, eg TLS, there is only one asymmetric operation before
> a symmetric key is exchanged, so maybe DPoP as it stands would be hard
> to deploy.

Right, which was the intention of my proposed alternative scheme: the =
client and RS do a single ECDH operation each and then can reuse the =
derived HMAC key for many requests.

>=20
> I think the primary concern is at the RS level of validation.
> Depending on the RS, the "work" of a request can be highly variable,
> so adding a single asymmetric key operation could be a significant
> portion of CPU usage at scale.
>=20
> In my discussions, at the AS layer, there is a general belief that the
> request rate and overhead of validating a DPoP signature can be OK.
> (I work at Okta -- the AS CPU usage is important too, but we already
> do a bunch of "other" expensive work on token requests, such that
> adding one more EdDSA validate is a rounding error in the short term).
>=20
> Supporting `HS256` or similar signing of the proof would be one way to
> reduce the CPU usage concerns.
>=20
> The challenge seems to be getting the symmetric key to the RS in a
> distributed manner.
>=20
> This use case could be scoped as a separate specification if that
> makes the most sense, building upon DPoP.
>=20
> Throwing out a potential scheme here:
>=20
> - **5.  Token Request (Binding Tokens to a Public Key)**: The request
> from the client is unchanged. If the AS decides this access token
> should use a symmetric key it:
> 1) Returns the `token_type` as `DPoP+symmetric`
> 2) Adds a new field to the token response: `token_key`.  This should
> be a symmetric key in JWK format, encrypted to the client's DPoP-bound
> asymmetric key using JWE.  This means the client still must be able to
> decrypt this JWE before proceeding using its private key.
>=20
> - **6.  Resource Access (Proof of Possession for Access Tokens)**: The
> DPoP Proof from the client would use the `token_key` issued by the AS.
>=20
> - **7.  Public Key Confirmation**: Instead of the `jkt` claim, add a
> new `cnf` claim type: JSON Encrypted Key or  `jek`.  The `jek` claim
> would be an JWE encrypted value, containing the symmetric key used for
> signing the `DPoP` proof header in the RS request.   The JWE
> relationship between the AS and RS would be outside the scope of the
> specification -- many AS's have registries of RS and their
> capabilities, and might agree upon a symmetric key distribution system
> ahead of time, in order to decrypt the `jek` confirmation.

If the RS has a client secret to access the token introspection =
endpoint, this could be reused in this case.

Whether this scheme is acceptable depends on clarifying the threat model =
that DPoP is intended to address. If we are only concerned about a fake =
RS (without any genuine relationship with the AS) and a client being =
tricked into sending it an access token, then this approach would be =
fine. The fake RS is unable to obtain the HMAC key and so all it can do =
is try and replay the access token and DPoP token somewhere else (which =
should be prevented by the claims in the DPoP token).

But if we are concerned about a potentially malicious RS that *does* =
have valid credentials (but is not the RS that the client thinks it is, =
or is a genuine RS that has been compromised), then this scheme fails =
because the malicious RS learns the HMAC key and then can use it to =
create any DPoP proofs that it wants, so the access token is completely =
compromised.

In the ECDH solution I proposed, a unique key is derived for each RS and =
the hostname of that RS is included in the key derivation. Assuming the =
client doesn't make a mistake when including this information then this =
means that the RS does not ever learn a HMAC key that is valid for any =
other server and so is unable to make any forgeries.

>=20
> I think this scheme would change RS validation of an DPoP-bound proof
> from one asymmetric key verify, into two symmetric key operations: one
> signature verify on the DPoP token, and potentially one symmetric
> decrypt on the `jek` claim.

This does mean that the AS either needs to know ahead of time which RS =
will receive the access token (so that it can pre-encrypt the key for =
them), or else it needs to keep the symmetric DPoP keys around in a =
recoverable form - which creates a potential risk if clients reuse keys =
for multiple access tokens.

-- Neil=


From nobody Fri Nov 15 17:08:08 2019
Return-Path: <vineetbanga@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BC0B12006D for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 17:08:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level: 
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I3voUkghWiKF for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 17:08:04 -0800 (PST)
Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55551120019 for <oauth@ietf.org>; Fri, 15 Nov 2019 17:08:04 -0800 (PST)
Received: by mail-qt1-x82e.google.com with SMTP id o49so12823986qta.7 for <oauth@ietf.org>; Fri, 15 Nov 2019 17:08:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ST96H/G+vZVQ0mPoH/Q1fwjavDf712c7J/1IIKTKrxY=; b=Dq1i5B+LAiUCx+4CPc/ZpZaB7rmSg+WtwGfw+YgUfBb6opL3ngtuBzQwh2tEyQ4eZb Pu+ewTzkjgJjU0s4VSc19TaffjF9CPH8vgfTMYcZjhFpceiRFp/nZBBC/B/yopDZHny6 4CgOn7uxRJe42B+gEIRFlGTdsI+jqZItm6fQZ0zbUtjF2abnTxGR73WJNDBMzEw7YaIm Sd0GiykRXSMZXSNh3+SqBQh6Mn/Tu2IBWUI3U11L2KJ+Xf7248VGD108wFsRBN+Kyyrx zGluMdiiJ3xGtKK1tJMSfkOOH/w4dAMZYa7ZJu+l7KtxCHHCvuT6klJmnLPuguyIwB8/ 1VdA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ST96H/G+vZVQ0mPoH/Q1fwjavDf712c7J/1IIKTKrxY=; b=IU54sA6tADH82lwrkLlOt/eJN+xq0zMKX3KAGgOYQ5K/spQ36bNL4dLgVJiHtgx6Nn uAI0IJ0GXiC1tHut0IeyrXOprKF1Hb7PJMGwOqupOJei1hMS6+vKjl55i7K8FtwIMHC2 X2aiMJ3gFM7LdfWC6fuaqIzk50f5g2I0SBVO1QhUeJvZcqUBrpdpF3PX9ClZIFlHWdyA nS0h1owzz/+XEBsiqlOY987oWiD9YmT6YGOouSTmKY8r2agGV817//AyuHYxVqf4NzzD vwRPcbZhCWoNVdf2OtabasY2bLHH8eMULRd6gxR/UPpM/t3UP9dYoDZzgUtm42ev1JZz W9tg==
X-Gm-Message-State: APjAAAU0ZIrLd3iXEp8nH5UfTKK0YxBbfh8wwPCa+mLU8EiECMO3nVS2 7Cddjwy5Ui7PfTLCcjPGOQvQPao0johdcl28i/+Ot+TnYx8=
X-Google-Smtp-Source: APXvYqxupYQ7vaPzoMtIobbDzt+GAGE7plw3/k7PeddLz4yMP/hN7kkO4wDXCAmAi2TEX7IRIugpUpEpX/Y1fao1Iv8=
X-Received: by 2002:ac8:2dbd:: with SMTP id p58mr17071141qta.281.1573866483086;  Fri, 15 Nov 2019 17:08:03 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
In-Reply-To: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com>
From: Vineet Banga <vineetbanga@google.com>
Date: Fri, 15 Nov 2019 17:07:52 -0800
Message-ID: <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a65f4b05976c58c6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/txGVWpcXcD_DN4z-JEOKAtq_iFA>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Nov 2019 01:08:07 -0000

--000000000000a65f4b05976c58c6
Content-Type: text/plain; charset="UTF-8"

Just one comment/question at the moment:

3.1.1 - Is there any recommendation around leveraging state vs using
multiple URIs (with exact match) to remember the application state of the
client? I have seen exploding list of registered redirect URIs, but am not
aware of any security issues around this usage. But would like to check if
there are any opinions on this matter.



On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig <Hannes.Tschofenig@arm.com>
wrote:

> Hi all,
>
> this is a working group last call for "OAuth 2.0 Security Best Current
> Practice".
>
> Here is the document:
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>
> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> (We use a three week WGLC because of the IETF meeting.)
>
> Ciao
> Hannes & Rifaat
>
> IMPORTANT NOTICE: The contents of this email and any attachments are
> confidential and may also be privileged. If you are not the intended
> recipient, please notify the sender immediately and do not disclose the
> contents to any other person, use it for any purpose, or store or copy the
> information in any medium. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000a65f4b05976c58c6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Just one comment/question at the moment:<div>





<p class=3D"gmail-p1" style=3D"margin:0px;font-variant-numeric:normal;font-=
variant-east-asian:normal;font-stretch:normal;font-size:12px;line-height:no=
rmal;font-family:&quot;Helvetica Neue&quot;">3.1.1 - Is there any recommend=
ation around leveraging state vs using multiple URIs (with exact match) to =
remember the application state of the client? I have seen exploding list of=
 registered redirect URIs, but am not aware of any security issues around t=
his usage. But would like to check if there are any opinions on this matter=
.</p>
<p class=3D"gmail-p2" style=3D"margin:0px;font-variant-numeric:normal;font-=
variant-east-asian:normal;font-stretch:normal;font-size:12px;line-height:no=
rmal;font-family:&quot;Helvetica Neue&quot;;min-height:14px"><br></p></div>=
</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">=
On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig &lt;<a href=3D"mailto:Han=
nes.Tschofenig@arm.com">Hannes.Tschofenig@arm.com</a>&gt; wrote:<br></div><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex">Hi all,<br>
<br>
this is a working group last call for &quot;OAuth 2.0 Security Best Current=
 Practice&quot;.<br>
<br>
Here is the document:<br>
<a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13"=
 rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/html/draft-iet=
f-oauth-security-topics-13</a><br>
<br>
Please send you comments to the OAuth mailing list by Nov. 27, 2019.<br>
(We use a three week WGLC because of the IETF meeting.)<br>
<br>
Ciao<br>
Hannes &amp; Rifaat<br>
<br>
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.<br>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--000000000000a65f4b05976c58c6--


From nobody Fri Nov 15 23:51:24 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8184120104 for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 23:51:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HZnS36mtpLpU for <oauth@ietfa.amsl.com>; Fri, 15 Nov 2019 23:51:20 -0800 (PST)
Received: from mail-wm1-x334.google.com (mail-wm1-x334.google.com [IPv6:2a00:1450:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16D05120103 for <oauth@ietf.org>; Fri, 15 Nov 2019 23:51:19 -0800 (PST)
Received: by mail-wm1-x334.google.com with SMTP id b17so12797277wmj.2 for <oauth@ietf.org>; Fri, 15 Nov 2019 23:51:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=VmCDNE/WZPrJvDAJnqlSZ5EySavfPl1PGfpQXB2yojs=; b=lqd5g4uN1wCsHB5GnFwR5WXocf9xmr9zoZp2xvwpjZz0/lZ6sb/0IuRP684h+BUPPa o7C9tFhAziWkD5KspW+J3NiDgN3pMbf2qRppy7zl4TwiiTAgUzPACUMHPg4Hk4JcJXE/ Hg/ZjC0igxjtniyC0c4b3X9VgUfCattKVVl3c3rt6KTl0hbzaEZ10WbMcQSWGQnaW0cq E4XCdSWEhEIBbhNM1dn2sfcKld7dFX3/XQlIJbALG9vanUzkIJOeh4dhs8H4ilmbymAx MQlsX5wIzJKwoJjtYoVp/zPHAqqukW+dfIKN75WXuqQGt9YGX4y6EtWrOtRp6GhjjumK JLZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=VmCDNE/WZPrJvDAJnqlSZ5EySavfPl1PGfpQXB2yojs=; b=dzr7gF9MasD24/TN80ul87sZBXcQFYTd2ygPvLf9gZEdojOYKlN+KwJKsu9arD9Dqs iUKTohB8wfZ/bugo+h6tOav+0pE3OiB1vIBCVy9+pfFYoB162obU1zKE1poedpU+1L5b 5prouTL/0pn+xWZ5yKdGi2SplDPFljfhKnwafDNTNUvhBvI1aa51RlHBrYxcLz2oUV4T bif4ifAkM67quGtzrJxlbx/BEFkmV/WOXesnYp6ykDJHMj8jcZkfh7ws7BH3PaA93SUK 5H4oWlPcpz0PfPAUs3zZWYFsC7/9qZz/mdKJU98vdWZW3GjAnbYXnscOuYDGpTFTKbmV 48og==
X-Gm-Message-State: APjAAAWWmwuBr8Mo/cfLlBuwmLOXhzdVLzWc3h1GJzn1X1HK/edg0acT EKLfZpKqJp01HtWcFxaDKMcN1z237Ik5cg==
X-Google-Smtp-Source: APXvYqyBiCT9Unim/nDsj72LTE0UhvgHRH0YwB/aFzsWvlCzI1gYi//tSSDHEiOCbd7T1LGgvFqTXA==
X-Received: by 2002:a1c:2d49:: with SMTP id t70mr18902121wmt.131.1573890678177;  Fri, 15 Nov 2019 23:51:18 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id j3sm14104924wrs.70.2019.11.15.23.51.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 15 Nov 2019 23:51:17 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <3FE840EE-9261-414E-8AB7-B75BD8BA6F86@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_F2045457-8280-4934-9AF9-B0ADA11251E1"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Sat, 16 Nov 2019 08:51:15 +0100
In-Reply-To: <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
To: Vineet Banga <vineetbanga=40google.com@dmarc.ietf.org>
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/G3_ZfznmjTdQwk4vo7X1weKe-vo>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Nov 2019 07:51:23 -0000

--Apple-Mail=_F2045457-8280-4934-9AF9-B0ADA11251E1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 16. Nov 2019, at 02:07, Vineet Banga =
<vineetbanga=3D40google.com@dmarc.ietf.org> wrote:
>=20
> Just one comment/question at the moment:
> 3.1.1 - Is there any recommendation around leveraging state vs using =
multiple URIs (with exact match) to remember the application state of =
the client? I have seen exploding list of registered redirect URIs, but =
am not aware of any security issues around this usage. But would like to =
check if there are any opinions on this matter..

The BCP recommends transaction specific one time use state values for =
CSRF prevention. To achieve the same protection level with redirect =
URI=E2=80=99s and exact match, one would need to register per =
transaction redirect URI values.=20

Do your redirect URIs meet those requirements?

>=20
>=20
> On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig =
<Hannes.Tschofenig@arm.com> wrote:
> Hi all,
>=20
> this is a working group last call for "OAuth 2.0 Security Best Current =
Practice".
>=20
> Here is the document:
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
>=20
> Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> (We use a three week WGLC because of the IETF meeting.)
>=20
> Ciao
> Hannes & Rifaat
>=20
> IMPORTANT NOTICE: The contents of this email and any attachments are =
confidential and may also be privileged. If you are not the intended =
recipient, please notify the sender immediately and do not disclose the =
contents to any other person, use it for any purpose, or store or copy =
the information in any medium. Thank you.
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_F2045457-8280-4934-9AF9-B0ADA11251E1
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_F2045457-8280-4934-9AF9-B0ADA11251E1--


From nobody Sat Nov 16 05:28:55 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9C161200FF for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 05:28:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ejz1qth-L2lE for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 05:28:50 -0800 (PST)
Received: from mail-io1-xd2f.google.com (mail-io1-xd2f.google.com [IPv6:2607:f8b0:4864:20::d2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C40612006E for <oauth@ietf.org>; Sat, 16 Nov 2019 05:28:50 -0800 (PST)
Received: by mail-io1-xd2f.google.com with SMTP id q83so13652287iod.1 for <oauth@ietf.org>; Sat, 16 Nov 2019 05:28:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=0JA/HSKxifHi6Gb4dBMeJomueNARNpv2Z7aUu0ysXAU=; b=MQuLAhxnNtMM9/J6/Onp7f+6iYycNdYDDK7MbuQQ5QoQDXfWkun7cCI/j7gsnKz3+b Li32LrcFN0l4FAonMu7q+eCSQDP3hu8ZVNk2tWXRAUhtTv83rjG8mz6YBiS7r5/+qqoD BBTdlbKyn0Ag8XwqkKnYdS8cVoCLhwDh3x6kh/iRjS3/TQPN/0GUxiJEuOl/PQy2spV5 7nN0xGI11ZwjmKqiHtRrfwrB5GFu0wTAki3q2LFd/RGTR4IcTrhA5UctA5+0EqcdXlNz RDb2RARrBZnnF1Xl8ejQhmQPaRuVjt67lEepkg5LQKgTAkwbPthLNOetrB7iYAfoZqtS KSFg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=0JA/HSKxifHi6Gb4dBMeJomueNARNpv2Z7aUu0ysXAU=; b=mzWFzY5wY0/0EwypqFVo8DyQsvhqwLw76RpVcoJFfjuOw1P+Ag8sCLP3LSQ38kFxES eFV8AGEv54r+Y3BGV2eixnaJGKMdZkPT59vWfdDAkmwrJPwRPGC4lFxn2rSesxeveu4Q cnzRFOn+Ntak9/G34mEUcFNy08lR795vwpwto99aEm2hwN7lK304LID8BHdRwelV745t 4KKdl7x/8ziQJCOzgK4jSTSUOTYTgAX9jhGdGqsKyBj2HUIdX6ki+FIhuSBLW0mcnROz mihIHS49aLLjoK1RmaQKwEsWOok3HTe/PLuD7niD23gANEajmCVxnKabFyO9/mxhI/yr /NwA==
X-Gm-Message-State: APjAAAVDLlQI2ZiN/HABB8/KrNXMjftt1l75cUDFhA9pmdc348364REi 0jNAxYslQzJKSHGgCgRZfZ3ywU1raIyM7w==
X-Google-Smtp-Source: APXvYqxn1YAMtiN21PrN0/Or80A39W1reilJ7e20D97cgakK7+JEnaD4Aab53YLk+zU/pUExpp3TKg==
X-Received: by 2002:a02:c05a:: with SMTP id u26mr5433480jam.58.1573910929418;  Sat, 16 Nov 2019 05:28:49 -0800 (PST)
Received: from mail-il1-f170.google.com (mail-il1-f170.google.com. [209.85.166.170]) by smtp.gmail.com with ESMTPSA id s70sm2571852ili.13.2019.11.16.05.28.48 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 16 Nov 2019 05:28:48 -0800 (PST)
Received: by mail-il1-f170.google.com with SMTP id s5so11744415iln.4 for <oauth@ietf.org>; Sat, 16 Nov 2019 05:28:48 -0800 (PST)
X-Received: by 2002:a92:4609:: with SMTP id t9mr5987335ila.156.1573910927830;  Sat, 16 Nov 2019 05:28:47 -0800 (PST)
MIME-Version: 1.0
References: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com> <97C1CF0C-451E-430F-8B35-AF8B5A4D2E2D@lodderstedt.net>
In-Reply-To: <97C1CF0C-451E-430F-8B35-AF8B5A4D2E2D@lodderstedt.net>
From: Aaron Parecki <aaron@parecki.com>
Date: Sat, 16 Nov 2019 21:28:36 +0800
X-Gmail-Original-Message-ID: <CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com>
Message-ID: <CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: OAuth WG <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/nqvrvcRMjRVgE5BGte8Db2NMjxg>
Subject: Re: [OAUTH-WG] authorization code injection - draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Nov 2019 13:28:53 -0000

Thanks for the reply. You're right, PKCE requires maintaining
application state as well, and does solve the main worry I have.

However I think there is still something more. I guess my concern is
around the specific wording:

> in this case, 'state' may be used again for its original purpose...

My concern is if people see this recommendation, (even though it's
clarified that it only applies if the authorization server supports
PKCE), they may revert back to static "state" values *regardless* of
whether the server supports PKCE, opening up a security hole again.
This is especially problematic because of the way PKCE works where
clients have no indication as to whether the server supports PKCE if
the whole flow is successful.

I guess I just would rather not mention the possibility of using
static state values again.

----
Aaron Parecki
aaronparecki.com


----
Aaron Parecki
aaronparecki.com
@aaronpk



On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt
<torsten@lodderstedt.net> wrote:
>
> Hi Aaron,
>
> > On 14. Nov 2019, at 21:10, Aaron Parecki <aaron@parecki.com> wrote:
> >
> > I read through the authorization code injection section
> > https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section=
-4.5
> > but didn't see a mention of this explicitly...
> >
> > The guidance in 3.1.1 recommends using PKCE for confidential clients.
>
> It=E2=80=99s a MUST for any client, not only confidential clients.
>
> "Clients utilizing the authorization grant type MUST use PKCE =E2=80=A6"
>
> > Section 3.1 says that  clients may use PKCE instead of "state" for
> > CSRF protection, in which case "'state' may be used again for its
> > original purpose".
> >
> > My worry is that without using a unique state value per request, it
> > becomes less obvious that clients need to maintain state to avoid
> > being tricked into exchanging an attacker's authorization code.
>
> The PKCE verifier is a unique per request random value that needs to main=
tained in the state of the app as well. So beside it=E2=80=99s application =
for sender authentication and code replay detection, it also serves the rol=
e of state to detect CSRF. It just works differently in that the AS determi=
nes the response and the PCKE verifier don=E2=80=99t match and if that happ=
ens refuses to issue tokens.
>
> >
> > If the client is using PKCE, then this isn't an issue of exchanging a
> > different valid authorization code. However it's an issue that the
> > client may leave itself open to attackers tricking it into exchanging
> > garbage authorization codes at the AS, possibly triggering rate limits
> > or security flags at the AS.
>
> You mean because it may send a PKCE verifier valid for the current transa=
ction along with an infected code?
>
> >
> > There is a partial sentence that hits on the point in 3.1, "clients
> > MUST only process redirect responses ... from the same user agent this
> > authorization request initiated with". My worry is that this isn't
> > enough guidance anymore if people are using non-random state values.
>
> What is the relationship to the state value? The paragraph you cite is ab=
out mix up prevention and requires the client to memorize the AS it sent th=
e user to.
>
> > If clients are required to use a random state value, then they are
> > forced into a situation where they need to maintain state between
> > requests, which then prevents this problem.
>
> Same holds true for PKCE.
>
> >
> > Any thoughts on this? I am not sure exactly what the resolution should
> > be. I suppose either still requiring a random value in the "state"
> > parameter, or adding some guidance on how to link a redirect response
> > with an authorization request.
>
> Potentially it is not obvious enough, but the linking is (indirectly) imp=
lemented using the PCKE verifier.
>
> best regards,
> Torsten.
>
> >
> > ----
> > Aaron Parecki
> > aaronparecki.com
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>


From nobody Sat Nov 16 12:06:01 2019
Return-Path: <david@alkaline-solutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA5AF120090 for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 12:05:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.108
X-Spam-Level: 
X-Spam-Status: No, score=-1.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bx8TQwqydg-Q for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 12:05:58 -0800 (PST)
Received: from alkaline-solutions.com (unknown [173.255.196.46]) by ietfa.amsl.com (Postfix) with ESMTP id B8B9D12008C for <oauth@ietf.org>; Sat, 16 Nov 2019 12:05:58 -0800 (PST)
Received: from [IPv6:2601:282:202:b210:1c78:3ac6:1ddf:de67] (unknown [IPv6:2601:282:202:b210:1c78:3ac6:1ddf:de67]) by alkaline-solutions.com (Postfix) with ESMTPSA id 17A68315EA; Sat, 16 Nov 2019 20:05:57 +0000 (UTC)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.40.2.2.1\))
From: David Waite <david@alkaline-solutions.com>
In-Reply-To: <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
Date: Sat, 16 Nov 2019 13:05:56 -0700
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <E54A3C8B-4558-4585-85FA-CDB99F27C6CA@alkaline-solutions.com>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CAMDeyhzvgzHY=74LArpWHhWuYOr6XX5dvFVVs5yPy09T4Si8hQ@mail.gmail.com>
To: Paul Querna <pquerna@apache.org>
X-Mailer: Apple Mail (2.3608.40.2.2.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/f7HQSVLucsLqMDJqsks6xs9qTUw>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Nov 2019 20:06:00 -0000

On Nov 15, 2019, at 8:32 AM, Paul Querna <pquerna@apache.org> wrote:
> Supporting `HS256` or similar signing of the proof would be one way to
> reduce the CPU usage concerns.

There are a number of other potential asymmetrically signed messages, =
such as the access token. Is the assumption that these are also =
symmetrically protected, or that the cost here is amortized by caching?

If you are changing either your access tokens or dPoP proofs to use =
symmetric keys, you want to limit the number of parties who know that =
secret to the client, AS, and a single resource server. You=E2=80=99ll =
be audience-scoping either way, so it may make sense to use a symmetric =
algorithm for both. It starts to look like kerberos in HTTP and JSON =
when you squint.

>=20
> The challenge seems to be getting the symmetric key to the RS in a
> distributed manner.

Yes, you need the same infrastructure for HMAC and AEAD in this case.

>=20
> This use case could be scoped as a separate specification if that
> makes the most sense, building upon DPoP.
>=20
> Throwing out a potential scheme here:
>=20
> - **5.  Token Request (Binding Tokens to a Public Key)**: The request
> from the client is unchanged. If the AS decides this access token
> should use a symmetric key it:
> 1) Returns the `token_type` as `DPoP+symmetric`
> 2) Adds a new field to the token response: `token_key`.  This should
> be a symmetric key in JWK format, encrypted to the client's DPoP-bound
> asymmetric key using JWE.  This means the client still must be able to
> decrypt this JWE before proceeding using its private key.

If you encrypt the key to the resource, then there is a risk that the =
key is retained while unprotected in memory. ECDH may be better here, =
although then we are making assumptions on the types of keys being used.

> - **6.  Resource Access (Proof of Possession for Access Tokens)**: The
> DPoP Proof from the client would use the `token_key` issued by the AS.
>=20
> - **7.  Public Key Confirmation**: Instead of the `jkt` claim, add a
> new `cnf` claim type: JSON Encrypted Key or  `jek`.  The `jek` claim
> would be an JWE encrypted value, containing the symmetric key used for
> signing the `DPoP` proof header in the RS request.   The JWE
> relationship between the AS and RS would be outside the scope of the
> specification -- many AS's have registries of RS and their
> capabilities, and might agree upon a symmetric key distribution system
> ahead of time, in order to decrypt the `jek` confirmation.

If you are negotiating a symmetric key with the RS for access tokens =
(again, why not at this point, just call it a JOSE Service Ticket) you =
can just use AEAD and not bother with wrapping/encrypting the =
client-negotiated key within the access token.

> I think this scheme would change RS validation of an DPoP-bound proof
> from one asymmetric key verify, into two symmetric key operations: one
> signature verify on the DPoP token, and potentially one symmetric
> decrypt on the `jek` claim.

-DW


From nobody Sat Nov 16 13:42:57 2019
Return-Path: <vineetbanga@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ED5112011B for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 13:42:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level: 
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9JdTA4r60A_W for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 13:42:53 -0800 (PST)
Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C0CD120013 for <oauth@ietf.org>; Sat, 16 Nov 2019 13:42:53 -0800 (PST)
Received: by mail-qv1-xf2e.google.com with SMTP id y18so5100065qve.2 for <oauth@ietf.org>; Sat, 16 Nov 2019 13:42:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OdCn/h+rXC+EE7E9sg6kpXxNarw18f7sEDQhA3EbBGo=; b=mPOi8TUKyOWbeDGy5GLcWyGZQq4ZbE94VugWNhWQEA0yzzn4nzRXWrkazY2i9cwla2 308OYUctBGinzdcs3331VOtB27plTOpyoqz5HJeyaxtvU8Xk3B7diNS69RAT2G8SiDrX mXkQd5vhxR2sYGhEbdXx//JTap/ffLIkY31oW4D1MJ9EUa1aSjvih3Fw5zmjBJOUBKOG mDuvnse9EroQ8gUF6f7NS+5aUqlMA8h266eZSM1MFQ6slZqGFT+HJgkSxsGLj31WzJCS oRYx59obsPK3OggG3A8UXlXxUF1WNLfV27lpkw+O2NyIQDQogB0Xw0EMCD+SCHl3g2S/ kMlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OdCn/h+rXC+EE7E9sg6kpXxNarw18f7sEDQhA3EbBGo=; b=KDBcHtewiUUPwPfVqWbg+VpR8W3uEnylgJPoobWv/QsUHHufB4b8X2LmDk966KO597 4gmURKF2BqxOSjOPM7/QQjP1B1EtTVi6s6C7pAPm0WEGM/Tk316u0aTsDfHn0xoDpazt 19vz+hbAzgvJa6loZppVQp5n8c0iqCtVhzQ9k4BCMOY3wvAq/pEoS45mFcKRto7mOuck Uh2qNKQvBapE9iPyrftEU85565e5jEqlSB/9YR4TN0Ud+jx+/LdTP8FYiUmeJrUSrYWT hwCr5HOHWKNyWIVwl5IdYBAUTk2glvMInOsFrdHfK8173ycD1FIm+bvvJYBMLaZvIIh/ dRLA==
X-Gm-Message-State: APjAAAUs9+gkXvwordmgWCBuzKR7VCIsJ/6bBnU9ozKDjFdyTTxsaWXc 3g95NExM4fy5g7UG1rZv4nZGwBhHQlmCzaJFIiz3st9SKK9nlA==
X-Google-Smtp-Source: APXvYqx3O24KxXkT8Sz5ok4i3YqwX8fZ09Z6/GGjNMizhB9nB3jI8byB2XKvuCeE/k2nnzDi1NKQ/MeLGb/JoqnlNGg=
X-Received: by 2002:a05:6214:22a:: with SMTP id j10mr19043762qvt.154.1573940571960;  Sat, 16 Nov 2019 13:42:51 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com> <3FE840EE-9261-414E-8AB7-B75BD8BA6F86@lodderstedt.net>
In-Reply-To: <3FE840EE-9261-414E-8AB7-B75BD8BA6F86@lodderstedt.net>
From: Vineet Banga <vineetbanga@google.com>
Date: Sat, 16 Nov 2019 13:42:39 -0800
Message-ID: <CAPHqeLeA00FwSLv-ry7pCKguS+4RfnOC-PEBh6t4eoTU_GbY-Q@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b0fe4405977d989b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ww9yd4mSNvaqqNbzs6mNSkmrOd8>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Nov 2019 21:42:56 -0000

--000000000000b0fe4405977d989b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt <
torsten@lodderstedt.net> wrote:

>
>> On 16. Nov 2019, at 02:07, Vineet Banga <vineetbanga=3D
40google.com@dmarc.ietf.org> wrote:

> >>

> >> Just one comment/question at the moment:

> > >3.1.1 - Is there any recommendation around leveraging state vs using
multiple URIs (with exact match) to remember the application state of the
client? I have seen exploding list of registered redirect URIs, but am not
aware of any security issues around this usage. But would like to check if
there are any opinions on this matter..

>
>The BCP recommends transaction specific one time use state values for CSRF
prevention. To achieve the same protection level with redirect URI=E2=80=99=
s and
exact match, one would need to register per transaction redirect URI
values.

>
>Do your redirect URIs meet those requirements?

> No. I think the options are using state for purely csrf or using
[I-D.bradley-oauth-jwt-encoded-state], which is called our in the BCP.
Using encoded jwt can be used to limit the number of redirect uris.





>

> >

> > On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig <
Hannes.Tschofenig@arm.com> wrote:

> > Hi all,

> >

> > this is a working group last call for "OAuth 2.0 Security Best Current
Practice".

> >

> > Here is the document:

> > https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13

> >

> > Please send you comments to the OAuth mailing list by Nov. 27, 2019.

> > (We use a three week WGLC because of the IETF meeting.)

> >

> > Ciao

> > Hannes & Rifaat

> >

> > IMPORTANT NOTICE: The contents of this email and any attachments are
confidential and may also be privileged. If you are not the intended
recipient, please notify the sender immediately and do not disclose the
contents to any other person, use it for any purpose, or store or copy the
information in any medium. Thank you.

> >

> > _______________________________________________

> > OAuth mailing list

> > OAuth@ietf.org

> > https://www.ietf.org/mailman/listinfo/oauth

> > _______________________________________________

> > OAuth mailing list

> > OAuth@ietf.org

> > https://www.ietf.org/mailman/listinfo/oauth

>
>

--000000000000b0fe4405977d989b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><br></div><div class=3D"gmail_quote"><div class=3D"gm=
ail_attr">On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt &lt;<a href=
=3D"mailto:torsten@lodderstedt.net">torsten@lodderstedt.net</a>&gt; wrote:<=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8e=
x;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204=
,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt;&gt; On 16. Nov =
2019, at 02:07, Vineet Banga &lt;vineetbanga=3D<a href=3D"mailto:40google.c=
om@dmarc.ietf.org" target=3D"_blank">40google.com@dmarc.ietf.org</a>&gt; wr=
ote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-=
left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,204);pad=
ding-left:1ex;padding-right:1ex"></blockquote>&gt;&gt;=C2=A0<br><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(=
204,204,204);border-right:1px solid rgb(204,204,204);padding-left:1ex;paddi=
ng-right:1ex"></blockquote>&gt;&gt; Just one comment/question at the moment=
:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-lef=
t:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,204);paddin=
g-left:1ex;padding-right:1ex"></blockquote>&gt; &gt;3.1.1 - Is there any re=
commendation around leveraging state vs using multiple URIs (with exact mat=
ch) to remember the application state of the client? I have seen exploding =
list of registered redirect URIs, but am not aware of any security issues a=
round this usage. But would like to check if there are any opinions on this=
 matter..<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8e=
x;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204=
,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt;The BCP recommen=
ds transaction specific one time use state values for CSRF prevention. To a=
chieve the same protection level with redirect URI=E2=80=99s and exact matc=
h, one would need to register per transaction redirect URI values.=C2=A0<br=
><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border=
-left:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8e=
x;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204=
,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt;Do your redirect=
 URIs meet those requirements?<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=
-left:1ex">
</blockquote>No. I think the options are using state for purely csrf or usi=
ng=C2=A0<span style=3D"background-color:rgb(255,253,245);color:rgb(0,0,0);f=
ont-family:&quot;PT Mono&quot;,Monaco,monospace;font-size:14px">[I-D.bradle=
y-oauth-jwt-encoded-state],=C2=A0</span>which is called our in the BCP. Usi=
ng encoded jwt can be used to limit the number of redirect uris.=C2=A0<br><=
br><br><br><br><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.=
8ex;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,2=
04,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt;=C2=A0<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px sol=
id rgb(204,204,204);border-right:1px solid rgb(204,204,204);padding-left:1e=
x;padding-right:1ex"></blockquote>&gt;=C2=A0<br><blockquote class=3D"gmail_=
quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);bor=
der-right:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></=
blockquote>&gt; On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig &lt;<a hr=
ef=3D"mailto:Hannes.Tschofenig@arm.com" target=3D"_blank">Hannes.Tschofenig=
@arm.com</a>&gt; wrote:<br><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-right:1px solid r=
gb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; Hi al=
l,<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-le=
ft:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,204);paddi=
ng-left:1ex;padding-right:1ex"></blockquote>&gt;=C2=A0<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);border-right:1px solid rgb(204,204,204);padding-left:1ex;padding-rig=
ht:1ex"></blockquote>&gt; this is a working group last call for &quot;OAuth=
 2.0 Security Best Current Practice&quot;.<br><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);borde=
r-right:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></bl=
ockquote>&gt;=C2=A0<br><blockquote class=3D"gmail_quote" style=3D"margin:0p=
x 0.8ex;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(2=
04,204,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; Here is t=
he document:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex=
;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,=
204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; <a href=3D"https=
://tools.ietf.org/html/draft-ietf-oauth-security-topics-13" rel=3D"noreferr=
er" target=3D"_blank">https://tools.ietf.org/html/draft-ietf-oauth-security=
-topics-13</a><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8=
ex;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,20=
4,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt;=C2=A0<br><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px soli=
d rgb(204,204,204);border-right:1px solid rgb(204,204,204);padding-left:1ex=
;padding-right:1ex"></blockquote>&gt; Please send you comments to the OAuth=
 mailing list by Nov. 27, 2019.<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-right:1p=
x solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote>&=
gt; (We use a three week WGLC because of the IETF meeting.)<br><blockquote =
class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(2=
04,204,204);border-right:1px solid rgb(204,204,204);padding-left:1ex;paddin=
g-right:1ex"></blockquote>&gt;=C2=A0<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-righ=
t:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquo=
te>&gt; Ciao<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex=
;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,=
204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; Hannes &amp; Rif=
aat<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,204);padd=
ing-left:1ex;padding-right:1ex"></blockquote>&gt;=C2=A0<br><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,2=
04,204);border-right:1px solid rgb(204,204,204);padding-left:1ex;padding-ri=
ght:1ex"></blockquote>&gt; IMPORTANT NOTICE: The contents of this email and=
 any attachments are confidential and may also be privileged. If you are no=
t the intended recipient, please notify the sender immediately and do not d=
isclose the contents to any other person, use it for any purpose, or store =
or copy the information in any medium. Thank you.<br><blockquote class=3D"g=
mail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204=
);border-right:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1e=
x"></blockquote>&gt;=C2=A0<br><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-right:1px soli=
d rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; __=
_____________________________________________<br><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);bo=
rder-right:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"><=
/blockquote>&gt; OAuth mailing list<br><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-right=
:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquot=
e>&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</=
a><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-le=
ft:1px solid rgb(204,204,204);border-right:1px solid rgb(204,204,204);paddi=
ng-left:1ex;padding-right:1ex"></blockquote>&gt; <a href=3D"https://www.iet=
f.org/mailman/listinfo/oauth" rel=3D"noreferrer" target=3D"_blank">https://=
www.ietf.org/mailman/listinfo/oauth</a><br><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204);border-r=
ight:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex"></block=
quote>&gt; _______________________________________________<br><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);border-right:1px solid rgb(204,204,204);padding-left:1ex;padding=
-right:1ex"></blockquote>&gt; OAuth mailing list<br><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0.8ex;border-left:1px solid rgb(204,204,204)=
;border-right:1px solid rgb(204,204,204);padding-left:1ex;padding-right:1ex=
"></blockquote>&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAu=
th@ietf.org</a><br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0.=
8ex;border-left:1px solid rgb(204,204,204);border-right:1px solid rgb(204,2=
04,204);padding-left:1ex;padding-right:1ex"></blockquote>&gt; <a href=3D"ht=
tps://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" target=3D"_bl=
ank">https://www.ietf.org/mailman/listinfo/oauth</a><br><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex">
<br>
</blockquote></div></div>

--000000000000b0fe4405977d989b--


From nobody Sat Nov 16 19:37:44 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CBEF120091 for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 19:37:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 95alg0YrSz8R for <oauth@ietfa.amsl.com>; Sat, 16 Nov 2019 19:37:41 -0800 (PST)
Received: from mail-il1-x133.google.com (mail-il1-x133.google.com [IPv6:2607:f8b0:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C8E3120046 for <oauth@ietf.org>; Sat, 16 Nov 2019 19:37:41 -0800 (PST)
Received: by mail-il1-x133.google.com with SMTP id p6so12807431ilp.1 for <oauth@ietf.org>; Sat, 16 Nov 2019 19:37:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FEAHXExOQq0BHf9vW5rX6WdZzrUWPD68/gr8nOinAF8=; b=toR9AUA46Fpi+P7W7zATmAfm6+5d+5XzVG+czJnvQLhzlDybZ0jC38c0ORexXYMPYM M1bzEUNutI1OaXkeT5PDT35P/PcCC7e0kWNDF3a80mhux0EVt+KoOt4sVy/W57q6EY3X 9kS093n1wr3jiNj7wvIz45LV9y8UDxqjv55ZyaAdAmV9IxTC4nPp1UpnG3elF0cJSDCZ pypVtLu2mc3Nf9sCmfaHbJATLgW92WgXjbB6UnQ5T7icPglVjZH3ks7c94IWrGMTSTiT F3+Pl9rpWJS6n2PeIPXz4zGyBPidmCZw/IhEwzNjCIeIGXfIOaAY3TvGWuukx/xEuEZL gsCw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FEAHXExOQq0BHf9vW5rX6WdZzrUWPD68/gr8nOinAF8=; b=cOwaqoNSeC3ASh4DPzXHiq4Rnt3iGtWc6f+hQkrkS2Q3jfng7EpFjUPk0YpSK4+li8 kCNR2gIuBjNMVYmDv/u1DWbBZvuExuT4YPccIxwJbnnzhRT3O6wqMoEomViTcQ5OLPD4 huPL2toYuE/RNNGf2AdSdJFgh3aQ92ACYpOooIhxc26xpbTOHfVH2ENdvqxhWaaeQS/9 ElUbBekB+s+Yl3LeRJfZwr/tbXKytog8HeL4rdWsTyLM7dFyWr1lAAoOCa7iba5RVo0C amUSXUNDc/LWi0d3lqrW9omEkva5gMeIgXyVibxt0es8tKH2j2IlfATaBPw6k54dQ2DL 55rg==
X-Gm-Message-State: APjAAAWb6LTGEiZWIEOmZi/keb0cqAYz2hwlIsN16P7hUOMo7ncm7CeN WQFHglhCcP40Tbv4VNbE2MQMHcQWJ357/w==
X-Google-Smtp-Source: APXvYqyxKgMkyZ2RxOr1DTcM4IuJGiVNerxMk59p7P0Rk7AU61rTj9SrEMpDjTArBHqXrrLG3XUw6Q==
X-Received: by 2002:a92:1612:: with SMTP id r18mr8785184ill.60.1573961860317;  Sat, 16 Nov 2019 19:37:40 -0800 (PST)
Received: from mail-io1-f52.google.com (mail-io1-f52.google.com. [209.85.166.52]) by smtp.gmail.com with ESMTPSA id c73sm3119497ila.9.2019.11.16.19.37.39 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 16 Nov 2019 19:37:39 -0800 (PST)
Received: by mail-io1-f52.google.com with SMTP id k13so14846510ioa.9 for <oauth@ietf.org>; Sat, 16 Nov 2019 19:37:39 -0800 (PST)
X-Received: by 2002:a5e:8601:: with SMTP id z1mr187701ioj.214.1573961859519; Sat, 16 Nov 2019 19:37:39 -0800 (PST)
MIME-Version: 1.0
References: <156401017666.14534.9422325088242867919@ietfa.amsl.com> <CAGBSGjo97rjF=bV5A3p80e5Li+U9n7O9iRvEGj7OmmqVTvmuQA@mail.gmail.com> <3495798.29O3mTMRrG@papegaaij>
In-Reply-To: <3495798.29O3mTMRrG@papegaaij>
From: Aaron Parecki <aaron@parecki.com>
Date: Sun, 17 Nov 2019 11:37:28 +0800
X-Gmail-Original-Message-ID: <CAGBSGjpv-Q2oRXyi3Y6rTV+otk85tLV0J3aNmb=gnJ-J7PhEoA@mail.gmail.com>
Message-ID: <CAGBSGjpv-Q2oRXyi3Y6rTV+otk85tLV0J3aNmb=gnJ-J7PhEoA@mail.gmail.com>
To: Emond Papegaaij <emond.papegaaij@gmail.com>
Cc: OAuth WG <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/X_4z_fxy5YEfedAECAHDsVdBLeg>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-browser-based-apps-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Nov 2019 03:37:43 -0000

Hi Emond,

Sorry I missed this email before my last update to the draft. I wanted
to address some of the questions anyway though.

> 6.1. Apps Served from a Common Domain as the Resource Server

This section has been renamed to "6.1.  Browser-Based Apps that Can
Share Data with the Resource Server". In particular, this section is
meant to point out that in some cases you can use traditional cookie
mechanisms instead of OAuth access tokens. I wouldn't say HTTP-only
cookies make APIs "very vulnerable to CSRF attacks" though. The
SameSite cookie attribute will prevent CSRF attacks, and is easily
deployable in this case. I will rephrase this section to better
clarify this.

> 8. Refresh Tokens

Draft -04 rewrote the refresh token section to allow refresh tokens in
browser based apps as long as they follow the recommendations in the
Security BCP.

> Without the browser, there is no application.

There are starting to become cases where browser based applications
can actually run without the user being present at the device now,
such as all the work around progressive web apps and background sync.
In these cases it may make sense to let JavaScript apps use refresh
tokens to perform work without the user being present.

> Shouldn't this BCP give actual recommendations on how to manage this (preferably without full page redirections)

This is a valid point and I'll bring this up in the next meeting to
see if there are any ideas about how best to handle a recommendation.

> 9.7. Content-Security Policy
> I think it should explicitly state the policies that should NOT be allowed

I'll bring this up in the next meeting.

Thanks for the feedback!

----
Aaron Parecki
aaronparecki.com
On Tue, Aug 6, 2019 at 8:20 PM Emond Papegaaij
<emond.papegaaij@gmail.com> wrote:
>
> Hi all,
>
> After my vacation I've finally found time read up on the new BCP draft for
> browser based apps. First of all, thanks for the great work on this spec. I
> think this is a very important area to work on, as browser based applications
> are getting more and more common. Here's my feedback:
>
> 6.1. Apps Served from a Common Domain as the Resource Server
>
> This section has seen quite some comments, but IMHO one important aspect has
> not been emphasized enough: using an HTTP-only cookie to secure an API can
> make it very vulnerable to CSRF attacks. This was already mentioned by David
> Waite, but has not seen any response. Storing the access token (or session id,
> or whatever it is called when stored in a cookie) in an HTTP-only cookie will
> make it hard to steal, but also hard to protect from misuse. Any page can
> embed links to your API, and the browser will simply send the cookie.
> 'Traditional', server based, web applications require special protection
> against these kinds of attacks, but RESTful APIs often don't have such
> protection. IMHO advising to use a cookie to secure your API is therefore a
> dangerous advice.
>
> 8. Refresh Tokens
>
> This section also has seen a lot of comments. Why all this focus on the
> refresh token? All the attack vectors apply to the access token as well. If
> tokens cannot be stored securely in a browser based application, the
> authorization server should not issue any token at all. Leaking a single valid
> access token is likely to be more than enough for an attacker to get all the
> information he/she needs, even if it is only valid for a couple of minutes.
> Also, when an attacker manages to get an access token once, it is likely he/
> she will succeed a second time (i.e. via an XSS attack). Placing these
> restrictions on refresh tokens, without addressing the access token seems
> senseless to me.
>
> I think this section should be about the lifetime of the authorization and
> detecting potential leaks of tokens. For a browser based application, I see no
> use at all for offline tokens. Without the browser, there is no application.
> Therefore the access should be scoped to the browser session, and this is IMHO
> best checked by the authorization server. At Topicus, we plan to implement
> this with short lived access tokens and performing re-authentication in a
> hidden iframe with prompt=none. The disadvantage of this is that is requires
> OIDC for the prompt parameter. In this setup we do not need refresh tokens,
> but other solutions may also apply. Shouldn't this BCP give actual
> recommendations on how to manage this (preferably without full page
> redirections, because those destroy the state of a SPA), rather than simply
> forbidding refresh tokens?
>
> 9.7. Content-Security Policy
>
> A very important measure to secure your browser based application is a strong
> CSP, but it is also very hard to do correctly. The current advise is a bit
> broad. I think it should explicitly state the policies that should NOT be
> allowed (inline scripting, eval). This was already mentioned by Dominick
> Baier. Also, it could benefit from a few examples (correct and wrong).
>
> Best regards,
> Emond Papegaaij
> Topicus KeyHub
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Sun Nov 17 00:28:45 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AA4F1200D6 for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 00:28:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lRgtQpXt-sFC for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 00:28:42 -0800 (PST)
Received: from mail-il1-x129.google.com (mail-il1-x129.google.com [IPv6:2607:f8b0:4864:20::129]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42E0F1200D5 for <oauth@ietf.org>; Sun, 17 Nov 2019 00:28:42 -0800 (PST)
Received: by mail-il1-x129.google.com with SMTP id d83so13070387ilk.7 for <oauth@ietf.org>; Sun, 17 Nov 2019 00:28:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=hRRdAn1Daa+QzsIE7QwhCz5XAU3y5p+W/mb3lsKDYqc=; b=tUSTmP0ll33xhyhRFWJ8ZYW3Q/My+LCRSa2QXEN0fv9vMgINrxvmE4WAiRF3Xkj9r0 3X0LF45NwLBgWjF5af0jNRnkrXMGTgzB+Xgk30BjxaWmFfwd4DGXWLzK+CQIHcpEPi23 XOL+pC7VX5IHoLgzB5T1CbvlvFkJ3U0JlJZaRTJvOI5U4P120mhUXb0LuYy3uoD5kJnZ dSVJaAJu/tJGFHxUYh4WpVNUSadC3XLS/K5Sjqs8kjHak05mDsiruZJFOPhT17ByJt1w CSWKC+pjoqTYIg87fFKR9syda+J9YQAipuoETOCUuVmQT+WojG7JaJeVYGNuHzVoK42G hHvQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=hRRdAn1Daa+QzsIE7QwhCz5XAU3y5p+W/mb3lsKDYqc=; b=OYK+YjVEmYDun4JVhusqXPQ6+urcmjreORuvZ4N99YotX/DUhTTXLD2KqEQ9WvRKeL bQyb2LUmvGTy6X0B9R+FG94bn5Y1mP1axuQU23tAXGwLiJ7/zFet0EljXrKGrwFsIQz8 VmCaALuc/PXvxSco2qxkjHgZ6zqHAEP02cpO/s0Ol50AE1km8aRWUk1yFH6iv6cUUJ24 3XiKic2xFKIjdkDZGWyqYTA3FMEgwVYMpN31WM44SwhCGRipJXcexobAe92naYrLGX9r UG6wRn7+wVGE4BNNStu6YY9A08RUI0xoknV1Md+wwGuKbYpxtYgPK+/U5+xMtK9H4SeX MltQ==
X-Gm-Message-State: APjAAAW5jh0U5034JMrpoFT+XQPCXK0PUrtkt9cfV4YUKZlpXZ5qanND ASbW/OQ6QAF/R3tB12dznzYyoE6l+43rgg==
X-Google-Smtp-Source: APXvYqxdkMZrC+618IFrMAnppWW5LdmbpqyEe24z83q65kOeWWwVVgbcESe/EgMXaE8V9wqPUEgqGA==
X-Received: by 2002:a92:c8c9:: with SMTP id c9mr10494249ilq.197.1573979321308;  Sun, 17 Nov 2019 00:28:41 -0800 (PST)
Received: from mail-io1-f45.google.com (mail-io1-f45.google.com. [209.85.166.45]) by smtp.gmail.com with ESMTPSA id k22sm2601221iot.34.2019.11.17.00.28.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 17 Nov 2019 00:28:40 -0800 (PST)
Received: by mail-io1-f45.google.com with SMTP id k1so15220350ioj.6; Sun, 17 Nov 2019 00:28:40 -0800 (PST)
X-Received: by 2002:a6b:1546:: with SMTP id 67mr7069188iov.156.1573979320709;  Sun, 17 Nov 2019 00:28:40 -0800 (PST)
MIME-Version: 1.0
From: Aaron Parecki <aaron@parecki.com>
Date: Sun, 17 Nov 2019 16:28:29 +0800
X-Gmail-Original-Message-ID: <CAGBSGjp4Lrn2y70CAOPbA4mOi0qbj0wUth0jHeZJqhyHeGKjtg@mail.gmail.com>
Message-ID: <CAGBSGjp4Lrn2y70CAOPbA4mOi0qbj0wUth0jHeZJqhyHeGKjtg@mail.gmail.com>
To: txauth@ietf.org, OAuth WG <oauth@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/iXoGDGKVg7dkbGx_A4gvT3bn9rw>
Subject: [OAUTH-WG] IETF106 Agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Nov 2019 08:28:44 -0000

Hi all,

I was having trouble tracking down the agenda and reading materials
for the upcoming sessions this week so I put together a page on
oauth.net to collect everything in one place.

https://oauth.net/events/2019-11-ietf106/

It contains a list of all the sessions, their time and location,
agenda details, and links to all the draft specs that will be
discussed. I thought this might be helpful to others as well.

Hope this helps!

----
Aaron Parecki
aaronparecki.com


From nobody Sun Nov 17 02:14:29 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA41E1200B1 for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 02:14:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pW6-95835wM6 for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 02:14:26 -0800 (PST)
Received: from mail-wm1-x329.google.com (mail-wm1-x329.google.com [IPv6:2a00:1450:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3AB412007A for <oauth@ietf.org>; Sun, 17 Nov 2019 02:14:25 -0800 (PST)
Received: by mail-wm1-x329.google.com with SMTP id 8so15540850wmo.0 for <oauth@ietf.org>; Sun, 17 Nov 2019 02:14:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=skAt3Lc5aQd0ppzRcCn5nIkWU9IUqQvMJNMz/jJlh/0=; b=CULYavdot2H2vS+KY4d5mTMVzLw0H0PMYk1JQlO3sqkzLzFN61jJWwtMHwEDCa5Ub/ QKQnivlf7HBZb1x/XzjZjPuMslDy9toRRoF7K4lYCl+Xbda7bjqRIDf++jKwR5ai4kdZ HASwAfbVCWPYHTP48jl1zwg0l2QL2pN4niVACFRRVWKGSSAXF+Ab65E280IMwlz+RbnY vahyeebYUrJmFINVWYs27dxPuZojYBFh0I+BND3NCdXSdsfM7IgAJctLjqN37u/zOWsW 4fnwcUoFx+DPYWOBcchcFiomCoCE0K4c6tVbAO4ycd9Pca3U2gpRKZmdOWK8+vrQIXNj 2bDg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=skAt3Lc5aQd0ppzRcCn5nIkWU9IUqQvMJNMz/jJlh/0=; b=qs3cJnlrsYuYtVhSVT9EtXWsvavZVRbyD/Fytn/VBgi5EDdAJ6VJuRei/BZK3TRiFq 0dMTb1421MWzRIFiuLl372/ZbAtKWAWWs9zZy+J9G63f6L/icdTgkhz/DUp51SIgREpX pR+cEWHCtHSlkb8akm8RHP1pIAeSL/XApqXd7KJ2lGM8slYcBwmQKB05jf2yC/RS9Sj8 HCwUGY0EuX5sdzwTfXEh0lscNA1neNVOApsVdytG7713Z4PerFZ/Mk+BkOp71abk6bHE /T7YKViZNPrGBLhOMdr/zGKs/gygbQRAV2laL0DzeYq0XNxBSIyhB63T7NA3CAzE81je 7nZA==
X-Gm-Message-State: APjAAAWFvUvizWMhhqVXp6t2pUDf0DHgFcMEegaGS4lCpI1KZZqwC+Ir Oi7j2r/sCjyJO9djtOUQhCpJaQ8LJAc1TW1L
X-Google-Smtp-Source: APXvYqzNUHYELG7LRc4lEhmlW7ZebJQh5DXnOHUtIbZNid46kpqb32xBmJAjyAPzebl4vlFKYXfx0A==
X-Received: by 2002:a1c:1f14:: with SMTP id f20mr21924554wmf.147.1573985664181;  Sun, 17 Nov 2019 02:14:24 -0800 (PST)
Received: from [10.156.39.180] (tmo-111-83.customers.d1-online.com. [80.187.111.83]) by smtp.gmail.com with ESMTPSA id i14sm5403066wrn.31.2019.11.17.02.14.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 17 Nov 2019 02:14:23 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-A6456253-FFCB-4934-AC4F-F4727D59F1A8; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Sun, 17 Nov 2019 18:14:20 +0800
Message-Id: <5FCA868A-4E8C-45DF-BD64-31EAF28D4476@lodderstedt.net>
References: <E54A3C8B-4558-4585-85FA-CDB99F27C6CA@alkaline-solutions.com>
Cc: Paul Querna <pquerna@apache.org>, oauth <oauth@ietf.org>
In-Reply-To: <E54A3C8B-4558-4585-85FA-CDB99F27C6CA@alkaline-solutions.com>
To: David Waite <david@alkaline-solutions.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/j35KydA4_4Gxr-Gvy9C7ED6MicM>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Nov 2019 10:14:28 -0000

--Apple-Mail-A6456253-FFCB-4934-AC4F-F4727D59F1A8
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable



> Am 17.11.2019 um 04:06 schrieb David Waite <david@alkaline-solutions.com>:=

>=20
> You=E2=80=99ll be audience-scoping either way, so it may make sense to use=
 a symmetric algorithm for both. It starts to look like kerberos in HTTP and=
 JSON when you squint.

Even if audience restriction is a recommended practice, I=E2=80=98m not full=
y sure this is a broadly established practice.

As you pointed out, symmetrical keys require RS-specific access tokens, i.e.=
 the client needs to tell the AS what RS it is going to use the token at. Us=
ing resource indicators or rar?

This reminds me the simplicity of the approach based on asymmetric crypto re=
 programming model and key management.=

--Apple-Mail-A6456253-FFCB-4934-AC4F-F4727D59F1A8
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-A6456253-FFCB-4934-AC4F-F4727D59F1A8--


From nobody Sun Nov 17 12:11:30 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E91A212011D for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 12:11:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fjU1t0pyzmmp for <oauth@ietfa.amsl.com>; Sun, 17 Nov 2019 12:11:26 -0800 (PST)
Received: from mail-qv1-xf35.google.com (mail-qv1-xf35.google.com [IPv6:2607:f8b0:4864:20::f35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47C9912001E for <oauth@ietf.org>; Sun, 17 Nov 2019 12:11:26 -0800 (PST)
Received: by mail-qv1-xf35.google.com with SMTP id x14so5705462qvu.0 for <oauth@ietf.org>; Sun, 17 Nov 2019 12:11:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=bhcAO8scdvBbv7M4dj0lpYhHGDXnhgkHajHKGxGS8oY=; b=jEhXQGgnFZI/fITwTuAUgJvi9OSzioQHaSO6nsefRjKU9WsoteWBcEX8sU1+1G7D6m Ppje0WOP21RSIUOvMevhAKF4UE4LuFMrTohcG2tkQMHOJDJpECYPVxWYbt6AyyJVydKU 8iynNAiOis4cA4nClJnYBTx1SeaR9qQO2hKVgdb1ss+cJWww3jBw418LB1HIWH2OPwR0 9lrv/bitkok14C55PeDonnH4Jy6E/qe/OXtQAIXfgl+f/w8O+d6SZnjSjRiDtT3gDFii l08bQ6Ca1SqDYHVSeD8BnmExI0GhC78jxlYHb/DgdZ1wOJRaI5K0s0Q61KZVGv/17HmI EXzA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=bhcAO8scdvBbv7M4dj0lpYhHGDXnhgkHajHKGxGS8oY=; b=hHbP5GdrDLweiKxNfuvU9hPCFxDL8GWxsgCmqX3V6j6LkCxjOtWSn+4ulxhiPdCHhK lBAETsOXBrVpCaVuHWHdqRrKsZxkrXTXy41IMjOyP9Fqjjzd/+MFrXfw7523XmpXkFjC JsOgYRND9RSVRj5qQH49DQUogPuMgPuzSVstGNmrkSFBx/8g+B28pRWEX+k4/fd26+Ld 9XIGRL3/m6j9bzjSfgN1H31ayONz7+JDdH51iYV7VpNEs/1YcNw8FczfeO6fvkYh58GG peO9GAT1265DVHwFUBNnHDpZ5Aw//HTxRCQ1PCPQoA70ZSyoaLVtVyp/Q8DIyOGQPeQ7 0N4w==
X-Gm-Message-State: APjAAAVyMX52vJuqC4mIIV20PqZBJJzA5zexoRWWyiz0V3bO2j5e812y x4Frzw61wFBwHHU8PV1GglnYEfbYv5+YOLfiebEkm9dibfo=
X-Google-Smtp-Source: APXvYqzzLFRdguIItl1xpqlkr+JB8Nj6GAEW5bOl8od07SWh2T9zX4o0JS9yrxkICj/XSrJdHLfRpIrxlHT+3vIs/hI=
X-Received: by 2002:a05:6214:407:: with SMTP id z7mr9269800qvx.169.1574021484948;  Sun, 17 Nov 2019 12:11:24 -0800 (PST)
MIME-Version: 1.0
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Sun, 17 Nov 2019 21:11:14 +0100
Message-ID: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007abfaf0597906ff8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/0loW49RKvwGf1j_aeDKjHVp7gsc>
Subject: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Nov 2019 20:11:28 -0000

--0000000000007abfaf0597906ff8
Content-Type: text/plain; charset="UTF-8"

Hi,

Please find my feedback from page 21 onwards below.

Hans.

Overall I would argue there's room for a very concise guidance section that
says: do this, don't do that, without explanation, just as a reference for
developers; the current text provides in depth analysis but that is perhaps
not suitable for developers who just want to know what to do (or not to do)
and don't really care about the background/reasoning

P21
first bullet
"the client has bound this data to this particular instance." -> particular
instance of what?

3rd paragraph:
"call to the tokens endpoint." -> "call to the token endpoint."

last paragraph could forward point to the next section by adding something
like
"using one of the mechanisms described in the next section."

P22
3rd paragraph:
is the token binding guidance still accurate? it seems to be overestimating
the adoption

-- 
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--0000000000007abfaf0597906ff8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi,</div><div><br></div><div>Please find my feedback =
from page 21 onwards below.</div><div><br></div><div>Hans.</div><div><br></=
div><div>Overall I would argue there&#39;s room for a very concise guidance=
 section that says: do this, don&#39;t do that, without explanation, just a=
s a reference for developers; the current text provides in depth analysis=
=C2=A0but that is perhaps not suitable=C2=A0for developers who just want to=
 know what to do (or not to do) and don&#39;t really care about the backgro=
und/reasoning</div><div><br></div><div>P21</div><div>first bullet</div>&quo=
t;the client has bound this data to this particular instance.&quot; -&gt; p=
articular instance of what?<div><br></div><div>3rd paragraph:</div><div>&qu=
ot;call to the tokens endpoint.&quot; -&gt; &quot;call to the token endpoin=
t.&quot;<br><div><br></div><div>last paragraph could forward point to the n=
ext section by adding something like</div><div>&quot;using one of the mecha=
nisms described=C2=A0in the next section.&quot;</div><div><br></div><div>P2=
2</div><div>3rd paragraph:</div><div>is the token binding guidance still ac=
curate? it seems to be overestimating the adoption=C2=A0</div><div><div><br=
></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"=
gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=3D"ltr"><d=
iv style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zmartzone.eu" =
target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=3D"font-si=
ze:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" target=3D"_bl=
ank">www.zmartzone.eu</a><br></div></div></div></div></div></div></div></di=
v></div>

--0000000000007abfaf0597906ff8--


From nobody Mon Nov 18 00:24:40 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C60AC12085F for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 00:24:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nnbq_RdS3-Vk for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 00:24:36 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A65AD1200A3 for <oauth@ietf.org>; Mon, 18 Nov 2019 00:24:35 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.22]) by mx.stet.eu  with ESMTP id xAI8OX7T001190-xAI8OX7V001190 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL) for <oauth@ietf.org>; Mon, 18 Nov 2019 09:24:33 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES002.steteu.corp (10.17.2.22) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 18 Nov 2019 09:24:32 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Mon, 18 Nov 2019 09:24:32 +0100
From: =?iso-8859-1?Q?Robache_Herv=E9?= <herve.robache@stet.eu>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Question regarding RFC 8628
Thread-Index: AdWd5gc8ZXfXLSK0SieoRUzTBpAA7Q==
Date: Mon, 18 Nov 2019 08:24:32 +0000
Message-ID: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.170]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25050.005
x-tm-as-result: No-28.873200-8.000000-10
x-tmase-matchedrid: CVSPODxXzzKeGXFpAoGIoRoKdKvps9couNOxolvglUnPW3MF4hbkljWd LNzNpJuc63BZ+u8CIN1LsR2qi/tEEW1+plp1E5JO3zen1b+Th8ovdO1WpYGeABhaPDHak0t05i7 s7vRp3u+dF8cLePk03VcVGMO7PGHhyL+l/HI0f2rBtFDYGmaWKtoKfgOoKJc21xLW0OKX8iPIeA QugZMNBFtyNHRhmjtfAllRMNbKfG3a8AiR/nR5g8KVNVkgZd/Iy3fMd7pCml4wMfxyID/dnTRGW ZgDtiVIuedj3pQS7iZ7EW7ad22PFwxFU+TNBx+FbtitCkncbRnyCvICuK46cvAlhlr8vzcdLg4a EfqmR9dv4LXaUTxzCM5gLQgIAFB+QNOCx+A+HEecxB01DrjF95kShYcLpGH9lnl3JcyTSxK6JV/ T/Mrtr3uU7RlpYlRv1qs/xP9nRfmrnFkOWyixsTv9SnF9EU8nZml6I9/puERXJ/NTgaKQpp0lhL iscuITV+lCDzhvoi1YNeOziqUbUu6zXY4f1Mhp0rzmSCelis9fqgAMtax3Q6zG9MIKeG/Gzd1nd OghRTDtxRrExCB63gIVcha099c2vi/XXOZZp4qqDSBu0tUhr515MaKbV6QvvT9/feR/0aW3F617 Nam+4VJjEBeghlDXZidiiEoOZ/5B7s+L8t1zG8Vbb3pjW5MnxO20cNGQz3Vz9PcZ9BS/Gdn10Jn r8+EBdT86lTeOQqzd4VjvtZC1+oyCdCnUhkaOjpyluct2Nr0hIDrMt7IypUhcmj54ab4UiLrIVM ftV9AGCwjlKtyOgbw3cX26wX+ro8WMkQWv6iUfACoClnjRoaBxD3njREdhOMB0shqXhHqkonnIJ iWLzpccoTWliXtxapm9l1CQJK4g7R2zpN+0Gd/YDV6sKVTS
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--28.873200-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25050.005
x-tm-snts-smtp: FCDABA7E41ABC32DFBCD0DC1573131351C1208D3F2C09925105C7B2BD98D6A002000:9
Content-Type: multipart/alternative; boundary="_000_dc925414da474a0a85d0b28be3009679STEMES002steteucorp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1JhRvphyxAMUF1vaWdv2cTtdApo>
Subject: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 08:24:39 -0000

--_000_dc925414da474a0a85d0b28be3009679STEMES002steteucorp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear all

We are considering using RFC8628 for a specific use case that is related to=
 the version 2 of Payment Service Directive in Europe (PSD2).

The purpose of the work is to provide a decoupled authentication flow for a=
 payment Service User (PSU) aiming to grant access to a Third Party Provide=
r (TPP) for his/her data hosted by a Bank.
The sequence should be as followed:

-          Nominal flow (as specified by the RFC)

o   The TPP asks the PSU about the Bank identity

o   The TPP posts a Device Access Token Request to the Bank

o   The Bank sends back a Device Access Token response to the TPP

o   The TPP starts to poll the bank for gaining the access token

-          Derived flow

o   The "verification_uri_complete" will not be displayed to the PSU but us=
ed as an [app link]/[universal link] on a smartphone in order to launch the=
 bank's app.

o   The bank's app authenticates the PSU and asks for consent confirmation

-          Back to the nominal flow

o   The TPP gets its access token

Two questions have raised during the work

-          As RFC8628 is supposed to work on separate devices, can the usag=
e be extrapolated to separate apps on the same device (i.e. the PSU's smart=
phone)?

-          One issue of the derived flow is that, after authentication, the=
 PSU is still facing the bank's app

o   We would like to go back to the TPP's app as fluently as possible. The =
use of another [app link]/[universal link]could do the job is provided by t=
he TPP. We consider adding this uri as an additional parameter to the "veri=
fication_uri_complete".

o   Is this compliant with RFC8628?

Thanks in advance for your answers.

Herv=E9 Robache


Ce message et toutes les pi=E8ces jointes sont =E9tablis =E0 l'intention ex=
clusive de ses destinataires et sont confidentiels.
Si vous recevez ce message par erreur ou s'il ne vous est pas destin=E9, me=
rci de le d=E9truire ainsi que toute copie de votre syst=E8me et d'en avert=
ir imm=E9diatement l'exp=E9diteur.
Toute lecture non autoris=E9e, toute utilisation de ce message qui n'est pa=
s conforme =E0 sa destination, toute diffusion ou toute publication, totale=
 ou partielle, est interdite.
L'Internet ne permettant pas d'assurer l'int=E9grit=E9 de ce message =E9lec=
tronique susceptible d'alt=E9ration, STET d=E9cline toute responsabilit=E9 =
au titre de ce message dans l'hypoth=E8se o=F9 il aurait =E9t=E9 modifi=E9,=
 d=E9form=E9 ou falsifi=E9.
N'imprimez ce message que si n=E9cessaire, pensez =E0 l'environnement.

This message and any attachments is intended solely for the intended addres=
sees and is confidential.
If you receive this message in error, or are not the intended recipient(s),=
 please delete it and any copies from your systems and immediately notify t=
he sender.
Any unauthorized view, use that does not comply with its purpose, dissemina=
tion or disclosure, either whole or partial, is prohibited.
Since the internet cannot guarantee the integrity of this message which may=
 not be reliable, STET shall not be liable for the message if modified, cha=
nged or falsified.
Do not print this message unless it is necessary, please consider the envir=
onment.

--_000_dc925414da474a0a85d0b28be3009679STEMES002steteucorp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:p=3D"urn:schemas-m=
icrosoft-com:office:powerpoint" xmlns:a=3D"urn:schemas-microsoft-com:office=
:access" xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s=3D"=
uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs=3D"urn:schemas-microsof=
t-com:rowset" xmlns:z=3D"#RowsetSchema" xmlns:b=3D"urn:schemas-microsoft-co=
m:office:publisher" xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadshee=
t" xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns=
:odc=3D"urn:schemas-microsoft-com:office:odc" xmlns:oa=3D"urn:schemas-micro=
soft-com:office:activation" xmlns:html=3D"http://www.w3.org/TR/REC-html40" =
xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc=3D"http://m=
icrosoft.com/officenet/conferencing" xmlns:D=3D"DAV:" xmlns:Repl=3D"http://=
schemas.microsoft.com/repl/" xmlns:mt=3D"http://schemas.microsoft.com/share=
point/soap/meetings/" xmlns:x2=3D"http://schemas.microsoft.com/office/excel=
/2003/xml" xmlns:ppda=3D"http://www.passport.com/NameSpace.xsd" xmlns:ois=
=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir=3D"http://=
schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds=3D"http://www.w3=
.org/2000/09/xmldsig#" xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint=
/dsp" xmlns:udc=3D"http://schemas.microsoft.com/data/udc" xmlns:xsd=3D"http=
://www.w3.org/2001/XMLSchema" xmlns:sub=3D"http://schemas.microsoft.com/sha=
repoint/soap/2002/1/alerts/" xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#"=
 xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/" xmlns:sps=3D"http://=
schemas.microsoft.com/sharepoint/soap/" xmlns:xsi=3D"http://www.w3.org/2001=
/XMLSchema-instance" xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/so=
ap" xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udc=
p2p=3D"http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf=3D"http:/=
/schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss=3D"http://sche=
mas.microsoft.com/office/2006/digsig-setup" xmlns:dssi=3D"http://schemas.mi=
crosoft.com/office/2006/digsig" xmlns:mdssi=3D"http://schemas.openxmlformat=
s.org/package/2006/digital-signature" xmlns:mver=3D"http://schemas.openxmlf=
ormats.org/markup-compatibility/2006" xmlns:m=3D"http://schemas.microsoft.c=
om/office/2004/12/omml" xmlns:mrels=3D"http://schemas.openxmlformats.org/pa=
ckage/2006/relationships" xmlns:spwp=3D"http://microsoft.com/sharepoint/web=
partpages" xmlns:ex12t=3D"http://schemas.microsoft.com/exchange/services/20=
06/types" xmlns:ex12m=3D"http://schemas.microsoft.com/exchange/services/200=
6/messages" xmlns:pptsl=3D"http://schemas.microsoft.com/sharepoint/soap/Sli=
deLibrary/" xmlns:spsl=3D"http://microsoft.com/webservices/SharePointPortal=
Server/PublishedLinksService" xmlns:Z=3D"urn:schemas-microsoft-com:" xmlns:=
tax=3D"http://schemas.microsoft.com/sharepoint/taxonomy/soap/" xmlns:tns=3D=
"http://schemas.microsoft.com/sharepoint/soap/recordsrepository/" xmlns:sps=
up=3D"http://microsoft.com/webservices/SharePointPortalServer/UserProfileSe=
rvice" xmlns:mml=3D"http://www.w3.org/1998/Math/MathML" xmlns:st=3D"&#1;" x=
mlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:68576400;
	mso-list-type:hybrid;
	mso-list-template-ids:-1045899876 -1016974594 67895299 67895301 67895297 6=
7895299 67895301 67895297 67895299 67895301;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-font-family:Calibri;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"FR" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Dear all<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">We are considering using RFC862=
8 for a specific use case that is related to the version 2 of Payment Servi=
ce Directive in Europe (PSD2).<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The purpose of the work is to p=
rovide a decoupled authentication flow for a payment Service User (PSU) aim=
ing to grant access to a Third Party Provider (TPP) for his/her data hosted=
 by a Bank.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The sequence should be as follo=
wed:<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span lang=3D"EN-GB"><span style=3D"mso-list:=
Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">Nominal flow (as specif=
ied by the RFC)<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The TPP asks the PSU ab=
out the Bank identity<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The TPP posts a Device =
Access Token Request to the Bank<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The Bank sends back a D=
evice Access Token response to the TPP<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The TPP starts to poll =
the bank for gaining the access token<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span lang=3D"EN-GB"><span style=3D"mso-list:=
Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">Derived flow<o:p></o:p>=
</span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The &#8220;verification=
_uri_complete&#8221; will not be displayed to the PSU but used as an [app l=
ink]/[universal link] on a smartphone in order to launch the bank&#8217;s a=
pp.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The bank&#8217;s app au=
thenticates the PSU and asks for consent confirmation<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span lang=3D"EN-GB"><span style=3D"mso-list:=
Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">Back to the nominal flo=
w<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">The TPP gets its access=
 token<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Two questions have raised durin=
g the work<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span lang=3D"EN-GB"><span style=3D"mso-list:=
Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">As RFC8628 is supposed =
to work on separate devices, can the usage be extrapolated to separate apps=
 on the same device (i.e. the PSU&#8217;s smartphone)?<o:p></o:p></span></p=
>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span lang=3D"EN-GB"><span style=3D"mso-list:=
Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">One issue of the derive=
d flow is that, after authentication, the PSU is still facing the bank&#821=
7;s app<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">We would like to go bac=
k to the TPP&#8217;s app as fluently as possible. The use of another [app l=
ink]/[universal link]could do the job is provided by the TPP. We consider a=
dding this uri as an additional parameter
 to the &#8220;verification_uri_complete&#8221;.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0=
pt;mso-list:l0 level2 lfo1">
<![if !supportLists]><span lang=3D"EN-GB" style=3D"font-family:&quot;Courie=
r New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &qu=
ot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-GB">Is this compliant with =
RFC8628?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Thanks in advance for your answ=
ers.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Herv=E9 Robache<o:p></o:p></spa=
n></p>
</div>
<br>
<font face=3D"Arial" color=3D"Gray" size=3D"1"><br>
Ce message et toutes les pi=E8ces jointes sont =E9tablis =E0 l'intention ex=
clusive de ses destinataires et sont confidentiels.<br>
Si vous recevez ce message par erreur ou s'il ne vous est pas destin=E9, me=
rci de le d=E9truire ainsi que toute copie de votre syst=E8me et d'en avert=
ir imm=E9diatement l'exp=E9diteur.<br>
Toute lecture non autoris=E9e, toute utilisation de ce message qui n'est pa=
s conforme =E0 sa destination, toute diffusion ou toute publication, totale=
 ou partielle, est interdite.<br>
L'Internet ne permettant pas d'assurer l'int=E9grit=E9 de ce message =E9lec=
tronique susceptible d'alt=E9ration, STET d=E9cline toute responsabilit=E9 =
au titre de ce message dans l'hypoth=E8se o=F9 il aurait =E9t=E9 modifi=E9,=
 d=E9form=E9 ou falsifi=E9.<br>
N'imprimez ce message que si n=E9cessaire, pensez =E0 l'environnement.<br>
<br>
This message and any attachments is intended solely for the intended addres=
sees and is confidential.<br>
If you receive this message in error, or are not the intended recipient(s),=
 please delete it and any copies from your systems and immediately notify t=
he sender.<br>
Any unauthorized view, use that does not comply with its purpose, dissemina=
tion or disclosure, either whole or partial, is prohibited.<br>
Since the internet cannot guarantee the integrity of this message which may=
 not be reliable, STET shall not be liable for the message if modified, cha=
nged or falsified.<br>
Do not print this message unless it is necessary, please consider the envir=
onment.<br>
</font>
</body>
</html>

--_000_dc925414da474a0a85d0b28be3009679STEMES002steteucorp_--


From nobody Mon Nov 18 00:40:03 2019
Return-Path: <robertotto@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 845A71200CE for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 00:40:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Level: 
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHSz0HAU_IcA for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 00:39:58 -0800 (PST)
Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A71A1200BA for <oauth@ietf.org>; Mon, 18 Nov 2019 00:39:58 -0800 (PST)
Received: by mail-pl1-x62c.google.com with SMTP id w7so9376047plz.12 for <oauth@ietf.org>; Mon, 18 Nov 2019 00:39:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KKv4jp4qF7g2bgyo4zVL5YXKShXqimDj7R/pwZCGc2E=; b=TlPg4qJdEmzYtfE/xvLgbFyx/B7I0ova37z6E+pyH/jBQgISAiQPmusAW6fBKVPqbQ 7p2FsMUTnkZcZ27wwTxl+3RdF+SmKvc7bRNBZAAoHQYVmFRlqcYrSTOwiUeFY7C8XZzt UDLUV2TPqya1cUBQU+yZUfV3Eq+fgXGi0Q2OgEBvdrxRGm8+Yn9+s6PVHtmB/AbMflsr YHxNShv8ylKaIGWXlLZVlTpFLIzmpdVFzuFtdqduLS23dxuF2ZUgD5htH036JZTUYUPo nZIlRW4OtMtCoUpmDMaLTioVXQIQT0N9bMONkpz+ZaxIjN6ofeCReq5TNrjiCQNGmzbH li0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KKv4jp4qF7g2bgyo4zVL5YXKShXqimDj7R/pwZCGc2E=; b=GN628/UZ2l6Cexo0H9S+eLIivMKk9PHk1GU/eoq/PhHqJcMGdCMouMNKTdSF+iWGoQ LtprlwJBCR89kt+dQAluJbpKWavHQDi2YzHxv3wySH4NKSAAkfnqNtbANZaVBatgBi9w ytBPNPcU+bHxUNfiXgt2UyOvGzLouBl619auyWrx5XSMjeoenZshclWONbhbTs7XIB+9 onftF+5lX6sRKIjxDhAbihVg/sYHVEMz1lp5PXOj75Tl5qtFJ33wQ7sNM3l+shzN5Y8O CPBHpc5XSPmur+4Z86M9uyCAVNRn796afX+YaFT0/bsUq9Cp6P9w4dMzM5n6jedD+NQD JtWg==
X-Gm-Message-State: APjAAAUE8tjonh3+6WxbrO3LhJT9JqCKG6oGE0lt4yL+VtPCefIGp6Hn in+zCrXl2/kBYw0vVBWsVgvuhI4cJvekDIjMg2ytQffQo2R10sdqse0GzhOvzo54xZpbHFVQj/s zvp2Z4E6cjrGyS3b3
X-Google-Smtp-Source: APXvYqwWUpImKV0Xf9cORzebyqVgn5mzJl/MXOsWuo9C4IpsQmcgj9YjdpXNqnDE3yz+nz4UCwDQYKiuY1Eqea3Ufd4=
X-Received: by 2002:a17:902:b481:: with SMTP id y1mr1220863plr.76.1574066397501;  Mon, 18 Nov 2019 00:39:57 -0800 (PST)
MIME-Version: 1.0
References: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp>
In-Reply-To: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp>
From: Rob Otto <robotto@pingidentity.com>
Date: Mon, 18 Nov 2019 08:39:46 +0000
Message-ID: <CABh6VRGoRdXdbAKWKtyQ=U+6tDUkwPsfAP0MX=Thx1ghgd9T6A@mail.gmail.com>
To: =?UTF-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000079f65105979ae44e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/0NuzZn9oiDAWwRA2M9kTcuyFMOU>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 08:40:02 -0000

--00000000000079f65105979ae44e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Salut Herv=C3=A9

I wonder if you have looked at all at the OpenID Connect Client-Initiated
BackChannel Authentication (CIBA) flow for this use case? Certainly the
feeling amongst the Open Banking community here in the UK is that  it might
be a better fit for decoupled authentication than the Device Authorisation
Grant. There is even a FAPi (Financial-Grade API) profile of CIBA that is
making its way through the standardisation process - and even has a working
conformance testing suite.

The other option, that could make life easier when it comes to the final
step you mention (switching back to the TPP app from the Bank app) is to
use an app-to-app redirect model under OIDC. Again this is a popular model
for same-device scenarios that's been implemented by many banks here in the
UK.

If you'd like more information on either of these approaches, I'm happy to
share.

Best regards
Rob



On Mon, 18 Nov 2019 at 08:24, Robache Herv=C3=A9 <herve.robache@stet.eu> wr=
ote:

> Dear all
>
>
>
> We are considering using RFC8628 for a specific use case that is related
> to the version 2 of Payment Service Directive in Europe (PSD2).
>
>
>
> The purpose of the work is to provide a decoupled authentication flow for
> a payment Service User (PSU) aiming to grant access to a Third Party
> Provider (TPP) for his/her data hosted by a Bank.
>
> The sequence should be as followed:
>
> -          Nominal flow (as specified by the RFC)
>
> o   The TPP asks the PSU about the Bank identity
>
> o   The TPP posts a Device Access Token Request to the Bank
>
> o   The Bank sends back a Device Access Token response to the TPP
>
> o   The TPP starts to poll the bank for gaining the access token
>
> -          Derived flow
>
> o   The =E2=80=9Cverification_uri_complete=E2=80=9D will not be displayed=
 to the PSU but
> used as an [app link]/[universal link] on a smartphone in order to launch
> the bank=E2=80=99s app.
>
> o   The bank=E2=80=99s app authenticates the PSU and asks for consent con=
firmation
>
> -          Back to the nominal flow
>
> o   The TPP gets its access token
>
>
>
> Two questions have raised during the work
>
> -          As RFC8628 is supposed to work on separate devices, can the
> usage be extrapolated to separate apps on the same device (i.e. the PSU=
=E2=80=99s
> smartphone)?
>
> -          One issue of the derived flow is that, after authentication,
> the PSU is still facing the bank=E2=80=99s app
>
> o   We would like to go back to the TPP=E2=80=99s app as fluently as poss=
ible.
> The use of another [app link]/[universal link]could do the job is provide=
d
> by the TPP. We consider adding this uri as an additional parameter to the
> =E2=80=9Cverification_uri_complete=E2=80=9D.
>
> o   Is this compliant with RFC8628?
>
>
>
> Thanks in advance for your answers.
>
>
>
> Herv=C3=A9 Robache
>
>
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'i=
ntention
> exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas destin=C3=
=A9,
> merci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me et =
d'en avertir
> imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n'e=
st pas
> conforme =C3=A0 sa destination, toute diffusion ou toute publication, tot=
ale ou
> partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce messag=
e
> =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline toute =
responsabilit=C3=A9 au
> titre de ce message dans l'hypoth=C3=A8se o=C3=B9 il aurait =C3=A9t=C3=A9=
 modifi=C3=A9, d=C3=A9form=C3=A9 ou
> falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l'environneme=
nt.
>
> This message and any attachments is intended solely for the intended
> addressees and is confidential.
> If you receive this message in error, or are not the intended
> recipient(s), please delete it and any copies from your systems and
> immediately notify the sender.
> Any unauthorized view, use that does not comply with its purpose,
> dissemination or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message which
> may not be reliable, STET shall not be liable for the message if modified=
,
> changed or falsified.
> Do not print this message unless it is necessary, please consider the
> environment.
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


--=20
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
Rob Otto
EMEA Field CTO/Solutions Architect
robertotto@pingidentity.com

c: +44 (0) 777 135 6092
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11=
,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Google+ logo]
<https://plus.google.com/u/0/114266977739397708540> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/dam/pi=
ng-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?id=
%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=3Dgmail&ust=3D15416936085260=
00&usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ>
<https://www.pingidentity.com/en/events/d/identify-2019.html>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--00000000000079f65105979ae44e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:tahoma,sans-serif;color:#0b5394">Salut Herv=C3=A9</div><div class=
=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><b=
r></div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif=
;color:#0b5394">I wonder if you have looked at all at the OpenID Connect Cl=
ient-Initiated BackChannel Authentication (CIBA) flow for this use case? Ce=
rtainly=C2=A0the feeling amongst the Open Banking community here in the UK =
is that=C2=A0 it might be a better fit for decoupled authentication than th=
e Device Authorisation Grant. There is even a FAPi (Financial-Grade=C2=A0AP=
I) profile=C2=A0of CIBA that is making its way through the standardisation =
process - and even has a working conformance testing suite.</div><div class=
=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><b=
r></div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif=
;color:#0b5394">The other option, that could make life easier when it comes=
 to the final step you mention (switching back to the TPP app from the Bank=
 app) is to use an app-to-app redirect model under OIDC. Again this is a po=
pular model for same-device scenarios that&#39;s been implemented by many b=
anks here in the UK.</div><div class=3D"gmail_default" style=3D"font-family=
:tahoma,sans-serif;color:#0b5394"><br></div><div class=3D"gmail_default" st=
yle=3D"font-family:tahoma,sans-serif;color:#0b5394">If you&#39;d like more =
information on either of these approaches, I&#39;m happy to share.</div><di=
v class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5=
394"><br></div><div class=3D"gmail_default" style=3D"font-family:tahoma,san=
s-serif;color:#0b5394">Best regards</div><div class=3D"gmail_default" style=
=3D"font-family:tahoma,sans-serif;color:#0b5394">Rob=C2=A0</div><div class=
=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><b=
r></div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif=
;color:#0b5394"><br></div></div><br><div class=3D"gmail_quote"><div dir=3D"=
ltr" class=3D"gmail_attr">On Mon, 18 Nov 2019 at 08:24, Robache Herv=C3=A9 =
&lt;<a href=3D"mailto:herve.robache@stet.eu">herve.robache@stet.eu</a>&gt; =
wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0=
px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang=3D"FR">
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Dear all<u></u><u></u></span></=
p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">We are considering using RFC862=
8 for a specific use case that is related to the version 2 of Payment Servi=
ce Directive in Europe (PSD2).<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The purpose of the work is to p=
rovide a decoupled authentication flow for a payment Service User (PSU) aim=
ing to grant access to a Third Party Provider (TPP) for his/her data hosted=
 by a Bank.
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The sequence should be as follo=
wed:<u></u><u></u></span></p>
<p><u></u><span lang=3D"EN-GB"><span>-<span style=3D"font:7pt &quot;Times N=
ew Roman&quot;">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">Nominal flow (as specified=
 by the RFC)<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The TPP asks the PSU about=
 the Bank identity<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The TPP posts a Device Acc=
ess Token Request to the Bank<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The Bank sends back a Devi=
ce Access Token response to the TPP<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The TPP starts to poll the=
 bank for gaining the access token<u></u><u></u></span></p>
<p><u></u><span lang=3D"EN-GB"><span>-<span style=3D"font:7pt &quot;Times N=
ew Roman&quot;">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">Derived flow<u></u><u></u>=
</span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The =E2=80=9Cverification_=
uri_complete=E2=80=9D will not be displayed to the PSU but used as an [app =
link]/[universal link] on a smartphone in order to launch the bank=E2=80=99=
s app.<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The bank=E2=80=99s app aut=
henticates the PSU and asks for consent confirmation<u></u><u></u></span></=
p>
<p><u></u><span lang=3D"EN-GB"><span>-<span style=3D"font:7pt &quot;Times N=
ew Roman&quot;">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">Back to the nominal flow<u=
></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">The TPP gets its access to=
ken<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Two questions have raised durin=
g the work<u></u><u></u></span></p>
<p><u></u><span lang=3D"EN-GB"><span>-<span style=3D"font:7pt &quot;Times N=
ew Roman&quot;">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">As RFC8628 is supposed to =
work on separate devices, can the usage be extrapolated to separate apps on=
 the same device (i.e. the PSU=E2=80=99s smartphone)?<u></u><u></u></span><=
/p>
<p><u></u><span lang=3D"EN-GB"><span>-<span style=3D"font:7pt &quot;Times N=
ew Roman&quot;">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">One issue of the derived f=
low is that, after authentication, the PSU is still facing the bank=E2=80=
=99s app<u></u><u></u></span></p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">We would like to go back t=
o the TPP=E2=80=99s app as fluently as possible. The use of another [app li=
nk]/[universal link]could do the job is provided by the TPP. We consider ad=
ding this uri as an additional parameter
 to the =E2=80=9Cverification_uri_complete=E2=80=9D.<u></u><u></u></span></=
p>
<p style=3D"margin-left:72pt">
<u></u><span lang=3D"EN-GB" style=3D"font-family:&quot;Courier New&quot;"><=
span>o<span style=3D"font:7pt &quot;Times New Roman&quot;">=C2=A0=C2=A0
</span></span></span><u></u><span lang=3D"EN-GB">Is this compliant with RFC=
8628?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Thanks in advance for your answ=
ers.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Herv=C3=A9 Robache<u></u><u></u=
></span></p>
</div>
<br>
<font face=3D"Arial" color=3D"Gray" size=3D"1"><br>
Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l&#39=
;intention exclusive de ses destinataires et sont confidentiels.<br>
Si vous recevez ce message par erreur ou s&#39;il ne vous est pas destin=C3=
=A9, merci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me =
et d&#39;en avertir imm=C3=A9diatement l&#39;exp=C3=A9diteur.<br>
Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n&#39=
;est pas conforme =C3=A0 sa destination, toute diffusion ou toute publicati=
on, totale ou partielle, est interdite.<br>
L&#39;Internet ne permettant pas d&#39;assurer l&#39;int=C3=A9grit=C3=A9 de=
 ce message =C3=A9lectronique susceptible d&#39;alt=C3=A9ration, STET d=C3=
=A9cline toute responsabilit=C3=A9 au titre de ce message dans l&#39;hypoth=
=C3=A8se o=C3=B9 il aurait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou=
 falsifi=C3=A9.<br>
N&#39;imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l&#39;envir=
onnement.<br>
<br>
This message and any attachments is intended solely for the intended addres=
sees and is confidential.<br>
If you receive this message in error, or are not the intended recipient(s),=
 please delete it and any copies from your systems and immediately notify t=
he sender.<br>
Any unauthorized view, use that does not comply with its purpose, dissemina=
tion or disclosure, either whole or partial, is prohibited.<br>
Since the internet cannot guarantee the integrity of this message which may=
 not be reliable, STET shall not be liable for the message if modified, cha=
nged or falsified.<br>
Do not print this message unless it is necessary, please consider the envir=
onment.<br>
</font>
</div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div style=3D"padding:0px;margin:0px">    <table=
 style=3D"border-collapse:collapse;padding:0px;margin:0px">			<tbody><tr>		=
		<td style=3D"width:113px">					<a href=3D"https://www.pingidentity.com" t=
arget=3D"_blank"></a><a href=3D"https://www.pingidentity.com" target=3D"_bl=
ank"><img alt=3D"Ping Identity" src=3D"https://www.pingidentity.com/content=
/dam/pic/images/misc/signature/ping-logo.png"></a>				</td>				<td>					<ta=
ble>												<tbody><tr>			        <td style=3D"vertical-align:top">				=
        <span style=3D"color:rgb(230,29,60);display:inline-block;margin-bot=
tom:3px;font-family:arial,helvetica,sans-serif;font-weight:bold;font-size:1=
4px">Rob Otto</span>								<br>								<span style=3D"color:rgb(0,0,0);dis=
play:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;=
font-weight:normal;font-size:14px">EMEA Field CTO/Solutions Architect</span=
>								<br>								<span style=3D"font-family:arial,helvetica,sans-serif;=
font-size:14px;display:inline-block;margin-bottom:3px"><a href=3D"mailto:ro=
bertotto@pingidentity.com" target=3D"_blank">robertotto@pingidentity.com</a=
></span>								<br>								<span style=3D"color:rgb(0,0,0);display:inline-=
block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:=
normal;font-size:14px">								</span>								<br>								<span style=3D"co=
lor:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,hel=
vetica,sans-serif;font-weight:normal;font-size:14px">								c: +44 (0) 777=
 135 6092</span>							</td>			      </tr>					</tbody></table>				</td>			=
</tr>			<tr>				        <td colspan=3D"2">          <table style=3D"border-=
collapse:collapse;border:none;margin:8px 0px 0px;width:100%">          	<tb=
ody><tr style=3D"height:40px;border-top:1px solid rgb(211,211,211);border-b=
ottom:1px solid rgb(211,211,211)">              <td style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:14px;font-weight:bold;color:rgb(64,71,75=
)">Connect with us: </td>              <td style=3D"padding:4px 0px 0px 20p=
x">                <a href=3D"https://www.glassdoor.com/Overview/Working-at=
-Ping-Identity-EI_IE380907.11,24.htm" style=3D"text-decoration:none;margin-=
right:16px" title=3D"Ping on Glassdoor" target=3D"_blank"><img src=3D"https=
://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassd=
oor.png" style=3D"border: none; margin: 0px;" alt=3D"Glassdoor logo"></a>		=
								<a href=3D"https://www.linkedin.com/company/21870" style=3D"text-de=
coration:none;margin-right:16px" title=3D"Ping on LinkedIn" target=3D"_blan=
k"><img src=3D"https://www.pingidentity.com/content/dam/pic/images/misc/sig=
nature/social-linkedin.png" style=3D"border: none; margin: 0px;" alt=3D"Lin=
kedIn logo"></a>                                        <a href=3D"https://=
twitter.com/pingidentity" style=3D"text-decoration:none;margin-right:16px" =
title=3D"Ping on Twitter" target=3D"_blank"><img src=3D"https://www.pingide=
ntity.com/content/dam/pic/images/misc/signature/social-twitter.png" style=
=3D"border: none; margin: 0px;" alt=3D"twitter logo"></a>										<a href=
=3D"https://www.facebook.com/pingidentitypage" style=3D"text-decoration:non=
e;margin-right:16px" title=3D"Ping on Facebook" target=3D"_blank"><img src=
=3D"https://www.pingidentity.com/content/dam/pic/images/misc/signature/soci=
al-facebook.png" style=3D"border: none; margin: 0px;" alt=3D"facebook logo"=
></a>								<a href=3D"https://www.youtube.com/user/PingIdentityTV" style=
=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Youtube" targe=
t=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/image=
s/misc/signature/social-youtube.png" style=3D"border: none; margin: 0px 0px=
 3px;" alt=3D"youtube logo"></a>														<a href=3D"https://plus.googl=
e.com/u/0/114266977739397708540" style=3D"text-decoration:none;margin-right=
:16px" title=3D"Ping on Google+" target=3D"_blank"><img src=3D"https://www.=
pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.pn=
g" style=3D"border: none; margin: 0px;" alt=3D"Google+ logo"></a>          =
                                              <a href=3D"https://www.pingid=
entity.com/en/blog.html" style=3D"text-decoration:none;margin-right:16px" t=
itle=3D"Ping Blog" target=3D"_blank"><img src=3D"https://www.pingidentity.c=
om/content/dam/pic/images/misc/signature/social-blog.png" style=3D"border: =
none; margin: 0px;" alt=3D"Blog logo"></a>															</td>            <=
/tr>          </tbody></table>				</td>      </tr>    </tbody></table><a hr=
ef=3D"https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/d=
am/ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.p=
df?id%3Db6322a80-f285-11e3-ac10-0800200c9a66&amp;source=3Dgmail&amp;ust=3D1=
541693608526000&amp;usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target=3D"_bl=
ank"></a><a href=3D"https://www.pingidentity.com/en/events/d/identify-2019.=
html" target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/da=
m/ping-6-2-assets/images/misc/emailSignature/identify-email-image.png"></a>=
  </div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--00000000000079f65105979ae44e--


From nobody Mon Nov 18 02:39:39 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2774E12086F for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 02:39:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1uNxCBKua2xA for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 02:39:34 -0800 (PST)
Received: from mail-pj1-x1031.google.com (mail-pj1-x1031.google.com [IPv6:2607:f8b0:4864:20::1031]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DA4D12093D for <oauth@ietf.org>; Mon, 18 Nov 2019 02:39:34 -0800 (PST)
Received: by mail-pj1-x1031.google.com with SMTP id bo14so1372565pjb.1 for <oauth@ietf.org>; Mon, 18 Nov 2019 02:39:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=QsadswRGwknee2H/fwBH5WOvKw+LqoP0Rme2VbOKWnA=; b=smL+qh3MGcz50ya66zR8+HQfVI3ScSUGwkTbfpkcTCCAI86PmnpDpFesiDcL5NFAyi 6Z0FAjaT21J2qcHAuH0i2xRQdT3fjiLamiSzFXhoPyUOOsTPFhkjSZCgJaNU3i+7naiW tkjQa12duZOIVeDFiVb8Z2saJ7nhWLa9wk8YB1eijx5M2W3O+ZDdoWqXCtVp20jk1+Rf gv2cRIkBtx4Sn7JmoutHMYrrXgC/ZMHteQF0EcuNJRpSgre/0UFgcgLDPYXaXPa1fyC9 CLO2D6BQOdBNSgKmh2UIsM9AR+wbb6dnuwzDutshyzTkl72BgQSRFiYnB0nI++zVbHsa HUIg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=QsadswRGwknee2H/fwBH5WOvKw+LqoP0Rme2VbOKWnA=; b=FDhT3vpN3HeN5w7JG8h2uGyYLVEW15arW//RU+mWfXaAgGuI0Wu4dtrGXSYVO+23sw wGGsxvEVVmmu5cKR+1/3kKIQG1H4xqQXwV3OH/Mvcwkt/yJ9OHZT0E5fa4b9SAcplfX1 yhyePYv8E8XtzhhX1OQK/xxSwOugmbzGyl15eW/egrE7YS0ZBvPLR7LoJXFufCLg4wcT vEk9eB1hzYPYxnaBMVuDReVZRkn8DUshmmI429CB54XJ7NVAPBVb4sKRqgGcGpdKyLJt DwG8z5WEQMj7cqXpvcgMA0LqQ00EoNoIDsDkA5uJnERkWZbz4V+zZE+glv7GnVhjYbLL DCXQ==
X-Gm-Message-State: APjAAAWgYaz1EYmteb0QG2qC+KvHKSCeL54H2QPnFYQTm5f7uH1oLT6k eFKHHhpbZMjt503PIdgCRZThv9/w+sgP+1ZZ
X-Google-Smtp-Source: APXvYqy7JwxAxe7V1P3OFtdnxUBrWObH6EUL+cGyUj4dkIKkcgAkIW/SiqEFmI6k5/pMxA4jAli8xA==
X-Received: by 2002:a17:902:322:: with SMTP id 31mr27828187pld.293.1574073572760;  Mon, 18 Nov 2019 02:39:32 -0800 (PST)
Received: from [192.168.20.8] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id z11sm22962521pfg.117.2019.11.18.02.39.31 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 18 Nov 2019 02:39:31 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-06793E69-14B0-4E17-ABBA-83D485E6530B; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Mon, 18 Nov 2019 18:39:29 +0800
Message-Id: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net>
References: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp>
Cc: "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp>
To: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/CadbN7ft2sxeX6xig5y7x3KyhqU>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 10:39:37 -0000

--Apple-Mail-06793E69-14B0-4E17-ABBA-83D485E6530B
Content-Type: multipart/alternative;
	boundary=Apple-Mail-3BDDA74D-3208-4616-ABFB-5A2835713191
Content-Transfer-Encoding: 7bit


--Apple-Mail-3BDDA74D-3208-4616-ABFB-5A2835713191
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Herv=C3=A9,

I assume you want to allow the TPP to send the PSU to the bank=E2=80=99s app=
 on the same device?

In that case, why don=E2=80=99t you just make the bank=E2=80=99s authorizati=
on endpoint URL the universal link? If the universal link is defined on the s=
martphone (since the bank=E2=80=99s app is installed), the redirect will ope=
n the app. If the app is not installed, well, it will open the authorization=
 endpoint in the browser. A very robust and simple approach.

There is an excellent article about this topic by Joseph Hernan on openid.ne=
t https://openid.net/2019/10/21/guest-blog-implementing-app-to-app-authorisa=
tion-in-oauth2-openid-connect/.

best regards,
Torsten.

> Am 18.11.2019 um 16:24 schrieb Robache Herv=C3=A9 <herve.robache@stet.eu>:=

>=20
> =EF=BB=BF
> Dear all
> =20
> We are considering using RFC8628 for a specific use case that is related t=
o the version 2 of Payment Service Directive in Europe (PSD2).
> =20
> The purpose of the work is to provide a decoupled authentication flow for a=
 payment Service User (PSU) aiming to grant access to a Third Party Provider=
 (TPP) for his/her data hosted by a Bank.
> The sequence should be as followed:
> -          Nominal flow (as specified by the RFC)
> o   The TPP asks the PSU about the Bank identity
> o   The TPP posts a Device Access Token Request to the Bank
> o   The Bank sends back a Device Access Token response to the TPP
> o   The TPP starts to poll the bank for gaining the access token
> -          Derived flow
> o   The =E2=80=9Cverification_uri_complete=E2=80=9D will not be displayed t=
o the PSU but used as an [app link]/[universal link] on a smartphone in orde=
r to launch the bank=E2=80=99s app.
> o   The bank=E2=80=99s app authenticates the PSU and asks for consent conf=
irmation
> -          Back to the nominal flow
> o   The TPP gets its access token
> =20
> Two questions have raised during the work
> -          As RFC8628 is supposed to work on separate devices, can the usa=
ge be extrapolated to separate apps on the same device (i.e. the PSU=E2=80=99=
s smartphone)?
> -          One issue of the derived flow is that, after authentication, th=
e PSU is still facing the bank=E2=80=99s app
> o   We would like to go back to the TPP=E2=80=99s app as fluently as possi=
ble. The use of another [app link]/[universal link]could do the job is provi=
ded by the TPP. We consider adding this uri as an additional parameter to th=
e =E2=80=9Cverification_uri_complete=E2=80=9D.
> o   Is this compliant with RFC8628?
> =20
> Thanks in advance for your answers.
> =20
> Herv=C3=A9 Robache
>=20
>=20
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'in=
tention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas destin=C3=A9=
, merci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me et d=
'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n'es=
t pas conforme =C3=A0 sa destination, toute diffusion ou toute publication, t=
otale ou partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce message=
 =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline toute re=
sponsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se o=C3=B9 il au=
rait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l'environnemen=
t.
>=20
> This message and any attachments is intended solely for the intended addre=
ssees and is confidential.
> If you receive this message in error, or are not the intended recipient(s)=
, please delete it and any copies from your systems and immediately notify t=
he sender.
> Any unauthorized view, use that does not comply with its purpose, dissemin=
ation or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message which ma=
y not be reliable, STET shall not be liable for the message if modified, cha=
nged or falsified.
> Do not print this message unless it is necessary, please consider the envi=
ronment.
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--Apple-Mail-3BDDA74D-3208-4616-ABFB-5A2835713191
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">Hi Herv=C3=A9,</div><div d=
ir=3D"ltr"><br></div><div dir=3D"ltr">I assume you want to allow the TPP to s=
end the PSU to the bank=E2=80=99s app on the same device?</div><div dir=3D"l=
tr"><br></div><div dir=3D"ltr">In that case, why don=E2=80=99t you just make=
 the bank=E2=80=99s authorization endpoint URL the universal link? If the un=
iversal link is defined on the smartphone (since the bank=E2=80=99s app is i=
nstalled), the redirect will open the app. If the app is not installed, well=
, it will open the authorization endpoint in the browser. A very robust and s=
imple approach.</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">There is an=
 excellent article about this topic by Joseph Hernan on openid.net&nbsp;<a h=
ref=3D"https://openid.net/2019/10/21/guest-blog-implementing-app-to-app-auth=
orisation-in-oauth2-openid-connect/">https://openid.net/2019/10/21/guest-blo=
g-implementing-app-to-app-authorisation-in-oauth2-openid-connect/</a>.</div>=
<div dir=3D"ltr"><br></div><div dir=3D"ltr">best regards,</div><div dir=3D"l=
tr">Torsten.</div><div dir=3D"ltr"><br><blockquote type=3D"cite">Am 18.11.20=
19 um 16:24 schrieb Robache Herv=C3=A9 &lt;herve.robache@stet.eu&gt;:<br><br=
></blockquote></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-1=
">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
..MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:68576400;
	mso-list-type:hybrid;
	mso-list-template-ids:-1045899876 -1016974594 67895299 67895301 678=
95297 67895299 67895301 67895297 67895299 67895301;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-font-family:Calibri;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Dear all<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">We are considering using RFC8628=
 for a specific use case that is related to the version 2 of Payment Service=
 Directive in Europe (PSD2).<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The purpose of the work is to pr=
ovide a decoupled authentication flow for a payment Service User (PSU) aimin=
g to grant access to a Third Party Provider (TPP) for his/her data hosted by=
 a Bank.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">The sequence should be as follow=
ed:<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 level=
1 lfo1"><!--[if !supportLists]--><span lang=3D"EN-GB"><span style=3D"mso-lis=
t:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">Nominal flow (as spe=
cified by the RFC)<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The TPP asks the PSU=
 about the Bank identity<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The TPP posts a Devi=
ce Access Token Request to the Bank<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The Bank sends back a=
 Device Access Token response to the TPP<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The TPP starts to po=
ll the bank for gaining the access token<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 level=
1 lfo1"><!--[if !supportLists]--><span lang=3D"EN-GB"><span style=3D"mso-lis=
t:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">Derived flow<o:p></o=
:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The =E2=80=9Cverific=
ation_uri_complete=E2=80=9D will not be displayed to the PSU but used as an [=
app link]/[universal link] on a smartphone in order to launch the bank=E2=80=
=99s app.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The bank=E2=80=99s a=
pp authenticates the PSU and asks for consent confirmation<o:p></o:p></span>=
</p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 level=
1 lfo1"><!--[if !supportLists]--><span lang=3D"EN-GB"><span style=3D"mso-lis=
t:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">Back to the nominal f=
low<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">The TPP gets its acc=
ess token<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Two questions have raised during=
 the work<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 level=
1 lfo1"><!--[if !supportLists]--><span lang=3D"EN-GB"><span style=3D"mso-lis=
t:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">As RFC8628 is suppos=
ed to work on separate devices, can the usage be extrapolated to separate ap=
ps on the same device (i.e. the PSU=E2=80=99s smartphone)?<o:p></o:p></span>=
</p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 level=
1 lfo1"><!--[if !supportLists]--><span lang=3D"EN-GB"><span style=3D"mso-lis=
t:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">One issue of the der=
ived flow is that, after authentication, the PSU is still facing the bank=E2=
=80=99s app<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">We would like to go b=
ack to the TPP=E2=80=99s app as fluently as possible. The use of another [ap=
p link]/[universal link]could do the job is provided by the TPP. We consider=
 adding this uri as an additional parameter
 to the =E2=80=9Cverification_uri_complete=E2=80=9D.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0p=
t;mso-list:l0 level2 lfo1">
<!--[if !supportLists]--><span lang=3D"EN-GB" style=3D"font-family:&quot;Cou=
rier New&quot;"><span style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><!--[endif]--><span lang=3D"EN-GB">Is this compliant wi=
th RFC8628?<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Thanks in advance for your answe=
rs.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Herv=C3=A9 Robache<o:p></o:p></s=
pan></p>
</div>
<br>
<font face=3D"Arial" color=3D"Gray" size=3D"1"><br>
Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'inte=
ntion exclusive de ses destinataires et sont confidentiels.<br>
Si vous recevez ce message par erreur ou s'il ne vous est pas destin=C3=A9, m=
erci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me et d'en=
 avertir imm=C3=A9diatement l'exp=C3=A9diteur.<br>
Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n'est p=
as conforme =C3=A0 sa destination, toute diffusion ou toute publication, tot=
ale ou partielle, est interdite.<br>
L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce message =C3=
=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline toute respon=
sabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se o=C3=B9 il aurait=
 =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou falsifi=C3=A9.<br>
N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l'environnement.=
<br>
<br>
This message and any attachments is intended solely for the intended address=
ees and is confidential.<br>
If you receive this message in error, or are not the intended recipient(s), p=
lease delete it and any copies from your systems and immediately notify the s=
ender.<br>
Any unauthorized view, use that does not comply with its purpose, disseminat=
ion or disclosure, either whole or partial, is prohibited.<br>
Since the internet cannot guarantee the integrity of this message which may n=
ot be reliable, STET shall not be liable for the message if modified, change=
d or falsified.<br>
Do not print this message unless it is necessary, please consider the enviro=
nment.<br>
</font>


<span>_______________________________________________</span><br><span>OAuth m=
ailing list</span><br><span>OAuth@ietf.org</span><br><span>https://www.ietf.=
org/mailman/listinfo/oauth</span><br></div></blockquote></body></html>=

--Apple-Mail-3BDDA74D-3208-4616-ABFB-5A2835713191--

--Apple-Mail-06793E69-14B0-4E17-ABBA-83D485E6530B
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-06793E69-14B0-4E17-ABBA-83D485E6530B--


From nobody Mon Nov 18 04:52:06 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF71F1200EB for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 04:52:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.879
X-Spam-Level: 
X-Spam-Status: No, score=-1.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PXjQyug27MKy for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 04:51:51 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13231120933 for <oauth@ietf.org>; Mon, 18 Nov 2019 04:51:49 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.22]) by mx.stet.eu  with ESMTP id xAICpdNl015526-xAICpdNn015526 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL); Mon, 18 Nov 2019 13:51:48 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES002.steteu.corp (10.17.2.22) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 18 Nov 2019 13:51:39 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Mon, 18 Nov 2019 13:51:39 +0100
From: =?utf-8?B?Um9iYWNoZSBIZXJ2w6k=?= <herve.robache@stet.eu>
To: Rob Otto <robotto@pingidentity.com>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Question regarding RFC 8628
Thread-Index: AdWd5gc8ZXfXLSK0SieoRUzTBpAA7f//+qQA///n3HA=
Date: Mon, 18 Nov 2019 12:51:39 +0000
Message-ID: <0ce7423e876b4e2da16784ff9fc68916@STEMES002.steteu.corp>
References: <dc925414da474a0a85d0b28be3009679@STEMES002.steteu.corp> <CABh6VRGoRdXdbAKWKtyQ=U+6tDUkwPsfAP0MX=Thx1ghgd9T6A@mail.gmail.com>
In-Reply-To: <CABh6VRGoRdXdbAKWKtyQ=U+6tDUkwPsfAP0MX=Thx1ghgd9T6A@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.170]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25050.006
x-tm-as-result: No-28.774400-8.000000-10
x-tmase-matchedrid: JczPR6FUc93+uOM1HR9kKkNkUF3WMuv+Ggp0q+mz1yi407GiW+CVSc9b cwXiFuSWNZ0s3M2km5zrcFn67wIg3UuxHaqL+0QRbX6mWnUTkk7fN6fVv5OHyi907ValgZ4AGFo 8MdqTS3TmLuzu9Gne750Xxwt4+TTdVxUYw7s8YeHIv6X8cjR/asG0UNgaZpYq2gp+A6golzbXEt bQ4pfyIxkoLV384ybqvz00KMC0SEliWc3NHA3wJUNa5QnT8mQ0nQrZDK7DrTqOz/LLJUcaHsmqr XFLFjsW6aX8TYIrj1vupB/5XQtwTejyN78/Hb2MdhxZTImqKvlFH6oTiImwh4ZS+fz1TDISe7ij Hq7g9oYo4AY+u5KaE9JXI3xMJLo+N862GpoHoW4sMLcUZMcjd4vptQwz5tsiVd3S2mFKAj2XfY/ lmJ+9hq2SwIjG5UkR4gWsqmD9xnCieKwFsiQ57XY8h0p1oFuR+/HV1Dwcb5ML8x6i8FR0Bc/CWS bNoQfbrzlon4myzZr/oJYIO0yI2FD6VYdTsIyV6BWIaO7/lBLM0ihsfYPMYW5WC0I3P32SXhMD2 hnuDHCQla2tm4cK8vxRYvlIka/inuVelB1S2Mz73t5CJqhvBd8N/D4ujap5FL4jEZr9gZy+fWK8 N2kAh9xwX69jh9hhoumPU7tM4n7GFLkwiylCdmITxiUN0d76wtE16arXsSKpvf+jmz45w/eawpJ 3WDjFH+mgUoY3FGAul2Xz8/HNUPKuRiDYbxBAZaZpTNSLyfah4ILTlgBL0Z03C0fPk8xKT0IkL8 xYhngag7kz9gRfd15Gypt9XNlwFfs8xPq3gEkPYEsh+enfbhKFZvMGZ730iV8Bbnt/wqmYEkyug eX07a9qwExAVIsfZLW0y3EpOpzIaMo5XhSSPDjAdLIal4R6ccjPZrEKJpSR/UEG+WVj4+Lgrhh/ Rk4aPM+bw2uf1ihpAVMLQROtaw==
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--28.774400-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25050.006
x-tm-snts-smtp: 7259E489C7B56FDF5853ABCAC3BE504AA8F7EF5E044B1D1300C05069AF654EA12000:9
Content-Type: multipart/related; boundary="_004_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_"; type="multipart/alternative"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/CZIyo9DLMGALgLJYcv8fqDgvNSc>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 12:52:03 -0000

--_004_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_
Content-Type: multipart/alternative;
 boundary="_000_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_"

--_000_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGkgUm9iDQoNClRoYW5rcyBmb3IgeW91ciBhbnN3ZXIuDQoNClllcywgd2UgYWxzbyBzdHVkaWVk
IENJQkEuIFdlIGFyZSBhbHNvIGF3YXJlIHRoYXQgdGhlIFJFRElSRUNUIGFwcDJhcHAgZmxvdyBz
aG91bGQgYmUgdGhlIGVhc2llc3Qgc29sdXRpb24gZm9yIGEgbW9iaWxlLWJhc2VkIGF1dGhlbnRp
Y2F0aW9uLg0KDQpCZXN0IHJlZ2FyZHMNCg0KSGVydsOpDQoNCkRlIDogUm9iIE90dG8gW21haWx0
bzpyb2JvdHRvQHBpbmdpZGVudGl0eS5jb21dDQpFbnZvecOpIDogbHVuZGkgMTggbm92ZW1icmUg
MjAxOSAwOTo0MA0Kw4AgOiBSb2JhY2hlIEhlcnbDqQ0KQ2MgOiBvYXV0aEBpZXRmLm9yZw0KT2Jq
ZXQgOiBSZTogW09BVVRILVdHXSBRdWVzdGlvbiByZWdhcmRpbmcgUkZDIDg2MjgNCg0KU2FsdXQg
SGVydsOpDQoNCkkgd29uZGVyIGlmIHlvdSBoYXZlIGxvb2tlZCBhdCBhbGwgYXQgdGhlIE9wZW5J
RCBDb25uZWN0IENsaWVudC1Jbml0aWF0ZWQgQmFja0NoYW5uZWwgQXV0aGVudGljYXRpb24gKENJ
QkEpIGZsb3cgZm9yIHRoaXMgdXNlIGNhc2U/IENlcnRhaW5seSB0aGUgZmVlbGluZyBhbW9uZ3N0
IHRoZSBPcGVuIEJhbmtpbmcgY29tbXVuaXR5IGhlcmUgaW4gdGhlIFVLIGlzIHRoYXQgIGl0IG1p
Z2h0IGJlIGEgYmV0dGVyIGZpdCBmb3IgZGVjb3VwbGVkIGF1dGhlbnRpY2F0aW9uIHRoYW4gdGhl
IERldmljZSBBdXRob3Jpc2F0aW9uIEdyYW50LiBUaGVyZSBpcyBldmVuIGEgRkFQaSAoRmluYW5j
aWFsLUdyYWRlIEFQSSkgcHJvZmlsZSBvZiBDSUJBIHRoYXQgaXMgbWFraW5nIGl0cyB3YXkgdGhy
b3VnaCB0aGUgc3RhbmRhcmRpc2F0aW9uIHByb2Nlc3MgLSBhbmQgZXZlbiBoYXMgYSB3b3JraW5n
IGNvbmZvcm1hbmNlIHRlc3Rpbmcgc3VpdGUuDQoNClRoZSBvdGhlciBvcHRpb24sIHRoYXQgY291
bGQgbWFrZSBsaWZlIGVhc2llciB3aGVuIGl0IGNvbWVzIHRvIHRoZSBmaW5hbCBzdGVwIHlvdSBt
ZW50aW9uIChzd2l0Y2hpbmcgYmFjayB0byB0aGUgVFBQIGFwcCBmcm9tIHRoZSBCYW5rIGFwcCkg
aXMgdG8gdXNlIGFuIGFwcC10by1hcHAgcmVkaXJlY3QgbW9kZWwgdW5kZXIgT0lEQy4gQWdhaW4g
dGhpcyBpcyBhIHBvcHVsYXIgbW9kZWwgZm9yIHNhbWUtZGV2aWNlIHNjZW5hcmlvcyB0aGF0J3Mg
YmVlbiBpbXBsZW1lbnRlZCBieSBtYW55IGJhbmtzIGhlcmUgaW4gdGhlIFVLLg0KDQpJZiB5b3Un
ZCBsaWtlIG1vcmUgaW5mb3JtYXRpb24gb24gZWl0aGVyIG9mIHRoZXNlIGFwcHJvYWNoZXMsIEkn
bSBoYXBweSB0byBzaGFyZS4NCg0KQmVzdCByZWdhcmRzDQpSb2INCg0KDQoNCk9uIE1vbiwgMTgg
Tm92IDIwMTkgYXQgMDg6MjQsIFJvYmFjaGUgSGVydsOpIDxoZXJ2ZS5yb2JhY2hlQHN0ZXQuZXU8
bWFpbHRvOmhlcnZlLnJvYmFjaGVAc3RldC5ldT4+IHdyb3RlOg0KRGVhciBhbGwNCg0KV2UgYXJl
IGNvbnNpZGVyaW5nIHVzaW5nIFJGQzg2MjggZm9yIGEgc3BlY2lmaWMgdXNlIGNhc2UgdGhhdCBp
cyByZWxhdGVkIHRvIHRoZSB2ZXJzaW9uIDIgb2YgUGF5bWVudCBTZXJ2aWNlIERpcmVjdGl2ZSBp
biBFdXJvcGUgKFBTRDIpLg0KDQpUaGUgcHVycG9zZSBvZiB0aGUgd29yayBpcyB0byBwcm92aWRl
IGEgZGVjb3VwbGVkIGF1dGhlbnRpY2F0aW9uIGZsb3cgZm9yIGEgcGF5bWVudCBTZXJ2aWNlIFVz
ZXIgKFBTVSkgYWltaW5nIHRvIGdyYW50IGFjY2VzcyB0byBhIFRoaXJkIFBhcnR5IFByb3ZpZGVy
IChUUFApIGZvciBoaXMvaGVyIGRhdGEgaG9zdGVkIGJ5IGEgQmFuay4NClRoZSBzZXF1ZW5jZSBz
aG91bGQgYmUgYXMgZm9sbG93ZWQ6DQoNCi0gICAgICAgICAgTm9taW5hbCBmbG93IChhcyBzcGVj
aWZpZWQgYnkgdGhlIFJGQykNCg0KbyAgIFRoZSBUUFAgYXNrcyB0aGUgUFNVIGFib3V0IHRoZSBC
YW5rIGlkZW50aXR5DQoNCm8gICBUaGUgVFBQIHBvc3RzIGEgRGV2aWNlIEFjY2VzcyBUb2tlbiBS
ZXF1ZXN0IHRvIHRoZSBCYW5rDQoNCm8gICBUaGUgQmFuayBzZW5kcyBiYWNrIGEgRGV2aWNlIEFj
Y2VzcyBUb2tlbiByZXNwb25zZSB0byB0aGUgVFBQDQoNCm8gICBUaGUgVFBQIHN0YXJ0cyB0byBw
b2xsIHRoZSBiYW5rIGZvciBnYWluaW5nIHRoZSBhY2Nlc3MgdG9rZW4NCg0KLSAgICAgICAgICBE
ZXJpdmVkIGZsb3cNCg0KbyAgIFRoZSDigJx2ZXJpZmljYXRpb25fdXJpX2NvbXBsZXRl4oCdIHdp
bGwgbm90IGJlIGRpc3BsYXllZCB0byB0aGUgUFNVIGJ1dCB1c2VkIGFzIGFuIFthcHAgbGlua10v
W3VuaXZlcnNhbCBsaW5rXSBvbiBhIHNtYXJ0cGhvbmUgaW4gb3JkZXIgdG8gbGF1bmNoIHRoZSBi
YW5r4oCZcyBhcHAuDQoNCm8gICBUaGUgYmFua+KAmXMgYXBwIGF1dGhlbnRpY2F0ZXMgdGhlIFBT
VSBhbmQgYXNrcyBmb3IgY29uc2VudCBjb25maXJtYXRpb24NCg0KLSAgICAgICAgICBCYWNrIHRv
IHRoZSBub21pbmFsIGZsb3cNCg0KbyAgIFRoZSBUUFAgZ2V0cyBpdHMgYWNjZXNzIHRva2VuDQoN
ClR3byBxdWVzdGlvbnMgaGF2ZSByYWlzZWQgZHVyaW5nIHRoZSB3b3JrDQoNCi0gICAgICAgICAg
QXMgUkZDODYyOCBpcyBzdXBwb3NlZCB0byB3b3JrIG9uIHNlcGFyYXRlIGRldmljZXMsIGNhbiB0
aGUgdXNhZ2UgYmUgZXh0cmFwb2xhdGVkIHRvIHNlcGFyYXRlIGFwcHMgb24gdGhlIHNhbWUgZGV2
aWNlIChpLmUuIHRoZSBQU1XigJlzIHNtYXJ0cGhvbmUpPw0KDQotICAgICAgICAgIE9uZSBpc3N1
ZSBvZiB0aGUgZGVyaXZlZCBmbG93IGlzIHRoYXQsIGFmdGVyIGF1dGhlbnRpY2F0aW9uLCB0aGUg
UFNVIGlzIHN0aWxsIGZhY2luZyB0aGUgYmFua+KAmXMgYXBwDQoNCm8gICBXZSB3b3VsZCBsaWtl
IHRvIGdvIGJhY2sgdG8gdGhlIFRQUOKAmXMgYXBwIGFzIGZsdWVudGx5IGFzIHBvc3NpYmxlLiBU
aGUgdXNlIG9mIGFub3RoZXIgW2FwcCBsaW5rXS9bdW5pdmVyc2FsIGxpbmtdY291bGQgZG8gdGhl
IGpvYiBpcyBwcm92aWRlZCBieSB0aGUgVFBQLiBXZSBjb25zaWRlciBhZGRpbmcgdGhpcyB1cmkg
YXMgYW4gYWRkaXRpb25hbCBwYXJhbWV0ZXIgdG8gdGhlIOKAnHZlcmlmaWNhdGlvbl91cmlfY29t
cGxldGXigJ0uDQoNCm8gICBJcyB0aGlzIGNvbXBsaWFudCB3aXRoIFJGQzg2Mjg/DQoNClRoYW5r
cyBpbiBhZHZhbmNlIGZvciB5b3VyIGFuc3dlcnMuDQoNCkhlcnbDqSBSb2JhY2hlDQoNCg0KQ2Ug
bWVzc2FnZSBldCB0b3V0ZXMgbGVzIHBpw6hjZXMgam9pbnRlcyBzb250IMOpdGFibGlzIMOgIGwn
aW50ZW50aW9uIGV4Y2x1c2l2ZSBkZSBzZXMgZGVzdGluYXRhaXJlcyBldCBzb250IGNvbmZpZGVu
dGllbHMuDQpTaSB2b3VzIHJlY2V2ZXogY2UgbWVzc2FnZSBwYXIgZXJyZXVyIG91IHMnaWwgbmUg
dm91cyBlc3QgcGFzIGRlc3RpbsOpLCBtZXJjaSBkZSBsZSBkw6l0cnVpcmUgYWluc2kgcXVlIHRv
dXRlIGNvcGllIGRlIHZvdHJlIHN5c3TDqG1lIGV0IGQnZW4gYXZlcnRpciBpbW3DqWRpYXRlbWVu
dCBsJ2V4cMOpZGl0ZXVyLg0KVG91dGUgbGVjdHVyZSBub24gYXV0b3Jpc8OpZSwgdG91dGUgdXRp
bGlzYXRpb24gZGUgY2UgbWVzc2FnZSBxdWkgbidlc3QgcGFzIGNvbmZvcm1lIMOgIHNhIGRlc3Rp
bmF0aW9uLCB0b3V0ZSBkaWZmdXNpb24gb3UgdG91dGUgcHVibGljYXRpb24sIHRvdGFsZSBvdSBw
YXJ0aWVsbGUsIGVzdCBpbnRlcmRpdGUuDQpMJ0ludGVybmV0IG5lIHBlcm1ldHRhbnQgcGFzIGQn
YXNzdXJlciBsJ2ludMOpZ3JpdMOpIGRlIGNlIG1lc3NhZ2Ugw6lsZWN0cm9uaXF1ZSBzdXNjZXB0
aWJsZSBkJ2FsdMOpcmF0aW9uLCBTVEVUIGTDqWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXTDqSBh
dSB0aXRyZSBkZSBjZSBtZXNzYWdlIGRhbnMgbCdoeXBvdGjDqHNlIG/DuSBpbCBhdXJhaXQgw6l0
w6kgbW9kaWZpw6ksIGTDqWZvcm3DqSBvdSBmYWxzaWZpw6kuDQpOJ2ltcHJpbWV6IGNlIG1lc3Nh
Z2UgcXVlIHNpIG7DqWNlc3NhaXJlLCBwZW5zZXogw6AgbCdlbnZpcm9ubmVtZW50Lg0KDQpUaGlz
IG1lc3NhZ2UgYW5kIGFueSBhdHRhY2htZW50cyBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBp
bnRlbmRlZCBhZGRyZXNzZWVzIGFuZCBpcyBjb25maWRlbnRpYWwuDQpJZiB5b3UgcmVjZWl2ZSB0
aGlzIG1lc3NhZ2UgaW4gZXJyb3IsIG9yIGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudChz
KSwgcGxlYXNlIGRlbGV0ZSBpdCBhbmQgYW55IGNvcGllcyBmcm9tIHlvdXIgc3lzdGVtcyBhbmQg
aW1tZWRpYXRlbHkgbm90aWZ5IHRoZSBzZW5kZXIuDQpBbnkgdW5hdXRob3JpemVkIHZpZXcsIHVz
ZSB0aGF0IGRvZXMgbm90IGNvbXBseSB3aXRoIGl0cyBwdXJwb3NlLCBkaXNzZW1pbmF0aW9uIG9y
IGRpc2Nsb3N1cmUsIGVpdGhlciB3aG9sZSBvciBwYXJ0aWFsLCBpcyBwcm9oaWJpdGVkLg0KU2lu
Y2UgdGhlIGludGVybmV0IGNhbm5vdCBndWFyYW50ZWUgdGhlIGludGVncml0eSBvZiB0aGlzIG1l
c3NhZ2Ugd2hpY2ggbWF5IG5vdCBiZSByZWxpYWJsZSwgU1RFVCBzaGFsbCBub3QgYmUgbGlhYmxl
IGZvciB0aGUgbWVzc2FnZSBpZiBtb2RpZmllZCwgY2hhbmdlZCBvciBmYWxzaWZpZWQuDQpEbyBu
b3QgcHJpbnQgdGhpcyBtZXNzYWdlIHVubGVzcyBpdCBpcyBuZWNlc3NhcnksIHBsZWFzZSBjb25z
aWRlciB0aGUgZW52aXJvbm1lbnQuDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fXw0KT0F1dGggbWFpbGluZyBsaXN0DQpPQXV0aEBpZXRmLm9yZzxtYWlsdG86
T0F1dGhAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29h
dXRoDQoNCg0KLS0NCltJbWFnZSBzdXBwcmltw6llIHBhciBsJ2V4cMOpZGl0ZXVyLiBQaW5nIElk
ZW50aXR5XTxodHRwczovL3d3dy5waW5naWRlbnRpdHkuY29tPg0KDQpSb2IgT3R0bw0KRU1FQSBG
aWVsZCBDVE8vU29sdXRpb25zIEFyY2hpdGVjdA0Kcm9iZXJ0b3R0b0BwaW5naWRlbnRpdHkuY29t
PG1haWx0bzpyb2JlcnRvdHRvQHBpbmdpZGVudGl0eS5jb20+DQoNCmM6ICs0NCAoMCkgNzc3IDEz
NSA2MDkyDQoNCg0KQ29ubmVjdCB3aXRoIHVzOg0KDQpbSW1hZ2Ugc3VwcHJpbcOpZSBwYXIgbCdl
eHDDqWRpdGV1ci4gR2xhc3Nkb29yIGxvZ29dPGh0dHBzOi8vd3d3LmdsYXNzZG9vci5jb20vT3Zl
cnZpZXcvV29ya2luZy1hdC1QaW5nLUlkZW50aXR5LUVJX0lFMzgwOTA3LjExLDI0Lmh0bT5bSW1h
Z2Ugc3VwcHJpbcOpZSBwYXIgbCdleHDDqWRpdGV1ci4gTGlua2VkSW4gbG9nb108aHR0cHM6Ly93
d3cubGlua2VkaW4uY29tL2NvbXBhbnkvMjE4NzA+W0ltYWdlIHN1cHByaW3DqWUgcGFyIGwnZXhw
w6lkaXRldXIuIHR3aXR0ZXIgbG9nb108aHR0cHM6Ly90d2l0dGVyLmNvbS9waW5naWRlbnRpdHk+
W0ltYWdlIHN1cHByaW3DqWUgcGFyIGwnZXhww6lkaXRldXIuIGZhY2Vib29rIGxvZ29dPGh0dHBz
Oi8vd3d3LmZhY2Vib29rLmNvbS9waW5naWRlbnRpdHlwYWdlPltJbWFnZSBzdXBwcmltw6llIHBh
ciBsJ2V4cMOpZGl0ZXVyLiB5b3V0dWJlIGxvZ29dPGh0dHBzOi8vd3d3LnlvdXR1YmUuY29tL3Vz
ZXIvUGluZ0lkZW50aXR5VFY+W0ltYWdlIHN1cHByaW3DqWUgcGFyIGwnZXhww6lkaXRldXIuIEdv
b2dsZSsgbG9nb108aHR0cHM6Ly9wbHVzLmdvb2dsZS5jb20vdS8wLzExNDI2Njk3NzczOTM5Nzcw
ODU0MD5bSW1hZ2Ugc3VwcHJpbcOpZSBwYXIgbCdleHDDqWRpdGV1ci4gQmxvZyBsb2dvXTxodHRw
czovL3d3dy5waW5naWRlbnRpdHkuY29tL2VuL2Jsb2cuaHRtbD4NCg0KDQpbSW1hZ2Ugc3VwcHJp
bcOpZSBwYXIgbCdleHDDqWRpdGV1ci5dPGh0dHBzOi8vd3d3LnBpbmdpZGVudGl0eS5jb20vZW4v
ZXZlbnRzL2QvaWRlbnRpZnktMjAxOS5odG1sPg0KDQpDT05GSURFTlRJQUxJVFkgTk9USUNFOiBU
aGlzIGVtYWlsIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBhbmQgcHJpdmlsZWdlZCBtYXRlcmlh
bCBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQocykuIEFueSByZXZp
ZXcsIHVzZSwgZGlzdHJpYnV0aW9uIG9yIGRpc2Nsb3N1cmUgYnkgb3RoZXJzIGlzIHN0cmljdGx5
IHByb2hpYml0ZWQuICBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4g
ZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBieSBlLW1haWwgYW5k
IGRlbGV0ZSB0aGUgbWVzc2FnZSBhbmQgYW55IGZpbGUgYXR0YWNobWVudHMgZnJvbSB5b3VyIGNv
bXB1dGVyLiBUaGFuayB5b3UuDQoNCg0KQ2UgbWVzc2FnZSBldCB0b3V0ZXMgbGVzIHBpw6hjZXMg
am9pbnRlcyBzb250IMOpdGFibGlzIMOgIGwnaW50ZW50aW9uIGV4Y2x1c2l2ZSBkZSBzZXMgZGVz
dGluYXRhaXJlcyBldCBzb250IGNvbmZpZGVudGllbHMuDQpTaSB2b3VzIHJlY2V2ZXogY2UgbWVz
c2FnZSBwYXIgZXJyZXVyIG91IHMnaWwgbmUgdm91cyBlc3QgcGFzIGRlc3RpbsOpLCBtZXJjaSBk
ZSBsZSBkw6l0cnVpcmUgYWluc2kgcXVlIHRvdXRlIGNvcGllIGRlIHZvdHJlIHN5c3TDqG1lIGV0
IGQnZW4gYXZlcnRpciBpbW3DqWRpYXRlbWVudCBsJ2V4cMOpZGl0ZXVyLg0KVG91dGUgbGVjdHVy
ZSBub24gYXV0b3Jpc8OpZSwgdG91dGUgdXRpbGlzYXRpb24gZGUgY2UgbWVzc2FnZSBxdWkgbidl
c3QgcGFzIGNvbmZvcm1lIMOgIHNhIGRlc3RpbmF0aW9uLCB0b3V0ZSBkaWZmdXNpb24gb3UgdG91
dGUgcHVibGljYXRpb24sIHRvdGFsZSBvdSBwYXJ0aWVsbGUsIGVzdCBpbnRlcmRpdGUuDQpMJ0lu
dGVybmV0IG5lIHBlcm1ldHRhbnQgcGFzIGQnYXNzdXJlciBsJ2ludMOpZ3JpdMOpIGRlIGNlIG1l
c3NhZ2Ugw6lsZWN0cm9uaXF1ZSBzdXNjZXB0aWJsZSBkJ2FsdMOpcmF0aW9uLCBTVEVUIGTDqWNs
aW5lIHRvdXRlIHJlc3BvbnNhYmlsaXTDqSBhdSB0aXRyZSBkZSBjZSBtZXNzYWdlIGRhbnMgbCdo
eXBvdGjDqHNlIG/DuSBpbCBhdXJhaXQgw6l0w6kgbW9kaWZpw6ksIGTDqWZvcm3DqSBvdSBmYWxz
aWZpw6kuDQpOJ2ltcHJpbWV6IGNlIG1lc3NhZ2UgcXVlIHNpIG7DqWNlc3NhaXJlLCBwZW5zZXog
w6AgbCdlbnZpcm9ubmVtZW50Lg0KDQpUaGlzIG1lc3NhZ2UgYW5kIGFueSBhdHRhY2htZW50cyBp
cyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBpbnRlbmRlZCBhZGRyZXNzZWVzIGFuZCBpcyBjb25m
aWRlbnRpYWwuDQpJZiB5b3UgcmVjZWl2ZSB0aGlzIG1lc3NhZ2UgaW4gZXJyb3IsIG9yIGFyZSBu
b3QgdGhlIGludGVuZGVkIHJlY2lwaWVudChzKSwgcGxlYXNlIGRlbGV0ZSBpdCBhbmQgYW55IGNv
cGllcyBmcm9tIHlvdXIgc3lzdGVtcyBhbmQgaW1tZWRpYXRlbHkgbm90aWZ5IHRoZSBzZW5kZXIu
DQpBbnkgdW5hdXRob3JpemVkIHZpZXcsIHVzZSB0aGF0IGRvZXMgbm90IGNvbXBseSB3aXRoIGl0
cyBwdXJwb3NlLCBkaXNzZW1pbmF0aW9uIG9yIGRpc2Nsb3N1cmUsIGVpdGhlciB3aG9sZSBvciBw
YXJ0aWFsLCBpcyBwcm9oaWJpdGVkLg0KU2luY2UgdGhlIGludGVybmV0IGNhbm5vdCBndWFyYW50
ZWUgdGhlIGludGVncml0eSBvZiB0aGlzIG1lc3NhZ2Ugd2hpY2ggbWF5IG5vdCBiZSByZWxpYWJs
ZSwgU1RFVCBzaGFsbCBub3QgYmUgbGlhYmxlIGZvciB0aGUgbWVzc2FnZSBpZiBtb2RpZmllZCwg
Y2hhbmdlZCBvciBmYWxzaWZpZWQuDQpEbyBub3QgcHJpbnQgdGhpcyBtZXNzYWdlIHVubGVzcyBp
dCBpcyBuZWNlc3NhcnksIHBsZWFzZSBjb25zaWRlciB0aGUgZW52aXJvbm1lbnQuDQo=

--_000_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_--

--_004_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_
Content-Type: image/jpeg; name="~WRD000.jpg"
Content-Description: ~WRD000.jpg
Content-Disposition: inline; filename="~WRD000.jpg"; size=823;
 creation-date="Mon, 18 Nov 2019 09:06:09 GMT";
 modification-date="Mon, 18 Nov 2019 09:06:09 GMT"
Content-ID: <~WRD000.jpg>
Content-Transfer-Encoding: base64

/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0a
HBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIy
MjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCABkAGQDASIA
AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA
AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3
ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm
p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA
AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx
BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK
U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3
uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD3+iii
gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA
CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK
KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo
ooAKKKKACiiigAooooAKKKKACiiigD//2Q==

--_004_0ce7423e876b4e2da16784ff9fc68916STEMES002steteucorp_--


From nobody Mon Nov 18 05:17:52 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43E81120059 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:17:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.879
X-Spam-Level: 
X-Spam-Status: No, score=-1.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C_NDNbPC5CWe for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:17:38 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B31412004F for <oauth@ietf.org>; Mon, 18 Nov 2019 05:17:37 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.21]) by mx.stet.eu  with ESMTP id xAIDHQmV017357-xAIDHQmX017357 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL); Mon, 18 Nov 2019 14:17:35 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES001.steteu.corp (10.17.2.21) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 18 Nov 2019 14:17:26 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Mon, 18 Nov 2019 14:17:26 +0100
From: =?utf-8?B?Um9iYWNoZSBIZXJ2w6k=?= <herve.robache@stet.eu>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Question regarding RFC 8628
Thread-Index: AdWeEIyy5guyIrBDSg2ccp+OglQ2ewAAB2Eg
Date: Mon, 18 Nov 2019 13:17:25 +0000
Message-ID: <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp>
References: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net>
In-Reply-To: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.170]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25050.007
x-tm-as-result: No-22.661100-8.000000-10
x-tmase-matchedrid: Xng75ui6jXmeGXFpAoGIoe5i6weAmSDKqr0Np6cKdO5fQRiqw0gT4DcI a9gjeLdiWRv4gMq+CegHdptXFFME7wRytbWF0BphCgHQMFomsrRv+B0owAW3BpcDGDiTFmuGs03 PiUbxvvhR1tTDNqr8dVjZYFGVYSCavqDeDn7UX95DO9NSmfde1K6IBbSnfz+3CwWRLqiC/UqTvZ kBseIwt0mu4uFjBmMBf9krIFPI8jVu7xCoxCPC8oDcpVWyPxAMqAn+yHbzwCc61tq0X03xqwF9A YTAlUKX0sPBEFrRIh0PbErEfKxaT/q1PT1fWLFiJhFEQZiq2ZQ2Ajd4eN7gE4xRWJphhsrcTXOj 1XBAu3ApTvNzKFoS2tYHxVr9gN7RblRUOPmdAoaphk0MrYwMJaGEqigf79/LDC/Vm90If4V0NOB 2+sLcHjtM69D53EEGZkGyUM9wXm88rP3vBQrJ4Dnb8O0YN0Q5B3pH4ml/JkesxvTCCnhvxs3dZ3 ToIUUwCPVrqEYobqeNfRPX9m9ebcL6eJudwMqmD1EMyEt30vH2155bpR+TIAg2kgWdt3qamlSdz QN+qA9Rp/ESK4mG//NrCTKGuaZarXfUFLTGayCrSt6KHcT2sac7Cle6iy50ThCCwTgXpi/ccF+v Y4fYYeL4dmU2GvmqCUWFRzsRSQJq142gj0zclaGGAym3r7HtyoUTqBF1E5tsnR1RUJec9K2b9fo 4bSy/scIYR1UDazv/ptHenHPSOY+axNKleguEnxvPm4vv97xezmeoa8MJ81IxScKXZnK01Is5Gv hmGbyh2KiwOdX83yGvKsBQW4B9lZhMdHLR3SKrm7DrUlmNkF+24nCsUSFNmBJMroHl9O0fZMPNH XeG7gwWxr7XDKH8vpz0BhZ1OU5p8d+GjxEpp+CBkyeSa0k1pGsOJ4jdMahSm4a8BHzi8Q==
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--22.661100-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25050.007
x-tm-snts-smtp: 4EFC063D34F8631872BD0049E0C68E61829154259D9C9620344FD83DAF4D96C72000:9
Content-Type: multipart/alternative; boundary="_000_bab1c3a71a924582b25b76ac71d6b960STEMES002steteucorp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/h4DBbjyYHABoP6COtUWvwcnxduU>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 13:17:50 -0000

--_000_bab1c3a71a924582b25b76ac71d6b960STEMES002steteucorp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_bab1c3a71a924582b25b76ac71d6b960STEMES002steteucorp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_bab1c3a71a924582b25b76ac71d6b960STEMES002steteucorp_--


From nobody Mon Nov 18 05:22:13 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE812120059 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:22:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lRoSj29eXzjo for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:22:09 -0800 (PST)
Received: from mail-pf1-x42f.google.com (mail-pf1-x42f.google.com [IPv6:2607:f8b0:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC8B9120931 for <oauth@ietf.org>; Mon, 18 Nov 2019 05:22:09 -0800 (PST)
Received: by mail-pf1-x42f.google.com with SMTP id x28so10402393pfo.6 for <oauth@ietf.org>; Mon, 18 Nov 2019 05:22:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=M7JEJXiI1wjc6KxPT2RZ8tccsy5qoKHKlt3cmhiafwY=; b=Xs0Mgzi1YjCq1xt4qcldb1nR4egunrHhGHiXVgVHaB2tqJ9Zb7USULmzco7GbYrK6F Epykn/aVIzJmLuP7t17uam89HVjYuYi+K1joV7Bj+jfF9EeF+a4KX+WIdJ7hrzWi/b0F 2kHjxmWWm3yOmR+JbfsPw8Uoq2Ct3T4GjKjXS8h7vwQoSroTUkY1MpGUTsJdalKMD4CN PHYWINhoCyUd7nYhzj682DsGI8zskiJ1RmOy4YinRJH1EO82WZx+b6u4DEcCLEHrlbQX sOCiIOxDkn5iCtg377R6/V2g95z5Af5iwjyCuhgUeZlAdENjrdZgsgdlNpGjBw4OcFf6 ncGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=M7JEJXiI1wjc6KxPT2RZ8tccsy5qoKHKlt3cmhiafwY=; b=mXV5NH39IOos7+UXqo2fEUSd54FM76LKOIdOKZEhMroYBSlzv1WLKSR+QHAErJ134S C04R31mm/n6A4ZAxD43NXkUBoGsMQFZCzLML8E6GsmC5a+d9tv3YcBOqrCKVKTXisafx Uxfpq6m7SwGUvqZdmlgGXlbo7K9RYRIh426KWL2tx5z6k2Q0EQtdxDVC0TwneJipxB+F EH2b29d4cPg3fVEGVIDF1NDVkN4RaQNxhnRc3ECUE+OlycnTjWMkuWgpWd1YggPs6B5H U1abu8ZwjCtLGV19qKvjKW6J0jLkAUSs+9Z+GqvMwOhJo7aTTH+angWarHJLXun6s29n 3SEg==
X-Gm-Message-State: APjAAAWRN4kYgz7JDT+zuohryxCh8mFG1meZphZUmE2gIPOnLOzU/v7Z wT4W4MUcx5pZNPuaxQCLvhu2qQ==
X-Google-Smtp-Source: APXvYqzPI4lY5T42ncOhitVI7UGXkwVit4gWFanqMTXyBKVsdeLKuViA1Ri1R9wK6G7XMokikhTqLg==
X-Received: by 2002:a65:40ca:: with SMTP id u10mr629743pgp.432.1574083328429;  Mon, 18 Nov 2019 05:22:08 -0800 (PST)
Received: from [192.168.20.53] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id b5sm22468365pfp.149.2019.11.18.05.22.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 05:22:07 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <AF4FBC44-8155-4A82-B091-B32C399A2D46@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_0248F072-9D77-4936-9F01-E0E26CB12F11"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Mon, 18 Nov 2019 21:22:01 +0800
In-Reply-To: <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp>
Cc: "oauth@ietf.org" <oauth@ietf.org>, Joseph Heenan <joseph.heenan@fintechlabs.io>
To: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
References: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net> <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/GyF1079cge1GXhRaaYDocG3DeQ0>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 13:22:12 -0000

--Apple-Mail=_0248F072-9D77-4936-9F01-E0E26CB12F11
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Herv=C3=A9,

looping in Joseph.

> On 18. Nov 2019, at 21:17, Robache Herv=C3=A9 <herve.robache@stet.eu> =
wrote:
>=20
> Thanks Torsten
> =20
> Yes, we study this flow as well. Actually we consider the two =
following flows for a mobile-based authentication
> =20
> -          DECOUPLED : via a RFC8628-derived or CIBA approach (as =
suggested by Rob)
> -          REDIRECT : via the flow specified in the OpenId link you =
gave.
> =20
> The main issue encountered so far is to give back the focus on the =
third party app. Third Parties fear that their app will be kept in the =
back of the mobile screen.

@Joseph: what=E2=80=99s your take on this concern?=20

> This could happen when the TPP app [app link]/[universal link] is not =
properly registered or forwarded to the bank app.
> -          In the REDIRECT approach this means that the authorization =
code cannot be forwarded to the TPP
> -          In the DECOUPLED approach it less critical since the TPP =
polls the bank and eventually gets its token once the PSU has =
authenticated.

But in the decoupled flow, the PSU first has to enter her PSU ID in =
order to allow the TPP to identity the PSU towards the ASPSP. This is =
less convenient and leaks PII.

best regards,
Torsten.=20

> =20
> Best regards
> =20
> Herv=C3=A9
> =20
> De : Torsten Lodderstedt [mailto:torsten@lodderstedt.net]=20
> Envoy=C3=A9 : lundi 18 novembre 2019 11:39
> =C3=80 : Robache Herv=C3=A9
> Cc : oauth@ietf.org
> Objet : [OAUTH-WG] Question regarding RFC 8628
> =20
> Hi Herv=C3=A9,
> =20
> I assume you want to allow the TPP to send the PSU to the bank=E2=80=99s=
 app on the same device?
> =20
> In that case, why don=E2=80=99t you just make the bank=E2=80=99s =
authorization endpoint URL the universal link? If the universal link is =
defined on the smartphone (since the bank=E2=80=99s app is installed), =
the redirect will open the app. If the app is not installed, well, it =
will open the authorization endpoint in the browser. A very robust and =
simple approach.
> =20
> There is an excellent article about this topic by Joseph Hernan on =
openid.net =
https://openid.net/2019/10/21/guest-blog-implementing-app-to-app-authorisa=
tion-in-oauth2-openid-connect/.
> =20
> best regards,
> Torsten.
>=20
>=20
> Am 18.11.2019 um 16:24 schrieb Robache Herv=C3=A9 =
<herve.robache@stet.eu>:
>=20
> =EF=BB=BF=20
> Dear all
> =20
> We are considering using RFC8628 for a specific use case that is =
related to the version 2 of Payment Service Directive in Europe (PSD2).
> =20
> The purpose of the work is to provide a decoupled authentication flow =
for a payment Service User (PSU) aiming to grant access to a Third Party =
Provider (TPP) for his/her data hosted by a Bank.
> The sequence should be as followed:
> -          Nominal flow (as specified by the RFC)
> o   The TPP asks the PSU about the Bank identity
> o   The TPP posts a Device Access Token Request to the Bank
> o   The Bank sends back a Device Access Token response to the TPP
> o   The TPP starts to poll the bank for gaining the access token
> -          Derived flow
> o   The =E2=80=9Cverification_uri_complete=E2=80=9D will not be =
displayed to the PSU but used as an [app link]/[universal link] on a =
smartphone in order to launch the bank=E2=80=99s app.
> o   The bank=E2=80=99s app authenticates the PSU and asks for consent =
confirmation
> -          Back to the nominal flow
> o   The TPP gets its access token
> =20
> Two questions have raised during the work
> -          As RFC8628 is supposed to work on separate devices, can the =
usage be extrapolated to separate apps on the same device (i.e. the =
PSU=E2=80=99s smartphone)?
> -          One issue of the derived flow is that, after =
authentication, the PSU is still facing the bank=E2=80=99s app
> o   We would like to go back to the TPP=E2=80=99s app as fluently as =
possible. The use of another [app link]/[universal link]could do the job =
is provided by the TPP. We consider adding this uri as an additional =
parameter to the =E2=80=9Cverification_uri_complete=E2=80=9D.
> o   Is this compliant with RFC8628?
> =20
> Thanks in advance for your answers.
> =20
> Herv=C3=A9 Robache
>=20
>=20
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 =
l'intention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas =
destin=C3=A9, merci de le d=C3=A9truire ainsi que toute copie de votre =
syst=C3=A8me et d'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui =
n'est pas conforme =C3=A0 sa destination, toute diffusion ou toute =
publication, totale ou partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce =
message =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline=
 toute responsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se =
o=C3=B9 il aurait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou =
falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 =
l'environnement.
>=20
> This message and any attachments is intended solely for the intended =
addressees and is confidential.
> If you receive this message in error, or are not the intended =
recipient(s), please delete it and any copies from your systems and =
immediately notify the sender.
> Any unauthorized view, use that does not comply with its purpose, =
dissemination or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message =
which may not be reliable, STET shall not be liable for the message if =
modified, changed or falsified.
> Do not print this message unless it is necessary, please consider the =
environment.
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 =
l'intention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas =
destin=C3=A9, merci de le d=C3=A9truire ainsi que toute copie de votre =
syst=C3=A8me et d'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui =
n'est pas conforme =C3=A0 sa destination, toute diffusion ou toute =
publication, totale ou partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce =
message =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline=
 toute responsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se =
o=C3=B9 il aurait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou =
falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 =
l'environnement.
>=20
> This message and any attachments is intended solely for the intended =
addressees and is confidential.
> If you receive this message in error, or are not the intended =
recipient(s), please delete it and any copies from your systems and =
immediately notify the sender.
> Any unauthorized view, use that does not comply with its purpose, =
dissemination or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message =
which may not be reliable, STET shall not be liable for the message if =
modified, changed or falsified.
> Do not print this message unless it is necessary, please consider the =
environment.


--Apple-Mail=_0248F072-9D77-4936-9F01-E0E26CB12F11
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ
KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH
EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV
U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw
MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx
EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj
dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq
KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb
M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L
bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH
fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB
AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy
/AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH
MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv
bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6
Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM
AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh
Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi
tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp
VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7
T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI
9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI
ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon
M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ
z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx
CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv
cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G
CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
Fw0xOTExMTgxMzIyMDFaMC8GCSqGSIb3DQEJBDEiBCD8aiLnnP5W4rJ+HTkDQRdHr6HF8YDLRCau
IyQNRFrx5DCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0
ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl
IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ
BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx
GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1
dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG
SIb3DQEBAQUABIIBAL0DyOYzWP0wNpxb38Q52KhIzoobUU5mCF+qnuVwyFzQdQbiEwK4ez1Gugyg
1txXo3HRSSkSyIcNNnkueJPj5Z90PcL+GU2sMLP9sA6oegP7rmX0aRFgLzBedSFJVqeZq3ZIP0Cg
5rjYaIHhwwK933HwkiIXLOUmIWgwlF2e/Zow4K+M+rOdNAx7imC1H8icIO05AXs83H3Eg2ls28i2
42/oRvhDjVWti4zRlFBzaiTcvn2s6wkMI3ChFaU0EDybN+O4nVzTMaKQmKJafNDCrv+2Sp4HsA8V
xN+LvJlUObdPkUI+N+fdVg4Ys52/xt4XGeOnoAYCtvJCP47CZCT5w/UAAAAAAAA=
--Apple-Mail=_0248F072-9D77-4936-9F01-E0E26CB12F11--


From joseph.heenan@fintechlabs.io  Mon Nov 18 05:48:59 2019
Return-Path: <joseph.heenan@fintechlabs.io>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C433120987 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:48:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fintechlabs-io.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QNPSaLAC--LI for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 05:48:56 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 657BA120995 for <oauth@ietf.org>; Mon, 18 Nov 2019 05:48:56 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id z10so19534073wrs.12 for <oauth@ietf.org>; Mon, 18 Nov 2019 05:48:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fintechlabs-io.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=irXemYHOOsl0MRLuFcGkkXH6rYN4Ub705zWdDL6bYyI=; b=Rgef9sKrOqO1b+uqEdiVSZrJUxcUqJ+QQj0JZgTyY9KSV4rd88ui8LyiERF5QB+WSF o9ZeHq6dMyHbG1bfQTBQ2ciRapxAnP4WjwCaYBAnbG+D15kyEbzjyt4GuRovuimg0YrE xy8w9gjHFzf44kWDsl9EAl8yg2C4W+E0D92+PCTU/lGg3CeEHTefVwRbYQNbtT7DR/nk WhyXVQ+gTiZfVfmWYa6mbUji/OEFAXM9XIM+axm+hqrRO+30TPUtycolRtPsmvmHfFGR oG16Qtn7oGOTrTSQtOYoAbmEeazrM8isFG7R6lKLQG1wFNmVENj8UkUSs4YE/LeIblnF zfrA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=irXemYHOOsl0MRLuFcGkkXH6rYN4Ub705zWdDL6bYyI=; b=mUi7Rxsutt+w1oygYyGCMOrC7WY6pK217cekmOlPTFCW0Q4g+7/An3TytD9X3wGldr 6tIc/ymLKzIk1Zf+uawcMNlpmikdQR4KKmhetc3H60RATp1q2xxd/H4/Z1+W8HxQ+7f7 cNJ4gOflZI9L2xHvkUO9/GvDDiA1AXggUKjFrOs1eY8woT6KaVUcXCRjTmC3yVx+Fduc PuL9FYYutHAIJR2T3eZkNyE0KAsYzFWklHGwXkkMv9kWDui0LRx9/VBojQVHo56c0pCp SlZ3E3VMcGdYUhaRQQKqdEnre1AfLWGm82FVpVW0QMTeG1JO/NTHLm/uxWBqhT1tZQzJ vrnw==
X-Gm-Message-State: APjAAAWOvz7slLCyPwnBfngQG9FEztAfpe0jqceIsH9xipugCCbJR+jb 7ES5SgJ9IV2u6VNJSODyL9gCrg==
X-Google-Smtp-Source: APXvYqxMIPvkLBca1WiRnRospUdIT6tmR6Qf/sVmHwGCIODdC+49gW5mIp1d6x4egWOtTtwf/Keufg==
X-Received: by 2002:adf:b686:: with SMTP id j6mr19401092wre.186.1574084934688;  Mon, 18 Nov 2019 05:48:54 -0800 (PST)
Received: from [192.168.78.148] (glasgow.emobix.co.uk. [87.117.93.88]) by smtp.gmail.com with ESMTPSA id f19sm25721412wrf.23.2019.11.18.05.48.53 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 05:48:53 -0800 (PST)
From: Joseph Heenan <joseph.heenan@fintechlabs.io>
Message-Id: <86EFA160-768C-4166-AA83-1AE08839986B@fintechlabs.io>
Content-Type: multipart/alternative; boundary="Apple-Mail=_EDE34BEF-58C0-4EE9-84B5-2CF8E3A1A0E6"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Mon, 18 Nov 2019 13:48:52 +0000
In-Reply-To: <AF4FBC44-8155-4A82-B091-B32C399A2D46@lodderstedt.net>
Cc: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>, "oauth@ietf.org" <oauth@ietf.org>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
References: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net> <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp> <AF4FBC44-8155-4A82-B091-B32C399A2D46@lodderstedt.net>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/JbhKS5yCmVlwgxIJW_cAKKEU-g8>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 13:56:04 -0000

--Apple-Mail=_EDE34BEF-58C0-4EE9-84B5-2CF8E3A1A0E6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi all,

Thanks, Torsten.

> On 18 Nov 2019, at 13:22, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
>=20
> Hi Herv=C3=A9,
>=20
> looping in Joseph.
>=20
>> On 18. Nov 2019, at 21:17, Robache Herv=C3=A9 <herve.robache@stet.eu =
<mailto:herve.robache@stet.eu>> wrote:
>>=20
>> Thanks Torsten
>>=20
>> Yes, we study this flow as well. Actually we consider the two =
following flows for a mobile-based authentication
>>=20
>> -          DECOUPLED : via a RFC8628-derived or CIBA approach (as =
suggested by Rob)
>> -          REDIRECT : via the flow specified in the OpenId link you =
gave.
>>=20
>> The main issue encountered so far is to give back the focus on the =
third party app. Third Parties fear that their app will be kept in the =
back of the mobile screen.
>=20
> @Joseph: what=E2=80=99s your take on this concern?=20

In app2app, it really shouldn=E2=80=99t happen - if the device OS has =
not properly registered the universal link, the TPP website would open =
instead and authorization code can still be processed (though admittedly =
supporting this use case may require a bit more care to ensure session =
mixup attacks can=E2=80=99t happen).

>=20
>> This could happen when the TPP app [app link]/[universal link] is not =
properly registered or forwarded to the bank app.
>> -          In the REDIRECT approach this means that the authorization =
code cannot be forwarded to the TPP

I don=E2=80=99t really understand how the =E2=80=98app link=E2=80=99 =
would not be properly registered to the bank app. The universal link =
should be the same URL as for the redirect uri on the TPP website. =
Obviously if the TPP registers their redirect uri incorrectly with the =
bank the flow won=E2=80=99t work, but this applies equally to the web =
based flows, and it=E2=80=99s not the kind of problem you see occur on a =
production system.

The evidence from the UK so far is that drop-off rates (where the user =
does not successfully complete the authentication and return to the =
third party) are far lower for app2app compared to a normal oauth2 =
browser based redirect flow; I can=E2=80=99t put my hand on the actual =
figures right now but from memory around 5 times more users successfully =
completed an app2app flow than the usual web flows.

>> -          In the DECOUPLED approach it less critical since the TPP =
polls the bank and eventually gets its token once the PSU has =
authenticated.
>=20
> But in the decoupled flow, the PSU first has to enter her PSU ID in =
order to allow the TPP to identity the PSU towards the ASPSP. This is =
less convenient and leaks PII.

Not necessarily the PSU ID, but generally something that can be used to =
identify the user. In theory it could be an ephemeral id, though in =
reality there=E2=80=99s all sorts of issues with implementing that, =
particularly on a =E2=80=99same device=E2=80=99 flow. It=E2=80=99s =
definitely less convenient, particularly for the first TPP<->ASPSP =
interaction where the TPP will necessarily have to collect more info =
from the user than would be necessary in a redirect based flow.

The user also has to manually switch back to the TPP app at the end of =
the flow.

My general opinion is that for most use cases where the consumption and =
authentication devices are the same device a decoupled flow should not =
be used, as for that use case app2app presents a far better user =
experience - both in terms of the number of steps and the time taken to =
successfully complete all the steps.

Joseph


--Apple-Mail=_EDE34BEF-58C0-4EE9-84B5-2CF8E3A1A0E6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
all,<div class=3D""><br class=3D""></div><div class=3D"">Thanks, =
Torsten.<br class=3D""><div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D"">On 18 Nov 2019, at 13:22, Torsten Lodderstedt =
&lt;<a href=3D"mailto:torsten@lodderstedt.net" =
class=3D"">torsten@lodderstedt.net</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; float: none; =
display: inline !important;" class=3D"">Hi Herv=C3=A9,</span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D""><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; float: none; =
display: inline !important;" class=3D"">looping in Joseph.</span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D""><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" =
class=3D""><blockquote type=3D"cite" style=3D"font-family: Helvetica; =
font-size: 12px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; orphans: auto; text-align: =
start; text-indent: 0px; text-transform: none; white-space: normal; =
widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">On =
18. Nov 2019, at 21:17, Robache Herv=C3=A9 &lt;<a =
href=3D"mailto:herve.robache@stet.eu" =
class=3D"">herve.robache@stet.eu</a>&gt; wrote:<br class=3D""><br =
class=3D"">Thanks Torsten<br class=3D""><br class=3D"">Yes, we study =
this flow as well. Actually we consider the two following flows for a =
mobile-based authentication<br class=3D""><br class=3D"">- =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;DECOUPLED : via a =
RFC8628-derived or CIBA approach (as suggested by Rob)<br class=3D"">- =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REDIRECT : via the =
flow specified in the OpenId link you gave.<br class=3D""><br =
class=3D"">The main issue encountered so far is to give back the focus =
on the third party app. Third Parties fear that their app will be kept =
in the back of the mobile screen.<br class=3D""></blockquote><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none; float: none; =
display: inline !important;" class=3D"">@Joseph: what=E2=80=99s your =
take on this concern?<span =
class=3D"Apple-converted-space">&nbsp;</span></span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
12px; font-style: normal; font-variant-caps: normal; font-weight: =
normal; letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; text-decoration: none;" =
class=3D""></div></blockquote><div><br class=3D""></div><div>In app2app, =
it really shouldn=E2=80=99t happen - if the device OS has not properly =
registered the universal link, the TPP website would open instead and =
authorization code can still be processed (though admittedly supporting =
this use case may require a bit more care to ensure session mixup =
attacks can=E2=80=99t happen).</div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D""><br style=3D"caret-color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: =
normal; font-variant-caps: normal; font-weight: normal; letter-spacing: =
normal; text-align: start; text-indent: 0px; text-transform: none; =
white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><blockquote type=3D"cite" =
style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
orphans: auto; text-align: start; text-indent: 0px; text-transform: =
none; white-space: normal; widows: auto; word-spacing: 0px; =
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D"">This could happen when the TPP app =
[app link]/[universal link] is not properly registered or forwarded to =
the bank app.<br class=3D"">- =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;In the REDIRECT =
approach this means that the authorization code cannot be forwarded to =
the TPP<br class=3D""></blockquote></div></blockquote><div><br =
class=3D""></div><div>I don=E2=80=99t really understand how the =E2=80=98a=
pp link=E2=80=99 would not be properly registered to the bank app. The =
universal link should be the same URL as for the redirect uri on the TPP =
website. Obviously if the TPP registers their redirect uri incorrectly =
with the bank the flow won=E2=80=99t work, but this applies equally to =
the web based flows, and it=E2=80=99s not the kind of problem you see =
occur on a production system.</div><div><br class=3D""></div><div>The =
evidence from the UK so far is that drop-off rates (where the user does =
not successfully complete the authentication and return to the third =
party) are far lower for app2app compared to a normal oauth2 browser =
based redirect flow; I can=E2=80=99t put my hand on the actual figures =
right now but from memory around 5 times more users successfully =
completed an app2app flow than the usual web flows.</div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D""><blockquote type=3D"cite" style=3D"font-family: Helvetica; =
font-size: 12px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; orphans: auto; text-align: =
start; text-indent: 0px; text-transform: none; white-space: normal; =
widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">- =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;In the DECOUPLED =
approach it less critical since the TPP polls the bank and eventually =
gets its token once the PSU has authenticated.<br =
class=3D""></blockquote><br style=3D"caret-color: rgb(0, 0, 0); =
font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, =
0); font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; float: none; display: inline !important;" =
class=3D"">But in the decoupled flow, the PSU first has to enter her PSU =
ID in order to allow the TPP to identity the PSU towards the ASPSP. This =
is less convenient and leaks PII.</span><br style=3D"caret-color: rgb(0, =
0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""></div></blockquote><div><br =
class=3D""></div>Not necessarily the PSU ID, but generally something =
that can be used to identify the user. In theory it could be =
an&nbsp;ephemeral id, though in reality there=E2=80=99s all sorts of =
issues with implementing that, particularly on a =E2=80=99same device=E2=80=
=99 flow. It=E2=80=99s definitely less convenient, particularly for the =
first TPP&lt;-&gt;ASPSP interaction where the TPP will necessarily have =
to collect more info from the user than would be necessary in a redirect =
based flow.</div><div><br class=3D""></div><div>The user also has to =
manually switch back to the TPP app at the end of the =
flow.</div><div><br class=3D""></div></div><div>My general opinion is =
that for most use cases where the consumption and authentication devices =
are the same device a decoupled flow should not be used, as for that use =
case app2app presents a far better user experience - both in terms of =
the number of steps and the time taken to successfully complete all the =
steps.</div><div><br class=3D""></div><div>Joseph</div><div><br =
class=3D""></div></body></html>=

--Apple-Mail=_EDE34BEF-58C0-4EE9-84B5-2CF8E3A1A0E6--


From nobody Mon Nov 18 06:21:24 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57962120105 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 06:21:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.879
X-Spam-Level: 
X-Spam-Status: No, score=-1.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3eWo0f2HXv91 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 06:21:11 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E658212083D for <oauth@ietf.org>; Mon, 18 Nov 2019 06:21:10 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.21]) by mx.stet.eu  with ESMTP id xAIEKwao020038-xAIEKwaq020038 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL); Mon, 18 Nov 2019 15:21:08 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES001.steteu.corp (10.17.2.21) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 18 Nov 2019 15:20:57 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Mon, 18 Nov 2019 15:20:57 +0100
From: =?utf-8?B?Um9iYWNoZSBIZXJ2w6k=?= <herve.robache@stet.eu>
To: Joseph Heenan <joseph.heenan@fintechlabs.io>, Torsten Lodderstedt <torsten@lodderstedt.net>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Question regarding RFC 8628
Thread-Index: AdWeFU+medYBAGzVQs+0C3FJZaCObf//8nAA///sLyA=
Date: Mon, 18 Nov 2019 14:20:57 +0000
Message-ID: <5f3c07fdfdaa4557919a573d29f54d13@STEMES002.steteu.corp>
References: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net> <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp> <AF4FBC44-8155-4A82-B091-B32C399A2D46@lodderstedt.net> <86EFA160-768C-4166-AA83-1AE08839986B@fintechlabs.io>
In-Reply-To: <86EFA160-768C-4166-AA83-1AE08839986B@fintechlabs.io>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.170]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25050.007
x-tm-as-result: No-23.271800-8.000000-10
x-tmase-matchedrid: SncuatAvtBeeGXFpAoGIoe5i6weAmSDKqr0Np6cKdO5fQRiqw0gT4DcI a9gjeLdiWRv4gMq+CegHdptXFFME7wRytbWF0BphCgHQMFomsrRv+B0owAW3BpcDGDiTFmuGs03 PiUbxvvhR1tTDNqr8dVjZYFGVYSCavqDeDn7UX95DO9NSmfde1K6IBbSnfz+3CwWRLqiC/UqTvZ kBseIwt0mu4uFjBmMBf9krIFPI8jVu7xCoxCPC8oDcpVWyPxAMWw/S0HB7eoMwMfxyID/dnTRGW ZgDtiVIuedj3pQS7iZ7EW7ad22PF3iItPx20djWwLEL4+vJhtPr+i+blgZMaQNPGPNKJEnB+qdY 5YSwCQKV34ly4gf0KbGmPLUrS0N++KuH5yWJFSMxoyhWa19A5JKLNrbpy/A0f+dFeR20M3wkMQU K5P2VcI0ogGHrw9oBvi6EqsH0DOvIbcV1dkIKk4vptQwz5tsiQfblIp3oBdGXfY/lmJ+9htRlmy jfMuuvPqh/Toa5DvVz8ZF/amsu/9L1CwL+0SRaz5CYDcN91JuY5v+NllnxQt2ahlgjHaq3z0dbn dAEvQCjWsNITUJ1unXD5t98O+kA6BWIaO7/lBJfVjKn37gkJjoftxKVUs1Gw7+XQ3Lk9nnRBrA5 VCVF0TODtQ1jLp2T32wVTHBie+0sh04dDdejg3TnOygHVQpOWAyJlKudLNNQmhcK24nKvhO0D5D U9BxKzQCtnlm91nC5F/jzlLWXympe0b/o/MnF8Otj0KvfR1mI895gG3J6zeFaOMaGlwcvmlSdzQ N+qA9Rp/ESK4mG//NrCTKGuaZal7fxReDLheerm7DrUlmNkF+24nCsUSFNmBJMroHl9O0fZMPNH XeG7tOy3VR0i9JZYbSOZdTwNJHM6cQdn03G1JcEB/TD2zz5iyfSltwSmFQ=
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--23.271800-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25050.007
x-tm-snts-smtp: AA15CEC2AC793A9E6866CDFB8683ACDAD2C156A1285C4A633E3C4627689AC26E2000:9
Content-Type: multipart/alternative; boundary="_000_5f3c07fdfdaa4557919a573d29f54d13STEMES002steteucorp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/WrBStOrpE1jFzatfq_k6yn33jHY>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 14:21:22 -0000

--_000_5f3c07fdfdaa4557919a573d29f54d13STEMES002steteucorp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_5f3c07fdfdaa4557919a573d29f54d13STEMES002steteucorp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_5f3c07fdfdaa4557919a573d29f54d13STEMES002steteucorp_--


From nobody Mon Nov 18 07:02:14 2019
Return-Path: <joseph.heenan@fintechlabs.io>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78AD5120952 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 07:02:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fintechlabs-io.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ORuw5ly7iMnb for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 07:02:10 -0800 (PST)
Received: from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com [IPv6:2a00:1450:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93A0D120842 for <oauth@ietf.org>; Mon, 18 Nov 2019 07:02:10 -0800 (PST)
Received: by mail-wr1-x42b.google.com with SMTP id b18so18443357wrj.8 for <oauth@ietf.org>; Mon, 18 Nov 2019 07:02:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fintechlabs-io.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=GwN43hSjuQzOVVeb2y+PaYqJNtx0Y2CRCY0R2uqNPN4=; b=JGWpU2RTnGDqQNUra11nLBlW2vo0Xd4H4VQMDa31DRAD0kpm6IfckxxvacR+P85OGd rP1x/rPIvYnosI2Rkq0RzD3osXle3eqOK020ZYlt0pwzzb+3mSJH1qtVEH2ORNGWENo1 anTXhVErQp9L0mL+JjHn0WNeY+lV+9xtOAM1pMxiVTQg213aheJ4DbsC44UDeKN2unkD xOY2DazIDbDCClivWKePvVQ5W5e7UbOkCpNqfDDBwZMn95FeROEJaTga0jMwR8AEBUrL bKsDJ0l1JXjNWgO7HOxDtGjVZhLG+YEcfvWBB+f6bDeL27ZSnj6yLUmHiJ3CwdZ2U0iz ymJw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=GwN43hSjuQzOVVeb2y+PaYqJNtx0Y2CRCY0R2uqNPN4=; b=c0mt+F9tVkbPT5qhyJEYypLc/3QSFdQ3+/BsekYyleT42IZW79sqGQTj4LV4vzJbLs sx4JwZDHFrsjPVUbJTf/Oxwg8PyCus2IyEja/yBp2diRw+VUkXCL2HrEDcTdjlsLfoUA t8A2nmbwFYQiEBN7TqDPuWKwgdDgvre8NF3mCxkyI8ZFVgDpihHuvNJcAvPdsXS8yoyp 8KJH9P+VDjsLEqW1xCuM9ojCa5W6tEeka69KCJWxBOLD19n66fJcZH7hGXIQsgm3WWTr 8EMbB6MKTscSO6rlWQvA6LQ/+h29wTcUDpzHRCPf8CupTgYD8HE8TlJX2xO5OR3gdIwM w7Sw==
X-Gm-Message-State: APjAAAUrhDEqfd6+eZFQV8qD9Zp69oJeMhI5ko2mP44EwZzZjZP+Ay5m F6AZSCC9yosp06lYKOP0IaAcWA==
X-Google-Smtp-Source: APXvYqyB+ffYDzB4I/+iSim5Ao23/S2FO6MOlrjpWjM3Kg+cdrt6AfmR4cV6IirEgPAKxwmB8bWaBg==
X-Received: by 2002:a5d:538d:: with SMTP id d13mr32740967wrv.304.1574089328657;  Mon, 18 Nov 2019 07:02:08 -0800 (PST)
Received: from [192.168.78.148] (glasgow.emobix.co.uk. [87.117.93.88]) by smtp.gmail.com with ESMTPSA id w17sm24486689wrt.45.2019.11.18.07.02.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 07:02:07 -0800 (PST)
From: Joseph Heenan <joseph.heenan@fintechlabs.io>
Message-Id: <BA80234B-3DC3-4812-BEAB-6C84F98108A3@fintechlabs.io>
Content-Type: multipart/alternative; boundary="Apple-Mail=_D43EE33F-0C6F-4722-B90D-45490F1A8DFB"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Mon, 18 Nov 2019 15:02:06 +0000
In-Reply-To: <5f3c07fdfdaa4557919a573d29f54d13@STEMES002.steteu.corp>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, "oauth@ietf.org" <oauth@ietf.org>
To: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
References: <7EFD9524-9C66-4A64-865F-9F3862896BF0@lodderstedt.net> <bab1c3a71a924582b25b76ac71d6b960@STEMES002.steteu.corp> <AF4FBC44-8155-4A82-B091-B32C399A2D46@lodderstedt.net> <86EFA160-768C-4166-AA83-1AE08839986B@fintechlabs.io> <5f3c07fdfdaa4557919a573d29f54d13@STEMES002.steteu.corp>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/sjL4mCIEHcQjiFgsjxJ42FddKvU>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 15:02:12 -0000

--Apple-Mail=_D43EE33F-0C6F-4722-B90D-45490F1A8DFB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Herv=C3=A9

> On 18 Nov 2019, at 14:20, Robache Herv=C3=A9 <herve.robache@stet.eu> =
wrote:
>=20
> Thanks Joseph
> =20
> I agree with you. There should be no issue when the URL is registered =
during the TPP app installation.
> =20
> =46rom my perspective, this URL should be passed during the =
authorization request within the [redirect_uri] field.

Exactly, and that same url should have been pre-registered with the =
authorization server.

> =20
> By the way, most of the French banks will use Oauth2 AC and not OpenId =
Connect. I guess that the sequence diagram is roughly the same, isn=E2=80=99=
t it?

Correct; pretty much exactly the same as I presume you=E2=80=99d still =
be using the authorization code flow.

The security concerns for app2app are very similar to basic OAuth2 / =
OpenID Connect, and to quickly sum those up for anyone reading this =
that's not familiar with those concerns: it=E2=80=99s very easy to do =
something that has undesirable security properties, and you should =
follow documents like FAPI-RW (an OpenID Connect based standard =
originally, but now JARM exists and has some vendor adoption OpenID =
Connect is not required) or the OAuth2 security BCP, to ensure your =
implementation is not vulnerable to the known attacks against OAuth2.

Cheers

Joseph


--Apple-Mail=_D43EE33F-0C6F-4722-B90D-45490F1A8DFB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D"">Hi&nbsp;Herv=C3=A9<br class=3D""><div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On 18 =
Nov 2019, at 14:20, Robache Herv=C3=A9 &lt;<a =
href=3D"mailto:herve.robache@stet.eu" =
class=3D"">herve.robache@stet.eu</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div =
class=3D"WordSection1" style=3D"page: WordSection1; caret-color: rgb(0, =
0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;"><div style=3D"margin: 0cm 0cm 0.0001pt; =
font-size: 12pt; font-family: &quot;Times New Roman&quot;, serif;" =
class=3D""><span style=3D"font-size: 11pt; font-family: Calibri, =
sans-serif; color: rgb(31, 73, 125);" class=3D"">Thanks Joseph<o:p =
class=3D""></o:p></span></div><div style=3D"margin: 0cm 0cm 0.0001pt; =
font-size: 12pt; font-family: &quot;Times New Roman&quot;, serif;" =
class=3D""><span style=3D"font-size: 11pt; font-family: Calibri, =
sans-serif; color: rgb(31, 73, 125);" class=3D""><o:p =
class=3D"">&nbsp;</o:p></span></div><div style=3D"margin: 0cm 0cm =
0.0001pt; font-size: 12pt; font-family: &quot;Times New Roman&quot;, =
serif;" class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; =
font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=3D"">I =
agree with you. There should be no issue when the URL is registered =
during the TPP app installation.<o:p class=3D""></o:p></span></div><div =
style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: =
&quot;Times New Roman&quot;, serif;" class=3D""><span lang=3D"EN-GB" =
style=3D"font-size: 11pt; font-family: Calibri, sans-serif; color: =
rgb(31, 73, 125);" class=3D""><o:p =
class=3D"">&nbsp;</o:p></span></div><div style=3D"margin: 0cm 0cm =
0.0001pt; font-size: 12pt; font-family: &quot;Times New Roman&quot;, =
serif;" class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; =
font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" =
class=3D"">=46rom my perspective, this URL should be passed during the =
authorization request within the [redirect_uri] =
field.</span></div></div></div></blockquote><div><br =
class=3D""></div>Exactly, and that same url should have been =
pre-registered with the authorization server.</div><div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div =
class=3D"WordSection1" style=3D"page: WordSection1; caret-color: rgb(0, =
0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;"><div style=3D"margin: 0cm 0cm 0.0001pt; =
font-size: 12pt; font-family: &quot;Times New Roman&quot;, serif;" =
class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; font-family: =
Calibri, sans-serif; color: rgb(31, 73, 125);" class=3D""><o:p =
class=3D""></o:p></span></div><div style=3D"margin: 0cm 0cm 0.0001pt; =
font-size: 12pt; font-family: &quot;Times New Roman&quot;, serif;" =
class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; font-family: =
Calibri, sans-serif; color: rgb(31, 73, 125);" class=3D""><o:p =
class=3D"">&nbsp;</o:p></span></div><div style=3D"margin: 0cm 0cm =
0.0001pt; font-size: 12pt; font-family: &quot;Times New Roman&quot;, =
serif;" class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; =
font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=3D"">By =
the way, most of the French banks will use Oauth2 AC and not OpenId =
Connect. I guess that the sequence diagram is roughly the same, isn=E2=80=99=
t it?<o:p class=3D""></o:p></span></div><div style=3D"margin: 0cm 0cm =
0.0001pt; font-size: 12pt; font-family: &quot;Times New Roman&quot;, =
serif;" class=3D""><span lang=3D"EN-GB" style=3D"font-size: 11pt; =
font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" =
class=3D""></span></div></div></div></blockquote><div><br =
class=3D""></div></div>Correct; pretty much exactly the same as I =
presume you=E2=80=99d still be using the authorization code flow.<div =
class=3D""><br class=3D""></div><div class=3D"">The security concerns =
for app2app are very similar to basic OAuth2 / OpenID Connect, and to =
quickly sum those up for anyone reading this that's not familiar with =
those concerns: it=E2=80=99s very easy to do something that has =
undesirable security properties, and you should follow documents like =
FAPI-RW (an OpenID Connect based standard originally, but now JARM =
exists and has some vendor adoption OpenID Connect is not required) or =
the OAuth2 security BCP, to ensure your implementation is not vulnerable =
to the known attacks against OAuth2.<div class=3D""><br =
class=3D""></div><div class=3D"">Cheers</div><div class=3D""><br =
class=3D""></div><div class=3D"">Joseph</div><div class=3D""><br =
class=3D""></div></div></body></html>=

--Apple-Mail=_D43EE33F-0C6F-4722-B90D-45490F1A8DFB--


From nobody Mon Nov 18 18:25:54 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66E1B12002E for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 18:25:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tVlwaZa0yvBI for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 18:25:47 -0800 (PST)
Received: from mail-pj1-x102c.google.com (mail-pj1-x102c.google.com [IPv6:2607:f8b0:4864:20::102c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34ADB120232 for <oauth@ietf.org>; Mon, 18 Nov 2019 18:25:46 -0800 (PST)
Received: by mail-pj1-x102c.google.com with SMTP id a10so2088954pju.10 for <oauth@ietf.org>; Mon, 18 Nov 2019 18:25:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ilkyceoHRQZt+bqgvqhPWfU5w8pafvvchiZCpASYZKo=; b=3kLIXipQFdKpBdrsqC4d+f9tpbIkKnbY9oZCUOTQvX8RCIhhpd6lBBS3GEoN99esI7 DgE+KNAFEITfnmfUu6wh/SED6HnKhRBfmpK9HLiF0/q+ZKYN9t9IhwiLFRaP4DiGHEWu 2/X9iVB8B+1f+67sJ0bo1zcbB7uuNJWtRki+57XK8Wf0ttTpDUvJbVbruue0CtSJxaJK qbI9crYL6CXybw6ZxWtWUQkJQsbHuTaRTSk3qHS1qeNZP1x5sdLlGg/VHAXd19ZPoZWn 38z9FQf+ucuPz2TkuICJ3ezoMT5Y5lOKLcDBFailpktbFooWxUGC3He1Gtl6JqFw833I GJmg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ilkyceoHRQZt+bqgvqhPWfU5w8pafvvchiZCpASYZKo=; b=irF4STBQoQXqCNm1M5Fm27K4QaFSXrvKwW3KXe6aszfO3ij9RtRGNE+4fgQ0WLIlY8 jhM4do0D6Rq0cljdp4ZiCciE1XHxHozaa1PDa13tkiO5XBr8n7uVuTDlvBul/jy3xraM XYMMOiewsV7E5kTetIxe9vWwtpnCoU9OaiN2I8J6U0WZrfAbh/xOsH1+AMLwjXw9pdS/ IMzjtWX+SuSnmb27l5/kuq0DuL+bQbIugZ8ybchQBqZDVb3eSyw7POyXNdAWUjr/xnvR 450ZxfvV1XBWm1WsC0r/266eaR2neLPrOk+5TH1M8oNdFdCcpKR9sUjeqmPeXl/gcYB2 hgBA==
X-Gm-Message-State: APjAAAVxIvjZWeA+oa7Bx31yw49/xFut4vRQujDivMnl7DFQD6wM3r0C 4hMHZc1BSOP58Y8RVlpRH1B/bQ==
X-Google-Smtp-Source: APXvYqyC+56jylLQ5kFVbXwrzNvf+BUEpWIGUY71qlwgrpDx3pHlgFHNhka8SC03bt+Rpin5QFK9dQ==
X-Received: by 2002:a17:90a:1089:: with SMTP id c9mr3098281pja.8.1574130346459;  Mon, 18 Nov 2019 18:25:46 -0800 (PST)
Received: from [192.168.20.53] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id i102sm847356pje.17.2019.11.18.18.25.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 18:25:45 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <1FA4D2C5-AE20-4A24-B5A3-2B7B55529C23@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_FA987D8F-076A-4341-9C0B-F4258B0BF5B6"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 19 Nov 2019 10:25:34 +0800
In-Reply-To: <CAPHqeLeA00FwSLv-ry7pCKguS+4RfnOC-PEBh6t4eoTU_GbY-Q@mail.gmail.com>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
To: Vineet Banga <vineetbanga@google.com>
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com> <3FE840EE-9261-414E-8AB7-B75BD8BA6F86@lodderstedt.net> <CAPHqeLeA00FwSLv-ry7pCKguS+4RfnOC-PEBh6t4eoTU_GbY-Q@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/jsXquSyHQut54q0eHF4DoVIQ42U>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 02:25:52 -0000

--Apple-Mail=_FA987D8F-076A-4341-9C0B-F4258B0BF5B6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 17. Nov 2019, at 05:42, Vineet Banga <vineetbanga@google.com> =
wrote:
>=20
>=20
> On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
>=20
> >> On 16. Nov 2019, at 02:07, Vineet Banga =
<vineetbanga=3D40google.com@dmarc.ietf.org> wrote:
> >>=20
> >> Just one comment/question at the moment:
> > >3.1.1 - Is there any recommendation around leveraging state vs =
using multiple URIs (with exact match) to remember the application state =
of the client? I have seen exploding list of registered redirect URIs, =
but am not aware of any security issues around this usage. But would =
like to check if there are any opinions on this matter..
>=20
> >The BCP recommends transaction specific one time use state values for =
CSRF prevention. To achieve the same protection level with redirect =
URI=E2=80=99s and exact match, one would need to register per =
transaction redirect URI values.=20
>=20
> >Do your redirect URIs meet those requirements?
> No. I think the options are using state for purely csrf or using =
[I-D.bradley-oauth-jwt-encoded-state], which is called our in the BCP. =
Using encoded jwt can be used to limit the number of redirect uris.=20

So you are saying "state" is used for CSRF. Then what is the rational of =
your original question? To move towards application state encoded in =
redirect URIs?

>=20
>=20
>=20
>=20
>=20
> >=20
> >=20
> > On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig =
<Hannes.Tschofenig@arm.com> wrote:
> > Hi all,
> >=20
> > this is a working group last call for "OAuth 2.0 Security Best =
Current Practice".
> >=20
> > Here is the document:
> > https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
> >=20
> > Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> > (We use a three week WGLC because of the IETF meeting.)
> >=20
> > Ciao
> > Hannes & Rifaat
> >=20
> > IMPORTANT NOTICE: The contents of this email and any attachments are =
confidential and may also be privileged. If you are not the intended =
recipient, please notify the sender immediately and do not disclose the =
contents to any other person, use it for any purpose, or store or copy =
the information in any medium. Thank you.
> >=20
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>=20


--Apple-Mail=_FA987D8F-076A-4341-9C0B-F4258B0BF5B6
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_FA987D8F-076A-4341-9C0B-F4258B0BF5B6--


From nobody Mon Nov 18 18:38:53 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB4E0120810 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 18:38:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P2Ic0Lc4dahj for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 18:38:39 -0800 (PST)
Received: from mail-pf1-x432.google.com (mail-pf1-x432.google.com [IPv6:2607:f8b0:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CB88120236 for <oauth@ietf.org>; Mon, 18 Nov 2019 18:38:39 -0800 (PST)
Received: by mail-pf1-x432.google.com with SMTP id s5so11348330pfh.9 for <oauth@ietf.org>; Mon, 18 Nov 2019 18:38:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=It5sTY5ETNVWyBruuHA62W4ylh3MnLB2wWaaiVzRoTk=; b=KkSPuuUBpE62AvpoEr6SjB/wXnQCzJLuKRxhXwWEL66hh9gnbxfvWS1gSkni+z3bG6 1t0Z/Xjcrxuir/r5whPYRAAQP5CkE/AodFUeswqO4tYRY22xB+vicXFXEBfhNIfvtaHU QtW2B2vZ+/p7iY4SEYcJFccgZ8sQt8yQDrDhAaWNg3V1J0xA7BlUR7ekVYyKDGldb6lW wJRiUsaRQuq3z0EvxCSwGbFcy5EYo5nVPQoOxcGmqIIujqo35WItwfDHIvdYAK9rlpvc XT+LScsh0k1zaChpgYt3A0NYmxYA8mDACFnMN6CP4QQ4TA9w6Kuor4ti0HDIAbF1WHnA KSYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=It5sTY5ETNVWyBruuHA62W4ylh3MnLB2wWaaiVzRoTk=; b=m0fE6FnoJtT5r+aDNfbmyiUDk8Bymt5U83zueNgUBxZXgCuxKU8CsxdFfjNq9AiynO H3dspJXbSmuCN9vBaN/jC5pFen5uEl3ZNa7jFsCddIg8+hJTrEuXBpxQ8fH683xFixxI D1lfND8lHYdhpOgRV6+4oN3AKD/LFCSJazGNv/MpMlVFm3TvrGd5TIB3EtmE8LvGH5oy JRIeKF6QiCZVpbKoFo31b4PrnQNAVs6ra2WJpRSRl+vy1xxg7hCFT72OtaDM99SDlcRp QuKq6c1Mi3XqLAHSK8GJk0DXV4kdREegpfnfB2pVVWFzVLtKTwL3KRzThOVGRPDUIawQ m4NQ==
X-Gm-Message-State: APjAAAXbz1EMAUBy+8UYTtUSBMjWQ7LCVR3Y4IGL7iWxPe8xGdi/67kU lgMBdJyvh4q90JObNenva3n4uKLR1w4IRuJJ
X-Google-Smtp-Source: APXvYqxHf6KAAAVRHgp6Vnr6ddEe0IQLSpJh4MTMd+xhn71cnkFf+kLaVA9BpSD/ry7tuWHACfsMfw==
X-Received: by 2002:a63:5406:: with SMTP id i6mr2620043pgb.1.1574131118266; Mon, 18 Nov 2019 18:38:38 -0800 (PST)
Received: from [192.168.20.53] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id e17sm22116089pgg.5.2019.11.18.18.38.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 18:38:37 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_740158B9-A57F-49F3-A80D-189E3A8CD3DB"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 19 Nov 2019 10:38:31 +0800
In-Reply-To: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
References: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/nnF6FXHz_uiPVXCBl1iDztMH2YE>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 02:38:45 -0000

--Apple-Mail=_740158B9-A57F-49F3-A80D-189E3A8CD3DB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Hans,=20

> On 18. Nov 2019, at 04:11, Hans Zandbelt <hans.zandbelt@zmartzone.eu> =
wrote:
>=20
> Hi,
>=20
> Please find my feedback from page 21 onwards below.
>=20
> Hans.
>=20
> Overall I would argue there's room for a very concise guidance section =
that says: do this, don't do that, without explanation, just as a =
reference for developers; the current text provides in depth analysis =
but that is perhaps not suitable for developers who just want to know =
what to do (or not to do) and don't really care about the =
background/reasoning

While section 4 gives the raw security threat analysis, we tried to =
summarise the actionable guidance in section 3. What do you miss there?

>=20
> P21
> first bullet
> "the client has bound this data to this particular instance." -> =
particular instance of what?

This bullet refers to the note above.=20

"Note: this check could also detect attempts to inject a code which
   had been obtained from another instance of the same client on another
   device, if certain conditions are fulfilled:"

>=20
> 3rd paragraph:
> "call to the tokens endpoint." -> "call to the token endpoint."

Fixed=20

>=20
> last paragraph could forward point to the next section by adding =
something like
> "using one of the mechanisms described in the next section."

Incorporated=20

>=20
> P22
> 3rd paragraph:
> is the token binding guidance still accurate? it seems to be =
overestimating the adoption=20

You mean this statement?=20

"Token binding is
      promising as a secure and convenient mechanism (due to its browser
      integration).  As a challenge, it requires broad browser support
      and use with native apps is still under discussion.=E2=80=9D

Thanks,
Torsten.=20

>=20
> --=20
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_740158B9-A57F-49F3-A80D-189E3A8CD3DB
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_740158B9-A57F-49F3-A80D-189E3A8CD3DB--


From nobody Mon Nov 18 21:39:17 2019
Return-Path: <vineetbanga@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC89F120801 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 21:39:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.499
X-Spam-Level: 
X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UxT2o9X4amXk for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 21:39:03 -0800 (PST)
Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F1C1120013 for <oauth@ietf.org>; Mon, 18 Nov 2019 21:39:03 -0800 (PST)
Received: by mail-qt1-x836.google.com with SMTP id o3so23260371qtj.8 for <oauth@ietf.org>; Mon, 18 Nov 2019 21:39:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=8nZc80IXL1LAHF0AktClVNQpnNKSb617AE497eJCeZA=; b=Q8gZn9pTjFX/9LTtbOpGDOOtJThqZvaldrPJCILzDcD8VnPlTQiqV/RAOhBEdyn1tX ZJabR3WSCbm7R6DNh3IL4+t0xLe4QLVuPoehRzOEBTcCU33Hm3Fxuaup0GueQt6hAZ1U D59HdRuab088QZfcPx1avzNgFR+Kja3PmM6d0cl9dtwyb9ElSr37Tl2R16T+7D1qeSe+ AsCsoCmArNNjtrtKVYtF7NTgpY644ir+3GlsYjlesFeY9l0hRpnfKaJXE/czdDgI7zNr DoPMuyOW3XYjJUesCKWUnhssustR1eiMe+ypuV5NwZfeRVWbb1U0M2VghcsHgFGFUGCS j3mw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=8nZc80IXL1LAHF0AktClVNQpnNKSb617AE497eJCeZA=; b=AbivAZGOOtHxhPhbuEDq0ruvC93rXHJTtow5g61zmsuw02iXlZMDr+ZX6yUqgFCsBl y73GZrThXUQm+voIZy+ZqzcZ07+ALoryWcf7ro0Wsol2vimM7U6cicF5xGVVRlbmMWsE jdENYXLlwNztT1tl3BPpK90koHOAJFLUnPYR8H4mu6oPiL7YV6QiWH82a6bS8DkXpI4c MzT3UWXTqWmeEsxOaO+BXRq3St4dZfF54gGzKBWgKH9IC2e0d/7ma3ya3cO8RivXHoLp ToE/IhonXrXC7Nz83eGM035iUPu0ZF2D7xukFRxL/gcqr+ICK+rFamT1vtdvmrHSey76 pX8g==
X-Gm-Message-State: APjAAAXwYNfjIhN1KrH17UkTnAc4yueNPLLziO5LPuhzNBtd1D3Lydkc +AhWhZ3qtdJAJQelw5NcxTKBpw6XMdBPysJS69nOgYibic39xA==
X-Google-Smtp-Source: APXvYqzVTj16kWdxSj4xg50SOt+eOmAP1VCV7AKXH8mKpviWZU5vGEfCGfKFA+glFN8FfPM+0jXzjjDMn3sWk8SZ65k=
X-Received: by 2002:ac8:2dbd:: with SMTP id p58mr31291788qta.281.1574141941680;  Mon, 18 Nov 2019 21:39:01 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB5360FBBAF0D3A38BDBED618BFA790@VI1PR08MB5360.eurprd08.prod.outlook.com> <CAPHqeLd4szopBOVFUyThhx5X7bW2izB+nPKCzZ+1b5efB3wF_g@mail.gmail.com> <3FE840EE-9261-414E-8AB7-B75BD8BA6F86@lodderstedt.net> <CAPHqeLeA00FwSLv-ry7pCKguS+4RfnOC-PEBh6t4eoTU_GbY-Q@mail.gmail.com> <1FA4D2C5-AE20-4A24-B5A3-2B7B55529C23@lodderstedt.net>
In-Reply-To: <1FA4D2C5-AE20-4A24-B5A3-2B7B55529C23@lodderstedt.net>
From: Vineet Banga <vineetbanga@google.com>
Date: Tue, 19 Nov 2019 13:38:49 +0800
Message-ID: <CAPHqeLeo8qeZqCMGzLAdFsYu3bHtvYuhxuGxoC3va8yRzZ1JBA@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000042fd1f0597ac7b60"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/YVNLI0cZYl9YifjaTizV60zpD1s>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 05:39:15 -0000

--00000000000042fd1f0597ac7b60
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

> > >> On 16. Nov 2019, at 02:07, Vineet Banga <vineetbanga=3D
40google.com@dmarc.ietf.org> wrote:
> > >>
> > >> Just one comment/question at the moment:
> > > >3.1.1 - Is there any recommendation around leveraging state vs using
multiple URIs (with exact match) to remember the application state of the
client? I have seen exploding list of registered redirect URIs, but am not
aware of any security issues around this usage. But would like to check if
there are any opinions on this matter..
> >
> > >The BCP recommends transaction specific one time use state values for
CSRF prevention. To achieve the same protection level with redirect URI=E2=
=80=99s
and exact match, one would need to register per transaction redirect URI
values.
> >
> > >Do your redirect URIs meet those requirements?
> > No. I think the options are using state for purely csrf or using
[I-D.bradley-oauth-jwt-encoded-state], which is called our in the BCP.
Using encoded jwt can be used to limit the number of redirect uris.

> So you are saying "state" is used for CSRF. Then what is the rational of
your original question? To move towards application state encoded in
redirect URIs?

Let me restate my original question. I agree with the usage of state for
CSRF protection, but it can also be used to capture the application state
(as specified in: [I-D.bradley-oauth-jwt-encoded-state]). I am asking if
there is any recommendation between using state for both csrf and
application state Vs. relying completely on redirect URIs to
maintain application state.

As an OAuth provider, I lean towards avoiding long and dynamic list of
redirect URIs. But I do understand that using state for both CSRF
protection and application state adds burden on clients/app developers.

Vineet


On Tue, Nov 19, 2019 at 10:25 AM Torsten Lodderstedt <
torsten@lodderstedt.net> wrote:

>
>
> > On 17. Nov 2019, at 05:42, Vineet Banga <vineetbanga@google.com> wrote:
> >
> >
> > On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt <
> torsten@lodderstedt.net> wrote:
> >
> > >> On 16. Nov 2019, at 02:07, Vineet Banga <vineetbanga=3D
> 40google.com@dmarc.ietf.org> wrote:
> > >>
> > >> Just one comment/question at the moment:
> > > >3.1.1 - Is there any recommendation around leveraging state vs using
> multiple URIs (with exact match) to remember the application state of the
> client? I have seen exploding list of registered redirect URIs, but am no=
t
> aware of any security issues around this usage. But would like to check i=
f
> there are any opinions on this matter..
> >
> > >The BCP recommends transaction specific one time use state values for
> CSRF prevention. To achieve the same protection level with redirect URI=
=E2=80=99s
> and exact match, one would need to register per transaction redirect URI
> values.
> >
> > >Do your redirect URIs meet those requirements?
> > No. I think the options are using state for purely csrf or using
> [I-D.bradley-oauth-jwt-encoded-state], which is called our in the BCP.
> Using encoded jwt can be used to limit the number of redirect uris.
>
> So you are saying "state" is used for CSRF. Then what is the rational of
> your original question? To move towards application state encoded in
> redirect URIs?
>
> >
> >
> >
> >
> >
> > >
> > >
> > > On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig <
> Hannes.Tschofenig@arm.com> wrote:
> > > Hi all,
> > >
> > > this is a working group last call for "OAuth 2.0 Security Best Curren=
t
> Practice".
> > >
> > > Here is the document:
> > > https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13
> > >
> > > Please send you comments to the OAuth mailing list by Nov. 27, 2019.
> > > (We use a three week WGLC because of the IETF meeting.)
> > >
> > > Ciao
> > > Hannes & Rifaat
> > >
> > > IMPORTANT NOTICE: The contents of this email and any attachments are
> confidential and may also be privileged. If you are not the intended
> recipient, please notify the sender immediately and do not disclose the
> contents to any other person, use it for any purpose, or store or copy th=
e
> information in any medium. Thank you.
> > >
> > > _______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > > https://www.ietf.org/mailman/listinfo/oauth
> > > _______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > > https://www.ietf.org/mailman/listinfo/oauth
> >
>
>

--00000000000042fd1f0597ac7b60
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><span class=3D"gmail-im" style=3D"color:r=
gb(80,0,80)"><br>&gt; &gt; &gt;&gt; On 16. Nov 2019, at 02:07, Vineet Banga=
 &lt;vineetbanga=3D<a href=3D"mailto:40google.com@dmarc.ietf.org" target=3D=
"_blank">40google.com@dmarc.ietf.org</a>&gt; wrote:<br>&gt; &gt; &gt;&gt;<b=
r>&gt; &gt; &gt;&gt; Just one comment/question at the moment:<br>&gt; &gt; =
&gt; &gt;3.1.1 - Is there any recommendation around leveraging state vs usi=
ng multiple URIs (with exact match) to remember the application state of th=
e client? I have seen exploding list of registered redirect URIs, but am no=
t aware of any security issues around this usage. But would like to check i=
f there are any opinions on this matter..<br>&gt; &gt;<br>&gt; &gt; &gt;The=
 BCP recommends transaction specific one time use state values for CSRF pre=
vention. To achieve the same protection level with redirect URI=E2=80=99s a=
nd exact match, one would need to register per transaction redirect URI val=
ues.<br>&gt; &gt;<br>&gt; &gt; &gt;Do your redirect URIs meet those require=
ments?<br>&gt; &gt; No. I think the options are using state for purely csrf=
 or using [I-D.bradley-oauth-jwt-encoded-state], which is called our in the=
 BCP. Using encoded jwt can be used to limit the number of redirect uris.<b=
r><br></span>&gt; So you are saying &quot;state&quot; is used for CSRF. The=
n what is the rational of your original question? To move towards applicati=
on state encoded in redirect URIs?<br></div><div><br></div><div><font color=
=3D"#000000">Let me restate my original question. I agree with the usage of=
 state for CSRF protection, but it can also be used to capture the applicat=
ion state (as specified in:=C2=A0[I-D.bradley-oauth-jwt-encoded-state]). I =
am asking if there is any recommendation between using state for both csrf =
and application state Vs. relying completely on redirect URIs to maintain=
=C2=A0application state.</font></div><div><font color=3D"#000000"><br></fon=
t></div><div><font color=3D"#000000">As an OAuth provider, I lean towards a=
voiding long and dynamic list of redirect URIs. But I do understand that us=
ing state for both CSRF protection and application state adds burden on cli=
ents/app developers.=C2=A0</font></div><div><font color=3D"#000000"><br></f=
ont></div><div><font color=3D"#000000">Vineet</font></div><div dir=3D"ltr">=
<br></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Tue, Nov 19, 2019 at 10:25 AM Torsten Lodderstedt &lt;<a href=3D"mai=
lto:torsten@lodderstedt.net">torsten@lodderstedt.net</a>&gt; wrote:<br></di=
v><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;borde=
r-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
<br>
&gt; On 17. Nov 2019, at 05:42, Vineet Banga &lt;<a href=3D"mailto:vineetba=
nga@google.com" target=3D"_blank">vineetbanga@google.com</a>&gt; wrote:<br>
&gt; <br>
&gt; <br>
&gt; On Fri, Nov 15, 2019 at 11:51 PM Torsten Lodderstedt &lt;<a href=3D"ma=
ilto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>=
&gt; wrote:<br>
&gt; <br>
&gt; &gt;&gt; On 16. Nov 2019, at 02:07, Vineet Banga &lt;vineetbanga=3D<a =
href=3D"mailto:40google.com@dmarc.ietf.org" target=3D"_blank">40google.com@=
dmarc.ietf.org</a>&gt; wrote:<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; Just one comment/question at the moment:<br>
&gt; &gt; &gt;3.1.1 - Is there any recommendation around leveraging state v=
s using multiple URIs (with exact match) to remember the application state =
of the client? I have seen exploding list of registered redirect URIs, but =
am not aware of any security issues around this usage. But would like to ch=
eck if there are any opinions on this matter..<br>
&gt; <br>
&gt; &gt;The BCP recommends transaction specific one time use state values =
for CSRF prevention. To achieve the same protection level with redirect URI=
=E2=80=99s and exact match, one would need to register per transaction redi=
rect URI values. <br>
&gt; <br>
&gt; &gt;Do your redirect URIs meet those requirements?<br>
&gt; No. I think the options are using state for purely csrf or using [I-D.=
bradley-oauth-jwt-encoded-state], which is called our in the BCP. Using enc=
oded jwt can be used to limit the number of redirect uris. <br>
<br>
So you are saying &quot;state&quot; is used for CSRF. Then what is the rati=
onal of your original question? To move towards application state encoded i=
n redirect URIs?<br>
<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; On Wed, Nov 6, 2019 at 12:27 AM Hannes Tschofenig &lt;<a href=3D"=
mailto:Hannes.Tschofenig@arm.com" target=3D"_blank">Hannes.Tschofenig@arm.c=
om</a>&gt; wrote:<br>
&gt; &gt; Hi all,<br>
&gt; &gt; <br>
&gt; &gt; this is a working group last call for &quot;OAuth 2.0 Security Be=
st Current Practice&quot;.<br>
&gt; &gt; <br>
&gt; &gt; Here is the document:<br>
&gt; &gt; <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-=
topics-13" rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/html=
/draft-ietf-oauth-security-topics-13</a><br>
&gt; &gt; <br>
&gt; &gt; Please send you comments to the OAuth mailing list by Nov. 27, 20=
19.<br>
&gt; &gt; (We use a three week WGLC because of the IETF meeting.)<br>
&gt; &gt; <br>
&gt; &gt; Ciao<br>
&gt; &gt; Hannes &amp; Rifaat<br>
&gt; &gt; <br>
&gt; &gt; IMPORTANT NOTICE: The contents of this email and any attachments =
are confidential and may also be privileged. If you are not the intended re=
cipient, please notify the sender immediately and do not disclose the conte=
nts to any other person, use it for any purpose, or store or copy the infor=
mation in any medium. Thank you.<br>
&gt; &gt; <br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"no=
referrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"no=
referrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
&gt; <br>
<br>
</blockquote></div></div>

--00000000000042fd1f0597ac7b60--


From nobody Mon Nov 18 22:17:14 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B38A120843 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 22:17:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RaXZ1dXyMwlk for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 22:17:07 -0800 (PST)
Received: from mail-pj1-x102c.google.com (mail-pj1-x102c.google.com [IPv6:2607:f8b0:4864:20::102c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40DCF120829 for <oauth@ietf.org>; Mon, 18 Nov 2019 22:17:07 -0800 (PST)
Received: by mail-pj1-x102c.google.com with SMTP id y21so2269131pjn.9 for <oauth@ietf.org>; Mon, 18 Nov 2019 22:17:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=ssJfixsfGQd9U2A8BFfa0J9mvMh7Ra5pzsZazTlxD7Q=; b=sagJaKpQM+cjpFqMUGFGiMYp5oKmtdf7ZBrTblf3ZuO7lc/ToVL9wOSqY2ofEIPtuA SF8FFMkaH5J8o8a8JxvlKGi5Pq9Sub82mdTyBbnivcI3o5/toWObTYhXOdMk/B52MQwe ptAcrIOBnA6b5BHWSw8/DIi5xngu+GYqwmQBB/u8gy2/WhnjmDG8e25+Ti5ugRZBXp0q Wa4HSVe55MjqsPvN9ubuED+HVKZttCkS111Y6gxIJ1D+zPfSL6RASoZprcxiEc+6RGc0 Qfj5v6FYyrT9szhV0YocFgC/GnTbmDH7jBIhxr4uk64UCR323rkt4xm+7sUS973V0icZ Onzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=ssJfixsfGQd9U2A8BFfa0J9mvMh7Ra5pzsZazTlxD7Q=; b=s9bRZGDOB06bWthX4s9ehFpCIKvJokJilutqJgqc1fWhgupSOaR2J3riC41DikHp8f z67r6mCOqcN0J+AeZ13XQ/+xdvYdz/XDnISS/LBxYyAxOzd56TOjGenyQqdatuV72Ftp 0XLWH0xsCFc7nbsKws4ZOyqiHsTgAE7x1bikZln9TYoegrDGLQzpKrbH8H0jss+LLred B1CqYvhX1W/xkutKAp8ogDeEFyQn+u0cK8/7U9TqHo6+hu/DyIYjN25a0MmwfWhcY0ja MU2AViUw76/490OsEiKqcg9OqNeLrNeA3oxXwK5c6RWCTp/iTwhTt2+yzQBZJan7B+Hp Qk7A==
X-Gm-Message-State: APjAAAUuVTt/yxMpMWZnZU+C72ms/GwFC02ZnF6eZ+tGodluWqSNWYj1 xMJQw4A/6RyhXlo2Ct6a7F8g7w==
X-Google-Smtp-Source: APXvYqykDImalySm9GM9CmtZF3FMAJCRSq0qXMunEcQfvwdr2yK0vywOpd+SpSbhrB357rK9skCoIQ==
X-Received: by 2002:a17:902:7d90:: with SMTP id a16mr33015505plm.149.1574144226226;  Mon, 18 Nov 2019 22:17:06 -0800 (PST)
Received: from [192.168.20.7] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id e7sm23497940pfi.29.2019.11.18.22.17.04 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 18 Nov 2019 22:17:05 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-AAF4BB88-2FC6-42C4-AF00-2C94BBC3571C; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Tue, 19 Nov 2019 14:17:02 +0800
Message-Id: <745D98E1-6C65-464D-9DD1-5DB070BA2E0A@lodderstedt.net>
References: <CAPHqeLeo8qeZqCMGzLAdFsYu3bHtvYuhxuGxoC3va8yRzZ1JBA@mail.gmail.com>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <CAPHqeLeo8qeZqCMGzLAdFsYu3bHtvYuhxuGxoC3va8yRzZ1JBA@mail.gmail.com>
To: Vineet Banga <vineetbanga@google.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/AUSxcQrFcfoCATDuonOrrgUA1Xk>
Subject: Re: [OAUTH-WG] WGLC for "OAuth 2.0 Security Best Current Practice"
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 06:17:12 -0000

--Apple-Mail-AAF4BB88-2FC6-42C4-AF00-2C94BBC3571C
Content-Type: multipart/alternative;
	boundary=Apple-Mail-4665BDEE-471A-4A78-BAA1-830991883BE6
Content-Transfer-Encoding: 7bit


--Apple-Mail-4665BDEE-471A-4A78-BAA1-830991883BE6
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable



> Am 19.11.2019 um 13:39 schrieb Vineet Banga <vineetbanga@google.com>:
>=20
> Let me restate my original question. I agree with the usage of state for C=
SRF protection, but it can also be used to capture the application state (as=
 specified in: [I-D.bradley-oauth-jwt-encoded-state]). I am asking if there i=
s any recommendation between using state for both csrf and application state=
 Vs. relying completely on redirect URIs to maintain application state.
>=20
> As an OAuth provider, I lean towards avoiding long and dynamic list of red=
irect URIs. But I do understand that using state for both CSRF protection an=
d application state adds burden on clients/app developers.=20

got you, thanks for the clarification.

I would recommend to use PKCE for CSRF prevention and state for representing=
 the application state.

best regards,
Torsten.=

--Apple-Mail-4665BDEE-471A-4A78-BAA1-830991883BE6
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr"><br></div><div dir=3D"ltr"=
><br><blockquote type=3D"cite">Am 19.11.2019 um 13:39 schrieb Vineet Banga &=
lt;vineetbanga@google.com&gt;:<br><br></blockquote></div><blockquote type=3D=
"cite"><div dir=3D"ltr"><div><font color=3D"#000000">Let me restate my origi=
nal question. I agree with the usage of state for CSRF protection, but it ca=
n also be used to capture the application state (as specified in:&nbsp;[I-D.=
bradley-oauth-jwt-encoded-state]). I am asking if there is any recommendatio=
n between using state for both csrf and application state Vs. relying comple=
tely on redirect URIs to maintain&nbsp;application state.</font></div><div><=
font color=3D"#000000"><br></font></div><div><font color=3D"#000000">As an O=
Auth provider, I lean towards avoiding long and dynamic list of redirect URI=
s. But I do understand that using state for both CSRF protection and applica=
tion state adds burden on clients/app developers.&nbsp;</font></div></div></=
blockquote><br><div>got you, thanks for the clarification.</div><div><br></d=
iv><div>I would recommend to use PKCE for CSRF prevention and state for repr=
esenting the application state.</div><div><br></div><div>best regards,</div>=
<div>Torsten.</div></body></html>=

--Apple-Mail-4665BDEE-471A-4A78-BAA1-830991883BE6--

--Apple-Mail-AAF4BB88-2FC6-42C4-AF00-2C94BBC3571C
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-AAF4BB88-2FC6-42C4-AF00-2C94BBC3571C--


From nobody Mon Nov 18 22:34:56 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F369120875 for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 22:34:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J9HJ8pNc4L3p for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 22:34:49 -0800 (PST)
Received: from mail-pf1-x435.google.com (mail-pf1-x435.google.com [IPv6:2607:f8b0:4864:20::435]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B67D120873 for <oauth@ietf.org>; Mon, 18 Nov 2019 22:34:49 -0800 (PST)
Received: by mail-pf1-x435.google.com with SMTP id c13so11649279pfp.5 for <oauth@ietf.org>; Mon, 18 Nov 2019 22:34:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=a3yjV1eELbCPeWrjfN4qw6XYGp6oiFYQN6pdNSzzKA4=; b=GJoKn31GIThCCnVnI3oP8PGAcUEWYLya0atX9m06d7gqN14h106EFu/YzBLqgKzRMH APIfByttWD6Xm4UTUg6TZ425OIJ5n8ptYFNCEt2tLfGxQ64nXREjHh+IKn1nVqOsd3vL kHAvp6bkVU5nNKSIBq/0874H3F/c7+mRhtqqzv5aqo7XRTe6DZTk51jAfFNuePriInNb ZblY9hfhAvHrbwGljUsZpM7kIRFLQ0Dr4G+y0HBfb64hkLi9ibFXXe6ZVEwccXq31MPY +9DWNURwHUDafrTHKTMCHL/CI/l/zVkZ5NQqu83d8t4C09Jg3mhfISIofxkE7ALEq+IH BCzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=a3yjV1eELbCPeWrjfN4qw6XYGp6oiFYQN6pdNSzzKA4=; b=IBrYwZm3BR5z+rioZS8xEX07DAMpyRP6TBmkWhYDIfcjPSYRyC9ouY8sIvUGL+11zk 5daZow5mtrlQqBd18S34ZAXKz9YGzo39IH/dsbsEYdpoKv5FUMd3f5nOdn3xJdSgHWz7 pN+TmRP/xpGyCeQyecBNwzmoAyUfNAyb47VJIxivGIKgh2Aods8KsDKBH+iRgLKIesc0 ZTXXgemiFmU5SiXXKKGrLQvUlvC5ZPdd6AcApQ53bfFvtpSyGomZzYc2wDS7cDh3sBFP wPtO/JVPFYqgib/w3YH7kLmON8J93eMWehna3L9wzAIHQaoX/x+KTe36BeSgekCKuUJh /wiQ==
X-Gm-Message-State: APjAAAXbCY99chM2CF3W3VpJ+rRlPw4j0p6ziGylhlqbjRcV9nP6LxON MW4iVK2rWnrn29O2IsVFJUNVdA==
X-Google-Smtp-Source: APXvYqw20MJfiWDCbG2j/6kxO+BCG04xFr+b/spL+XO7IupjllsjdVQd5xa4TM/QGiTGiYUDShcZaQ==
X-Received: by 2002:a63:c603:: with SMTP id w3mr3644539pgg.151.1574145288585;  Mon, 18 Nov 2019 22:34:48 -0800 (PST)
Received: from [192.168.20.19] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id x13sm24021415pfc.46.2019.11.18.22.34.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 22:34:47 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <6CA04551-9F9A-408C-8108-E3644DD2B110@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_6D1DA2A5-E0E6-4C31-9C03-8FC86EDD9ECE"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 19 Nov 2019 14:34:40 +0800
In-Reply-To: <CA+iA6ujhZub-_Ys-owBDRvueRWuSaotQRqa=o8w0sy7afEzvFw@mail.gmail.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>, Daniel Fett <fett@danielfett.de>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
References: <CA+iA6ujhZub-_Ys-owBDRvueRWuSaotQRqa=o8w0sy7afEzvFw@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/0XVEKKts9WdQtIjGsGhrgO7Aey8>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [2/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 06:34:55 -0000

--Apple-Mail=_6D1DA2A5-E0E6-4C31-9C03-8FC86EDD9ECE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi Hans,=20

> On 11. Nov 2019, at 17:57, Hans Zandbelt <hans.zandbelt@zmartzone.eu> =
wrote:
>=20
> Hi,
>=20
> Please find my feedback on page 11-20 below.
>=20
> Hans.
>=20
> P14
> 4.2.4 For an RP there should be more explicit text and guidance about =
having a single dedicated immutatable redirect URI per client that =
"demultiplexes" access to the protected resource by storing the original =
location that the user agent was trying to access in the state =
associated with the authorization request.
>=20

Anything different from the guidance given in 3.1?

> P15
> same section 4.2.4, 2nd paragraph: if I'm correct the text about =
authorization codes being single use only and revoke access tokens on =
2nd use is not different from the original RFC is it? If so, why repeat =
here?

To provide a complete list of measures and to remind the reader of what =
is already stated in RFC 6749.

The alternative would be to state something like, "beyond the measures =
given in RFC 6749, the following additional measures further reduce the =
chances of a successful
   attack:"

>=20
> 3rd paragraph: why not a MUST for invalidating state (and randomizing =
it for that matter) but only a SHOULD?

Because this is a discussion of options not the normative =
recommendation. Beside this, invalidating state introduces more state at =
the client, which might cause scalability problems. =20

>=20
> P16
> 4.3.2 the "postmessage communication" is mentioned here without any =
context or explanation; I guess this refers to the OIDC session =
management spec somehow?

It refers to a (non-existing) postMessage-based protocol to pass the =
code to the RP.

We adopted the second measure with our recommendation towards code&PKCE.

>=20
> 4..4 Mixup: I would like to emphasize here that the mixup attack works =
perfectly fine against two statically configured OPs, to avoid the =
impression that it is somehow applicable in dynamic scenarios only.=20

Changed it=20

"Mix-up is an attack on scenarios where an OAuth client interacts with
multiple authorization servers, as is usually the case when dynamic
registration is used or if the client is statically configured to =
interact with multiple authorization servers."

>=20
> P17
> About the description of the mixup attack: as long as the attacker is =
able to trigger a request (by having the user click a link) and read the =
query/POST parameters on the A-AS (perhaps from the logs) he can execute =
a mixup attack by starting from the A-AS rather than the H-AS (as =
demonstrated in the OAuth 2.0 security workshop in Darmstadt December =
2016). Perhaps this can be made more explicit.

I will ask Daniel to take a look into this.

best,
Torsten.=20

>=20
> --=20
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_6D1DA2A5-E0E6-4C31-9C03-8FC86EDD9ECE
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_6D1DA2A5-E0E6-4C31-9C03-8FC86EDD9ECE--


From nobody Mon Nov 18 23:44:04 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B58512087C for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 23:44:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EyAroDtY_f-Q for <oauth@ietfa.amsl.com>; Mon, 18 Nov 2019 23:43:56 -0800 (PST)
Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39B9E12084A for <oauth@ietf.org>; Mon, 18 Nov 2019 23:43:55 -0800 (PST)
Received: by mail-lj1-x22c.google.com with SMTP id d5so22136750ljl.4 for <oauth@ietf.org>; Mon, 18 Nov 2019 23:43:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=LrDzvtjJWn1hPszrBd4DkKaXGpoe5bym/OxRCY70/tk=; b=LLJMwe3/vgm9YHwktDY2CarFsDc+y0Y1OOi66asxhDqqjqrPsASDMLCd+h+ss8XbJF R5PhvvAN3LNAL5hCiXaBolpo9CTngGh2BvpNfQiK5BaXcSlqcY8TVwxWcyfeFOWen4wP YPKwiMCGev+3JFJCCBhjQEo/fzGrzzY+0/42IccoLmS5EBv5qLVlwTSyRUxQZYsKWsed E/vBVO7hyZg9WZuEU9mkw80wwJ6SXbyH7mMZive+roO+0N8qXEJnxAnInWpiVMKgSgn3 leRsStdmDYboDGIgdzD14OYFbF4U9+78XUAZJqg/SxXXhoSAGX5+lzyRvESd5ybIxR1+ bi7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LrDzvtjJWn1hPszrBd4DkKaXGpoe5bym/OxRCY70/tk=; b=U6OQBMcehxhpMPiElVT3s6tBpfPNCsw5myCLL6KBPUOoOk5iQbxLNMzEuVaNg6UVd3 FUNMNJNdBR+S1L489rqn8BQa6fXbCspep/8/ekKQtG/nuLpLxHSTpp0hDsBJQUzCKhEl KN84bbFLZZnNs/Zhvyfs0jkVnLdRQfP6co9WnuAJmxPd6FgCxJcb40U/1B87r0PrNY86 re4p38HPWsx02BgyV3BYgjJnaDIEEXTx6+xZB6WCPhf0Y0QmTAwxeTwf+yPt0Gm1cKIr pW2hEGaTu5ryO4412gXvv6naFaC16G+tSlBbDiJOTDcgFLOgiiQUrym1mNfYGxZV4if4 zJSQ==
X-Gm-Message-State: APjAAAXaGGqlvgaKYmg/eqEXxkLZD0U5EgJ0GQ6KaI3ne4HpLQ/ncyT4 VW+VJD7aTbJVTuWar8eCFycQPJtLAJU9bJCj511WdDDkRWhAt3hdF+SdxsvStYZ+5b+ygjgckii +5ZrJJrveBSEaCX1Hmd7f3Q==
X-Google-Smtp-Source: APXvYqzjy4iMlsKpfzG1CTkt+rFhkxOmNiTCrNABs6yaCuF5ttt0YXvam+0/9iiSX6oGTuOw47Mji0ef2oX6PWiMLrs=
X-Received: by 2002:a2e:8855:: with SMTP id z21mr2709810ljj.212.1574149433205;  Mon, 18 Nov 2019 23:43:53 -0800 (PST)
MIME-Version: 1.0
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com>
In-Reply-To: <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Tue, 19 Nov 2019 15:43:26 +0800
Message-ID: <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ca41090597ae3927"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uQN32hK46PozOc6hg88aCfLpvT4>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 07:44:02 -0000

--000000000000ca41090597ae3927
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com>
wrote:

> I can't attend Singapore either in person or remotely due to other
> commitments. I broadly support adoption of this draft, but I have some
> comments/suggestions about it.
>

Thanks Neil. And sorry to hear that you won't be in Singapore. This kind of
stuff is definitely more easily discussed in person (for me anyway). But
I'll try and comment on your comments here as best I can. I also plan to
also mention them in the Wednesday and/or Thursday presentation.


> Section 2 lists the main objective as being to harden against
> compromised/malicious AS or RS, which may attempt to replay captured toke=
ns
> elsewhere. While this is a good idea, a casual reader might wonder why a
> simple audience claim in the access token/introspection response is not
> sufficient to prevent this. Because interactions between the client and R=
S
> are supposed to be over TLS, is the intended threat model one in which
> these protections have broken down? ("counterfeit" in the description
> suggests this). Or is the motivation that clients want to get a single
> broad-scoped access token (for usability/performance reasons) and use it =
to
> access multiple resource servers without giving each of them the ability =
to
> replay the token to the other servers? Or are we thinking of a
> phishing-type vulnerability were a general-purpose client might
> accidentally visit a malicious site which prompts for an access token tha=
t
> the client then blindly goes off and gets? (UMA?) It's not clear to me
> which of these scenarios is being considered, so it would be good to
> tighten up this section.
>

It is admittedly a bit loose and I agree it'd be good to tighten it up. But
part of why it's loose is that it tries to offer some protections for all
those scenarios and more such as a general lost/stolen token. It's
effectively trying to provide as many of the same types of
protections/assurances that you'd get with TLS based PoP mechanisms (like
OAuth MTLS or Token binding) to the extent that can be done at the HTTP
application layer. Which can't realistically be exactly the same but can
maybe be kinda close while actually being accessible and implementable
because it's all done at the application layer. There are trade-offs, of
course, and the document writers have endeavored to find a good balance in
the trade-off decisions we've made. But that doesn't mean they are
necessarily the right decisions or are closed to discussion. To the casual
reader I would say that it turns out that getting an appropriate simple
audience claim into an access token isn't nearly as simple as it might
seem. And while it will prevent RS to RS replay (as long as both RSs aren't
legit audiences) it doesn't help with preventing the use of tokens stolen
or leaked by other means (including for refresh tokens issued to public
clients).



> Another potential motivation is for mobile apps. Some customers of ours
> would like to tie access/refresh tokens to private key material generated
> on a secure element in the device, that can only be accessed after local
> biometric authentication (e.g. TouchID/FaceID on iOS). I have suggested
> using mTLS cert-bound tokens for this, but have heard some pushback due t=
o
> the difficulty of configuring support for client certs across diverse
> infrastructure. A simple JWT-based solution like DPoP could fill this nee=
d.
>

It's maybe not stated in the draft but this kind of thing is among the
objectives (in my mind anyway).



> My main concerns with the draft though are about efficiency and
> scalability of the proposed approach:
>
> 1. The requirement to use public key signatures, along with the
> anti-replay nonce, means that the RS is required to perform an expensive
> signature verification check on every request. That is not going to scale
> up well. While there are more efficient schemes like Ed25519 now, these a=
re
> still typically an order of magnitude slower than HMAC and the latency an=
d
> CPU overhead is likely to be a non-starter for many APIs (especially when
> you're billed by CPU usage). Public key signatures are also notoriously
> fragile (see e.g. the history of nonce reuse/leakage vulnerabilities in
> ECDSA or
>

Yes, asymmetric is more processing intensive than symmetric. But if you
take away the distributed replay check (see next response), it will scale
out just fine. I'm not so sure latency is a real issue here - while these
operations are an order of magnitude slower we're still talking about times
that are not perceptible to a human. CPU usage/cost is a part of a
trade-off for the simplicity afforded by public/private keys.  And it is
significantly simpler. The design you sketched out is admittedly quite
clever but it's not even in the same ballpark with respect to complexity.
And, as you pointed out, the other suggestion around symmetric keys has
rather different security properties while still adding complexity. Adding
symmetric key support isn't something that can just be added on easily.



>
> 2. The advice for the RS to store a set of previously used nonces to
> prevent replay will also hamper scalability, especially in large
> deployments where such state would need to be replicated to all servers (=
or
> use sticky load balancing, which comes with its own problems). This
> violates the statelessness of HTTP, and it also potentially breaks
> idempotency of operations: Think of the case where the JWT validation and
> replay protection is done at an API gateway but then the call to the
> backend API server fails for a transient reason. The client (or a
> proxy/library) cannot simply replay the (idempotent) request in this case
> because it will be rejected by the gateway. It must instead recreate the
> DPoP JWT, incurring additional overheads.
>

The actual value of replay checking on jti is somewhat questionable. The
DPoP JWT only transits between client and server so a TLS MITM is likely
needed to steal a DPoP JWT. But we are assuming TLS works here. And an
active MITM could thwart this check by just being first to present DPoP
JWT. I think the jti check made its way into the draft mostly because it
seemed like something was needed to try and bring it closer to the TLS PoP
models. Being aware of the scalability concerns, I did endeavor to write
the text in such a way so as to leave some wiggle room in
implementations/deployments with text like '"jti" SHOULD be used by the
server for replay detection and prevention` and [ensure that] 'within a
reasonable consideration of accuracy and resource utilization, a JWT with
the same "jti" value has not been received previously'. The idea being that
using something eventually consistent or even local only to the runtime
instance would be permissible. Perhaps that allowance and the rational
could be made more clear? Or would you suggest to do away with the jti
replay stuff al? Or something else?



> 3. Minor: The use of a custom header for communicating the DPoP proof wil=
l
> require additional CORS configuration on top of that already done for the
> Authorization header, and so adds a small amount of additional friction f=
or
> adoption. Given that CORS configuration changes often require approval by=
 a
> security team, this may make more of an impact than you'd expect.
>

Feels really minor. I mean, we could try to roll everything up under one
header. But it does seem unwarranted and would complicate things - at least
in the model we've got now where the proof is sent the same way ono all
types of requests.


It's also not clear to me exactly what threat the anti-replay nonce is
> protecting against. It does nothing against the replay scenario discussed
> in section 2, as I understand it - which really seems to be more of a Mit=
M
> scenario. Given that the connection between the client and the RS is
> supposed to be over TLS, and TLS is already protected against replay
> attacks, I think this part needs to be better motivated given the obvious
> costs of implementing it.
>
> I have a tentative suggestion for an alternative design which avoids thes=
e
> problems, but at a cost of potentially more complexity elsewhere. I'll
> summarise it here for consideration:
>
> 1. The client obtains an access token in the normal way. When calling the
> token endpoint it provides an EC/okp public key as the confirmation key t=
o
> be associated with the access/refresh tokens.
>
> 2. The first time the client calls an RS it passes its access token in th=
e
> Authorization: Bearer header as normal. (If the RS doesn't support DPoP
> then this would just succeed and no further action is required by the
> client - allowing clients to opportunistically ask for DPoP without needi=
ng
> a priori knowledge of RS capabilities).
>
> 3. The RS introspects the access token and learns the EC public key
> associated with the access token. As there is no DPoP proof with the acce=
ss
> token, the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as the
> confirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated with
> this access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and
> base64url-encodes it. It uses this as a challenge to the client by sendin=
g
> back a 401 response with WWW-Authenticate: DPoP <encoded-epk>
>
> 4. The client decodes the epk challenge and performs an ECDH key agreemen=
t
> between its private key and the challenge epk as per the method described
> for the existing JWA ECDH-ES encryption algorithm. Rather than deriving a=
n
> AES key however, it derives a HMAC key for HS256. The "apu" value is set =
to
> the access token (string value as ASCII bytes) and the "apv" value is set
> to the hostname of the RS (e.g. "api.example.com"). This ensures that the
> derived key is cryptographically bound to the context in which it is used=
.
>
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the
> one in the current draft, but signed using the HS256 key. If a "kid" fiel=
d
> was present in the challenge JWK sent by the RS then the same value MUST =
be
> used in the "kid" header of this discharge JWT. It retries its original
> request sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
>
> 6. The RS uses its stored ephemeral private key to derive the same HMAC
> key and verify the DPoP discharge JWT. If it validates and all fields are
> correct then the request is allowed.
>
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the challenge
> JWK, the RS can preemptively carry out the ECDH key agreement immediately
> and generate the derived HMAC key. The RS can then encrypt this derived k=
ey
> using a local authenticated encryption key (e.g. AES-GCM) and use that
> encrypted value as the "kid" value in the challenge (perhaps along with
> some context or an expiry time). That way the RS only needs to decrypt th=
is
> kid value rather than performing the ECDH key agreement on every request.
> This also avoids the need for the RS to store any per-client state locall=
y.
>
> The challenge-response nature of the scheme prevents traditional replay
> attacks in the case where a DPoP discharge JWT is accidentally leaked
> through server logs or some other flaw, without needing to store nonces o=
n
> the server. Using the RS's hostname in the key derivation process prevent=
s
> mitm attacks in a similar way to how FIDO/WebAuthn prevents this. Most
> importantly, once a HS256 key has been derived between a client and RS th=
ey
> can reuse that key for multiple requests, reducing the overhead of the EC=
DH
> key agreement step. Either side can decide as a matter of policy how long
> to let this occur and when to trigger a fresh challenge-response.
>
> Because this fits within the standard HTTP authentication framework, it
> also requires no additional CORS configuration and is relatively easy to
> plug in to existing HTTP client libraries.
>
> The main downside of this approach to me is the fact that you can't simpl=
y
> reuse an existing JWT library to implement it, and so it will take time f=
or
> client libs to develop. (Although I think this might be achievable now wi=
th
> existing *COSE* libraries). This would increase the risk of people
> hand-rolling solutions, rather than using well-tested libraries. On the
> other hand, it uses fairly widely supported primitives so e.g. an
> implementation using WebCrypto is probably only a few dozen lines of code=
.
>
> -- Neil
>
>
> On 31 Oct 2019, at 19:20, Brian Campbell <
> bcampbell=3D40pingidentity.com@dmarc.ietf.org> wrote:
>
> Hello WG,
>
> Just a quick note to let folks know that -03 of the DPoP draft was
> published earlier today. The usual various document links are in the
> forwarded message below and the relevant snippet from the doc history wit=
h
> a summary of the changes is included here for convenience.
>
> Hopefully folks will have time to read the (relativity) short document
> before the meeting(s) in Singapore where (spoiler alert) I plan to ask th=
at
> the WG consider adoption of the draft.
>
> Thanks,
>
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
>
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <
> mbj@microsoft.com>, John Bradley <ve7jtb@ve7jtb.com <ve7jtb@ve7jtb..com>>=
,
> Brian Campbell <bcampbell@pingidentity.com>, David Waite <
> david@alkaline-solutions.com>, Daniel Fett <mail@danielfett.de>
>
>
>
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the
> Application Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:
> https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:
> https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop=
-03
>
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.*_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000ca41090597ae3927
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Thu, Nov 14, 2019 at 7:20 PM Neil =
Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">n=
eil.madden@forgerock.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex"><div>I can&#39;t attend Singapore either in person =
or remotely due to other commitments. I broadly support adoption of this dr=
aft, but I have some comments/suggestions about it.</div></blockquote><div>=
<br></div><div>Thanks Neil. And sorry to hear that you won&#39;t be in Sing=
apore. This kind of stuff is definitely more easily discussed in person (fo=
r me anyway). But I&#39;ll try and comment on your comments here as best I =
can. I also plan to also mention them in the Wednesday and/or Thursday pres=
entation. <br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddin=
g-left:1ex"><div><div>Section 2 lists the main objective as being to harden=
 against compromised/malicious AS or RS, which may attempt to replay captur=
ed tokens elsewhere. While this is a good idea, a casual reader might wonde=
r why a simple audience claim in the access token/introspection response is=
 not sufficient to prevent this. Because interactions between the client an=
d RS are supposed to be over TLS, is the intended threat model one in which=
 these protections have broken down? (&quot;counterfeit&quot; in the descri=
ption suggests this). Or is the motivation that clients want to get a singl=
e broad-scoped access token (for usability/performance reasons) and use it =
to access multiple resource servers without giving each of them the ability=
 to replay the token to the other servers? Or are we thinking of a phishing=
-type vulnerability were a general-purpose client might accidentally visit =
a malicious site which prompts for an access token that the client then bli=
ndly goes off and gets? (UMA?) It&#39;s not clear to me which of these scen=
arios is being considered, so it would be good to tighten up this section.<=
/div></div></blockquote><div><br></div><div>It is admittedly a bit loose an=
d I agree it&#39;d be good to tighten it up. But part of why it&#39;s loose=
 is that it tries to offer some protections for all those scenarios and mor=
e such as a general lost/stolen token. It&#39;s effectively trying to provi=
de as many of the same types of protections/assurances that you&#39;d get w=
ith TLS based PoP mechanisms (like OAuth MTLS or Token binding) to the exte=
nt that can be done at the HTTP application layer. Which can&#39;t realisti=
cally be exactly the same but can maybe be kinda close while actually being=
 accessible and implementable because it&#39;s all done at the application =
layer. There are trade-offs, of course, and the document writers have endea=
vored to find a good balance in the trade-off decisions we&#39;ve made. But=
 that doesn&#39;t mean they are necessarily the right decisions or are clos=
ed to discussion. To the casual reader I would say that it turns out that g=
etting an appropriate simple audience claim into an access token isn&#39;t =
nearly as simple as it might seem. And while it will prevent RS to RS repla=
y (as long as both RSs aren&#39;t legit audiences) it doesn&#39;t help with=
 preventing the use of tokens stolen or leaked by other means (including fo=
r refresh tokens issued to public clients). <br></div><div><br></div><div>=
=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>Ano=
ther potential motivation is for mobile apps. Some customers of ours would =
like to tie access/refresh tokens to private key material generated on a se=
cure element in the device, that can only be accessed after local biometric=
 authentication (e.g. TouchID/FaceID on iOS). I have suggested using mTLS c=
ert-bound tokens for this, but have heard some pushback due to the difficul=
ty of configuring support for client certs across diverse infrastructure. A=
 simple JWT-based solution like DPoP could fill this need.</div></div></blo=
ckquote><div><br></div><div>It&#39;s maybe not stated in the draft but this=
 kind of thing is among the objectives (in my mind anyway). <br></div><div>=
<br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><div><div>My main concerns with the draft though are about efficiency and=
 scalability of the proposed approach:</div><div><br></div><div>1. The requ=
irement to use public key signatures, along with the anti-replay nonce, mea=
ns that the RS is required to perform an expensive signature verification c=
heck on every request. That is not going to scale up well. While there are =
more efficient schemes like Ed25519 now, these are still typically an order=
 of magnitude slower than HMAC and the latency and CPU overhead is likely t=
o be a non-starter for many APIs (especially when you&#39;re billed by CPU =
usage). Public key signatures are also notoriously fragile (see e.g. the hi=
story of nonce reuse/leakage vulnerabilities in ECDSA or=C2=A0</div></div><=
/blockquote><div><br></div><div>Yes, asymmetric is more processing intensiv=
e than symmetric. But if you take away the distributed replay check (see ne=
xt response), it will scale out just fine. I&#39;m not so sure latency is a=
 real issue here - while these operations are an order of magnitude slower =
we&#39;re still talking about times that are not perceptible to a human. CP=
U usage/cost is a part of a trade-off for the simplicity afforded by public=
/private keys.=C2=A0 And it is significantly simpler. The design you sketch=
ed out is admittedly quite clever but it&#39;s not even in the same ballpar=
k with respect to complexity. And, as you pointed out, the other suggestion=
 around symmetric keys has rather different security properties while still=
 adding complexity. Adding symmetric key support  isn&#39;t something that =
can just be added on easily. <br></div><div><br></div><div>=C2=A0</div><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
:1px solid rgb(204,204,204);padding-left:1ex"><div><div><br></div><div>2. T=
he advice for the RS to store a set of previously used nonces to prevent re=
play will also hamper scalability, especially in large deployments where su=
ch state would need to be replicated to all servers (or use sticky load bal=
ancing, which comes with its own problems). This violates the statelessness=
 of HTTP, and it also potentially breaks idempotency of operations: Think o=
f the case where the JWT validation and replay protection is done at an API=
 gateway but then the call to the backend API server fails for a transient =
reason. The client (or a proxy/library) cannot simply replay the (idempoten=
t) request in this case because it will be rejected by the gateway. It must=
 instead recreate the DPoP JWT, incurring additional overheads.</div></div>=
</blockquote><div><br></div><div>The actual value of replay checking on jti=
 is somewhat questionable. The DPoP JWT only transits between client and se=
rver so a TLS MITM is likely needed to steal a DPoP JWT. But we are assumin=
g TLS works here. And an active MITM could thwart this check by just being =
first to present DPoP JWT. I think the jti check made its way into the draf=
t mostly because it seemed like something was needed to try and bring it cl=
oser to the TLS PoP models. Being aware of the scalability concerns, I did =
endeavor to write the text in such a way so as to leave some wiggle room in=
 implementations/deployments with text like &#39;&quot;jti&quot; SHOULD be =
used by the server for replay detection and prevention` and [ensure that] &=
#39;within a reasonable consideration of accuracy and resource utilization,=
 a JWT with the same &quot;jti&quot; value has not been received previously=
&#39;. The idea being that using something eventually consistent or even lo=
cal only to the runtime instance would be permissible. Perhaps that allowan=
ce and the rational could be made more clear? Or would you suggest to do aw=
ay with the jti replay stuff al? Or something else? <br></div><div><br></di=
v><div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px =
0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><di=
v><br></div><div>3. Minor: The use of a custom header for communicating the=
 DPoP proof will require additional CORS configuration on top of that alrea=
dy done for the Authorization header, and so adds a small amount of additio=
nal friction for adoption. Given that CORS configuration changes often requ=
ire approval by a security team, this may make more of an impact than you&#=
39;d expect.</div></div></blockquote><div><br></div><div>Feels really minor=
. I mean, we could try to roll everything up under one header. But it does =
seem unwarranted and would complicate things - at least in the model we&#39=
;ve got now where the proof is sent the same way ono all types of requests.=
 <br></div><div>=C2=A0</div><div><br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex"><div><div>It&#39;s also not clear to me exactly what thre=
at the anti-replay nonce is protecting against. It does nothing against the=
 replay scenario discussed in section 2, as I understand it - which really =
seems to be more of a MitM scenario. Given that the connection between the =
client and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated give=
n the obvious costs of implementing it.</div><div><br></div><div>I have a t=
entative suggestion for an alternative design which avoids these problems, =
but at a cost of potentially more complexity elsewhere. I&#39;ll summarise =
it here for consideration:</div><div><br></div><div>1. The client obtains a=
n access token in the normal way. When calling the token endpoint it provid=
es an EC/okp public key as the confirmation key to be associated with the a=
ccess/refresh tokens.</div><div><br></div><div>2. The first time the client=
 calls an RS it passes its access token in the Authorization: Bearer header=
 as normal. (If the RS doesn&#39;t support DPoP then this would just succee=
d and no further action is required by the client - allowing clients to opp=
ortunistically ask for DPoP without needing a priori knowledge of RS capabi=
lities).</div><div><br></div><div>3. The RS introspects the access token an=
d learns the EC public key associated with the access token. As there is no=
 DPoP proof with the access token, the RS will generate a challenge in the =
following way:</div><div>=C2=A0 =C2=A0 o The RS generates an ephemeral EC k=
ey pair for the same curve as the confirmation key (e.g. P-256 or X25519).<=
/div><div>=C2=A0 =C2=A0 o The RS stores the ephemeral private key somewhere=
, associated with this access token (see below for a scalable implementatio=
n choice)</div><div>=C2=A0 =C2=A0 o The RS encodes the ephemeral public key=
 into a JWK (epk) and base64url-encodes it. It uses this as a challenge to =
the client by sending back a 401 response with WWW-Authenticate: DPoP &lt;e=
ncoded-epk&gt;</div><div><br></div><div>4. The client decodes the epk chall=
enge and performs an ECDH key agreement between its private key and the cha=
llenge epk as per the method described for the existing JWA ECDH-ES encrypt=
ion algorithm. Rather than deriving an AES key however, it derives a HMAC k=
ey for HS256. The &quot;apu&quot; value is set to the access token (string =
value as ASCII bytes) and the &quot;apv&quot; value is set to the hostname =
of the RS (e.g. &quot;<a href=3D"http://api.example.com" target=3D"_blank">=
api.example.com</a>&quot;). This ensures that the derived key is cryptograp=
hically bound to the context in which it is used.</div><div><br></div><div>=
5. The client uses the HMAC key to create a DPoP proof JWT much like the on=
e in the current draft, but signed using the HS256 key. If a &quot;kid&quot=
; field was present in the challenge JWK sent by the RS then the same value=
 MUST be used in the &quot;kid&quot; header of this discharge JWT. It retri=
es its original request sending Authorization: DPoP &lt;hmac-jwt&gt; at=3D&=
lt;access_token&gt;.</div><div><br></div><div>6. The RS uses its stored eph=
emeral private key to derive the same HMAC key and verify the DPoP discharg=
e JWT. If it validates and all fields are correct then the request is allow=
ed.</div><div><br></div><div>Efficient implementation trick:</div><div>Beca=
use the client is required to copy and &quot;kid&quot; value from the chall=
enge JWK, the RS can preemptively carry out the ECDH key agreement immediat=
ely and generate the derived HMAC key. The RS can then encrypt this derived=
 key using a local authenticated encryption key (e.g. AES-GCM) and use that=
 encrypted value as the &quot;kid&quot; value in the challenge (perhaps alo=
ng with some context or an expiry time). That way the RS only needs to decr=
ypt this kid value rather than performing the ECDH key agreement on every r=
equest. This also avoids the need for the RS to store any per-client state =
locally.</div><div><br></div><div>The challenge-response nature of the sche=
me prevents traditional replay attacks in the case where a DPoP discharge J=
WT is accidentally leaked through server logs or some other flaw, without n=
eeding to store nonces on the server. Using the RS&#39;s hostname in the ke=
y derivation process prevents mitm attacks in a similar way to how FIDO/Web=
Authn prevents this. Most importantly, once a HS256 key has been derived be=
tween a client and RS they can reuse that key for multiple requests, reduci=
ng the overhead of the ECDH key agreement step. Either side can decide as a=
 matter of policy how long to let this occur and when to trigger a fresh ch=
allenge-response.</div><div><br></div><div>Because this fits within the sta=
ndard HTTP authentication framework, it also requires no additional CORS co=
nfiguration and is relatively easy to plug in to existing HTTP client libra=
ries.</div><div><br></div><div>The main downside of this approach to me is =
the fact that you can&#39;t simply reuse an existing JWT library to impleme=
nt it, and so it will take time for client libs to develop. (Although I thi=
nk this might be achievable now with existing *COSE* libraries). This would=
 increase the risk of people hand-rolling solutions, rather than using well=
-tested libraries. On the other hand, it uses fairly widely supported primi=
tives so e.g. an implementation using WebCrypto is probably only a few doze=
n lines of code.</div><div><br></div><div>-- Neil</div><div><div><br>
<div><br><blockquote type=3D"cite"><div>On 31 Oct 2019, at 19:20, Brian Cam=
pbell &lt;<a href=3D"mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org" =
target=3D"_blank">bcampbell=3D40pingidentity.com@dmarc.ietf.org</a>&gt; wro=
te:</div><br><div><div dir=3D"ltr"><div>Hello WG, <br></div><div><br></div>=
<div>Just a quick note to let folks know that -03 of the DPoP draft was pub=
lished earlier today. The usual various document links are in the forwarded=
 message below and the relevant snippet from the doc history with a summary=
 of the changes is included here for convenience. <br></div><div><br></div>=
<div>Hopefully folks will have time to read the (relativity) short document=
 before the meeting(s) in Singapore where (spoiler alert) I plan to ask tha=
t the WG consider adoption of the draft. <br></div><div><br></div><div>Than=
ks,</div><div><br>=C2=A0-03<br>=C2=A0 =C2=A0o =C2=A0rework the text around =
uniqueness requirements on the jti claim in<br>=C2=A0 =C2=A0 =C2=A0 the DPo=
P proof JWT<br>=C2=A0 =C2=A0o =C2=A0make tokens a bit smaller by using &quo=
t;htm&quot;, &quot;htu&quot;, and &quot;jkt&quot; rather<br>=C2=A0 =C2=A0 =
=C2=A0 than &quot;http_method&quot;, &quot;http_uri&quot;, and &quot;jkt#S2=
56&quot; respectively<br>=C2=A0 =C2=A0o =C2=A0more explicit recommendation =
to use mTLS if that is available<br>=C2=A0 =C2=A0o =C2=A0added David Waite =
as co-author<br>=C2=A0 =C2=A0o =C2=A0editorial updates</div><div><div><br><=
div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">---------- =
Forwarded message ---------<br>From: <span dir=3D"auto">&lt;<a href=3D"mail=
to:internet-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf.org</a>=
&gt;</span><br>Date: Thu, Oct 31, 2019 at 11:53 AM<br>Subject: New Version =
Notification for draft-fett-oauth-dpop-03.txt<br>To: Torsten Lodderstedt &l=
t;<a href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodd=
erstedt.net</a>&gt;, Michael Jones &lt;<a href=3D"mailto:mbj@microsoft.com"=
 target=3D"_blank">mbj@microsoft.com</a>&gt;, John Bradley &lt;<a href=3D"m=
ailto:ve7jtb@ve7jtb..com" target=3D"_blank">ve7jtb@ve7jtb.com</a>&gt;, Bria=
n Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"_bla=
nk">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a href=3D"mailto:d=
avid@alkaline-solutions.com" target=3D"_blank">david@alkaline-solutions.com=
</a>&gt;, Daniel Fett &lt;<a href=3D"mailto:mail@danielfett.de" target=3D"_=
blank">mail@danielfett.de</a>&gt;<br></div><br><br><br>
A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
has been successfully submitted by Brian Campbell and posted to the<br>
IETF repository.<br>
<br>
Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-fett-oauth-dpop<br>
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A003<br>
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 OAuth 2.0 Demonstration of Proof-o=
f-Possession at the Application Layer (DPoP)<br>
Document date:=C2=A0 2019-10-30<br>
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 15<br>
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.ietf.o=
rg/internet-drafts/draft-fett-oauth-dpop-03.txt" rel=3D"noreferrer" target=
=3D"_blank">https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.t=
xt</a><br>
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.iet=
f.org/doc/draft-fett-oauth-dpop/" rel=3D"noreferrer" target=3D"_blank">http=
s://datatracker.ietf.org/doc/draft-fett-oauth-dpop/</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/=
draft-fett-oauth-dpop-03" rel=3D"noreferrer" target=3D"_blank">https://tool=
s.ietf.org/html/draft-fett-oauth-dpop-03</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.ietf.org=
/doc/html/draft-fett-oauth-dpop" rel=3D"noreferrer" target=3D"_blank">https=
://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop</a><br>
Diff:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://www.ietf.o=
rg/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" rel=3D"noreferrer" target=3D"_b=
lank">https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a><br>
<br>
Abstract:<br>
=C2=A0 =C2=A0This document describes a mechanism for sender-constraining OA=
uth 2.0<br>
=C2=A0 =C2=A0tokens via a proof-of-possession mechanism on the application =
level.<br>
=C2=A0 =C2=A0This mechanism allows for the detection of replay attacks with=
 access<br>
=C2=A0 =C2=A0and refresh tokens.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org/" rel=3D"noreferrer" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div></div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor non=
e 0px;vertical-align:baseline;background:rgb(255,255,255) none repeat scrol=
l 0% 0%;font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,=
&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Ne=
ue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><span style=3D"margin:0px;pa=
dding:0px;border:0px none;outline:currentcolor none 0px;vertical-align:base=
line;background:transparent none repeat scroll 0% 0%;font-family:proxima-no=
va-zendesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,=
Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-s=
erif;font-weight:600"><font size=3D"2">CONFIDENTIALITY NOTICE: This email m=
ay contain confidential and privileged material for the sole use of the int=
ended recipient(s). Any review, use, distribution or disclosure by others i=
s strictly prohibited..=C2=A0 If you have received this communication in er=
ror, please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank you.</font></span></i>__=
_____________________________________________<br>OAuth mailing list<br><a h=
ref=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br><a hr=
ef=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https:=
//www.ietf.org/mailman/listinfo/oauth</a><br></div></blockquote></div><br><=
/div></div></div></blockquote></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000ca41090597ae3927--


From nobody Tue Nov 19 00:33:54 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D19F012089D for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 00:33:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1WJgxCZglcSh for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 00:33:46 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BE9212088E for <oauth@ietf.org>; Tue, 19 Nov 2019 00:33:46 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id 3E18726281; Tue, 19 Nov 2019 08:33:43 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574152423; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:in-reply-to: references; bh=RxdOojcvnrNck9dmZkOyTF/K6HxLI2vRqWdvwyl2INk=; b=RfK2m4zq5yRHRn9g5dzhyrPC9rN5CkzYolHNngsgTyPCRm2rQcT9/op7EYy4/czblFIEch w17T8rGTXoKrP+TsVx6Ev//0NqzLwqk/2wzUXHJBdv+bE5bwOB/fJd9ulH+Zn4WIlYb+CM xISoaleyPV+ZrqSI9Pi9E70r+SKRGhE=
Date: Tue, 19 Nov 2019 09:33:43 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----NF88ON5WJK4IGG2VQFLX9G6JQLNL6O"
Content-Transfer-Encoding: 7bit
To: oauth@ietf.org
From: Daniel Fett <fett@danielfett.de>
Message-ID: <496F05B4-5F2B-4D0C-9222-0451901B6951@danielfett.de>
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574152423; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:in-reply-to: references; bh=RxdOojcvnrNck9dmZkOyTF/K6HxLI2vRqWdvwyl2INk=; b=ctxi9EL0F5JQ6Z8ONM70Uufsxhqa9g4JkxHUYymoWFLaqQSw8FQqXfUzpHHtJuLWvGgWRn oHPblWmkDGiqtqiyyU2hmsFZinmXOwjB8M5FHRIiH4QN/HlOVxDbuNQknhyEQenvhb1Eh9 sUHNpq9fz8So4ts4urXWwkSncUop+VI=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574152423; a=rsa-sha256; cv=none; b=ArNZk1rknnsqqWpaGQEt6tXZfYUAkoe+KfFyP844vyMEYXeScfJ65ZhSs4Y8AIxEI88Sw8bRpy9xsFvr/Rx4kkakinossZso54J3vW3ZjTZ8osJPmwrXyfOz8q9Zyx5Dp3PrhlCQQqWtFnntU2noVLhpa25sh4e9DFjgFMhdNFc=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: ++
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lZqO9fymnEs_WaluPSyfI6tO1ho>
Subject: [OAUTH-WG] =?utf-8?q?OAuth_Security_Workshop_2020_=E2=80=94_Tron?= =?utf-8?b?ZGhlaW0g4oCUIEp1bHkgMjLigJMyNCwgMjAyMA==?=
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 08:33:52 -0000

------NF88ON5WJK4IGG2VQFLX9G6JQLNL6O
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Dear OAuthians,

The fifth edition of the annual OAuth Security Workshop will take place on=
 July 22=E2=80=9324, 2020 in Trondheim, Norway=2E Registration, Call for Se=
ssions, and hotel booking are now open=2E

The aim of the OAuth Security Workshop (OSW) is to improve the security of=
 OAuth and related Internet protocols by a direct exchange between academic=
 researchers, IETF OAuth Working Group members and implementors=2E=20

The OAuth Security Workshop runs over three days =E2=80=94 enough time for=
 in-depth discussions and break-away sessions=2E Although the main focus is=
 security, there is room for other related topics=2E=20

OSW 2020 will take place at the Scandic Nidelven Hotel in the beautiful ci=
ty of Trondheim=2E Main organizer is Steinar of udelt=2Eno =E2=80=94 thanks=
 for your work!

Please find all information at https://osw2020=2Ecom/=20
If you have any questions, please contact me or Steinar=2E

Important Dates

April 19
2020

Submissions deadline

The deadline for submitting session/tutorial for the workshop=2E=20

May 3
2020

Author Notification

The authors of the submissions will be notified=20

June 19
2020

Earlybird ends

The last chance to get discounted tickets=20

June 21=20
2020

Hotel

Rooms are blocked at Scandic Nidelven and Scandic Solsiden until this date=
=2E

July 19=20
2020

Registration

Registration deadline=2E =20


- Daniel
--=20
Diese Nachricht wurde von meinem Android-Ger=C3=A4t mit K-9 Mail gesendet=
=2E
------NF88ON5WJK4IGG2VQFLX9G6JQLNL6O
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Dear OAuthians,<br><br>The fifth edition of the annual OAuth Security Works=
hop will take place on July 22=E2=80=9324, 2020 in Trondheim, Norway=2E Reg=
istration, Call for Sessions, and hotel booking are now open=2E<br><br>The =
aim of the OAuth Security Workshop (OSW) is to improve the security of OAut=
h and related Internet protocols by a direct exchange between academic rese=
archers, IETF OAuth Working Group members and implementors=2E <br><br>The O=
Auth Security Workshop runs over three days =E2=80=94 enough time for in-de=
pth discussions and break-away sessions=2E Although the main focus is secur=
ity, there is room for other related topics=2E <br><br>OSW 2020 will take p=
lace at the Scandic Nidelven Hotel in the beautiful city of Trondheim=2E Ma=
in organizer is Steinar of udelt=2Eno =E2=80=94 thanks for your work!<br><b=
r>Please find all information at <a href=3D"https://osw2020=2Ecom/">https:/=
/osw2020=2Ecom/</a> <br>If you have any questions, please contact me or Ste=
inar=2E<br><br>Important Dates<br><br>April 19<br>2020<br><br>Submissions d=
eadline<br><br>The deadline for submitting session/tutorial for the worksho=
p=2E <br><br>May 3<br>2020<br><br>Author Notification<br><br>The authors of=
 the submissions will be notified <br><br>June 19<br>2020<br><br>Earlybird =
ends<br><br>The last chance to get discounted tickets <br><br>June 21 <br>2=
020<br><br>Hotel<br><br>Rooms are blocked at Scandic Nidelven and Scandic S=
olsiden until this date=2E<br><br>July 19 <br>2020<br><br>Registration<br><=
br>Registration deadline=2E  <br><br><br>- Daniel<br>-- <br>Diese Nachricht=
 wurde von meinem Android-Ger=C3=A4t mit K-9 Mail gesendet=2E
------NF88ON5WJK4IGG2VQFLX9G6JQLNL6O--


From nobody Tue Nov 19 01:11:15 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33317120B6E for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 01:11:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2263unmTHNrF for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 01:11:00 -0800 (PST)
Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D03A8120B4D for <oauth@ietf.org>; Tue, 19 Nov 2019 01:10:59 -0800 (PST)
Received: by mail-qv1-xf2e.google.com with SMTP id s18so7806538qvr.4 for <oauth@ietf.org>; Tue, 19 Nov 2019 01:10:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Bx2IOE3QYZeKiVNMaW5ee3yFs17Q55vuTVBPeDo4E1s=; b=Gp0Nc/fvmRXwIQW3wQKgSZMfZ2QtVedFNzaO+nONeWY7PSHk5zpQzcwQQnGvyBCt97 ZwzEnyn3bkwSRAIKtLLQCgykB+sblmruMHHcSoQ9zpYZkd+uxM0UeAdRDI9jZxoJHF7/ rJtQkfftf34Bi1gHZXeFfErT7gOjI4s54G1q233pfA3QJjcdyRXTxgNTFili8j/UVW6F r0vQgbJfFlCUb9o2sAxK3Y1HIQaA1D7PxFZNwjAUb+UBEwIDAtwlJ/vgUhw77lgpRjXa +oE50K/10zHLklS39n0b7mWvCO1n1Vi4Lty/FBFSvC856Jla1+qPlIg3hLhY0mXzI7Oz YVJw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Bx2IOE3QYZeKiVNMaW5ee3yFs17Q55vuTVBPeDo4E1s=; b=BPEeO3v4F+dHlF5rw4f52+WGFgOjkcCqjS5WiNu4Qaz8rpxG0ROwgEAB2u1VCzzN7e oM30xIcS5jT0JDLzQXTvcLe8Nn18L+0rbNGZhFQkSb6kZgA6VIHoKJYNFJ9T+MNZlr2h Wp3NLW7ka7RNF5znK6ehmSsQ3siKaDOYUdTUc4wOdf3JZixl37ObNc+LDUarzb4nyVcs Se7mrozZW/OJPaajdRqLL6bQTeem6cycQtDntcxQ8Jljvn0LzoGw5XN6iYWl+unqfa7Q knD760ZVu1l2og/Ppd0mDfUa6ala3yX0OMR46nNnVSPVdmgqJYW8gTCxfJnEA/ho7Dmx yzAA==
X-Gm-Message-State: APjAAAVTpEWOxn1OnpcE3qHNlb+wA6KYirs8afFGnDsBCm2LrgWrbmhO Y/lrVmhjuTY3TgZMgyq+K6QAdjy+m+MRrw71IogBlCkqMCc=
X-Google-Smtp-Source: APXvYqx8aJDiA+MgRXRIRmYcjCZIf2Rm85xLIAvL7H37rMGKe+E4dPCs2rH89pDrTME1a31ppmtXCzqVE7ejrn4hADI=
X-Received: by 2002:a05:6214:22a:: with SMTP id j10mr2766267qvt.154.1574154658843;  Tue, 19 Nov 2019 01:10:58 -0800 (PST)
MIME-Version: 1.0
References: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com> <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net>
In-Reply-To: <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net>
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Tue, 19 Nov 2019 17:10:48 +0800
Message-ID: <CA+iA6ugWRAQYiMVuT2euwKgosy46FoTu_Oh0v-N_1k1arf16CQ@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000004342ef0597af719e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/NimqGAa3g5A-HQhr0lW-xWK8EKU>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 09:11:12 -0000

--0000000000004342ef0597af719e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt <
torsten@lodderstedt.net> wrote:

> Hi Hans,
>
> > On 18. Nov 2019, at 04:11, Hans Zandbelt <hans.zandbelt@zmartzone.eu>
> wrote:
> >
> > Hi,
> >
> > Please find my feedback from page 21 onwards below.
> >
> > Hans.
> >
> > Overall I would argue there's room for a very concise guidance section
> that says: do this, don't do that, without explanation, just as a referen=
ce
> for developers; the current text provides in depth analysis but that is
> perhaps not suitable for developers who just want to know what to do (or
> not to do) and don't really care about the background/reasoning
>
> While section 4 gives the raw security threat analysis, we tried to
> summarise the actionable guidance in section 3. What do you miss there?
>

I'd rather see it even shorter and more concise, but I guess you're right,
it is there


> >
> > P21
> > first bullet
> > "the client has bound this data to this particular instance." ->
> particular instance of what?
>
> This bullet refers to the note above.
>
> "Note: this check could also detect attempts to inject a code which
>    had been obtained from another instance of the same client on another
>    device, if certain conditions are fulfilled:"
>

ok, I see


> >
> > 3rd paragraph:
> > "call to the tokens endpoint." -> "call to the token endpoint."
>
> Fixed
>
> >
> > last paragraph could forward point to the next section by adding
> something like
> > "using one of the mechanisms described in the next section."
>
> Incorporated
>
> >
> > P22
> > 3rd paragraph:
> > is the token binding guidance still accurate? it seems to be
> overestimating the adoption
>
> You mean this statement?
>
> "Token binding is
>       promising as a secure and convenient mechanism (due to its browser
>       integration).  As a challenge, it requires broad browser support
>       and use with native apps is still under discussion.=E2=80=9D
>

yeah, but after re-reading I guess this actually spells out the adoption
conditions, so it is fine

Hans.


>
> Thanks,
> Torsten.
>
> >
> > --
> > hans.zandbelt@zmartzone.eu
> > ZmartZone IAM - www.zmartzone.eu
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>
>

--=20
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--0000000000004342ef0597af719e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Tue, Nov 19, 2019 at 10:38 AM Tors=
ten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net">torsten@lodd=
erstedt.net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=
-left:1ex">Hi Hans, <br>
<br>
&gt; On 18. Nov 2019, at 04:11, Hans Zandbelt &lt;<a href=3D"mailto:hans.za=
ndbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&gt; w=
rote:<br>
&gt; <br>
&gt; Hi,<br>
&gt; <br>
&gt; Please find my feedback from page 21 onwards below.<br>
&gt; <br>
&gt; Hans.<br>
&gt; <br>
&gt; Overall I would argue there&#39;s room for a very concise guidance sec=
tion that says: do this, don&#39;t do that, without explanation, just as a =
reference for developers; the current text provides in depth analysis but t=
hat is perhaps not suitable for developers who just want to know what to do=
 (or not to do) and don&#39;t really care about the background/reasoning<br=
>
<br>
While section 4 gives the raw security threat analysis, we tried to summari=
se the actionable guidance in section 3. What do you miss there?<br></block=
quote><div><br></div><div>I&#39;d rather see it even shorter and more conci=
se, but I guess you&#39;re right, it is there</div><div>=C2=A0</div><blockq=
uote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1p=
x solid rgb(204,204,204);padding-left:1ex">&gt; <br>
&gt; P21<br>
&gt; first bullet<br>
&gt; &quot;the client has bound this data to this particular instance.&quot=
; -&gt; particular instance of what?<br>
<br>
This bullet refers to the note above. <br>
<br>
&quot;Note: this check could also detect attempts to inject a code which<br=
>
=C2=A0 =C2=A0had been obtained from another instance of the same client on =
another<br>
=C2=A0 =C2=A0device, if certain conditions are fulfilled:&quot;<br></blockq=
uote><div><br></div><div>ok, I see</div><div>=C2=A0</div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex">&gt; <br>
&gt; 3rd paragraph:<br>
&gt; &quot;call to the tokens endpoint.&quot; -&gt; &quot;call to the token=
 endpoint.&quot;<br>
<br>
Fixed <br>
<br>
&gt; <br>
&gt; last paragraph could forward point to the next section by adding somet=
hing like<br>
&gt; &quot;using one of the mechanisms described in the next section.&quot;=
<br>
<br>
Incorporated <br>
<br>
&gt; <br>
&gt; P22<br>
&gt; 3rd paragraph:<br>
&gt; is the token binding guidance still accurate? it seems to be overestim=
ating the adoption <br>
<br>
You mean this statement? <br>
<br>
&quot;Token binding is<br>
=C2=A0 =C2=A0 =C2=A0 promising as a secure and convenient mechanism (due to=
 its browser<br>
=C2=A0 =C2=A0 =C2=A0 integration).=C2=A0 As a challenge, it requires broad =
browser support<br>
=C2=A0 =C2=A0 =C2=A0 and use with native apps is still under discussion.=E2=
=80=9D<br></blockquote><div><br></div><div>yeah, but after re-reading I gue=
ss this actually spells out the adoption conditions, so it is fine</div><di=
v><br></div><div>Hans.</div><div>=C2=A0</div><blockquote class=3D"gmail_quo=
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex">
<br>
Thanks,<br>
Torsten. <br>
<br>
&gt; <br>
&gt; -- <br>
&gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">hans.z=
andbelt@zmartzone.eu</a><br>
&gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"noreferrer"=
 target=3D"_blank">www.zmartzone.eu</a><br>
&gt; _______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=
=3D"ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zma=
rtzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=
=3D"font-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" ta=
rget=3D"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></div=
></div>

--0000000000004342ef0597af719e--


From nobody Tue Nov 19 01:58:48 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD2CD12086A for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 01:58:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gRpQTz2kCfcv for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 01:58:41 -0800 (PST)
Received: from mail-pj1-x1034.google.com (mail-pj1-x1034.google.com [IPv6:2607:f8b0:4864:20::1034]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E257120BA7 for <oauth@ietf.org>; Tue, 19 Nov 2019 01:58:41 -0800 (PST)
Received: by mail-pj1-x1034.google.com with SMTP id bo14so2471086pjb.1 for <oauth@ietf.org>; Tue, 19 Nov 2019 01:58:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=JpQF98i74HFvWfj6Dk01+DRyzQU7I+DTcD0kHEwpggs=; b=cAbkPKYQx2S8kUNbuP4RKAo2wYFZCXig1DrYPprg/DsZgE/dGppAhcNz92yyltIRM1 Z9vj8vHETr4zblMXcSi4rwIhjbHf3EgnKTCwyVeEmXh0r+YB5H4aYNtT9LZ1KIeAJ2Vz Zg+waE7aOjGmAns3tvAoTCrIITor/ErMjJgG3S1ardr8s54Z2FchTUYUXPqPmb5fH5Pi 5WM0VK7Vb6IrboPcXIIjKGYpT2PbCkC0KexPDgUAv27lY3ogu+3u8azySai2ol0jvmTZ /1vqqfu5DDtTRCxIbBGt2EQHUF6362j0FkhPU3XMY3qsyE7IphXzqAhiHGPbze2HyxQS YY/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=JpQF98i74HFvWfj6Dk01+DRyzQU7I+DTcD0kHEwpggs=; b=muORZZ6fIbLVVDa3zkPLyetXQln17uXuUFbyqS5LZKEvo0H0dc0lQrwIC2KF1R838M r1I0cdeFa5v4aU9KDkjoa1a2SYyjf+3uTGAi2mTsrRQ7nWa3yQA4btZpV5DRK8GKN+RK P7RrfsodGP1q8z6MXuGNcpEntYnY3F2W9AR09yfiGQyBhPD0sSpNLuRTulzXJJtFrkWl Part9UExZ91RVRHF1wMICc9P14pnSuz3N3sW6EBmPibNlytq1l6IuoaJMgdB+OS0QHy+ /7qS/oL0CUl+GbK5tkt1hfSNp2apV0Fph/9PhjItCRhXOVh1ZpsO4AiTR/EbpUuvSo4U DzKg==
X-Gm-Message-State: APjAAAX5HxbMFzDuGjmxWYFWpTyTkGiQjA3U3qDqXuW9BJGeV1iYc6SQ uspWTTu3U7RUVdnuSvCaQhLxEc2cLnnGuIkN
X-Google-Smtp-Source: APXvYqwGDCIAyj3cG0/WpylHesW0BIsQ/EsZ9fL8vRH0s87nxEwi2IHxymMSpS8DtQyosSdJ+c1Cbg==
X-Received: by 2002:a17:902:ac98:: with SMTP id h24mr33109270plr.227.1574157520447;  Tue, 19 Nov 2019 01:58:40 -0800 (PST)
Received: from [192.168.20.19] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id i123sm30122866pfe.145.2019.11.19.01.58.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Nov 2019 01:58:39 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <1021C802-9AA1-40A6-B1ED-17649151070C@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_2B26D214-4D22-4009-B410-B8DD909FB541"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 19 Nov 2019 17:58:34 +0800
In-Reply-To: <CA+iA6ugWRAQYiMVuT2euwKgosy46FoTu_Oh0v-N_1k1arf16CQ@mail.gmail.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
References: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com> <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net> <CA+iA6ugWRAQYiMVuT2euwKgosy46FoTu_Oh0v-N_1k1arf16CQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/CnJ1GLN0m_31_MNtBqv3q2E955E>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 09:58:47 -0000

--Apple-Mail=_2B26D214-4D22-4009-B410-B8DD909FB541
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 19. Nov 2019, at 17:10, Hans Zandbelt <hans.zandbelt@zmartzone.eu> =
wrote:
>=20
>=20
>=20
> On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
> Hi Hans,=20
>=20
> > On 18. Nov 2019, at 04:11, Hans Zandbelt =
<hans.zandbelt@zmartzone.eu> wrote:
> >=20
> > Hi,
> >=20
> > Please find my feedback from page 21 onwards below.
> >=20
> > Hans.
> >=20
> > Overall I would argue there's room for a very concise guidance =
section that says: do this, don't do that, without explanation, just as =
a reference for developers; the current text provides in depth analysis =
but that is perhaps not suitable for developers who just want to know =
what to do (or not to do) and don't really care about the =
background/reasoning
>=20
> While section 4 gives the raw security threat analysis, we tried to =
summarise the actionable guidance in section 3. What do you miss there?
>=20
> I'd rather see it even shorter and more concise, but I guess you're =
right, it is there

Do you want to suggest some text?

> =20
> >=20
> > P21
> > first bullet
> > "the client has bound this data to this particular instance." -> =
particular instance of what?
>=20
> This bullet refers to the note above.=20
>=20
> "Note: this check could also detect attempts to inject a code which
>    had been obtained from another instance of the same client on =
another
>    device, if certain conditions are fulfilled:"
>=20
> ok, I see
> =20
> >=20
> > 3rd paragraph:
> > "call to the tokens endpoint." -> "call to the token endpoint."
>=20
> Fixed=20
>=20
> >=20
> > last paragraph could forward point to the next section by adding =
something like
> > "using one of the mechanisms described in the next section."
>=20
> Incorporated=20
>=20
> >=20
> > P22
> > 3rd paragraph:
> > is the token binding guidance still accurate? it seems to be =
overestimating the adoption=20
>=20
> You mean this statement?=20
>=20
> "Token binding is
>       promising as a secure and convenient mechanism (due to its =
browser
>       integration).  As a challenge, it requires broad browser support
>       and use with native apps is still under discussion.=E2=80=9D
>=20
> yeah, but after re-reading I guess this actually spells out the =
adoption conditions, so it is fine
>=20
> Hans.
> =20
>=20
> Thanks,
> Torsten.=20
>=20
> >=20
> > --=20
> > hans.zandbelt@zmartzone.eu
> > ZmartZone IAM - www.zmartzone.eu
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
>=20
> --=20
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu


--Apple-Mail=_2B26D214-4D22-4009-B410-B8DD909FB541
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_2B26D214-4D22-4009-B410-B8DD909FB541--


From nobody Tue Nov 19 02:07:08 2019
Return-Path: <hans.zandbelt@zmartzone.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A7991200D5 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:07:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zmartzone-eu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wc94T6ecI6Vu for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:06:59 -0800 (PST)
Received: from mail-qv1-xf2d.google.com (mail-qv1-xf2d.google.com [IPv6:2607:f8b0:4864:20::f2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81268120043 for <oauth@ietf.org>; Tue, 19 Nov 2019 02:06:59 -0800 (PST)
Received: by mail-qv1-xf2d.google.com with SMTP id d3so7834857qvs.11 for <oauth@ietf.org>; Tue, 19 Nov 2019 02:06:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zmartzone-eu.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=uSQx/6s4k4mp8N87Wi9nCsMTn+NRN+HycXuFh5JA2pE=; b=chvDRy5oiLBIgcfXy4ACga9x1fBkjIbXIHdf+oAjXBXXPZMz5abxVcTBHpP0tP1JGb rhIGYK4GmjcaCh2fFNws/ApFLPATFqQ78F/dDkGyv+Bgkj2LCfhXVt2GZhbTaUqSqbUe Z2Zd/JDGcOLi8t6eU0ifOJYuMNWTDtqWN4xffExNRfgcyiHxJY/G2/m1khpsVl6i/9Wr q19jq/KGOwGLJqeTC++0GxsNdRwrKP56nWU4jiIlkEML6w3CoRlk3gpcpttnQlrSGEoL W2rCgy5HWbduLrNBQQ541ogcSMqPDwZNMTxJAiFZqPzPQVgZ3ls/C6e48mesgPlut+NH YBEg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=uSQx/6s4k4mp8N87Wi9nCsMTn+NRN+HycXuFh5JA2pE=; b=qpj18j1O2i0S6N+l2r6Iwyv/jypMqvvfaevU5iGfM1RpZXXH+ubW0e4rckhYEtaVe7 mzT1G39wNS7kZQP+em+vU4OSDYcyIPtewYTRPWmwmBP636AB5rLTZm/bqNfyZw6rcCUx 4kbZDQ1s9tsXOFt2F7GQWao6JH/fAsomzhca04aU8gZW/AHMbxKEsjhi7NO26Y2i86tB fplYHW3chPzJica67s94c9I9dlYfD8iY0+YQxvVIplzs+GKnTTl67Av+4eAjz7cppSP1 3nkhwplhIT2z+s50hBakra4FcaTwcnfwBsc7WyCZwcLPBlPnDQ8gxPpd2q+GOSTGycYw zk/w==
X-Gm-Message-State: APjAAAXIwce6pN/oWuT6xPp6ECTmwSlXivd5ap/WIsaC2VfMQmG9lux/ 9V4ABIVWTOjmkselmAVAuuaJNkEdATzGqzbG/XPt3g==
X-Google-Smtp-Source: APXvYqzjjC1JrH5puxf0JJTega4ULhtJCkxObQeqDvB9/BQI3hK3cy13VuHUjDw91fJZYxIg39XZFmXjf1hjKigNSKY=
X-Received: by 2002:a05:6214:180c:: with SMTP id o12mr26591708qvw.88.1574158018068;  Tue, 19 Nov 2019 02:06:58 -0800 (PST)
MIME-Version: 1.0
References: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com> <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net> <CA+iA6ugWRAQYiMVuT2euwKgosy46FoTu_Oh0v-N_1k1arf16CQ@mail.gmail.com> <1021C802-9AA1-40A6-B1ED-17649151070C@lodderstedt.net>
In-Reply-To: <1021C802-9AA1-40A6-B1ED-17649151070C@lodderstedt.net>
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Tue, 19 Nov 2019 18:06:47 +0800
Message-ID: <CA+iA6uhdYVKpPw15G0ra=PvusrJ3d7btYM4VgHuco2=hv81fgw@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007cde9a0597b03944"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/amTviUPCXKJGb5TlFIHhNdpM2c0>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 10:07:06 -0000

--0000000000007cde9a0597b03944
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

How about:

- don't use the Implicit or Resource Owner Password Credentials  grant type=
s
- perform exact matching of redirect URIs and make then Client/AS specific
- use PKCE

Hans.

On Tue, Nov 19, 2019 at 5:58 PM Torsten Lodderstedt <torsten@lodderstedt.ne=
t>
wrote:

>
>
> > On 19. Nov 2019, at 17:10, Hans Zandbelt <hans.zandbelt@zmartzone.eu>
> wrote:
> >
> >
> >
> > On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt <
> torsten@lodderstedt.net> wrote:
> > Hi Hans,
> >
> > > On 18. Nov 2019, at 04:11, Hans Zandbelt <hans.zandbelt@zmartzone.eu>
> wrote:
> > >
> > > Hi,
> > >
> > > Please find my feedback from page 21 onwards below.
> > >
> > > Hans.
> > >
> > > Overall I would argue there's room for a very concise guidance sectio=
n
> that says: do this, don't do that, without explanation, just as a referen=
ce
> for developers; the current text provides in depth analysis but that is
> perhaps not suitable for developers who just want to know what to do (or
> not to do) and don't really care about the background/reasoning
> >
> > While section 4 gives the raw security threat analysis, we tried to
> summarise the actionable guidance in section 3. What do you miss there?
> >
> > I'd rather see it even shorter and more concise, but I guess you're
> right, it is there
>
> Do you want to suggest some text?
>
> >
> > >
> > > P21
> > > first bullet
> > > "the client has bound this data to this particular instance." ->
> particular instance of what?
> >
> > This bullet refers to the note above.
> >
> > "Note: this check could also detect attempts to inject a code which
> >    had been obtained from another instance of the same client on anothe=
r
> >    device, if certain conditions are fulfilled:"
> >
> > ok, I see
> >
> > >
> > > 3rd paragraph:
> > > "call to the tokens endpoint." -> "call to the token endpoint."
> >
> > Fixed
> >
> > >
> > > last paragraph could forward point to the next section by adding
> something like
> > > "using one of the mechanisms described in the next section."
> >
> > Incorporated
> >
> > >
> > > P22
> > > 3rd paragraph:
> > > is the token binding guidance still accurate? it seems to be
> overestimating the adoption
> >
> > You mean this statement?
> >
> > "Token binding is
> >       promising as a secure and convenient mechanism (due to its browse=
r
> >       integration).  As a challenge, it requires broad browser support
> >       and use with native apps is still under discussion.=E2=80=9D
> >
> > yeah, but after re-reading I guess this actually spells out the adoptio=
n
> conditions, so it is fine
> >
> > Hans.
> >
> >
> > Thanks,
> > Torsten.
> >
> > >
> > > --
> > > hans.zandbelt@zmartzone.eu
> > > ZmartZone IAM - www.zmartzone.eu
> > > _______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > > https://www.ietf.org/mailman/listinfo/oauth
> >
> >
> >
> > --
> > hans.zandbelt@zmartzone.eu
> > ZmartZone IAM - www.zmartzone.eu
>
>

--=20
hans.zandbelt@zmartzone.eu
ZmartZone IAM - www.zmartzone.eu

--0000000000007cde9a0597b03944
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>How about:</div><div><br></div>- don&#39;t use the Im=
plicit or Resource Owner Password Credentials=C2=A0 grant types<div><div>- =
perform exact matching of redirect URIs and make then Client/AS specific</d=
iv><div>- use PKCE</div><div><br></div></div><div>Hans.</div></div><br><div=
 class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Nov 19=
, 2019 at 5:58 PM Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodders=
tedt.net">torsten@lodderstedt.net</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><br>
<br>
&gt; On 19. Nov 2019, at 17:10, Hans Zandbelt &lt;<a href=3D"mailto:hans.za=
ndbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&gt; w=
rote:<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt &lt;<a href=3D"ma=
ilto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>=
&gt; wrote:<br>
&gt; Hi Hans, <br>
&gt; <br>
&gt; &gt; On 18. Nov 2019, at 04:11, Hans Zandbelt &lt;<a href=3D"mailto:ha=
ns.zandbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&=
gt; wrote:<br>
&gt; &gt; <br>
&gt; &gt; Hi,<br>
&gt; &gt; <br>
&gt; &gt; Please find my feedback from page 21 onwards below.<br>
&gt; &gt; <br>
&gt; &gt; Hans.<br>
&gt; &gt; <br>
&gt; &gt; Overall I would argue there&#39;s room for a very concise guidanc=
e section that says: do this, don&#39;t do that, without explanation, just =
as a reference for developers; the current text provides in depth analysis =
but that is perhaps not suitable for developers who just want to know what =
to do (or not to do) and don&#39;t really care about the background/reasoni=
ng<br>
&gt; <br>
&gt; While section 4 gives the raw security threat analysis, we tried to su=
mmarise the actionable guidance in section 3. What do you miss there?<br>
&gt; <br>
&gt; I&#39;d rather see it even shorter and more concise, but I guess you&#=
39;re right, it is there<br>
<br>
Do you want to suggest some text?<br>
<br>
&gt;=C2=A0 <br>
&gt; &gt; <br>
&gt; &gt; P21<br>
&gt; &gt; first bullet<br>
&gt; &gt; &quot;the client has bound this data to this particular instance.=
&quot; -&gt; particular instance of what?<br>
&gt; <br>
&gt; This bullet refers to the note above. <br>
&gt; <br>
&gt; &quot;Note: this check could also detect attempts to inject a code whi=
ch<br>
&gt;=C2=A0 =C2=A0 had been obtained from another instance of the same clien=
t on another<br>
&gt;=C2=A0 =C2=A0 device, if certain conditions are fulfilled:&quot;<br>
&gt; <br>
&gt; ok, I see<br>
&gt;=C2=A0 <br>
&gt; &gt; <br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; &quot;call to the tokens endpoint.&quot; -&gt; &quot;call to the =
token endpoint.&quot;<br>
&gt; <br>
&gt; Fixed <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; last paragraph could forward point to the next section by adding =
something like<br>
&gt; &gt; &quot;using one of the mechanisms described in the next section.&=
quot;<br>
&gt; <br>
&gt; Incorporated <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; P22<br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; is the token binding guidance still accurate? it seems to be over=
estimating the adoption <br>
&gt; <br>
&gt; You mean this statement? <br>
&gt; <br>
&gt; &quot;Token binding is<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0promising as a secure and convenient mechani=
sm (due to its browser<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0integration).=C2=A0 As a challenge, it requi=
res broad browser support<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0and use with native apps is still under disc=
ussion.=E2=80=9D<br>
&gt; <br>
&gt; yeah, but after re-reading I guess this actually spells out the adopti=
on conditions, so it is fine<br>
&gt; <br>
&gt; Hans.<br>
&gt;=C2=A0 <br>
&gt; <br>
&gt; Thanks,<br>
&gt; Torsten. <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; -- <br>
&gt; &gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">h=
ans.zandbelt@zmartzone.eu</a><br>
&gt; &gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"norefe=
rrer" target=3D"_blank">www.zmartzone.eu</a><br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"no=
referrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">hans.z=
andbelt@zmartzone.eu</a><br>
&gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"noreferrer"=
 target=3D"_blank">www.zmartzone.eu</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=
=3D"ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zma=
rtzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=
=3D"font-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" ta=
rget=3D"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></div=
>

--0000000000007cde9a0597b03944--


From nobody Tue Nov 19 02:18:44 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B12C11208D1 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:18:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H0uH2_WM1Kup for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:18:37 -0800 (PST)
Received: from mail-pg1-x532.google.com (mail-pg1-x532.google.com [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D2051208AB for <oauth@ietf.org>; Tue, 19 Nov 2019 02:18:37 -0800 (PST)
Received: by mail-pg1-x532.google.com with SMTP id r18so11107128pgu.13 for <oauth@ietf.org>; Tue, 19 Nov 2019 02:18:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=UGcrvpjfuOJyJpRaAelgu+c5wZv3JriYX6nR5xA0Jpw=; b=YZZqQNSHE61n8s1HK7Wlc4ukRZl8X6AKj8QbnDbTTBwzTg6ZFHR5Y81xAsbJpsI2lN NoxssnSCg2ajFmA8/7rNvMauCjFJ8hijAP0e9pmxO1N/zArVEX17gordaKt5Qht9QKy1 aUWhbk3eltpip1PcTYg5G2tncpji9S/Z8wFvydiYbIUWuW2y/iO5gzVbLeMAUwufBsM/ AYwuxIbB+YG2F6O6i16B8ADF2p7vLghWHCJcGOKM8xN82J2/78IlAcGlQpOzlfq5n7bN m/uLSPSP+UVwzZipR+fs5s5WC2Dmxw9gBuWwnJjgLlR9Fsm6aRsP8asD5BArptX7rD4i 1/Kg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=UGcrvpjfuOJyJpRaAelgu+c5wZv3JriYX6nR5xA0Jpw=; b=t1NcnXwuGwPsNNyzdXE+ksTVZEw98PEvHNuK3RusuopRMGbi/pPDQ3JaImfvAuSJ8c RL5qtoQa7koWOldw17e3COwdsAL5Y8YpicuhqIdIBrQ64UQXJ01cpcPYtNg7Kwq6UY0k g06wfhpCh3xHO3b4LBV7gp9lqJLYfNjc13SqOGaYW/Sfl1rEHUncOguYtMBlQBhHZBQG nXDrGPUYGNhv2V7Lix57j4uO3ISQZtB/e+N4VlsORWkCvIPohxpRn88v8Yen6mm5b+Z9 P+KuCtR1j84vxZIk35SfWqptcV3qsKGqc84fOgC979TXD/DM5bZMdJ56iw8dHiBzQ29J 5fJg==
X-Gm-Message-State: APjAAAX0DPe5AQDavAlq7iaIDn5rpO5bDPxSHsBMLxR2Vdoi5o9hQ6NS OsAkBCfSg3bje42FkZzArZl1zkic0c4Gl9gU
X-Google-Smtp-Source: APXvYqyqRvutXkKseAQhfjtX3Q6UQF106rvcxz5xFxKqYmkrMNDIssQP+z8UF5YWnCsoWFPEsTmy/A==
X-Received: by 2002:a63:1e1f:: with SMTP id e31mr4635841pge.303.1574158716636;  Tue, 19 Nov 2019 02:18:36 -0800 (PST)
Received: from [192.168.20.7] ([118.200.165.182]) by smtp.gmail.com with ESMTPSA id k24sm26474543pfk.63.2019.11.19.02.18.35 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 19 Nov 2019 02:18:35 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-9CEE768B-F0E6-4461-BEA9-7C72C557C078; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Tue, 19 Nov 2019 18:18:34 +0800
Message-Id: <68C13255-EB30-4B1B-A8BD-A3D993802450@lodderstedt.net>
References: <CA+iA6uhdYVKpPw15G0ra=PvusrJ3d7btYM4VgHuco2=hv81fgw@mail.gmail.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <CA+iA6uhdYVKpPw15G0ra=PvusrJ3d7btYM4VgHuco2=hv81fgw@mail.gmail.com>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/9JzuG-ugAacFxIXIyJL1hRmqp5M>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 10:18:43 -0000

--Apple-Mail-9CEE768B-F0E6-4461-BEA9-7C72C557C078
Content-Type: multipart/alternative;
	boundary=Apple-Mail-5746AB2D-935A-402A-BD1B-DD322993BD04
Content-Transfer-Encoding: 7bit


--Apple-Mail-5746AB2D-935A-402A-BD1B-DD322993BD04
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Oh, I see where you are heading. We potentially can cut some bells and whist=
les out of the current text.

> Am 19.11.2019 um 18:06 schrieb Hans Zandbelt <hans.zandbelt@zmartzone.eu>:=

>=20
> =EF=BB=BF
> How about:
>=20
> - don't use the Implicit or Resource Owner Password Credentials  grant typ=
es
> - perform exact matching of redirect URIs and make then Client/AS specific=

> - use PKCE
>=20
> Hans.
>=20
>> On Tue, Nov 19, 2019 at 5:58 PM Torsten Lodderstedt <torsten@lodderstedt.=
net> wrote:
>>=20
>>=20
>> > On 19. Nov 2019, at 17:10, Hans Zandbelt <hans.zandbelt@zmartzone.eu> w=
rote:
>> >=20
>> >=20
>> >=20
>> > On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt <torsten@lodderste=
dt.net> wrote:
>> > Hi Hans,=20
>> >=20
>> > > On 18. Nov 2019, at 04:11, Hans Zandbelt <hans.zandbelt@zmartzone.eu>=
 wrote:
>> > >=20
>> > > Hi,
>> > >=20
>> > > Please find my feedback from page 21 onwards below.
>> > >=20
>> > > Hans.
>> > >=20
>> > > Overall I would argue there's room for a very concise guidance sectio=
n that says: do this, don't do that, without explanation, just as a referenc=
e for developers; the current text provides in depth analysis but that is pe=
rhaps not suitable for developers who just want to know what to do (or not t=
o do) and don't really care about the background/reasoning
>> >=20
>> > While section 4 gives the raw security threat analysis, we tried to sum=
marise the actionable guidance in section 3. What do you miss there?
>> >=20
>> > I'd rather see it even shorter and more concise, but I guess you're rig=
ht, it is there
>>=20
>> Do you want to suggest some text?
>>=20
>> > =20
>> > >=20
>> > > P21
>> > > first bullet
>> > > "the client has bound this data to this particular instance." -> part=
icular instance of what?
>> >=20
>> > This bullet refers to the note above.=20
>> >=20
>> > "Note: this check could also detect attempts to inject a code which
>> >    had been obtained from another instance of the same client on anothe=
r
>> >    device, if certain conditions are fulfilled:"
>> >=20
>> > ok, I see
>> > =20
>> > >=20
>> > > 3rd paragraph:
>> > > "call to the tokens endpoint." -> "call to the token endpoint."
>> >=20
>> > Fixed=20
>> >=20
>> > >=20
>> > > last paragraph could forward point to the next section by adding some=
thing like
>> > > "using one of the mechanisms described in the next section."
>> >=20
>> > Incorporated=20
>> >=20
>> > >=20
>> > > P22
>> > > 3rd paragraph:
>> > > is the token binding guidance still accurate? it seems to be overesti=
mating the adoption=20
>> >=20
>> > You mean this statement?=20
>> >=20
>> > "Token binding is
>> >       promising as a secure and convenient mechanism (due to its browse=
r
>> >       integration).  As a challenge, it requires broad browser support
>> >       and use with native apps is still under discussion.=E2=80=9D
>> >=20
>> > yeah, but after re-reading I guess this actually spells out the adoptio=
n conditions, so it is fine
>> >=20
>> > Hans.
>> > =20
>> >=20
>> > Thanks,
>> > Torsten.=20
>> >=20
>> > >=20
>> > > --=20
>> > > hans.zandbelt@zmartzone.eu
>> > > ZmartZone IAM - www.zmartzone.eu
>> > > _______________________________________________
>> > > OAuth mailing list
>> > > OAuth@ietf.org
>> > > https://www.ietf.org/mailman/listinfo/oauth
>> >=20
>> >=20
>> >=20
>> > --=20
>> > hans.zandbelt@zmartzone.eu
>> > ZmartZone IAM - www.zmartzone.eu
>>=20
>=20
>=20
> --=20
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu

--Apple-Mail-5746AB2D-935A-402A-BD1B-DD322993BD04
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">Oh, I see where you are he=
ading. We potentially can cut some bells and whistles out of the current tex=
t.</div><div dir=3D"ltr"><br><blockquote type=3D"cite">Am 19.11.2019 um 18:0=
6 schrieb Hans Zandbelt &lt;hans.zandbelt@zmartzone.eu&gt;:<br><br></blockqu=
ote></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF<div dir=3D"lt=
r"><div>How about:</div><div><br></div>- don't use the Implicit or Resource O=
wner Password Credentials&nbsp; grant types<div><div>- perform exact matchin=
g of redirect URIs and make then Client/AS specific</div><div>- use PKCE</di=
v><div><br></div></div><div>Hans.</div></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Tue, Nov 19, 2019 at 5:58 PM Torste=
n Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net">torsten@lodders=
tedt.net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"=
margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left=
:1ex"><br>
<br>
&gt; On 19. Nov 2019, at 17:10, Hans Zandbelt &lt;<a href=3D"mailto:hans.zan=
dbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&gt; wro=
te:<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt &lt;<a href=3D"mai=
lto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>&g=
t; wrote:<br>
&gt; Hi Hans, <br>
&gt; <br>
&gt; &gt; On 18. Nov 2019, at 04:11, Hans Zandbelt &lt;<a href=3D"mailto:han=
s.zandbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&gt=
; wrote:<br>
&gt; &gt; <br>
&gt; &gt; Hi,<br>
&gt; &gt; <br>
&gt; &gt; Please find my feedback from page 21 onwards below.<br>
&gt; &gt; <br>
&gt; &gt; Hans.<br>
&gt; &gt; <br>
&gt; &gt; Overall I would argue there's room for a very concise guidance sec=
tion that says: do this, don't do that, without explanation, just as a refer=
ence for developers; the current text provides in depth analysis but that is=
 perhaps not suitable for developers who just want to know what to do (or no=
t to do) and don't really care about the background/reasoning<br>
&gt; <br>
&gt; While section 4 gives the raw security threat analysis, we tried to sum=
marise the actionable guidance in section 3. What do you miss there?<br>
&gt; <br>
&gt; I'd rather see it even shorter and more concise, but I guess you're rig=
ht, it is there<br>
<br>
Do you want to suggest some text?<br>
<br>
&gt;&nbsp; <br>
&gt; &gt; <br>
&gt; &gt; P21<br>
&gt; &gt; first bullet<br>
&gt; &gt; "the client has bound this data to this particular instance." -&gt=
; particular instance of what?<br>
&gt; <br>
&gt; This bullet refers to the note above. <br>
&gt; <br>
&gt; "Note: this check could also detect attempts to inject a code which<br>=

&gt;&nbsp; &nbsp; had been obtained from another instance of the same client=
 on another<br>
&gt;&nbsp; &nbsp; device, if certain conditions are fulfilled:"<br>
&gt; <br>
&gt; ok, I see<br>
&gt;&nbsp; <br>
&gt; &gt; <br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; "call to the tokens endpoint." -&gt; "call to the token endpoint."=
<br>
&gt; <br>
&gt; Fixed <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; last paragraph could forward point to the next section by adding s=
omething like<br>
&gt; &gt; "using one of the mechanisms described in the next section."<br>
&gt; <br>
&gt; Incorporated <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; P22<br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; is the token binding guidance still accurate? it seems to be overe=
stimating the adoption <br>
&gt; <br>
&gt; You mean this statement? <br>
&gt; <br>
&gt; "Token binding is<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp;promising as a secure and convenient mechanis=
m (due to its browser<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp;integration).&nbsp; As a challenge, it requir=
es broad browser support<br>
&gt;&nbsp; &nbsp; &nbsp; &nbsp;and use with native apps is still under discu=
ssion.=E2=80=9D<br>
&gt; <br>
&gt; yeah, but after re-reading I guess this actually spells out the adoptio=
n conditions, so it is fine<br>
&gt; <br>
&gt; Hans.<br>
&gt;&nbsp; <br>
&gt; <br>
&gt; Thanks,<br>
&gt; Torsten. <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; -- <br>
&gt; &gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">ha=
ns.zandbelt@zmartzone.eu</a><br>
&gt; &gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"norefer=
rer" target=3D"_blank">www.zmartzone.eu</a><br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org=
</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"nor=
eferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><b=
r>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">hans.za=
ndbelt@zmartzone.eu</a><br>
&gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"noreferrer" t=
arget=3D"_blank">www.zmartzone.eu</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr" c=
lass=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=3D"=
ltr"><div style=3D"font-size:small"><a href=3D"mailto:hans.zandbelt@zmartzon=
e.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a></div><div style=3D"fo=
nt-size:small">ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" target=3D=
"_blank">www.zmartzone.eu</a><br></div></div></div></div></div></div>
</div></blockquote></body></html>=

--Apple-Mail-5746AB2D-935A-402A-BD1B-DD322993BD04--

--Apple-Mail-9CEE768B-F0E6-4461-BEA9-7C72C557C078
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-9CEE768B-F0E6-4461-BEA9-7C72C557C078--


From nobody Tue Nov 19 02:22:23 2019
Return-Path: <robertotto@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C746A1208AB for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:22:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LWjC4JVEpHgt for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 02:22:16 -0800 (PST)
Received: from mail-pl1-x630.google.com (mail-pl1-x630.google.com [IPv6:2607:f8b0:4864:20::630]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B32A1200B9 for <oauth@ietf.org>; Tue, 19 Nov 2019 02:22:16 -0800 (PST)
Received: by mail-pl1-x630.google.com with SMTP id j12so11519660plt.9 for <oauth@ietf.org>; Tue, 19 Nov 2019 02:22:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=XBH22vwDleAeoyKVkxJw8r48NNXE1XbNWq7KqttyLZ4=; b=Uzs/KSHBdp2GPzoMLv/eB2F7I/nwyQfO3NWO0y3HozqN7x7l5joGBxl91KFRCVDk2c iwCLd5jvFIFPlL4dl+YGOZaVcmZs/OmL4J9kfyifg4S4gv4PbSXkA0h2h2qf60tnK6V/ ri3TA88F9gBPsjqLkpyhKGI7pDrcFb+10NnYUv4/5QyAAaXcyYTryz8wb+zZUDdWvV/g m1XHORLqsrDH0yaEupBdNtQgS8Yo5wfYes7FX3ib61FT2J9tkWyqjDB5NcG30c9cQuAi gO2fgoHRHI9FUUT0Ds6ckOkXEt2bV8L0gODVtCsRz18eaOvHlaqBfpCTSFYxXiyJbOBq 0EuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=XBH22vwDleAeoyKVkxJw8r48NNXE1XbNWq7KqttyLZ4=; b=BNXRIMTnbf86LDQM8vbnI/9QKJl2akeiFH04oGDoUMkzTv0OunUW69i0ij1SZ9/9v0 wPeYL9cOjcj5MjvoS9T4II5fMuFtTYEuWyF9gJeSTFfN+oE7BMk7KDws6xaHChF6xYxo HmYB+poC1ireq4mHFBI+4eWetVgTqylQXuSgTEBSn8mWFo/V0N4DomRim0OEnvkwx0Pr zVH4q15sIv6lqoZJE43w6qxp4NCIpWsZouR1gMe7oS0pQ+tZYcmQosfmCrXJvLXAHeQc WZ7ifBXvDasqqmLkV2ZYQRgOoV1I+z6ysZTvANF/BAAMBsJ68ke+A9M8rhx+nt461AuU qhWQ==
X-Gm-Message-State: APjAAAWaUGIZPWy+k+hSBwRV4CLL25neoGshPfNbwFxcsz28rQjU9m3C naHD4TuRzLH8B0nwlwshQFYQqztwI+k2bW+5NCPBgvv9shrefXzLuT7A7qg4JaDsbSG19OoaAob +6EPjWCh8xmWhdA==
X-Google-Smtp-Source: APXvYqw/LimsPLlCi7Vc+EEl3BS+W47KXmbgJ43Q31RjGraMo58Hg6z2RrEd0V54S73fXtKcPEmyN7Suaopi7IGUD18=
X-Received: by 2002:a17:902:b481:: with SMTP id y1mr6728789plr.76.1574158935286;  Tue, 19 Nov 2019 02:22:15 -0800 (PST)
MIME-Version: 1.0
References: <CA+iA6ui1TDn1LuQeOCXxh7gkt=CPwuQf5CCBqYUR0OZ2iOXwuQ@mail.gmail.com> <769719DC-33A3-4911-8322-9F1C9F235469@lodderstedt.net> <CA+iA6ugWRAQYiMVuT2euwKgosy46FoTu_Oh0v-N_1k1arf16CQ@mail.gmail.com> <1021C802-9AA1-40A6-B1ED-17649151070C@lodderstedt.net> <CA+iA6uhdYVKpPw15G0ra=PvusrJ3d7btYM4VgHuco2=hv81fgw@mail.gmail.com>
In-Reply-To: <CA+iA6uhdYVKpPw15G0ra=PvusrJ3d7btYM4VgHuco2=hv81fgw@mail.gmail.com>
From: Rob Otto <robotto@pingidentity.com>
Date: Tue, 19 Nov 2019 10:22:04 +0000
Message-ID: <CABh6VRFga_Mi0F0SKH7B9FhjQopeB-Zfxtbt6wMFFtFOAHgH_Q@mail.gmail.com>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002882840597b0703e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/z79dkOfOS8YFgLxTuwFj__ySehU>
Subject: Re: [OAUTH-WG] review draft-ietf-oauth-security-topics-13 [3/3]
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 10:22:22 -0000

--0000000000002882840597b0703e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

" don't use the Implicit or Resource Owner Password Credentials  grant
types"

I cannot overstate how strongly I would support this recommendation in
particular!

Best regards
Rob


On Tue, 19 Nov 2019 at 10:07, Hans Zandbelt <hans.zandbelt@zmartzone.eu>
wrote:

> How about:
>
> - don't use the Implicit or Resource Owner Password Credentials  grant
> types
> - perform exact matching of redirect URIs and make then Client/AS specifi=
c
> - use PKCE
>
> Hans.
>
> On Tue, Nov 19, 2019 at 5:58 PM Torsten Lodderstedt <
> torsten@lodderstedt.net> wrote:
>
>>
>>
>> > On 19. Nov 2019, at 17:10, Hans Zandbelt <hans.zandbelt@zmartzone.eu>
>> wrote:
>> >
>> >
>> >
>> > On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt <
>> torsten@lodderstedt.net> wrote:
>> > Hi Hans,
>> >
>> > > On 18. Nov 2019, at 04:11, Hans Zandbelt <hans.zandbelt@zmartzone.eu=
>
>> wrote:
>> > >
>> > > Hi,
>> > >
>> > > Please find my feedback from page 21 onwards below.
>> > >
>> > > Hans.
>> > >
>> > > Overall I would argue there's room for a very concise guidance
>> section that says: do this, don't do that, without explanation, just as =
a
>> reference for developers; the current text provides in depth analysis bu=
t
>> that is perhaps not suitable for developers who just want to know what t=
o
>> do (or not to do) and don't really care about the background/reasoning
>> >
>> > While section 4 gives the raw security threat analysis, we tried to
>> summarise the actionable guidance in section 3. What do you miss there?
>> >
>> > I'd rather see it even shorter and more concise, but I guess you're
>> right, it is there
>>
>> Do you want to suggest some text?
>>
>> >
>> > >
>> > > P21
>> > > first bullet
>> > > "the client has bound this data to this particular instance." ->
>> particular instance of what?
>> >
>> > This bullet refers to the note above.
>> >
>> > "Note: this check could also detect attempts to inject a code which
>> >    had been obtained from another instance of the same client on anoth=
er
>> >    device, if certain conditions are fulfilled:"
>> >
>> > ok, I see
>> >
>> > >
>> > > 3rd paragraph:
>> > > "call to the tokens endpoint." -> "call to the token endpoint."
>> >
>> > Fixed
>> >
>> > >
>> > > last paragraph could forward point to the next section by adding
>> something like
>> > > "using one of the mechanisms described in the next section."
>> >
>> > Incorporated
>> >
>> > >
>> > > P22
>> > > 3rd paragraph:
>> > > is the token binding guidance still accurate? it seems to be
>> overestimating the adoption
>> >
>> > You mean this statement?
>> >
>> > "Token binding is
>> >       promising as a secure and convenient mechanism (due to its brows=
er
>> >       integration).  As a challenge, it requires broad browser support
>> >       and use with native apps is still under discussion.=E2=80=9D
>> >
>> > yeah, but after re-reading I guess this actually spells out the
>> adoption conditions, so it is fine
>> >
>> > Hans.
>> >
>> >
>> > Thanks,
>> > Torsten.
>> >
>> > >
>> > > --
>> > > hans.zandbelt@zmartzone.eu
>> > > ZmartZone IAM - www.zmartzone.eu
>> > > _______________________________________________
>> > > OAuth mailing list
>> > > OAuth@ietf.org
>> > > https://www.ietf.org/mailman/listinfo/oauth
>> >
>> >
>> >
>> > --
>> > hans.zandbelt@zmartzone.eu
>> > ZmartZone IAM - www.zmartzone.eu
>>
>>
>
> --
> hans.zandbelt@zmartzone.eu
> ZmartZone IAM - www.zmartzone.eu
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


--=20
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
Rob Otto
EMEA Field CTO/Solutions Architect
robertotto@pingidentity.com

c: +44 (0) 777 135 6092
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11=
,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Google+ logo]
<https://plus.google.com/u/0/114266977739397708540> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/dam/pi=
ng-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?id=
%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=3Dgmail&ust=3D15416936085260=
00&usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ>
<https://www.pingidentity.com/en/events/d/identify-2019.html>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--0000000000002882840597b0703e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:tahoma,sans-serif;color:#0b5394">&quot; don&#39;t use the Implicit=
 or Resource Owner Password Credentials=C2=A0 grant types&quot;</div><div c=
lass=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394=
"><br></div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-s=
erif;color:#0b5394">I cannot overstate how strongly I would support this re=
commendation=C2=A0in particular!=C2=A0</div><div class=3D"gmail_default" st=
yle=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div><div class=3D=
"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394">Best =
regards</div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-=
serif;color:#0b5394">Rob</div><div class=3D"gmail_default" style=3D"font-fa=
mily:tahoma,sans-serif;color:#0b5394"><br></div></div><br><div class=3D"gma=
il_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, 19 Nov 2019 at 10:0=
7, Hans Zandbelt &lt;<a href=3D"mailto:hans.zandbelt@zmartzone.eu">hans.zan=
dbelt@zmartzone.eu</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex"><div dir=3D"ltr"><div>How about:</div><div><br></div>- do=
n&#39;t use the Implicit or Resource Owner Password Credentials=C2=A0 grant=
 types<div><div>- perform exact matching of redirect URIs and make then Cli=
ent/AS specific</div><div>- use PKCE</div><div><br></div></div><div>Hans.</=
div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Tue, Nov 19, 2019 at 5:58 PM Torsten Lodderstedt &lt;<a href=3D"mail=
to:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>&g=
t; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0p=
x 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
<br>
&gt; On 19. Nov 2019, at 17:10, Hans Zandbelt &lt;<a href=3D"mailto:hans.za=
ndbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&gt; w=
rote:<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; On Tue, Nov 19, 2019 at 10:38 AM Torsten Lodderstedt &lt;<a href=3D"ma=
ilto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>=
&gt; wrote:<br>
&gt; Hi Hans, <br>
&gt; <br>
&gt; &gt; On 18. Nov 2019, at 04:11, Hans Zandbelt &lt;<a href=3D"mailto:ha=
ns.zandbelt@zmartzone.eu" target=3D"_blank">hans.zandbelt@zmartzone.eu</a>&=
gt; wrote:<br>
&gt; &gt; <br>
&gt; &gt; Hi,<br>
&gt; &gt; <br>
&gt; &gt; Please find my feedback from page 21 onwards below.<br>
&gt; &gt; <br>
&gt; &gt; Hans.<br>
&gt; &gt; <br>
&gt; &gt; Overall I would argue there&#39;s room for a very concise guidanc=
e section that says: do this, don&#39;t do that, without explanation, just =
as a reference for developers; the current text provides in depth analysis =
but that is perhaps not suitable for developers who just want to know what =
to do (or not to do) and don&#39;t really care about the background/reasoni=
ng<br>
&gt; <br>
&gt; While section 4 gives the raw security threat analysis, we tried to su=
mmarise the actionable guidance in section 3. What do you miss there?<br>
&gt; <br>
&gt; I&#39;d rather see it even shorter and more concise, but I guess you&#=
39;re right, it is there<br>
<br>
Do you want to suggest some text?<br>
<br>
&gt;=C2=A0 <br>
&gt; &gt; <br>
&gt; &gt; P21<br>
&gt; &gt; first bullet<br>
&gt; &gt; &quot;the client has bound this data to this particular instance.=
&quot; -&gt; particular instance of what?<br>
&gt; <br>
&gt; This bullet refers to the note above. <br>
&gt; <br>
&gt; &quot;Note: this check could also detect attempts to inject a code whi=
ch<br>
&gt;=C2=A0 =C2=A0 had been obtained from another instance of the same clien=
t on another<br>
&gt;=C2=A0 =C2=A0 device, if certain conditions are fulfilled:&quot;<br>
&gt; <br>
&gt; ok, I see<br>
&gt;=C2=A0 <br>
&gt; &gt; <br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; &quot;call to the tokens endpoint.&quot; -&gt; &quot;call to the =
token endpoint.&quot;<br>
&gt; <br>
&gt; Fixed <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; last paragraph could forward point to the next section by adding =
something like<br>
&gt; &gt; &quot;using one of the mechanisms described in the next section.&=
quot;<br>
&gt; <br>
&gt; Incorporated <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; P22<br>
&gt; &gt; 3rd paragraph:<br>
&gt; &gt; is the token binding guidance still accurate? it seems to be over=
estimating the adoption <br>
&gt; <br>
&gt; You mean this statement? <br>
&gt; <br>
&gt; &quot;Token binding is<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0promising as a secure and convenient mechani=
sm (due to its browser<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0integration).=C2=A0 As a challenge, it requi=
res broad browser support<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0and use with native apps is still under disc=
ussion.=E2=80=9D<br>
&gt; <br>
&gt; yeah, but after re-reading I guess this actually spells out the adopti=
on conditions, so it is fine<br>
&gt; <br>
&gt; Hans.<br>
&gt;=C2=A0 <br>
&gt; <br>
&gt; Thanks,<br>
&gt; Torsten. <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; -- <br>
&gt; &gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">h=
ans.zandbelt@zmartzone.eu</a><br>
&gt; &gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"norefe=
rrer" target=3D"_blank">www.zmartzone.eu</a><br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"no=
referrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt; <a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank">hans.z=
andbelt@zmartzone.eu</a><br>
&gt; ZmartZone IAM - <a href=3D"http://www.zmartzone.eu" rel=3D"noreferrer"=
 target=3D"_blank">www.zmartzone.eu</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=3D"ltr"><div style=3D"font=
-size:small"><a href=3D"mailto:hans.zandbelt@zmartzone.eu" target=3D"_blank=
">hans.zandbelt@zmartzone.eu</a></div><div style=3D"font-size:small">ZmartZ=
one IAM - <a href=3D"http://www.zmartzone.eu" target=3D"_blank">www.zmartzo=
ne.eu</a><br></div></div></div></div></div></div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div style=3D"padding:0px;margin:0px">    <table=
 style=3D"border-collapse:collapse;padding:0px;margin:0px">			<tbody><tr>		=
		<td style=3D"width:113px">					<a href=3D"https://www.pingidentity.com" t=
arget=3D"_blank"></a><a href=3D"https://www.pingidentity.com" target=3D"_bl=
ank"><img alt=3D"Ping Identity" src=3D"https://www.pingidentity.com/content=
/dam/pic/images/misc/signature/ping-logo.png"></a>				</td>				<td>					<ta=
ble>												<tbody><tr>			        <td style=3D"vertical-align:top">				=
        <span style=3D"color:rgb(230,29,60);display:inline-block;margin-bot=
tom:3px;font-family:arial,helvetica,sans-serif;font-weight:bold;font-size:1=
4px">Rob Otto</span>								<br>								<span style=3D"color:rgb(0,0,0);dis=
play:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;=
font-weight:normal;font-size:14px">EMEA Field CTO/Solutions Architect</span=
>								<br>								<span style=3D"font-family:arial,helvetica,sans-serif;=
font-size:14px;display:inline-block;margin-bottom:3px"><a href=3D"mailto:ro=
bertotto@pingidentity.com" target=3D"_blank">robertotto@pingidentity.com</a=
></span>								<br>								<span style=3D"color:rgb(0,0,0);display:inline-=
block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:=
normal;font-size:14px">								</span>								<br>								<span style=3D"co=
lor:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,hel=
vetica,sans-serif;font-weight:normal;font-size:14px">								c: +44 (0) 777=
 135 6092</span>							</td>			      </tr>					</tbody></table>				</td>			=
</tr>			<tr>				        <td colspan=3D"2">          <table style=3D"border-=
collapse:collapse;border:none;margin:8px 0px 0px;width:100%">          	<tb=
ody><tr style=3D"height:40px;border-top:1px solid rgb(211,211,211);border-b=
ottom:1px solid rgb(211,211,211)">              <td style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:14px;font-weight:bold;color:rgb(64,71,75=
)">Connect with us: </td>              <td style=3D"padding:4px 0px 0px 20p=
x">                <a href=3D"https://www.glassdoor.com/Overview/Working-at=
-Ping-Identity-EI_IE380907.11,24.htm" style=3D"text-decoration:none;margin-=
right:16px" title=3D"Ping on Glassdoor" target=3D"_blank"><img src=3D"https=
://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassd=
oor.png" style=3D"border: none; margin: 0px;" alt=3D"Glassdoor logo"></a>		=
								<a href=3D"https://www.linkedin.com/company/21870" style=3D"text-de=
coration:none;margin-right:16px" title=3D"Ping on LinkedIn" target=3D"_blan=
k"><img src=3D"https://www.pingidentity.com/content/dam/pic/images/misc/sig=
nature/social-linkedin.png" style=3D"border: none; margin: 0px;" alt=3D"Lin=
kedIn logo"></a>                                        <a href=3D"https://=
twitter.com/pingidentity" style=3D"text-decoration:none;margin-right:16px" =
title=3D"Ping on Twitter" target=3D"_blank"><img src=3D"https://www.pingide=
ntity.com/content/dam/pic/images/misc/signature/social-twitter.png" style=
=3D"border: none; margin: 0px;" alt=3D"twitter logo"></a>										<a href=
=3D"https://www.facebook.com/pingidentitypage" style=3D"text-decoration:non=
e;margin-right:16px" title=3D"Ping on Facebook" target=3D"_blank"><img src=
=3D"https://www.pingidentity.com/content/dam/pic/images/misc/signature/soci=
al-facebook.png" style=3D"border: none; margin: 0px;" alt=3D"facebook logo"=
></a>								<a href=3D"https://www.youtube.com/user/PingIdentityTV" style=
=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Youtube" targe=
t=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/image=
s/misc/signature/social-youtube.png" style=3D"border: none; margin: 0px 0px=
 3px;" alt=3D"youtube logo"></a>														<a href=3D"https://plus.googl=
e.com/u/0/114266977739397708540" style=3D"text-decoration:none;margin-right=
:16px" title=3D"Ping on Google+" target=3D"_blank"><img src=3D"https://www.=
pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.pn=
g" style=3D"border: none; margin: 0px;" alt=3D"Google+ logo"></a>          =
                                              <a href=3D"https://www.pingid=
entity.com/en/blog.html" style=3D"text-decoration:none;margin-right:16px" t=
itle=3D"Ping Blog" target=3D"_blank"><img src=3D"https://www.pingidentity.c=
om/content/dam/pic/images/misc/signature/social-blog.png" style=3D"border: =
none; margin: 0px;" alt=3D"Blog logo"></a>															</td>            <=
/tr>          </tbody></table>				</td>      </tr>    </tbody></table><a hr=
ef=3D"https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/d=
am/ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.p=
df?id%3Db6322a80-f285-11e3-ac10-0800200c9a66&amp;source=3Dgmail&amp;ust=3D1=
541693608526000&amp;usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target=3D"_bl=
ank"></a><a href=3D"https://www.pingidentity.com/en/events/d/identify-2019.=
html" target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/da=
m/ping-6-2-assets/images/misc/emailSignature/identify-email-image.png"></a>=
  </div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--0000000000002882840597b0703e--


From nobody Tue Nov 19 14:34:50 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F1E0120130 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 14:34:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fxGqFrvqbz-N for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 14:34:41 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27FBB1200B6 for <oauth@ietf.org>; Tue, 19 Nov 2019 14:34:40 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id z10so25821663wrs.12 for <oauth@ietf.org>; Tue, 19 Nov 2019 14:34:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=J7VylKQ+SSjVANU0ae5Vf0KCWGFfW3BozIoWYD4R8j0=; b=WQEXKHMFr+P/ENEAg0ABU9RX/5COgw4hACccpsVVulFflyEXExwbRK1vfzkrw0W9el 3OZ6HfRgFyG/Q6o1ZxaphLfW1bYyNpvd7a8cKMaJRJJcpZ7YR5Pk/Z19vLcn/Qn+ShEY QDkemsS40tar+cIbCS2U8iwYLngwpty+VQfro=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=J7VylKQ+SSjVANU0ae5Vf0KCWGFfW3BozIoWYD4R8j0=; b=BMo45GXQY9k0+kr1vN9q3gd3nMTwpGwBzY8AukPqUPFGAg+o9YVn4+Aa2htA+K8Etm Dyky3a88vQaB2njYrJTIOEuGFmTIC6/f6+S6bG0zkFUkzn0MgfTHOCUHngHEDFcK2FWs 2vXu2t/QLTYnk1fAk3+9L0u3OHeNCg9f0CvOHheHVSqwzccjSivWvyZ03e3vQHPq7TEM dARr2m9nsinakLDhSGQ626NksbOTF2FjRFbWNO2hfz1EQlSM/7rZl8z9naBx92H1rqug FUJc/tOU3VbntqfroQMQYht1tY7JKK1TsSe1sXUplDEgt7ccl2BbWWO73wUJFxVC5SZE N29w==
X-Gm-Message-State: APjAAAXKaDnt50c3JHYP5aDGqvCBE6XFa2h/7HqBDPNvD/l8MFoul4eN 7TxjiJrBa7J78cWHnaqplcBlpg==
X-Google-Smtp-Source: APXvYqzBOK1JJFEwSqqs2BYYenhI7ZYN/NgmxVoPosCVuiiiA3nzSrtT/IzoGQ/8MwPGkH6nv/IvgA==
X-Received: by 2002:adf:81e5:: with SMTP id 92mr39805369wra.41.1574202879152;  Tue, 19 Nov 2019 14:34:39 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id g133sm4661232wme.42.2019.11.19.14.34.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Nov 2019 14:34:38 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <5203CB2A-141F-4AB1-96AF-775B20D75923@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_3030C55A-5B01-4E96-B160-93AD0A2AFDFF"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 19 Nov 2019 22:34:32 +0000
In-Reply-To: <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com>
Cc: oauth <oauth@ietf.org>
To: Brian Campbell <bcampbell@pingidentity.com>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1POmeEqxTQWHKC09VuecGM83yBI>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Nov 2019 22:34:49 -0000

--Apple-Mail=_3030C55A-5B01-4E96-B160-93AD0A2AFDFF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Thanks for the reply, Brian.=20

Collecting my thoughts up here rather than responding blow by blow.

Public key signatures are simpler in some respects, more complex in =
others. There are currently 10 public key JWS signature schemes defined =
(ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS =
potentially have to support them all? If not, how do they negotiate =
algorithm support with the client?

On the other hand, the ECDH scheme I proposed can be implemented by =
adapting an existing ECDH-ES encryption support in a JWT library. For =
example, I discovered while playing with this that our own internal =
library can implement the full flow I described entirely via the =
existing public API [1], so it's not necessarily as complex as it first =
looks. I even knocked up a from-scratch implementation in WebCrypto =
(JavaScript) without too much code [2].

But I admit that using an existing JWT library to sign a JWT with an =
existing algorithm is even easier, and that counts for a lot. Perhaps we =
can make concrete suggestions/requirements about algorithm support? e.g. =
"The RS MUST support RS256 and SHOULD support EdDSA. Other algorithms =
MAY be supported."=20

With regards to replay protection, I think there are at least two =
reasonable positions:

1. We assume that TLS is secure and don't try to defend against any =
compromise at that level. (Clearly none of the TLS-based PoP mechanisms =
survive if TLS is compromised, by definition). In this case the main =
attack to defend against is a malicious RS replaying the access token =
elsewhere. Simply signing the origin of the RS would be enough to =
prevent this attack, while letting the client reuse the same JWT for =
many requests (and the RS to cache the JWT validation). None of "jti", =
"htu", or "htm" seem relevant to this model.

2. We don't assume that TLS is secure (or it's not fully end-to-end) and =
try to provide some defense in depth against a MitM attacker replaying a =
token against the same RS. There is a graduated series of steps you can =
take here, depending on how much you want to prevent this:
   a. The DPoP token can be replayed for arbitrary requests to the same =
RS but has a short time limit (e.g., exp claim or RS-enforced max =
lifetime from iat)
   b. The DPoP token can be replayed for the same request (htu/htm =
claims)
   c. The DPoP token can't be replayed at all - either because of jti =
blacklisting on the RS or a challenge-response protocol on each request.

(There are also variants such as including a hash of the request =
body/headers, or encoding an ETag into the JWT).

I think either are reasonable design goals, but aiming for 2 adds more =
value. I think aiming for 2a is a reasonable default baseline that =
allows the client to reuse a DPoP token for a few requests, reducing the =
cost of the signature (and the RS can cache the validated JWT). Support =
for 2b or 2c can then be listed as optional additions.

PS - 2a/2b can be achieved without PoP. I'll save that for another email =
in the next few days though.

[1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
[2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7


-- Neil

> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com> =
wrote:
>=20
>=20
>=20
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com =
<mailto:neil.madden@forgerock.com>> wrote:
> I can't attend Singapore either in person or remotely due to other =
commitments. I broadly support adoption of this draft, but I have some =
comments/suggestions about it.
>=20
> Thanks Neil. And sorry to hear that you won't be in Singapore. This =
kind of stuff is definitely more easily discussed in person (for me =
anyway). But I'll try and comment on your comments here as best I can. I =
also plan to also mention them in the Wednesday and/or Thursday =
presentation.=20
> =20
> Section 2 lists the main objective as being to harden against =
compromised/malicious AS or RS, which may attempt to replay captured =
tokens elsewhere. While this is a good idea, a casual reader might =
wonder why a simple audience claim in the access token/introspection =
response is not sufficient to prevent this. Because interactions between =
the client and RS are supposed to be over TLS, is the intended threat =
model one in which these protections have broken down? ("counterfeit" in =
the description suggests this). Or is the motivation that clients want =
to get a single broad-scoped access token (for usability/performance =
reasons) and use it to access multiple resource servers without giving =
each of them the ability to replay the token to the other servers? Or =
are we thinking of a phishing-type vulnerability were a general-purpose =
client might accidentally visit a malicious site which prompts for an =
access token that the client then blindly goes off and gets? (UMA?) It's =
not clear to me which of these scenarios is being considered, so it =
would be good to tighten up this section.
>=20
> It is admittedly a bit loose and I agree it'd be good to tighten it =
up. But part of why it's loose is that it tries to offer some =
protections for all those scenarios and more such as a general =
lost/stolen token. It's effectively trying to provide as many of the =
same types of protections/assurances that you'd get with TLS based PoP =
mechanisms (like OAuth MTLS or Token binding) to the extent that can be =
done at the HTTP application layer. Which can't realistically be exactly =
the same but can maybe be kinda close while actually being accessible =
and implementable because it's all done at the application layer. There =
are trade-offs, of course, and the document writers have endeavored to =
find a good balance in the trade-off decisions we've made. But that =
doesn't mean they are necessarily the right decisions or are closed to =
discussion. To the casual reader I would say that it turns out that =
getting an appropriate simple audience claim into an access token isn't =
nearly as simple as it might seem. And while it will prevent RS to RS =
replay (as long as both RSs aren't legit audiences) it doesn't help with =
preventing the use of tokens stolen or leaked by other means (including =
for refresh tokens issued to public clients).=20
> =20
> Another potential motivation is for mobile apps. Some customers of =
ours would like to tie access/refresh tokens to private key material =
generated on a secure element in the device, that can only be accessed =
after local biometric authentication (e.g. TouchID/FaceID on iOS). I =
have suggested using mTLS cert-bound tokens for this, but have heard =
some pushback due to the difficulty of configuring support for client =
certs across diverse infrastructure. A simple JWT-based solution like =
DPoP could fill this need.
>=20
> It's maybe not stated in the draft but this kind of thing is among the =
objectives (in my mind anyway).=20
>=20
> =20
> My main concerns with the draft though are about efficiency and =
scalability of the proposed approach:
>=20
> 1. The requirement to use public key signatures, along with the =
anti-replay nonce, means that the RS is required to perform an expensive =
signature verification check on every request. That is not going to =
scale up well. While there are more efficient schemes like Ed25519 now, =
these are still typically an order of magnitude slower than HMAC and the =
latency and CPU overhead is likely to be a non-starter for many APIs =
(especially when you're billed by CPU usage). Public key signatures are =
also notoriously fragile (see e.g. the history of nonce reuse/leakage =
vulnerabilities in ECDSA or=20
>=20
> Yes, asymmetric is more processing intensive than symmetric. But if =
you take away the distributed replay check (see next response), it will =
scale out just fine. I'm not so sure latency is a real issue here - =
while these operations are an order of magnitude slower we're still =
talking about times that are not perceptible to a human. CPU usage/cost =
is a part of a trade-off for the simplicity afforded by public/private =
keys.  And it is significantly simpler. The design you sketched out is =
admittedly quite clever but it's not even in the same ballpark with =
respect to complexity. And, as you pointed out, the other suggestion =
around symmetric keys has rather different security properties while =
still adding complexity. Adding symmetric key support isn't something =
that can just be added on easily.=20

> =20
>=20
> 2. The advice for the RS to store a set of previously used nonces to =
prevent replay will also hamper scalability, especially in large =
deployments where such state would need to be replicated to all servers =
(or use sticky load balancing, which comes with its own problems). This =
violates the statelessness of HTTP, and it also potentially breaks =
idempotency of operations: Think of the case where the JWT validation =
and replay protection is done at an API gateway but then the call to the =
backend API server fails for a transient reason. The client (or a =
proxy/library) cannot simply replay the (idempotent) request in this =
case because it will be rejected by the gateway. It must instead =
recreate the DPoP JWT, incurring additional overheads.
>=20
> The actual value of replay checking on jti is somewhat questionable. =
The DPoP JWT only transits between client and server so a TLS MITM is =
likely needed to steal a DPoP JWT. But we are assuming TLS works here. =
And an active MITM could thwart this check by just being first to =
present DPoP JWT. I think the jti check made its way into the draft =
mostly because it seemed like something was needed to try and bring it =
closer to the TLS PoP models. Being aware of the scalability concerns, I =
did endeavor to write the text in such a way so as to leave some wiggle =
room in implementations/deployments with text like '"jti" SHOULD be used =
by the server for replay detection and prevention` and [ensure that] =
'within a reasonable consideration of accuracy and resource utilization, =
a JWT with the same "jti" value has not been received previously'. The =
idea being that using something eventually consistent or even local only =
to the runtime instance would be permissible. Perhaps that allowance and =
the rational could be made more clear? Or would you suggest to do away =
with the jti replay stuff al? Or something else?=20
>=20
> 3. Minor: The use of a custom header for communicating the DPoP proof =
will require additional CORS configuration on top of that already done =
for the Authorization header, and so adds a small amount of additional =
friction for adoption. Given that CORS configuration changes often =
require approval by a security team, this may make more of an impact =
than you'd expect.
>=20
> Feels really minor. I mean, we could try to roll everything up under =
one header. But it does seem unwarranted and would complicate things - =
at least in the model we've got now where the proof is sent the same way =
ono all types of requests.=20
> =20
>=20
> It's also not clear to me exactly what threat the anti-replay nonce is =
protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.
>=20
> I have a tentative suggestion for an alternative design which avoids =
these problems, but at a cost of potentially more complexity elsewhere. =
I'll summarise it here for consideration:
>=20
> 1. The client obtains an access token in the normal way. When calling =
the token endpoint it provides an EC/okp public key as the confirmation =
key to be associated with the access/refresh tokens.
>=20
> 2. The first time the client calls an RS it passes its access token in =
the Authorization: Bearer header as normal. (If the RS doesn't support =
DPoP then this would just succeed and no further action is required by =
the client - allowing clients to opportunistically ask for DPoP without =
needing a priori knowledge of RS capabilities).
>=20
> 3. The RS introspects the access token and learns the EC public key =
associated with the access token. As there is no DPoP proof with the =
access token, the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as =
the confirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated =
with this access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and =
base64url-encodes it. It uses this as a challenge to the client by =
sending back a 401 response with WWW-Authenticate: DPoP <encoded-epk>
>=20
> 4. The client decodes the epk challenge and performs an ECDH key =
agreement between its private key and the challenge epk as per the =
method described for the existing JWA ECDH-ES encryption algorithm. =
Rather than deriving an AES key however, it derives a HMAC key for =
HS256. The "apu" value is set to the access token (string value as ASCII =
bytes) and the "apv" value is set to the hostname of the RS (e.g. =
"api.example.com <http://api.example.com/>"). This ensures that the =
derived key is cryptographically bound to the context in which it is =
used.
>=20
> 5. The client uses the HMAC key to create a DPoP proof JWT much like =
the one in the current draft, but signed using the HS256 key. If a "kid" =
field was present in the challenge JWK sent by the RS then the same =
value MUST be used in the "kid" header of this discharge JWT. It retries =
its original request sending Authorization: DPoP <hmac-jwt> =
at=3D<access_token>.
>=20
> 6. The RS uses its stored ephemeral private key to derive the same =
HMAC key and verify the DPoP discharge JWT. If it validates and all =
fields are correct then the request is allowed.
>=20
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the =
challenge JWK, the RS can preemptively carry out the ECDH key agreement =
immediately and generate the derived HMAC key. The RS can then encrypt =
this derived key using a local authenticated encryption key (e.g. =
AES-GCM) and use that encrypted value as the "kid" value in the =
challenge (perhaps along with some context or an expiry time). That way =
the RS only needs to decrypt this kid value rather than performing the =
ECDH key agreement on every request. This also avoids the need for the =
RS to store any per-client state locally.
>=20
> The challenge-response nature of the scheme prevents traditional =
replay attacks in the case where a DPoP discharge JWT is accidentally =
leaked through server logs or some other flaw, without needing to store =
nonces on the server. Using the RS's hostname in the key derivation =
process prevents mitm attacks in a similar way to how FIDO/WebAuthn =
prevents this. Most importantly, once a HS256 key has been derived =
between a client and RS they can reuse that key for multiple requests, =
reducing the overhead of the ECDH key agreement step. Either side can =
decide as a matter of policy how long to let this occur and when to =
trigger a fresh challenge-response.
>=20
> Because this fits within the standard HTTP authentication framework, =
it also requires no additional CORS configuration and is relatively easy =
to plug in to existing HTTP client libraries.
>=20
> The main downside of this approach to me is the fact that you can't =
simply reuse an existing JWT library to implement it, and so it will =
take time for client libs to develop. (Although I think this might be =
achievable now with existing *COSE* libraries). This would increase the =
risk of people hand-rolling solutions, rather than using well-tested =
libraries. On the other hand, it uses fairly widely supported primitives =
so e.g. an implementation using WebCrypto is probably only a few dozen =
lines of code.
>=20
> -- Neil
>=20
>=20
>> On 31 Oct 2019, at 19:20, Brian Campbell =
<bcampbell=3D40pingidentity.com@dmarc.ietf.org =
<mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org>> wrote:
>>=20
>> Hello WG,=20
>>=20
>> Just a quick note to let folks know that -03 of the DPoP draft was =
published earlier today. The usual various document links are in the =
forwarded message below and the relevant snippet from the doc history =
with a summary of the changes is included here for convenience.=20
>>=20
>> Hopefully folks will have time to read the (relativity) short =
document before the meeting(s) in Singapore where (spoiler alert) I plan =
to ask that the WG consider adoption of the draft.=20
>>=20
>> Thanks,
>>=20
>>  -03
>>    o  rework the text around uniqueness requirements on the jti claim =
in
>>       the DPoP proof JWT
>>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" =
rather
>>       than "http_method", "http_uri", and "jkt#S256" respectively
>>    o  more explicit recommendation to use mTLS if that is available
>>    o  added David Waite as co-author
>>    o  editorial updates
>>=20
>> ---------- Forwarded message ---------
>> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
>> Date: Thu, Oct 31, 2019 at 11:53 AM
>> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
>> To: Torsten Lodderstedt <torsten@lodderstedt.net =
<mailto:torsten@lodderstedt.net>>, Michael Jones <mbj@microsoft.com =
<mailto:mbj@microsoft.com>>, John Bradley <ve7jtb@ve7jtb.com =
<mailto:ve7jtb@ve7jtb..com>>, Brian Campbell <bcampbell@pingidentity.com =
<mailto:bcampbell@pingidentity.com>>, David Waite =
<david@alkaline-solutions.com <mailto:david@alkaline-solutions.com>>, =
Daniel Fett <mail@danielfett.de <mailto:mail@danielfett.de>>
>>=20
>>=20
>>=20
>> A new version of I-D, draft-fett-oauth-dpop-03.txt
>> has been successfully submitted by Brian Campbell and posted to the
>> IETF repository.
>>=20
>> Name:           draft-fett-oauth-dpop
>> Revision:       03
>> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the =
Application Layer (DPoP)
>> Document date:  2019-10-30
>> Group:          Individual Submission
>> Pages:          15
>> URL:            =
https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt =
<https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt>
>> Status:         =
https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/ =
<https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/>
>> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03 =
<https://tools.ietf.org/html/draft-fett-oauth-dpop-03>
>> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop =
<https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop>
>> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03 =
<https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03>
>>=20
>> Abstract:
>>    This document describes a mechanism for sender-constraining OAuth =
2.0
>>    tokens via a proof-of-possession mechanism on the application =
level.
>>    This mechanism allows for the detection of replay attacks with =
access
>>    and refresh tokens.
>>=20
>>=20
>>=20
>>=20
>> Please note that it may take a couple of minutes from the time of =
submission
>> until the htmlized version and diff are available at tools.ietf.org =
<http://tools.ietf.org/>.
>>=20
>> The IETF Secretariat
>>=20
>>=20
>> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>> https://www.ietf.org/mailman/listinfo/oauth =
<https://www.ietf.org/mailman/listinfo/oauth>
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited.  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.


--Apple-Mail=_3030C55A-5B01-4E96-B160-93AD0A2AFDFF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" =
class=3D"">Thanks for the reply, Brian.&nbsp;<div class=3D""><br =
class=3D""></div><div class=3D"">Collecting my thoughts up here rather =
than responding blow by blow.<div class=3D""><br class=3D""></div><div =
class=3D""><div>Public key signatures are simpler in some respects, more =
complex in others. There are currently 10 public key JWS signature =
schemes defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - =
does an RS potentially have to support them all? If not, how do they =
negotiate algorithm support with the client?</div><div><br =
class=3D""></div><div>On the other hand, the ECDH scheme I proposed can =
be implemented by adapting an existing ECDH-ES encryption support in a =
JWT library. For example, I discovered while playing with this that our =
own internal library can implement the full flow I described entirely =
via the existing public API [1], so it's not necessarily as complex as =
it first looks. I even knocked up a from-scratch implementation in =
WebCrypto (JavaScript) without too much code [2].</div><div><br =
class=3D""></div><div>But I admit that using an existing JWT library to =
sign a JWT with an existing algorithm is even easier, and that counts =
for a lot. Perhaps we can make concrete suggestions/requirements about =
algorithm support? e.g. "The RS MUST support RS256 and SHOULD support =
EdDSA. Other algorithms MAY be supported."&nbsp;</div><div><br =
class=3D""></div><div>With regards to replay protection, I think there =
are at least two reasonable positions:</div><div><br =
class=3D""></div><div>1. We assume that TLS is secure and don't try to =
defend against any compromise at that level. (Clearly none of the =
TLS-based PoP mechanisms survive if TLS is compromised, by definition). =
In this case the main attack to defend against is a malicious RS =
replaying the access token elsewhere. Simply signing the origin of the =
RS would be enough to prevent this attack, while letting the client =
reuse the same JWT for many requests (and the RS to cache the JWT =
validation). None of "jti", "htu", or "htm" seem relevant to this =
model.</div><div><br class=3D""></div><div>2. We don't assume that TLS =
is secure (or it's not fully end-to-end) and try to provide some defense =
in depth against a MitM attacker replaying a token against the same RS. =
There is a graduated series of steps you can take here, depending on how =
much you want to prevent this:</div><div>&nbsp; &nbsp;a. The DPoP token =
can be replayed for arbitrary requests to the same RS but has a short =
time limit (e.g., exp claim or RS-enforced max lifetime from =
iat)</div><div>&nbsp; &nbsp;b. The DPoP token can be replayed for the =
same request (htu/htm claims)</div><div>&nbsp; &nbsp;c. The DPoP token =
can't be replayed at all - either because of jti blacklisting on the RS =
or a challenge-response protocol on each request.</div><div><br =
class=3D""></div><div>(There are also variants such as including a hash =
of the request body/headers, or encoding an ETag into the =
JWT).</div><div><br class=3D""></div><div>I think either are reasonable =
design goals, but aiming for 2 adds more value. I think aiming for 2a is =
a reasonable default baseline that allows the client to reuse a DPoP =
token for a few requests, reducing the cost of the signature (and the RS =
can cache the validated JWT). Support for 2b or 2c can then be listed as =
optional additions.</div><div><br class=3D""></div><div>PS - 2a/2b can =
be achieved without PoP. I'll save that for another email in the next =
few days though.</div><div><br class=3D""></div><div =
class=3D""><div><div><div>[1]:&nbsp;<a =
href=3D"https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd949=
6" =
class=3D"">https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd=
9496</a></div><div>[2]: <a =
href=3D"https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a=
7" =
class=3D"">https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36e=
c4a7</a></div><div class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div><div class=3D"">-- Neil</div></div></div></div>
<div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" =
class=3D"">bcampbell@pingidentity.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><br class=3D"Apple-interchange-newline"><br =
class=3D""><div class=3D"gmail_quote"><div dir=3D"ltr" =
class=3D"gmail_attr">On Thu, Nov 14, 2019 at 7:20 PM Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin: 0px =
0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; =
border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div =
class=3D"">I can't attend Singapore either in person or remotely due to =
other commitments. I broadly support adoption of this draft, but I have =
some comments/suggestions about it.</div></blockquote><div class=3D""><br =
class=3D""></div><div class=3D"">Thanks Neil. And sorry to hear that you =
won't be in Singapore. This kind of stuff is definitely more easily =
discussed in person (for me anyway). But I'll try and comment on your =
comments here as best I can. I also plan to also mention them in the =
Wednesday and/or Thursday presentation.<span =
class=3D"Apple-converted-space">&nbsp;</span></div></div></div></div></blo=
ckquote><blockquote type=3D"cite" class=3D""><div class=3D""><div =
dir=3D"ltr" style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" style=3D"margin: =
0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; =
border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div =
class=3D""><div class=3D"">Section 2 lists the main objective as being =
to harden against compromised/malicious AS or RS, which may attempt to =
replay captured tokens elsewhere. While this is a good idea, a casual =
reader might wonder why a simple audience claim in the access =
token/introspection response is not sufficient to prevent this. Because =
interactions between the client and RS are supposed to be over TLS, is =
the intended threat model one in which these protections have broken =
down? ("counterfeit" in the description suggests this). Or is the =
motivation that clients want to get a single broad-scoped access token =
(for usability/performance reasons) and use it to access multiple =
resource servers without giving each of them the ability to replay the =
token to the other servers? Or are we thinking of a phishing-type =
vulnerability were a general-purpose client might accidentally visit a =
malicious site which prompts for an access token that the client then =
blindly goes off and gets? (UMA?) It's not clear to me which of these =
scenarios is being considered, so it would be good to tighten up this =
section.</div></div></blockquote><div class=3D""><br class=3D""></div><div=
 class=3D"">It is admittedly a bit loose and I agree it'd be good to =
tighten it up. But part of why it's loose is that it tries to offer some =
protections for all those scenarios and more such as a general =
lost/stolen token. It's effectively trying to provide as many of the =
same types of protections/assurances that you'd get with TLS based PoP =
mechanisms (like OAuth MTLS or Token binding) to the extent that can be =
done at the HTTP application layer. Which can't realistically be exactly =
the same but can maybe be kinda close while actually being accessible =
and implementable because it's all done at the application layer. There =
are trade-offs, of course, and the document writers have endeavored to =
find a good balance in the trade-off decisions we've made. But that =
doesn't mean they are necessarily the right decisions or are closed to =
discussion. To the casual reader I would say that it turns out that =
getting an appropriate simple audience claim into an access token isn't =
nearly as simple as it might seem. And while it will prevent RS to RS =
replay (as long as both RSs aren't legit audiences) it doesn't help with =
preventing the use of tokens stolen or leaked by other means (including =
for refresh tokens issued to public clients).<span =
class=3D"Apple-converted-space">&nbsp;</span></div></div></div></div></blo=
ckquote><blockquote type=3D"cite" class=3D""><div class=3D""><div =
dir=3D"ltr" style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" style=3D"margin: =
0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; =
border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div =
class=3D""><div class=3D"">Another potential motivation is for mobile =
apps. Some customers of ours would like to tie access/refresh tokens to =
private key material generated on a secure element in the device, that =
can only be accessed after local biometric authentication (e.g. =
TouchID/FaceID on iOS). I have suggested using mTLS cert-bound tokens =
for this, but have heard some pushback due to the difficulty of =
configuring support for client certs across diverse infrastructure. A =
simple JWT-based solution like DPoP could fill this =
need.</div></div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">It's maybe not stated in the draft but this kind of thing is =
among the objectives (in my mind anyway).<span =
class=3D"Apple-converted-space">&nbsp;</span><br class=3D""></div><div =
class=3D""><br class=3D""></div><div class=3D"">&nbsp;</div><blockquote =
class=3D"gmail_quote" style=3D"margin: 0px 0px 0px 0.8ex; =
border-left-width: 1px; border-left-style: solid; border-left-color: =
rgb(204, 204, 204); padding-left: 1ex;"><div class=3D""><div class=3D"">My=
 main concerns with the draft though are about efficiency and =
scalability of the proposed approach:</div><div class=3D""><br =
class=3D""></div><div class=3D"">1. The requirement to use public key =
signatures, along with the anti-replay nonce, means that the RS is =
required to perform an expensive signature verification check on every =
request. That is not going to scale up well. While there are more =
efficient schemes like Ed25519 now, these are still typically an order =
of magnitude slower than HMAC and the latency and CPU overhead is likely =
to be a non-starter for many APIs (especially when you're billed by CPU =
usage). Public key signatures are also notoriously fragile (see e.g. the =
history of nonce reuse/leakage vulnerabilities in ECDSA =
or&nbsp;</div></div></blockquote><div class=3D""><br class=3D""></div><div=
 class=3D"">Yes, asymmetric is more processing intensive than symmetric. =
But if you take away the distributed replay check (see next response), =
it will scale out just fine. I'm not so sure latency is a real issue =
here - while these operations are an order of magnitude slower we're =
still talking about times that are not perceptible to a human. CPU =
usage/cost is a part of a trade-off for the simplicity afforded by =
public/private keys.&nbsp; And it is significantly simpler. The design =
you sketched out is admittedly quite clever but it's not even in the =
same ballpark with respect to complexity. And, as you pointed out, the =
other suggestion around symmetric keys has rather different security =
properties while still adding complexity. Adding symmetric key support =
isn't something that can just be added on =
easily.&nbsp;</div></div></div></div></blockquote></div><div><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" style=3D"margin: =
0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; =
border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div =
class=3D""><div class=3D""><br class=3D""></div><div class=3D"">2. The =
advice for the RS to store a set of previously used nonces to prevent =
replay will also hamper scalability, especially in large deployments =
where such state would need to be replicated to all servers (or use =
sticky load balancing, which comes with its own problems). This violates =
the statelessness of HTTP, and it also potentially breaks idempotency of =
operations: Think of the case where the JWT validation and replay =
protection is done at an API gateway but then the call to the backend =
API server fails for a transient reason. The client (or a proxy/library) =
cannot simply replay the (idempotent) request in this case because it =
will be rejected by the gateway. It must instead recreate the DPoP JWT, =
incurring additional overheads.</div></div></blockquote><div =
class=3D""><br class=3D""></div><div class=3D"">The actual value of =
replay checking on jti is somewhat questionable. The DPoP JWT only =
transits between client and server so a TLS MITM is likely needed to =
steal a DPoP JWT. But we are assuming TLS works here. And an active MITM =
could thwart this check by just being first to present DPoP JWT. I think =
the jti check made its way into the draft mostly because it seemed like =
something was needed to try and bring it closer to the TLS PoP models. =
Being aware of the scalability concerns, I did endeavor to write the =
text in such a way so as to leave some wiggle room in =
implementations/deployments with text like '"jti" SHOULD be used by the =
server for replay detection and prevention` and [ensure that] 'within a =
reasonable consideration of accuracy and resource utilization, a JWT =
with the same "jti" value has not been received previously'. The idea =
being that using something eventually consistent or even local only to =
the runtime instance would be permissible. Perhaps that allowance and =
the rational could be made more clear? Or would you suggest to do away =
with the jti replay stuff al? Or something else?<span =
class=3D"Apple-converted-space">&nbsp;</span></div></div></div></div></blo=
ckquote><blockquote type=3D"cite" class=3D""><div class=3D""><div =
dir=3D"ltr" style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div class=3D"gmail_quote"><blockquote =
class=3D"gmail_quote" style=3D"margin: 0px 0px 0px 0.8ex; =
border-left-width: 1px; border-left-style: solid; border-left-color: =
rgb(204, 204, 204); padding-left: 1ex;"><div class=3D""><div =
class=3D""><br class=3D""></div><div class=3D"">3. Minor: The use of a =
custom header for communicating the DPoP proof will require additional =
CORS configuration on top of that already done for the Authorization =
header, and so adds a small amount of additional friction for adoption. =
Given that CORS configuration changes often require approval by a =
security team, this may make more of an impact than you'd =
expect.</div></div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">Feels really minor. I mean, we could try to roll everything =
up under one header. But it does seem unwarranted and would complicate =
things - at least in the model we've got now where the proof is sent the =
same way ono all types of requests.<span =
class=3D"Apple-converted-space">&nbsp;</span></div></div></div></div></blo=
ckquote><blockquote type=3D"cite" class=3D""><div class=3D""><div =
dir=3D"ltr" style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><div class=3D""><br class=3D""></div><blockquote =
class=3D"gmail_quote" style=3D"margin: 0px 0px 0px 0.8ex; =
border-left-width: 1px; border-left-style: solid; border-left-color: =
rgb(204, 204, 204); padding-left: 1ex;"><div class=3D""><div =
class=3D"">It's also not clear to me exactly what threat the anti-replay =
nonce is protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.</div><div class=3D""><br =
class=3D""></div><div class=3D"">I have a tentative suggestion for an =
alternative design which avoids these problems, but at a cost of =
potentially more complexity elsewhere. I'll summarise it here for =
consideration:</div><div class=3D""><br class=3D""></div><div =
class=3D"">1. The client obtains an access token in the normal way. When =
calling the token endpoint it provides an EC/okp public key as the =
confirmation key to be associated with the access/refresh =
tokens.</div><div class=3D""><br class=3D""></div><div class=3D"">2. The =
first time the client calls an RS it passes its access token in the =
Authorization: Bearer header as normal. (If the RS doesn't support DPoP =
then this would just succeed and no further action is required by the =
client - allowing clients to opportunistically ask for DPoP without =
needing a priori knowledge of RS capabilities).</div><div class=3D""><br =
class=3D""></div><div class=3D"">3. The RS introspects the access token =
and learns the EC public key associated with the access token. As there =
is no DPoP proof with the access token, the RS will generate a challenge =
in the following way:</div><div class=3D"">&nbsp; &nbsp;<span =
class=3D"Apple-converted-space">&nbsp;</span>o The RS generates an =
ephemeral EC key pair for the same curve as the confirmation key (e.g. =
P-256 or X25519).</div><div class=3D"">&nbsp; &nbsp;<span =
class=3D"Apple-converted-space">&nbsp;</span>o The RS stores the =
ephemeral private key somewhere, associated with this access token (see =
below for a scalable implementation choice)</div><div class=3D"">&nbsp; =
&nbsp;<span class=3D"Apple-converted-space">&nbsp;</span>o The RS =
encodes the ephemeral public key into a JWK (epk) and base64url-encodes =
it. It uses this as a challenge to the client by sending back a 401 =
response with WWW-Authenticate: DPoP &lt;encoded-epk&gt;</div><div =
class=3D""><br class=3D""></div><div class=3D"">4. The client decodes =
the epk challenge and performs an ECDH key agreement between its private =
key and the challenge epk as per the method described for the existing =
JWA ECDH-ES encryption algorithm. Rather than deriving an AES key =
however, it derives a HMAC key for HS256. The "apu" value is set to the =
access token (string value as ASCII bytes) and the "apv" value is set to =
the hostname of the RS (e.g. "<a href=3D"http://api.example.com/" =
target=3D"_blank" class=3D"">api.example.com</a>"). This ensures that =
the derived key is cryptographically bound to the context in which it is =
used.</div><div class=3D""><br class=3D""></div><div class=3D"">5. The =
client uses the HMAC key to create a DPoP proof JWT much like the one in =
the current draft, but signed using the HS256 key. If a "kid" field was =
present in the challenge JWK sent by the RS then the same value MUST be =
used in the "kid" header of this discharge JWT. It retries its original =
request sending Authorization: DPoP &lt;hmac-jwt&gt; =
at=3D&lt;access_token&gt;.</div><div class=3D""><br class=3D""></div><div =
class=3D"">6. The RS uses its stored ephemeral private key to derive the =
same HMAC key and verify the DPoP discharge JWT. If it validates and all =
fields are correct then the request is allowed.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Efficient implementation =
trick:</div><div class=3D"">Because the client is required to copy and =
"kid" value from the challenge JWK, the RS can preemptively carry out =
the ECDH key agreement immediately and generate the derived HMAC key. =
The RS can then encrypt this derived key using a local authenticated =
encryption key (e.g. AES-GCM) and use that encrypted value as the "kid" =
value in the challenge (perhaps along with some context or an expiry =
time). That way the RS only needs to decrypt this kid value rather than =
performing the ECDH key agreement on every request. This also avoids the =
need for the RS to store any per-client state locally.</div><div =
class=3D""><br class=3D""></div><div class=3D"">The challenge-response =
nature of the scheme prevents traditional replay attacks in the case =
where a DPoP discharge JWT is accidentally leaked through server logs or =
some other flaw, without needing to store nonces on the server. Using =
the RS's hostname in the key derivation process prevents mitm attacks in =
a similar way to how FIDO/WebAuthn prevents this. Most importantly, once =
a HS256 key has been derived between a client and RS they can reuse that =
key for multiple requests, reducing the overhead of the ECDH key =
agreement step. Either side can decide as a matter of policy how long to =
let this occur and when to trigger a fresh challenge-response.</div><div =
class=3D""><br class=3D""></div><div class=3D"">Because this fits within =
the standard HTTP authentication framework, it also requires no =
additional CORS configuration and is relatively easy to plug in to =
existing HTTP client libraries.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The main downside of this approach to =
me is the fact that you can't simply reuse an existing JWT library to =
implement it, and so it will take time for client libs to develop. =
(Although I think this might be achievable now with existing *COSE* =
libraries). This would increase the risk of people hand-rolling =
solutions, rather than using well-tested libraries. On the other hand, =
it uses fairly widely supported primitives so e.g. an implementation =
using WebCrypto is probably only a few dozen lines of code.</div><div =
class=3D""><br class=3D""></div><div class=3D"">-- Neil</div><div =
class=3D""><div class=3D""><br class=3D""><div class=3D""><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On 31 =
Oct 2019, at 19:20, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org" =
target=3D"_blank" =
class=3D"">bcampbell=3D40pingidentity.com@dmarc.ietf.org</a>&gt; =
wrote:</div><br class=3D""><div class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"">Hello WG,<span =
class=3D"Apple-converted-space">&nbsp;</span><br class=3D""></div><div =
class=3D""><br class=3D""></div><div class=3D"">Just a quick note to let =
folks know that -03 of the DPoP draft was published earlier today. The =
usual various document links are in the forwarded message below and the =
relevant snippet from the doc history with a summary of the changes is =
included here for convenience.<span =
class=3D"Apple-converted-space">&nbsp;</span><br class=3D""></div><div =
class=3D""><br class=3D""></div><div class=3D"">Hopefully folks will =
have time to read the (relativity) short document before the meeting(s) =
in Singapore where (spoiler alert) I plan to ask that the WG consider =
adoption of the draft.<span =
class=3D"Apple-converted-space">&nbsp;</span><br class=3D""></div><div =
class=3D""><br class=3D""></div><div class=3D"">Thanks,</div><div =
class=3D""><br class=3D"">&nbsp;-03<br class=3D"">&nbsp; &nbsp;o =
&nbsp;rework the text around uniqueness requirements on the jti claim =
in<br class=3D"">&nbsp; &nbsp; &nbsp;<span =
class=3D"Apple-converted-space">&nbsp;</span>the DPoP proof JWT<br =
class=3D"">&nbsp; &nbsp;o &nbsp;make tokens a bit smaller by using =
"htm", "htu", and "jkt" rather<br class=3D"">&nbsp; &nbsp; &nbsp;<span =
class=3D"Apple-converted-space">&nbsp;</span>than "http_method", =
"http_uri", and "jkt#S256" respectively<br class=3D"">&nbsp; &nbsp;o =
&nbsp;more explicit recommendation to use mTLS if that is available<br =
class=3D"">&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br =
class=3D"">&nbsp; &nbsp;o &nbsp;editorial updates</div><div =
class=3D""><div class=3D""><br class=3D""><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">---------- Forwarded message =
---------<br class=3D"">From:<span =
class=3D"Apple-converted-space">&nbsp;</span><span dir=3D"auto" =
class=3D"">&lt;<a href=3D"mailto:internet-drafts@ietf.org" =
target=3D"_blank" class=3D"">internet-drafts@ietf.org</a>&gt;</span><br =
class=3D"">Date: Thu, Oct 31, 2019 at 11:53 AM<br class=3D"">Subject: =
New Version Notification for draft-fett-oauth-dpop-03.txt<br =
class=3D"">To: Torsten Lodderstedt &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank" =
class=3D"">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a =
href=3D"mailto:mbj@microsoft.com" target=3D"_blank" =
class=3D"">mbj@microsoft.com</a>&gt;, John Bradley &lt;<a =
href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank" =
class=3D"">ve7jtb@ve7jtb.com</a>&gt;, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank" =
class=3D"">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a =
href=3D"mailto:david@alkaline-solutions.com" target=3D"_blank" =
class=3D"">david@alkaline-solutions.com</a>&gt;, Daniel Fett &lt;<a =
href=3D"mailto:mail@danielfett.de" target=3D"_blank" =
class=3D"">mail@danielfett.de</a>&gt;<br class=3D""></div><br =
class=3D""><br class=3D""><br class=3D"">A new version of I-D, =
draft-fett-oauth-dpop-03.txt<br class=3D"">has been successfully =
submitted by Brian Campbell and posted to the<br class=3D"">IETF =
repository.<br class=3D""><br class=3D"">Name:&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br class=3D"">Revision:&nbsp; =
&nbsp; &nbsp; &nbsp;03<br class=3D"">Title:&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; OAuth 2.0 Demonstration of Proof-of-Possession at the Application =
Layer (DPoP)<br class=3D"">Document date:&nbsp; 2019-10-30<br =
class=3D"">Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual =
Submission<br class=3D"">Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br =
class=3D"">URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span =
class=3D"Apple-converted-space">&nbsp;</span><a =
href=3D"https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt"=
 rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.t=
xt</a><br class=3D"">Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/</a><br =
class=3D"">Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://tools.ietf.org/html/draft-fett-oauth-dpop-03</a><br =
class=3D"">Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop</a>=
<br class=3D"">Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a=
><br class=3D""><br class=3D"">Abstract:<br class=3D"">&nbsp; &nbsp;This =
document describes a mechanism for sender-constraining OAuth 2.0<br =
class=3D"">&nbsp; &nbsp;tokens via a proof-of-possession mechanism on =
the application level.<br class=3D"">&nbsp; &nbsp;This mechanism allows =
for the detection of replay attacks with access<br class=3D"">&nbsp; =
&nbsp;and refresh tokens.<br class=3D""><br class=3D""><br class=3D""><br =
class=3D""><br class=3D"">Please note that it may take a couple of =
minutes from the time of submission<br class=3D"">until the htmlized =
version and diff are available at<span =
class=3D"Apple-converted-space">&nbsp;</span><a =
href=3D"http://tools.ietf.org/" rel=3D"noreferrer" target=3D"_blank" =
class=3D"">tools.ietf.org</a>.<br class=3D""><br class=3D"">The IETF =
Secretariat<br class=3D""><br class=3D""></div></div></div></div><br =
class=3D""><i style=3D"margin: 0px; padding: 0px; border: 0px none; =
outline: currentcolor none 0px; vertical-align: baseline; =
background-image: none; background-attachment: scroll; background-color: =
rgb(255, 255, 255); font-family: proxima-nova-zendesk, system-ui, =
-apple-system, system-ui, &quot;Segoe UI&quot;, Roboto, Oxygen-Sans, =
Ubuntu, Cantarell, &quot;Helvetica Neue&quot;, Arial, sans-serif; color: =
rgb(85, 85, 85); background-position: 0% 0%; background-repeat: repeat =
repeat;" class=3D""><span style=3D"margin: 0px; padding: 0px; border: =
0px none; outline: currentcolor none 0px; vertical-align: baseline; =
background-image: none; background-attachment: scroll; background-color: =
transparent; font-family: proxima-nova-zendesk, system-ui, =
-apple-system, BlinkMacSystemFont, &quot;Segoe UI&quot;, Roboto, =
Oxygen-Sans, Ubuntu, Cantarell, &quot;Helvetica Neue&quot;, Arial, =
sans-serif; font-weight: 600; background-position: 0% 0%; =
background-repeat: repeat repeat;" class=3D""><font size=3D"2" =
class=3D"">CONFIDENTIALITY NOTICE: This email may contain confidential =
and privileged material for the sole use of the intended recipient(s). =
Any review, use, distribution or disclosure by others is strictly =
prohibited..&nbsp; If you have received this communication in error, =
please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank =
you.</font></span></i>_______________________________________________<br =
class=3D"">OAuth mailing list<br class=3D""><a =
href=3D"mailto:OAuth@ietf.org" target=3D"_blank" =
class=3D"">OAuth@ietf.org</a><br class=3D""><a =
href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank" =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth</a><br =
class=3D""></div></blockquote></div><br =
class=3D""></div></div></div></blockquote></div></div><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><i style=3D"font-size: 14px; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; orphans: auto; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; text-decoration: none; margin: 0px; =
padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; =
background-color: rgb(255, 255, 255); font-family: proxima-nova-zendesk, =
system-ui, -apple-system, system-ui, &quot;Segoe UI&quot;, Roboto, =
Oxygen-Sans, Ubuntu, Cantarell, &quot;Helvetica Neue&quot;, Arial, =
sans-serif; color: rgb(85, 85, 85); background-position: initial =
initial; background-repeat: initial initial;" class=3D""><span =
style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; =
vertical-align: baseline; background-color: transparent; font-family: =
proxima-nova-zendesk, system-ui, -apple-system, BlinkMacSystemFont, =
&quot;Segoe UI&quot;, Roboto, Oxygen-Sans, Ubuntu, Cantarell, =
&quot;Helvetica Neue&quot;, Arial, sans-serif; font-weight: 600; =
background-position: initial initial; background-repeat: initial =
initial;" class=3D""><font size=3D"2" class=3D"">CONFIDENTIALITY NOTICE: =
This email may contain confidential and privileged material for the sole =
use of the intended recipient(s). Any review, use, distribution or =
disclosure by others is strictly prohibited.&nbsp; If you have received =
this communication in error, please notify the sender immediately by =
e-mail and delete the message and any file attachments from your =
computer. Thank you.</font></span></i></div></blockquote></div><br =
class=3D""></div></div></body></html>=

--Apple-Mail=_3030C55A-5B01-4E96-B160-93AD0A2AFDFF--


From nobody Tue Nov 19 19:40:42 2019
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BCFF12002E for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 19:40:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.595
X-Spam-Level: *
X-Spam-Status: No, score=1.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1ov6TXYaiX48 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 19:40:37 -0800 (PST)
Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-dm3nam06on071e.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe56::71e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAB62120288 for <oauth@ietf.org>; Tue, 19 Nov 2019 19:40:37 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iTpCPA+Mpl1n3mshDWIM2INu7D63kORBQVQjycqa3R/SkB3/0GBgNrcY4FPFZmpUoyuM2Mfn68x22skZbh7nMO9OGTSV/zyppHOe1fs4m6yCfngANO44Llli+5XPR+m1xHcwVZ1bUqiRk1vEqDZZQ6zB9ce5MKsmB+NsYJs3tDYJmI4hckoXZgoJJgaO7fvUhmYyREG3sG/1VMlYrGCcYzNpAhHJY48QtpacmX/rivZATxqWKvAGaTNrNshLQ9kr26JFaIZlCRL2rK9XH/gYVBYKRHrJqeISlflekWeftXChB1/p4Fcc8notOEQNO1eEUypaSk/JsSr0ygg0Wlk+tw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9hESJc0ISrkt1LfxCQ1lTWhs07ruJ0DiwU4krQXDwdY=; b=K4A7j77yPTTTYDXgTuL9XHDvThHILhX26lYTI3cTS9IqP1dohmmEsr45uWVziidnM+YTS8T5VROdvgoHBg7IJqaNECVzY6aYdkxQiVV8JFIH243tac6PrW8F0FB4hXvtpFH9LZ3OBcukcpw5e9U+1JiibEY8QRsxbM0VOMNJhGKIYvhzAxZEKfcSbGzhgJqx2fuqFjTRlkClcb2zbLi8RaacxSWBKmWKKHanPH3WB2bBpdBIinrK4XcLhXbUd7iBn/eUIzKsMbzRO9gIfSSzbL/2fXnDJpFm5H5EgXPP2KNZuohpk9Tk4jOVnGfPHn/Y/IKcIIV/uOl5sv4296RbmA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9hESJc0ISrkt1LfxCQ1lTWhs07ruJ0DiwU4krQXDwdY=; b=c0b2e5gmQm7m7u0U5OlcOiCzhi9NlZhKGTR5UNVkKpJmHT/2+34bM0swdvCQy8AVlgL/4Z9/WZZgm/idcEdqMnRaGoTI95nSvl5Ug2iFlCxIWxU7Y2bQjHkQ3gBHfPlJl1ungqxdqdmN/i6Zu2SSET6xbYvuGwFQsGqJX5bnaTI=
Received: from BN8PR00MB0563.namprd00.prod.outlook.com (20.179.72.150) by BN8PR00MB0625.namprd00.prod.outlook.com (20.179.73.97) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2511.0; Wed, 20 Nov 2019 03:40:35 +0000
Received: from BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::7153:fb4c:4bda:a31e]) by BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::7153:fb4c:4bda:a31e%9]) with mapi id 15.20.2512.000; Wed, 20 Nov 2019 03:40:35 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
CC: "torsten@lodderstedt.net" <torsten@lodderstedt.net>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, 'Andrey Labunets' <isciurus@fb.com>, Daniel Fett <fett@danielfett.de>
Thread-Topic: WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
Thread-Index: AdWevCfGnMmwe7mHRl6H8n/9kHkRog==
Date: Wed, 20 Nov 2019 03:40:34 +0000
Message-ID: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=985aa433-b8e7-454b-b6a4-0000e9f5e36d; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-19T09:31:22Z;  MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; 
x-originating-ip: [203.116.192.194]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 03953eb3-33f9-4a30-c921-08d76d6b66f7
x-ms-traffictypediagnostic: BN8PR00MB0625:
x-microsoft-antispam-prvs: <BN8PR00MB062564EBAD3FB1E5968F762FF54F0@BN8PR00MB0625.namprd00.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 02272225C5
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(396003)(136003)(366004)(189003)(199004)(4326008)(25786009)(64756008)(52536014)(66946007)(66476007)(606006)(66446008)(66556008)(7696005)(486006)(76116006)(66066001)(8990500004)(2420400007)(15650500001)(3846002)(6116002)(7736002)(6916009)(790700001)(7110500001)(71190400001)(14444005)(256004)(71200400001)(86362001)(74316002)(5660300002)(2906002)(2351001)(10090500001)(66574012)(5640700003)(186003)(81166006)(33656002)(102836004)(8676002)(6436002)(966005)(8936002)(81156014)(1730700003)(6506007)(22452003)(99286004)(10290500003)(54896002)(6306002)(236005)(9686003)(2501003)(26005)(14454004)(54906003)(316002)(476003)(478600001)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN8PR00MB0625; H:BN8PR00MB0563.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: /9iWixnQTlM0rcEU7dJ3k/1TdHpAboYm6Vu1unXPuznx8t3dpREIOoz0OgrEP9kN0TwF8/Y+pSHUBvjjEK9pcUscA7Wiz9I3ubhDwE1FnfbG6K4L9CMT76zjGof9kDrJ/aNhfCXYgxxGEZxFiALS9m9D/N/MTMTVI4LqBIPIb04P/RAJgdRefSlUyuUF92SmBEbd/4d408nqGNk07cYD55x7LGiWH5XjERs4y9rR9BfWKWKWyKT1BimxBLsVkIgSWRv/9MgLOcACgoR4F+nDX07+q7IaomiBH+86s0OucggoI0bmhgZeyaNjkTj3SU4UPeCy5k/Qobr0TMhljPbue6naTS1cBYfv5fXmQNiz/utoXryj6vLKSo2pnRxVSjZC+em6XkKNp/BF7YXdvWLGwCsBuz5yn/PZAJfqO2hdR+UJUCPI2YML/U+SLNxRH6XUIXJSW+GrqCUIW2nUgriYWyy1EVF+QEuUCGvZmpaRMyo=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BN8PR00MB056369C04536770FF5B90512F54F0BN8PR00MB0563namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 03953eb3-33f9-4a30-c921-08d76d6b66f7
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Nov 2019 03:40:35.0259 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 0EWEw1HQTIt4HFPZq3+1tRWTRCJy0zx4U4GwSZd1H94e8A5fphcYgHmXctkdsVle+r++xkSb3u0WW7v/xZH8og==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR00MB0625
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/EGp_W1r-6x4oJm-gOLHuP259_VM>
Subject: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Nov 2019 03:40:40 -0000

--_000_BN8PR00MB056369C04536770FF5B90512F54F0BN8PR00MB0563namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I did a complete read of draft-ietf-oauth-security-topics-13<https://tools.=
ietf.org/html/draft-ietf-oauth-security-topics-13>.  My review comments fol=
low, divided into substantive and editorial sections.

SUBSTANTIVE

2. Attacker Model, (A1) - Attacker description (A1) actually describes two =
kinds of attacks - the Web Attackers attack at the start of the bullet and =
the phishing attack, whose description starts with "It must also be assumed=
 that web attackers can lure the user".  Separate these two distinct attack=
s in the description, labelling the phishing attack (A2).

3.1 Protecting Redirect-Based Flows, paragraph 3 - Please state that the us=
e of "nonce" as defined in OpenID Connect is another means of preventing CS=
RF attacks (similar to how state can be used for this).

3.1.1. Authorization Code Grant - This starts by saying that "Clients utili=
zing the authorization grant type MUST use PKCE" but later contradicts this=
 MUST by saying "OpenID Connect clients MAY use the "nonce" parameter of th=
e OpenID Connect ... for the same purpose".  At the very least, reword the =
second to say "Alternatively, OpenID Connect clients...", making it clear t=
hat MUST does not apply to Connect clients.  Or consider other editorial wa=
ys to make this distinction even clearer.

3.1.2. Implicit Grant - The statement "no viable mechanism exists to crypto=
graphically bind access tokens issued in the authorization response to a ce=
rtain client" isn't actually true.  Please describe how the OpenID Connect =
ID Token achieves this for the "id_token token" and "code id_token token" r=
esponse types via the "at_hash" claim in this paragraph, and appropriately =
qualify the unconditional statement cited.

3.3. Access Token Privilege Restriction, last paragraph - This paragraph is=
 essentially talking about placing audience restrictions on access tokens, =
but fails to use the standard "audience" term.  Please revise to explicitly=
 describe utilizing audience restrictions for access tokens.

4.1.3. Proposed Countermeasures, second bullet - Please explain how "Client=
s MAY drop fragments" in such a way that the recommendation is actionable w=
ithout having to go and read the reference.

4.3.2.  Access Token in Browser History - Strengthen the prohibition on pas=
sing access tokens in query parameters along the following lines: "Clients =
MUST NOT pass access tokens as a URI query parameter in the way described i=
n Section 2.3 of [RFC 6750]."  (As background, note that the OpenID Certifi=
cation testing software treats doing so as a FAILURE, preventing certificat=
ion.)

4.4.1. Attack Description - Item 2 says "The attacker intercepts this reque=
st and changes the user's selection to "A-AS"."  Please expand this descrip=
tion to say *how* the attacker accomplishes this.  (Most readers of this sp=
ec will not be security experts, so this should be spelled out for them.)

4.4.1. Attack Description - Item 4 says "Now the attacker intercepts this r=
esponse and changes the redirection such that the user is being redirected =
to H-AS."  Like the previous comment, please expand this description to say=
 *how* the attacker accomplishes this.

4.4.1. Attack Description - The last bullet cites attacks on OpenID Connect=
.  Again, to make this description more accessible to readers, it would be =
useful to include a one-sentence description of each of the pertinent attac=
ks here, saying how they work and what they accomplish.

4.5.1. Attack Description - Item 3 says "The attacker injects the stolen au=
thorization code in the response of the authorization server to the legitim=
ate client".  As per pervious comments, please expand this description to s=
ay *how* the attacker accomplishes this.

4.5.1. Attack Description, item 4 - Clearly say whether the client_id and c=
lient_secret used are those of the attacker's client or those of the client=
 being attacked.  If the latter, say how these values for the client being =
attacked were obtained by the attacker.

4.5.3. Proposed Countermeasures - The draft uses the term "pre-warmed secre=
ts" without defining the term or providing a citation for it.  Please do bo=
th.

4.7.1. Proposed Countermeasures - Change "Alternatively, PKCE provides CSRF=
 protection" to "Alternatively, PKCE or the "nonce" provide CSRF protection=
".

4.7.1. Proposed Countermeasures - Change "If an authorization server does n=
ot support PKCE, "state" MUST be used for CSRF protection" to "If an author=
ization server does not support PKCE, "state" or "nonce" MUST be used for C=
SRF protection".

4.7.1. Proposed Countermeasures, last paragraph - Expand the oblique phrase=
 "standard CSRF defenses" to give examples of such defenses and citations f=
or them.  As currently written, this countermeasure won't be comprehensible=
 or actionable by many readers.

4.8.1.1. Metadata - This section suggests the use of a "resource_servers" m=
etadata value.  This isn't defined by RFC 8414 nor do I see it the IANA OAu=
th Authorization Server Metadata registry at https://www.iana.org/assignmen=
ts/oauth-parameters/oauth-parameters.xhtml#authorization-server-metadata.  =
Is this something that's been standardized elsewhere?  If so, please add a =
citation.  If not, please clearly say that this metadata value is not stand=
ardized, and is therefore unlikely to be interoperable.

4.8.1.1. Metadata - This section suggests the use a "access_token_resource_=
server" token response value.  Please likewise clearly say that this parame=
ter isn't a standard.

4.8.1.2. Sender-Constrained Access Tokens - List DPoP as one of the possibi=
lities for demonstrating proof of possession.

4.8.1.3. Audience Restricted Access Tokens, next to last paragraph - When y=
ou list MTLS, also please state that the MTLS key can be used as a correlat=
ion handle, since it is the same for connections to all sites.

4.12. Refresh Token Protection - The draft says "refresh tokens belonging t=
o the same grant may share a common id".  Augment this description to say w=
hat this ID is and where it is located, and if there's a pertinent standard=
 or other reference for this ID, please include a citation.


EDITORIAL

1. Introduction - The wording "and, as the foundation of OpenID Connect [Op=
enID<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#ref-Op=
enID>], identity providing" is awkward.  Change to "and as the basis for fe=
derated login using OpenID Connect [OpenID]".

1. Introduction - Change "While OAuth was used in a variety of scenarios an=
d different kinds of deployments, the following challenges could be observe=
d" to "While OAuth is used in a variety of scenarios and different kinds of=
 deployments, the following challenges can be observed".

1. Introduction, bullet 1 - Add citations for the first uses of the terms "=
CSRF" and "referer header".

Many locations - You have misspelled the "referer" header name as "referrer=
" throughout the document.  (Yes, "referrer" is the correct English spellin=
g.  The header name uses an English misspelling.)

1. Introduction, last paragraph - Change "such as [RFC7591<https://tools.ie=
tf.org/html/rfc7591>] and [RFC8414<https://tools.ietf.org/html/rfc8414>]" t=
o "such as the OAuth 2.0 Dynamic Client Registration Protocol [RFC7591<http=
s://tools.ietf.org/html/rfc7591>] and OAuth 2.0 Authorization Server Metada=
ta [RFC8414<https://tools.ietf.org/html/rfc8414>]".

1. Introduction, last paragraph - Delete "As a challenge to the community",=
 as it doesn't add any value to the exposition.

2. Attacker Model, (A3) - Add a citation for the first use of the term "mix=
-up attack" (and consider deleting "so-called").

3.1.1. Authorization Code Grant - Change "authorization grant type" to "aut=
horization code grant type".

3.1.2. Implicit Grant - The canonical order of composite response types is =
alphabetical.  Therefore, please change "token id_token" to "id_token token=
" and "code token id_token" to "code id_token token".

3.1.2. Implicit Grant, last paragraph - Add ", such as the "code id_token" =
response type" at the end of the first sentence.

3.3. Access Token Privilege Restriction, last paragraph - This paragraph is=
 essentially talking about placing audience restrictions on access tokens, =
but fails to use the standard "audience" term.  Please revise to explicitly=
 describe including audience restrictions for access tokens.

3.4. Resource Owner Password Grant - Include citations where you currently =
say (WebCrypto, WebAuthn).

4.1. Insufficient Redirect URI Validation - Add citations for the "Several =
successful attacks..." mentioned.

4.8.1.2. Sender-Constrained Access Tokens - Delete "so-called".

Many locations - You use the term "id", which should always be spelled "ID"=
.  (The English word "id" has a completely different meaning than "ID".)  B=
e sure to also change instances of "ids" to "IDs".

4.8.1.3. Audience Restricted Access Tokens - Delete "basically".

Many locations - The draft often uses the word "which" when you mean "that"=
.  For instance, in 4.9.2, please change "which could" to "that could" and =
in 4.11 change "which are" to "that are".  There's lots of places to look u=
p the difference in meaning, but a rule of thumb that's usually right is th=
at if you don't have a comma before the "which", it should probably be "tha=
t".

4.12. Refresh Token Protection - Change "legit" to "legitimate".

May locations - The spelling of ID Token is inconsistent in the draft - som=
etimes using "token" and sometimes using "Token".  I would suggest consiste=
ntly using the spelling from OpenID Connect, which is "ID Token".

5.  Acknowledgements - If you choose to add me to the acknowledgements, ple=
ase add me as "Michael B. Jones".  (Mike Jones is way too common a name.)

Thanks for taking these comments into account.

                                                       -- Mike



--_000_BN8PR00MB056369C04536770FF5B90512F54F0BN8PR00MB0563namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
span.EmailStyle19
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">I did a complete read of <a href=3D"https://tools.ie=
tf.org/html/draft-ietf-oauth-security-topics-13">
draft-ietf-oauth-security-topics-13</a>.&nbsp; My review comments follow, d=
ivided into substantive and editorial sections.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">SUBSTANTIVE<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">2. Attacker Model, (A1) &#8211; Attacker description=
 (A1) actually describes two kinds of attacks &#8211; the Web Attackers att=
ack at the start of the bullet and the phishing attack, whose description s=
tarts with &#8220;<span style=3D"font-family:Consolas;color:black;backgroun=
d:white">It
 must also be assumed that web attackers can lure the user</span>&#8221;.&n=
bsp; Separate these two distinct attacks in the description, labelling the =
phishing attack (A2).<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1 Protecting Redirect-Based Flows, paragraph 3 &#8=
211; Please state that the use of &#8220;nonce&#8221; as defined in OpenID =
Connect is another means of preventing CSRF attacks (similar to how state c=
an be used for this).<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1.1. Authorization Code Grant &#8211; This starts =
by saying that &#8220;<span style=3D"font-family:Consolas;color:black;backg=
round:white">Clients utilizing the authorization grant type MUST use PKCE</=
span>&#8221; but later contradicts this MUST by saying
 &#8220;<span style=3D"font-family:Consolas;color:black;background:white">O=
penID Connect clients MAY use the &quot;nonce&quot; parameter of the OpenID=
 Connect &#8230; for the same purpose</span>&#8221;.&nbsp; At the very leas=
t, reword the second to say &#8220;Alternatively, OpenID Connect clients&#8=
230;&#8221;,
 making it clear that MUST does not apply to Connect clients.&nbsp; Or cons=
ider other editorial ways to make this distinction even clearer.<o:p></o:p>=
</p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1.2. Implicit Grant &#8211; The statement &#8220;<=
span style=3D"font-family:Consolas;color:black;background:white">no viable =
mechanism exists to cryptographically bind access tokens issued in the auth=
orization response to a certain client</span>&#8221; isn&#8217;t
 actually true.&nbsp; Please describe how the OpenID Connect ID Token achie=
ves this for the &#8220;id_token token&#8221; and &#8220;code id_token toke=
n&#8221; response types via the &#8220;at_hash&#8221; claim in this paragra=
ph, and appropriately qualify the unconditional statement cited.<o:p></o:p>=
</p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.3. Access Token Privilege Restriction, last paragr=
aph &#8211; This paragraph is essentially talking about placing audience re=
strictions on access tokens, but fails to use the standard &#8220;audience&=
#8221; term.&nbsp; Please revise to explicitly describe utilizing
 audience restrictions for access tokens.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.1.3. Proposed Countermeasures, second bullet &#821=
1; Please explain how &#8220;Clients MAY drop fragments&#8221; in such a wa=
y that the recommendation is actionable without having to go and read the r=
eference.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.3.2.&nbsp; Access Token in Browser History &#8211;=
 Strengthen the prohibition on passing access tokens in query parameters al=
ong the following lines: &#8220;Clients MUST NOT pass access tokens as a UR=
I query parameter in the way described in Section 2.3
 of [RFC 6750].&#8221;&nbsp; (As background, note that the OpenID Certifica=
tion testing software treats doing so as a FAILURE, preventing certificatio=
n.)<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.4.1. Attack Description &#8211; Item 2 says &#8220=
;<span style=3D"font-family:Consolas;color:black;background:white">The atta=
cker intercepts this request and changes the user's selection to &quot;A-AS=
&quot;.</span>&#8221;&nbsp; Please expand this description to say *<b>how</=
b>*
 the attacker accomplishes this.&nbsp; (Most readers of this spec will not =
be security experts, so this should be spelled out for them.)<o:p></o:p></p=
>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.4.1. Attack Description &#8211; Item 4 says &#8220=
;<span style=3D"font-family:Consolas;color:black;background:white">Now the =
attacker intercepts this response and changes the redirection such that the=
 user is being redirected to H-AS.</span>&#8221;&nbsp; Like
 the previous comment, please expand this description to say *<b>how</b>* t=
he attacker accomplishes this.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.4.1. Attack Description &#8211; The last bullet ci=
tes attacks on OpenID Connect.&nbsp; Again, to make this description more a=
ccessible to readers, it would be useful to include a one-sentence descript=
ion of each of the pertinent attacks here, saying
 how they work and what they accomplish.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.5.1. Attack Description &#8211; Item 3 says &#8220=
;<span style=3D"font-family:Consolas;color:black;background:white">The atta=
cker injects the stolen authorization code in the response of the authoriza=
tion server to the legitimate client</span>&#8221;.&nbsp; As
 per pervious comments, please expand this description to say *<b>how</b>* =
the attacker accomplishes this.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.5.1. Attack Description, item 4 &#8211; Clearly sa=
y whether the client_id and client_secret used are those of the attacker&#8=
217;s client or those of the client being attacked.&nbsp; If the latter, sa=
y how these values for the client being attacked were
 obtained by the attacker.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.5.3. Proposed Countermeasures &#8211; The draft us=
es the term &#8220;pre-warmed secrets&#8221; without defining the term or p=
roviding a citation for it.&nbsp; Please do both.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.7.1. Proposed Countermeasures &#8211; Change &#822=
0;<span style=3D"font-family:Consolas;color:black;background:white">Alterna=
tively, PKCE provides CSRF protection</span>&#8221; to &#8220;<span style=
=3D"font-family:Consolas;color:black;background:white">Alternatively,
 PKCE or the &quot;nonce&quot; provide CSRF protection</span>&#8221;.<o:p><=
/o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.7.1. Proposed Countermeasures &#8211; Change &#822=
0;<span style=3D"font-family:Consolas;color:black;background:white">If an a=
uthorization server does not support PKCE, &quot;state&quot; MUST be used f=
or CSRF protection</span>&#8221; to &#8220;<span style=3D"font-family:Conso=
las;color:black;background:white">If
 an authorization server does not support PKCE, &quot;state&quot; or &quot;=
nonce&quot; MUST be used for CSRF protection</span>&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.7.1. Proposed Countermeasures, last paragraph &#82=
11; Expand the oblique phrase &#8220;standard CSRF defenses&#8221; to give =
examples of such defenses and citations for them.&nbsp; As currently writte=
n, this countermeasure won&#8217;t be comprehensible or actionable
 by many readers.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.1. Metadata &#8211; This section suggests the =
use of a <span style=3D"font-family:Consolas;color:black;background:white">
&quot;resource_servers&quot;</span> metadata value.&nbsp; This isn&#8217;t =
defined by RFC 8414 nor do I see it the IANA OAuth Authorization Server Met=
adata registry at
<a href=3D"https://www.iana.org/assignments/oauth-parameters/oauth-paramete=
rs.xhtml#authorization-server-metadata">
https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#au=
thorization-server-metadata</a>.&nbsp; Is this something that&#8217;s been =
standardized elsewhere?&nbsp; If so, please add a citation.&nbsp; If not, p=
lease clearly say that this metadata value is not standardized,
 and is therefore unlikely to be interoperable.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.1. Metadata &#8211; This section suggests the =
use a <span style=3D"font-family:Consolas;color:black;background:white">
&quot;access_token_resource_server&quot;</span> token response value.&nbsp;=
 Please likewise clearly say that this parameter isn&#8217;t a standard.<o:=
p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.2. Sender-Constrained Access Tokens &#8211; Li=
st DPoP as one of the possibilities for demonstrating proof of possession.<=
o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.3. Audience Restricted Access Tokens, next to =
last paragraph &#8211; When you list MTLS, also please state that the MTLS =
key can be used as a correlation handle, since it is the same for connectio=
ns to all sites.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.12. Refresh Token Protection &#8211; The draft say=
s &#8220;<span style=3D"font-family:Consolas;color:black;background:white">=
refresh tokens belonging to the same grant may share a common id</span>&#82=
21;.&nbsp; Augment this description to say what this ID is
 and where it is located, and if there&#8217;s a pertinent standard or othe=
r reference for this ID, please include a citation.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">EDITORIAL<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">1. Introduction &#8211; The wording &#8220;<span sty=
le=3D"font-family:Consolas;color:black;background:white">and, as the founda=
tion of OpenID Connect [</span><a href=3D"https://tools.ietf.org/html/draft=
-ietf-oauth-security-topics-13#ref-OpenID" title=3D"&quot;OpenID Connect Co=
re 1.0 incorporating errata set 1&quot;"><span style=3D"font-size:10.0pt;fo=
nt-family:Consolas;color:#0066CC">OpenID</span></a><span style=3D"font-fami=
ly:Consolas;color:black;background:white">],
 identity providing</span>&#8221; is awkward.&nbsp; Change to &#8220;<span =
style=3D"font-family:Consolas;color:black;background:white">and as the basi=
s for federated login using OpenID Connect [OpenID]</span>&#8221;.<o:p></o:=
p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">1. Introduction &#8211; Change &#8220;<span style=3D=
"font-family:Consolas;color:black;background:white">While OAuth was used in=
 a variety of scenarios and different kinds of deployments, the following c=
hallenges could be observed</span>&#8221; to &#8220;<span style=3D"font-fam=
ily:Consolas;color:black;background:white">While
 OAuth is used in a variety of scenarios and different kinds of deployments=
, the following challenges can be observed</span>&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">1. Introduction, bullet 1 &#8211; Add citations for =
the first uses of the terms &#8220;CSRF&#8221; and &#8220;referer header&#8=
221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Many locations &#8211; You have misspelled the &#822=
0;referer&#8221; header name as &#8220;referrer&#8221; throughout the docum=
ent.&nbsp; (Yes, &#8220;referrer&#8221; is the correct English spelling.&nb=
sp; The header name uses an English misspelling.)<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">1. Introduction, last paragraph &#8211; Change &#822=
0;<span style=3D"font-family:Consolas;color:black;background:white">such as=
 [</span><a href=3D"https://tools.ietf.org/html/rfc7591" title=3D"&quot;OAu=
th 2.0 Dynamic Client Registration Protocol&quot;"><span style=3D"font-size=
:10.0pt;font-family:Consolas;color:#0066CC">RFC7591</span></a><span style=
=3D"font-family:Consolas;color:black;background:white">]
 and [</span><a href=3D"https://tools.ietf.org/html/rfc8414" title=3D"&quot=
;OAuth 2.0 Authorization Server Metadata&quot;"><span style=3D"font-size:10=
.0pt;font-family:Consolas;color:#0066CC">RFC8414</span></a><span style=3D"f=
ont-family:Consolas;color:black;background:white">]</span>&#8221;
 to &#8220;<span style=3D"font-family:Consolas;color:black;background:white=
">such as the OAuth 2.0 Dynamic Client Registration Protocol [</span><a hre=
f=3D"https://tools.ietf.org/html/rfc7591" title=3D"&quot;OAuth 2.0 Dynamic =
Client Registration Protocol&quot;"><span style=3D"font-size:10.0pt;font-fa=
mily:Consolas;color:#0066CC">RFC7591</span></a><span style=3D"font-family:C=
onsolas;color:black;background:white">]
 and OAuth 2.0 Authorization Server Metadata [</span><a href=3D"https://too=
ls.ietf.org/html/rfc8414" title=3D"&quot;OAuth 2.0 Authorization Server Met=
adata&quot;"><span style=3D"font-size:10.0pt;font-family:Consolas;color:#00=
66CC">RFC8414</span></a><span style=3D"font-family:Consolas;color:black;bac=
kground:white">]</span>&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">1. Introduction, last paragraph &#8211; Delete &#822=
0;As a challenge to the community&#8221;, as it doesn&#8217;t add any value=
 to the exposition.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">2. Attacker Model, (A3) &#8211; Add a citation for t=
he first use of the term &#8220;mix-up attack&#8221; (and consider deleting=
 &#8220;so-called&#8221;).<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1.1. Authorization Code Grant &#8211; Change &#822=
0;authorization grant type&#8221; to &#8220;authorization code grant type&#=
8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1.2. Implicit Grant &#8211; The canonical order of=
 composite response types is alphabetical.&nbsp; Therefore, please change &=
#8220;token id_token&#8221; to &#8220;id_token token&#8221; and &#8220;code=
 token id_token&#8221; to &#8220;code id_token token&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.1.2. Implicit Grant, last paragraph &#8211; Add &#=
8220;, such as the &#8220;code id_token&#8221; response type&#8221; at the =
end of the first sentence.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.3. Access Token Privilege Restriction, last paragr=
aph &#8211; This paragraph is essentially talking about placing audience re=
strictions on access tokens, but fails to use the standard &#8220;audience&=
#8221; term.&nbsp; Please revise to explicitly describe including
 audience restrictions for access tokens.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">3.4. Resource Owner Password Grant &#8211; Include c=
itations where you currently say (WebCrypto, WebAuthn).<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.1. Insufficient Redirect URI Validation &#8211; Ad=
d citations for the &#8220;Several successful attacks&#8230;&#8221; mention=
ed.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.2. Sender-Constrained Access Tokens &#8211; De=
lete &#8220;so-called&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Many locations &#8211; You use the term &#8220;id&#8=
221;, which should always be spelled &#8220;ID&#8221;.&nbsp; (The English w=
ord &#8220;id&#8221; has a completely different meaning than &#8220;ID&#822=
1;.)&nbsp; Be sure to also change instances of &#8220;ids&#8221; to &#8220;=
IDs&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.8.1.3. Audience Restricted Access Tokens &#8211; D=
elete &#8220;basically&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Many locations &#8211; The draft often uses the word=
 &#8220;which&#8221; when you mean &#8220;that&#8221;.&nbsp; For instance, =
in 4.9.2, please change &#8220;which could&#8221; to &#8220;that could&#822=
1; and in 4.11 change &#8220;which are&#8221; to &#8220;that are&#8221;.&nb=
sp; There&#8217;s lots of places to look up the difference
 in meaning, but a rule of thumb that&#8217;s usually right is that if you =
don&#8217;t have a comma before the &#8220;which&#8221;, it should probably=
 be &#8220;that&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">4.12. Refresh Token Protection &#8211; Change &#8220=
;legit&#8221; to &#8220;legitimate&#8221;.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">May locations &#8211; The spelling of ID Token is in=
consistent in the draft &#8211; sometimes using &#8220;token&#8221; and som=
etimes using &#8220;Token&#8221;.&nbsp; I would suggest consistently using =
the spelling from OpenID Connect, which is &#8220;ID Token&#8221;.<o:p></o:=
p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">5.&nbsp; Acknowledgements &#8211; If you choose to a=
dd me to the acknowledgements, please add me as &#8220;Michael B. Jones&#82=
21;.&nbsp; (Mike Jones is way too common a name.)<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Thanks for taking these comments into account.<o:p><=
/o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_BN8PR00MB056369C04536770FF5B90512F54F0BN8PR00MB0563namp_--


From nobody Tue Nov 19 21:44:18 2019
Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0067D120800 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 21:44:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dLwn3DkIjFy9 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 21:44:15 -0800 (PST)
Received: from mail-oi1-x22e.google.com (mail-oi1-x22e.google.com [IPv6:2607:f8b0:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80EA612008A for <oauth@ietf.org>; Tue, 19 Nov 2019 21:44:15 -0800 (PST)
Received: by mail-oi1-x22e.google.com with SMTP id n16so21438955oig.2 for <oauth@ietf.org>; Tue, 19 Nov 2019 21:44:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=x2883zT7dJ6v5ISTTrOW9VjGeZoPPo/NTQcN9DRA29o=; b=eT+x7ngV2/pgl8EWro7ip/DEpFTPcDhhAWQ6LGWVaonZKosFa3TkgPa5zwnmBie4Zy rvfbrVYvdYyet6TgCA8h60pKcQmDoCbWlS3h8ITF2G3o9kDkzRO+cMVvjhvcZVZqAy42 HcEEdiLNf8m+rqOSBrvwTAhMOuO6s5OKfivyCTLVT+lkikyukYBddTgaqJUE1eHBB/MD 94Qa8EJrGFDfEFvmw6lc/tYucL7QgmQX/lvqcUWrLwnri5aQmtqvBA2uhD8n00HiTPgx eFwlJQos009qDth2FGCFm+gRMFkqEAWhF1SPrLS8xHHV3TOoSTqg8j9ntiSm2Gj8VexC Nb+g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=x2883zT7dJ6v5ISTTrOW9VjGeZoPPo/NTQcN9DRA29o=; b=sl8xhWrTaD9ub6vP1o6W98O34xUIbrIVkdmizwJpTtf8tBvobigMpiSQYcLSCBzeK0 id4RFsWzxWL5WvZK1M7xihuSlRkmwmf51MHhYM0MdYqGm82OZfTeUnHxdXJAzsUqLhI6 WzSxkv+vdcfmdRVPbbhU0H7XSLVRWVP7mVJ+zjHmEq4JTsMfC9F5geU9oWlnHgWKxteh d1P6/iqKBhus/q0HlqJQ8HF05B01N7uW4+SgCn2N3tbq6ey2/cNOld5Yqo9bHEZa4f85 2gYt1rmKuAPleZ8jddxqDuKFPZW7nABV4JEdPAE2VndwtSQB+LFApCoiHAojxIQa9PoN CINw==
X-Gm-Message-State: APjAAAUYOTwMYbzNjMVyFJ2tRE/5fQdd3GM9dxVEGKaj9cMjIAzjVRhv lePpVSQsctmtx/OUSddF4Vf8NuKjp/aa0Lb9sVYoVEA=
X-Google-Smtp-Source: APXvYqydXiUW3nrw0o3Qp0nrPD9VS2XQk9U0Zlw3WCArnymijn6p6RRKn04qxKNO/4sxVMEhUdsPS2SSCOQSx2/7eSM=
X-Received: by 2002:aca:d803:: with SMTP id p3mr1203753oig.13.1574228654515; Tue, 19 Nov 2019 21:44:14 -0800 (PST)
MIME-Version: 1.0
From: Filip Skokan <panva.ip@gmail.com>
Date: Wed, 20 Nov 2019 06:44:03 +0100
Message-ID: <CALAqi__K636jGfp6KMAO+spzP352k=Y87WANq8C6s+9uPBabFQ@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000bf69450597c0ab5c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/5JQMJJ7QSPa7Xl_lUwCqIdqMgdI>
Subject: [OAUTH-WG] IETF 106 IETF video stream
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Nov 2019 05:44:17 -0000

--000000000000bf69450597c0ab5c
Content-Type: text/plain; charset="UTF-8"

Hi,

I can hear an audio stream but no video has been started yet?

Best,
*Filip*

--000000000000bf69450597c0ab5c
Content-Type: text/html; charset="UTF-8"

<div dir="ltr"><div>Hi,</div><div><br></div><div>I can hear an audio stream but no video has been started yet?</div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Best,<br><b>Filip</b></div></div></div>

--000000000000bf69450597c0ab5c--


From nobody Tue Nov 19 21:49:24 2019
Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B93C0120807 for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 21:49:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.062
X-Spam-Level: 
X-Spam-Status: No, score=0.062 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_12=2.059, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZwQKLix4i8l for <oauth@ietfa.amsl.com>; Tue, 19 Nov 2019 21:49:18 -0800 (PST)
Received: from mail-ot1-x329.google.com (mail-ot1-x329.google.com [IPv6:2607:f8b0:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 274D9120802 for <oauth@ietf.org>; Tue, 19 Nov 2019 21:49:18 -0800 (PST)
Received: by mail-ot1-x329.google.com with SMTP id m15so20179050otq.7 for <oauth@ietf.org>; Tue, 19 Nov 2019 21:49:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to;  bh=weoju8jmrTZVELvO+06VSfzweMCnZjtYeETpnJJ6T5Y=; b=tLw1L+D3PJNnICPf99DkAPSf3TMWyNpuS1ijxvnkuLO56ZtHAEEe4n4PWzkMtdUpcJ D1YmvftJRxX6702pevke0qh16dBd6NM0ItFZMWnomtVuspocoga1MO8ExyYVZ7hIMO1j h1FHyb4jvS2c3bDYU8TRV7F2RbDix5xXobS1UFE1hZLs7CueAQOMhqsm/wPmER8oe0KX 8CYsoYXdcO/l4wlvfjtJ5XyOAGY4ETM5ZXfdgGQyg24YMQ1YZ5yL+XsXElpDuf5Z2JLZ Pzscixir5EuwYFdP0Yb9gJ94UqNkElMZ5M0VxVvXSO6NuVHpL4oHM7pNHTTYpcPaeUWP 7+AQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=weoju8jmrTZVELvO+06VSfzweMCnZjtYeETpnJJ6T5Y=; b=FbKR+qcvzjl7cJnQoJNhbRHHvc2w3/ifnoOewm0qaSvgYNizwi7RxgQZiGtg/pS8XH nvjr83ZPAU7ZWvujHaXSIQO6o3RQmvU3uxbY9fP60pFKMqZMDJ61gl33ROB22VTnb3lM DRKIJGS+m/2V5YsScg4wMt0DxyoHCjvC+wbPqKCPC45NyXDBlJaRmSuX46kRnylriCJN Hko4wTJ6rtyK6bp8SnE0/70iG40v6wozh+8Lb+rKBMhniki52LQJMcDE+ADWTVU7fiV9 pdrl1tk5l7XspJ0041XcMWEA/h2jjpadxgqOfan90Uwgp0HIWcIVtNdcVFI/HdK4PLOx oITQ==
X-Gm-Message-State: APjAAAXAneent3xlHxI7OfjjV0dUJgRcYLtfjGnvtog1sDp2U8t8P1Ih g+TJdD4/w4u0Rctaanj91Vavv6OO8APuuUHEMrZcrSI=
X-Google-Smtp-Source: APXvYqzvknsz7CJiDtehKDiUuoQsPnRyEgo4wthkXNpmm1ial3UtaQZKDelRug0forEi3U6eAt5qiMF9NHeDqqAfFUs=
X-Received: by 2002:a9d:6c03:: with SMTP id f3mr591548otq.362.1574228956529; Tue, 19 Nov 2019 21:49:16 -0800 (PST)
MIME-Version: 1.0
References: <CALAqi__K636jGfp6KMAO+spzP352k=Y87WANq8C6s+9uPBabFQ@mail.gmail.com>
In-Reply-To: <CALAqi__K636jGfp6KMAO+spzP352k=Y87WANq8C6s+9uPBabFQ@mail.gmail.com>
From: Filip Skokan <panva.ip@gmail.com>
Date: Wed, 20 Nov 2019 06:49:05 +0100
Message-ID: <CALAqi__q8f0xBPNpC--K3uT9SYOpGXATGH_gXhPYOLwQ4SNt8g@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/related; boundary="000000000000c0a6bc0597c0bd1d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uFo0ObwTG4hkLZASfaBIMYtavek>
Subject: Re: [OAUTH-WG] IETF 106 IETF video stream
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Nov 2019 05:49:22 -0000

--000000000000c0a6bc0597c0bd1d
Content-Type: multipart/alternative; boundary="000000000000c0a6bb0597c0bd1c"

--000000000000c0a6bb0597c0bd1c
Content-Type: text/plain; charset="UTF-8"

[image: Screenshot 2019-11-20 06.48.21.png]

The audio stream of the session works tho.

On Wed, 20 Nov 2019 at 06:44, Filip Skokan <panva.ip@gmail.com> wrote:

> Hi,
>
> I can hear an audio stream but no video has been started yet?
>
> Best,
> *Filip*
>

--000000000000c0a6bb0597c0bd1c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><img src=3D"cid:ii_k36v8yt30" alt=3D"Screenshot 2019-=
11-20 06.48.21.png" width=3D"562" height=3D"290"><br></div><div><div dir=3D=
"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><br></di=
v></div><div class=3D"gmail_signature" data-smartmail=3D"gmail_signature">T=
he audio stream of the session works tho.</div></div><br><div class=3D"gmai=
l_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, 20 Nov 2019 at 06:44=
, Filip Skokan &lt;<a href=3D"mailto:panva.ip@gmail.com">panva.ip@gmail.com=
</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">=
<div dir=3D"ltr"><div>Hi,</div><div><br></div><div>I can hear an audio stre=
am but no video has been started yet?</div><br clear=3D"all"><div><div dir=
=3D"ltr">Best,<br><b>Filip</b></div></div></div>
</blockquote></div>

--000000000000c0a6bb0597c0bd1c--

--000000000000c0a6bc0597c0bd1d
Content-Type: image/png; name="Screenshot 2019-11-20 06.48.21.png"
Content-Disposition: inline; filename="Screenshot 2019-11-20 06.48.21.png"
Content-Transfer-Encoding: base64
Content-ID: <ii_k36v8yt30>
X-Attachment-Id: ii_k36v8yt30
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--000000000000c0a6bc0597c0bd1d--


From nobody Wed Nov 20 22:23:37 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A61D61200FB for <oauth@ietfa.amsl.com>; Wed, 20 Nov 2019 22:23:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WTYFQ4rAVDPC for <oauth@ietfa.amsl.com>; Wed, 20 Nov 2019 22:23:31 -0800 (PST)
Received: from mail-lj1-x233.google.com (mail-lj1-x233.google.com [IPv6:2a00:1450:4864:20::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DEA5D12009C for <oauth@ietf.org>; Wed, 20 Nov 2019 22:23:30 -0800 (PST)
Received: by mail-lj1-x233.google.com with SMTP id p18so1850475ljc.6 for <oauth@ietf.org>; Wed, 20 Nov 2019 22:23:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=/KlDYCv1RyIw1ZsZcBGvCK47jA3tGQ/rEOOnhkBiGNw=; b=P5Z55k4KNV+5NrsFG9T5RIsa65h6K5vfH21BTmVtUmo+hhW4VjSCRoNqJOQeKBhBg7 /CsdoD4N9KJ+lN6y6mxmPEt6Gw9wrDQ9JRbrIZGy8IJ3Xa78ZYm5MnyejAKukYeqFNUD sSYTtI/DNLJUUlSHsOJBu62+RPBKLLtoTgz7yXjMmyT4P/aunVzs3iIYY8urXLV4lxeW tN780k/zjo9CC+vmv+KDxMpvLjQUgVfBltJ+3Dnz2ML4XijBjmuHCXW0rnqRipnCmEct YM597TxUSewXXv2c/H70tNhu3akyXB+5/g650W3fPfxPXhoOoliTRnKhjx+SEf8TNYpT jqow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=/KlDYCv1RyIw1ZsZcBGvCK47jA3tGQ/rEOOnhkBiGNw=; b=UBe4ZhiYyc4s7P5zPf7Uog+sxvMwL+qhY8yWwjf6weUEFRw0yXNwN3GvWUE+sIZu/E JOh+JytxRbmF4ink5XtgTYikVYzfXEkpHkEfXqXitpnZsmsatppIQuVv5nCZQQ4HdX/6 vaij2XdMzeeOeFFbP4mTYHtofmY6J19NyjozCYl1cMjFiSEwCKSdbyG9nd0699Ygmt34 Vgc/al2Lj5PTqYm1LtCLvRAs3rTedjl6/wvomjO3J/JzKiF10RV69AWJ3obpMOu2SjhJ JcDmnnnyTlMKIrWFmHVWK9/S2+aO96VtL2X7hcM81vop8JSpGg/atglf1naEo6HaEmaP tJUw==
X-Gm-Message-State: APjAAAXHeI3IXqHmuw4aJGtPJBxT/4uY3e/wCYbsJo+nmxoAl2foy8pM wHXbSLxJUu+BR/RvwG80HjCs6/YCdXxjNeeHE6+JpuYTxBokHO8SobH9U/jJlYG3bxCK6VMO5dz DZUrZGcxn6q+eFNASk8g=
X-Google-Smtp-Source: APXvYqyAIt8DD70Smd63MHIEnTgQsJqqzTg4TeASPE6jTy7ud5jLKtwhqQgyJ2O51SfSMUYmK0mMNcoI4X9kuN3ylOY=
X-Received: by 2002:a2e:5451:: with SMTP id y17mr5722772ljd.98.1574317408840;  Wed, 20 Nov 2019 22:23:28 -0800 (PST)
MIME-Version: 1.0
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com> <5203CB2A-141F-4AB1-96AF-775B20D75923@forgerock.com>
In-Reply-To: <5203CB2A-141F-4AB1-96AF-775B20D75923@forgerock.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Thu, 21 Nov 2019 14:23:01 +0800
Message-ID: <CA+k3eCQtZt=MaDK4KXzbG+37mo1YRqC3JDR3cmWXRv=Yu==gKQ@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000eb1c270597d5555f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/dqIxAEw1VHNXgAMVXC2-mgfojcQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 06:23:36 -0000

--000000000000eb1c270597d5555f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Yeah, suggestions and/or an MTI about algorithm support would probably be
worthwhile. Perhaps also some defined means of signaling when an
unsupported algorithm is used along with any other reason a DPoP is invalid
or rejected.

There are a lot of tradeoffs in what claims are required and what
protections are provided etc. The aim of what was chosen was to do just
enough to provide some reasonable protections against reuse or use in a
different context while being simple to implement and deploy.


On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com>
wrote:

> Thanks for the reply, Brian.
>
> Collecting my thoughts up here rather than responding blow by blow.
>
> Public key signatures are simpler in some respects, more complex in
> others. There are currently 10 public key JWS signature schemes defined
> (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS
> potentially have to support them all? If not, how do they negotiate
> algorithm support with the client?
>
> On the other hand, the ECDH scheme I proposed can be implemented by
> adapting an existing ECDH-ES encryption support in a JWT library. For
> example, I discovered while playing with this that our own internal libra=
ry
> can implement the full flow I described entirely via the existing public
> API [1], so it's not necessarily as complex as it first looks. I even
> knocked up a from-scratch implementation in WebCrypto (JavaScript) withou=
t
> too much code [2].
>
> But I admit that using an existing JWT library to sign a JWT with an
> existing algorithm is even easier, and that counts for a lot. Perhaps we
> can make concrete suggestions/requirements about algorithm support? e.g.
> "The RS MUST support RS256 and SHOULD support EdDSA. Other algorithms MAY
> be supported."
>
> With regards to replay protection, I think there are at least two
> reasonable positions:
>
> 1. We assume that TLS is secure and don't try to defend against any
> compromise at that level. (Clearly none of the TLS-based PoP mechanisms
> survive if TLS is compromised, by definition). In this case the main atta=
ck
> to defend against is a malicious RS replaying the access token elsewhere.
> Simply signing the origin of the RS would be enough to prevent this attac=
k,
> while letting the client reuse the same JWT for many requests (and the RS
> to cache the JWT validation). None of "jti", "htu", or "htm" seem relevan=
t
> to this model.
>
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) and
> try to provide some defense in depth against a MitM attacker replaying a
> token against the same RS. There is a graduated series of steps you can
> take here, depending on how much you want to prevent this:
>    a. The DPoP token can be replayed for arbitrary requests to the same R=
S
> but has a short time limit (e.g., exp claim or RS-enforced max lifetime
> from iat)
>    b. The DPoP token can be replayed for the same request (htu/htm claims=
)
>    c. The DPoP token can't be replayed at all - either because of jti
> blacklisting on the RS or a challenge-response protocol on each request.
>
> (There are also variants such as including a hash of the request
> body/headers, or encoding an ETag into the JWT).
>
> I think either are reasonable design goals, but aiming for 2 adds more
> value. I think aiming for 2a is a reasonable default baseline that allows
> the client to reuse a DPoP token for a few requests, reducing the cost of
> the signature (and the RS can cache the validated JWT). Support for 2b or
> 2c can then be listed as optional additions.
>
> PS - 2a/2b can be achieved without PoP. I'll save that for another email
> in the next few days though.
>
> [1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
> [2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7
>
>
> -- Neil
>
> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com>
> wrote:
>
>
>
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com>
> wrote:
>
>> I can't attend Singapore either in person or remotely due to other
>> commitments. I broadly support adoption of this draft, but I have some
>> comments/suggestions about it.
>>
>
> Thanks Neil. And sorry to hear that you won't be in Singapore. This kind
> of stuff is definitely more easily discussed in person (for me anyway). B=
ut
> I'll try and comment on your comments here as best I can. I also plan to
> also mention them in the Wednesday and/or Thursday presentation.
>
>
>
>> Section 2 lists the main objective as being to harden against
>> compromised/malicious AS or RS, which may attempt to replay captured tok=
ens
>> elsewhere. While this is a good idea, a casual reader might wonder why a
>> simple audience claim in the access token/introspection response is not
>> sufficient to prevent this. Because interactions between the client and =
RS
>> are supposed to be over TLS, is the intended threat model one in which
>> these protections have broken down? ("counterfeit" in the description
>> suggests this). Or is the motivation that clients want to get a single
>> broad-scoped access token (for usability/performance reasons) and use it=
 to
>> access multiple resource servers without giving each of them the ability=
 to
>> replay the token to the other servers? Or are we thinking of a
>> phishing-type vulnerability were a general-purpose client might
>> accidentally visit a malicious site which prompts for an access token th=
at
>> the client then blindly goes off and gets? (UMA?) It's not clear to me
>> which of these scenarios is being considered, so it would be good to
>> tighten up this section.
>>
>
> It is admittedly a bit loose and I agree it'd be good to tighten it up.
> But part of why it's loose is that it tries to offer some protections for
> all those scenarios and more such as a general lost/stolen token. It's
> effectively trying to provide as many of the same types of
> protections/assurances that you'd get with TLS based PoP mechanisms (like
> OAuth MTLS or Token binding) to the extent that can be done at the HTTP
> application layer. Which can't realistically be exactly the same but can
> maybe be kinda close while actually being accessible and implementable
> because it's all done at the application layer. There are trade-offs, of
> course, and the document writers have endeavored to find a good balance i=
n
> the trade-off decisions we've made. But that doesn't mean they are
> necessarily the right decisions or are closed to discussion. To the casua=
l
> reader I would say that it turns out that getting an appropriate simple
> audience claim into an access token isn't nearly as simple as it might
> seem. And while it will prevent RS to RS replay (as long as both RSs aren=
't
> legit audiences) it doesn't help with preventing the use of tokens stolen
> or leaked by other means (including for refresh tokens issued to public
> clients).
>
>
>
>> Another potential motivation is for mobile apps. Some customers of ours
>> would like to tie access/refresh tokens to private key material generate=
d
>> on a secure element in the device, that can only be accessed after local
>> biometric authentication (e.g. TouchID/FaceID on iOS). I have suggested
>> using mTLS cert-bound tokens for this, but have heard some pushback due =
to
>> the difficulty of configuring support for client certs across diverse
>> infrastructure. A simple JWT-based solution like DPoP could fill this ne=
ed.
>>
>
> It's maybe not stated in the draft but this kind of thing is among the
> objectives (in my mind anyway).
>
>
>
>> My main concerns with the draft though are about efficiency and
>> scalability of the proposed approach:
>>
>> 1. The requirement to use public key signatures, along with the
>> anti-replay nonce, means that the RS is required to perform an expensive
>> signature verification check on every request. That is not going to scal=
e
>> up well. While there are more efficient schemes like Ed25519 now, these =
are
>> still typically an order of magnitude slower than HMAC and the latency a=
nd
>> CPU overhead is likely to be a non-starter for many APIs (especially whe=
n
>> you're billed by CPU usage). Public key signatures are also notoriously
>> fragile (see e.g. the history of nonce reuse/leakage vulnerabilities in
>> ECDSA or
>>
>
> Yes, asymmetric is more processing intensive than symmetric. But if you
> take away the distributed replay check (see next response), it will scale
> out just fine. I'm not so sure latency is a real issue here - while these
> operations are an order of magnitude slower we're still talking about tim=
es
> that are not perceptible to a human. CPU usage/cost is a part of a
> trade-off for the simplicity afforded by public/private keys.  And it is
> significantly simpler. The design you sketched out is admittedly quite
> clever but it's not even in the same ballpark with respect to complexity.
> And, as you pointed out, the other suggestion around symmetric keys has
> rather different security properties while still adding complexity. Addin=
g
> symmetric key support isn't something that can just be added on easily.
>
>
>
>>
>> 2. The advice for the RS to store a set of previously used nonces to
>> prevent replay will also hamper scalability, especially in large
>> deployments where such state would need to be replicated to all servers =
(or
>> use sticky load balancing, which comes with its own problems). This
>> violates the statelessness of HTTP, and it also potentially breaks
>> idempotency of operations: Think of the case where the JWT validation an=
d
>> replay protection is done at an API gateway but then the call to the
>> backend API server fails for a transient reason. The client (or a
>> proxy/library) cannot simply replay the (idempotent) request in this cas=
e
>> because it will be rejected by the gateway. It must instead recreate the
>> DPoP JWT, incurring additional overheads.
>>
>
> The actual value of replay checking on jti is somewhat questionable. The
> DPoP JWT only transits between client and server so a TLS MITM is likely
> needed to steal a DPoP JWT. But we are assuming TLS works here. And an
> active MITM could thwart this check by just being first to present DPoP
> JWT. I think the jti check made its way into the draft mostly because it
> seemed like something was needed to try and bring it closer to the TLS Po=
P
> models. Being aware of the scalability concerns, I did endeavor to write
> the text in such a way so as to leave some wiggle room in
> implementations/deployments with text like '"jti" SHOULD be used by the
> server for replay detection and prevention` and [ensure that] 'within a
> reasonable consideration of accuracy and resource utilization, a JWT with
> the same "jti" value has not been received previously'. The idea being th=
at
> using something eventually consistent or even local only to the runtime
> instance would be permissible. Perhaps that allowance and the rational
> could be made more clear? Or would you suggest to do away with the jti
> replay stuff al? Or something else?
>
>
>> 3. Minor: The use of a custom header for communicating the DPoP proof
>> will require additional CORS configuration on top of that already done f=
or
>> the Authorization header, and so adds a small amount of additional frict=
ion
>> for adoption. Given that CORS configuration changes often require approv=
al
>> by a security team, this may make more of an impact than you'd expect.
>>
>
> Feels really minor. I mean, we could try to roll everything up under one
> header. But it does seem unwarranted and would complicate things - at lea=
st
> in the model we've got now where the proof is sent the same way ono all
> types of requests.
>
>
>
> It's also not clear to me exactly what threat the anti-replay nonce is
>> protecting against. It does nothing against the replay scenario discusse=
d
>> in section 2, as I understand it - which really seems to be more of a Mi=
tM
>> scenario. Given that the connection between the client and the RS is
>> supposed to be over TLS, and TLS is already protected against replay
>> attacks, I think this part needs to be better motivated given the obviou=
s
>> costs of implementing it.
>>
>> I have a tentative suggestion for an alternative design which avoids
>> these problems, but at a cost of potentially more complexity elsewhere.
>> I'll summarise it here for consideration:
>>
>> 1. The client obtains an access token in the normal way. When calling th=
e
>> token endpoint it provides an EC/okp public key as the confirmation key =
to
>> be associated with the access/refresh tokens.
>>
>> 2. The first time the client calls an RS it passes its access token in
>> the Authorization: Bearer header as normal. (If the RS doesn't support D=
PoP
>> then this would just succeed and no further action is required by the
>> client - allowing clients to opportunistically ask for DPoP without need=
ing
>> a priori knowledge of RS capabilities).
>>
>> 3. The RS introspects the access token and learns the EC public key
>> associated with the access token. As there is no DPoP proof with the acc=
ess
>> token, the RS will generate a challenge in the following way:
>>     o The RS generates an ephemeral EC key pair for the same curve as
>> the confirmation key (e.g. P-256 or X25519).
>>     o The RS stores the ephemeral private key somewhere, associated with
>> this access token (see below for a scalable implementation choice)
>>     o The RS encodes the ephemeral public key into a JWK (epk) and
>> base64url-encodes it. It uses this as a challenge to the client by sendi=
ng
>> back a 401 response with WWW-Authenticate: DPoP <encoded-epk>
>>
>> 4. The client decodes the epk challenge and performs an ECDH key
>> agreement between its private key and the challenge epk as per the metho=
d
>> described for the existing JWA ECDH-ES encryption algorithm. Rather than
>> deriving an AES key however, it derives a HMAC key for HS256. The "apu"
>> value is set to the access token (string value as ASCII bytes) and the
>> "apv" value is set to the hostname of the RS (e.g. "api.example.com").
>> This ensures that the derived key is cryptographically bound to the cont=
ext
>> in which it is used.
>>
>> 5. The client uses the HMAC key to create a DPoP proof JWT much like the
>> one in the current draft, but signed using the HS256 key. If a "kid" fie=
ld
>> was present in the challenge JWK sent by the RS then the same value MUST=
 be
>> used in the "kid" header of this discharge JWT. It retries its original
>> request sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
>>
>> 6. The RS uses its stored ephemeral private key to derive the same HMAC
>> key and verify the DPoP discharge JWT. If it validates and all fields ar=
e
>> correct then the request is allowed.
>>
>> Efficient implementation trick:
>> Because the client is required to copy and "kid" value from the challeng=
e
>> JWK, the RS can preemptively carry out the ECDH key agreement immediatel=
y
>> and generate the derived HMAC key. The RS can then encrypt this derived =
key
>> using a local authenticated encryption key (e.g. AES-GCM) and use that
>> encrypted value as the "kid" value in the challenge (perhaps along with
>> some context or an expiry time). That way the RS only needs to decrypt t=
his
>> kid value rather than performing the ECDH key agreement on every request=
.
>> This also avoids the need for the RS to store any per-client state local=
ly.
>>
>> The challenge-response nature of the scheme prevents traditional replay
>> attacks in the case where a DPoP discharge JWT is accidentally leaked
>> through server logs or some other flaw, without needing to store nonces =
on
>> the server. Using the RS's hostname in the key derivation process preven=
ts
>> mitm attacks in a similar way to how FIDO/WebAuthn prevents this. Most
>> importantly, once a HS256 key has been derived between a client and RS t=
hey
>> can reuse that key for multiple requests, reducing the overhead of the E=
CDH
>> key agreement step. Either side can decide as a matter of policy how lon=
g
>> to let this occur and when to trigger a fresh challenge-response.
>>
>> Because this fits within the standard HTTP authentication framework, it
>> also requires no additional CORS configuration and is relatively easy to
>> plug in to existing HTTP client libraries.
>>
>> The main downside of this approach to me is the fact that you can't
>> simply reuse an existing JWT library to implement it, and so it will tak=
e
>> time for client libs to develop. (Although I think this might be achieva=
ble
>> now with existing *COSE* libraries). This would increase the risk of peo=
ple
>> hand-rolling solutions, rather than using well-tested libraries. On the
>> other hand, it uses fairly widely supported primitives so e.g. an
>> implementation using WebCrypto is probably only a few dozen lines of cod=
e.
>>
>> -- Neil
>>
>>
>> On 31 Oct 2019, at 19:20, Brian Campbell <
>> bcampbell=3D40pingidentity.com@dmarc.ietf.org> wrote:
>>
>> Hello WG,
>>
>> Just a quick note to let folks know that -03 of the DPoP draft was
>> published earlier today. The usual various document links are in the
>> forwarded message below and the relevant snippet from the doc history wi=
th
>> a summary of the changes is included here for convenience.
>>
>> Hopefully folks will have time to read the (relativity) short document
>> before the meeting(s) in Singapore where (spoiler alert) I plan to ask t=
hat
>> the WG consider adoption of the draft.
>>
>> Thanks,
>>
>>  -03
>>    o  rework the text around uniqueness requirements on the jti claim in
>>       the DPoP proof JWT
>>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>>       than "http_method", "http_uri", and "jkt#S256" respectively
>>    o  more explicit recommendation to use mTLS if that is available
>>    o  added David Waite as co-author
>>    o  editorial updates
>>
>> ---------- Forwarded message ---------
>> From: <internet-drafts@ietf.org>
>> Date: Thu, Oct 31, 2019 at 11:53 AM
>> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
>> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <
>> mbj@microsoft.com>, John Bradley <ve7jtb@ve7jtb.com <ve7jtb@ve7jtb..com>=
>,
>> Brian Campbell <bcampbell@pingidentity.com>, David Waite <
>> david@alkaline-solutions.com>, Daniel Fett <mail@danielfett.de>
>>
>>
>>
>> A new version of I-D, draft-fett-oauth-dpop-03.txt
>> has been successfully submitted by Brian Campbell and posted to the
>> IETF repository.
>>
>> Name:           draft-fett-oauth-dpop
>> Revision:       03
>> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the
>> Application Layer (DPoP)
>> Document date:  2019-10-30
>> Group:          Individual Submission
>> Pages:          15
>> URL:
>> https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt
>> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
>> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
>> Htmlized:
>> https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop
>> Diff:
>> https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03
>>
>> Abstract:
>>    This document describes a mechanism for sender-constraining OAuth 2.0
>>    tokens via a proof-of-possession mechanism on the application level.
>>    This mechanism allows for the detection of replay attacks with access
>>    and refresh tokens.
>>
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> The IETF Secretariat
>>
>>
>> *CONFIDENTIALITY NOTICE: This email may contain confidential and
>> privileged material for the sole use of the intended recipient(s). Any
>> review, use, distribution or disclosure by others is strictly prohibited=
..
>> If you have received this communication in error, please notify the send=
er
>> immediately by e-mail and delete the message and any file attachments fr=
om
>> your computer. Thank you.*______________________________________________=
_
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.*
>
>
>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000eb1c270597d5555f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Yeah, suggestions and/or an MTI about algorithm suppo=
rt would probably be worthwhile. Perhaps also some defined means of signali=
ng when an unsupported algorithm is used along with any other reason a DPoP=
 is invalid or rejected.=C2=A0 <br></div><div><br></div><div>There are a lo=
t of tradeoffs in what claims are required and what protections are provide=
d etc. The aim of what was chosen was to do just enough to provide some rea=
sonable protections against reuse or use in a different context while being=
 simple to implement and deploy.<br></div><br></div><br><div class=3D"gmail=
_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov 20, 2019 at 6:34 =
AM Neil Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com" target=3D"_=
blank">neil.madden@forgerock.com</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><div>Thanks for the reply, Brian.=C2=A0<di=
v><br></div><div>Collecting my thoughts up here rather than responding blow=
 by blow.<div><br></div><div><div>Public key signatures are simpler in some=
 respects, more complex in others. There are currently 10 public key JWS si=
gnature schemes defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA=
) - does an RS potentially have to support them all? If not, how do they ne=
gotiate algorithm support with the client?</div><div><br></div><div>On the =
other hand, the ECDH scheme I proposed can be implemented by adapting an ex=
isting ECDH-ES encryption support in a JWT library. For example, I discover=
ed while playing with this that our own internal library can implement the =
full flow I described entirely via the existing public API [1], so it&#39;s=
 not necessarily as complex as it first looks. I even knocked up a from-scr=
atch implementation in WebCrypto (JavaScript) without too much code [2].</d=
iv><div><br></div><div>But I admit that using an existing JWT library to si=
gn a JWT with an existing algorithm is even easier, and that counts for a l=
ot. Perhaps we can make concrete suggestions/requirements about algorithm s=
upport? e.g. &quot;The RS MUST support RS256 and SHOULD support EdDSA. Othe=
r algorithms MAY be supported.&quot;=C2=A0</div><div><br></div><div>With re=
gards to replay protection, I think there are at least two reasonable posit=
ions:</div><div><br></div><div>1. We assume that TLS is secure and don&#39;=
t try to defend against any compromise at that level. (Clearly none of the =
TLS-based PoP mechanisms survive if TLS is compromised, by definition). In =
this case the main attack to defend against is a malicious RS replaying the=
 access token elsewhere. Simply signing the origin of the RS would be enoug=
h to prevent this attack, while letting the client reuse the same JWT for m=
any requests (and the RS to cache the JWT validation). None of &quot;jti&qu=
ot;, &quot;htu&quot;, or &quot;htm&quot; seem relevant to this model.</div>=
<div><br></div><div>2. We don&#39;t assume that TLS is secure (or it&#39;s =
not fully end-to-end) and try to provide some defense in depth against a Mi=
tM attacker replaying a token against the same RS. There is a graduated ser=
ies of steps you can take here, depending on how much you want to prevent t=
his:</div><div>=C2=A0 =C2=A0a. The DPoP token can be replayed for arbitrary=
 requests to the same RS but has a short time limit (e.g., exp claim or RS-=
enforced max lifetime from iat)</div><div>=C2=A0 =C2=A0b. The DPoP token ca=
n be replayed for the same request (htu/htm claims)</div><div>=C2=A0 =C2=A0=
c. The DPoP token can&#39;t be replayed at all - either because of jti blac=
klisting on the RS or a challenge-response protocol on each request.</div><=
div><br></div><div>(There are also variants such as including a hash of the=
 request body/headers, or encoding an ETag into the JWT).</div><div><br></d=
iv><div>I think either are reasonable design goals, but aiming for 2 adds m=
ore value. I think aiming for 2a is a reasonable default baseline that allo=
ws the client to reuse a DPoP token for a few requests, reducing the cost o=
f the signature (and the RS can cache the validated JWT). Support for 2b or=
 2c can then be listed as optional additions.</div><div><br></div><div>PS -=
 2a/2b can be achieved without PoP. I&#39;ll save that for another email in=
 the next few days though.</div><div><br></div><div><div><div><div>[1]:=C2=
=A0<a href=3D"https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853=
bd9496" target=3D"_blank">https://gist.github.com/NeilMadden/685ea66fb79d37=
a50c2310f853bd9496</a></div><div>[2]: <a href=3D"https://gist.github.com/Ne=
ilMadden/70e1b232a3b273de02ed731eb36ec4a7" target=3D"_blank">https://gist.g=
ithub.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7</a></div><div><br></d=
iv><div><br></div><div>-- Neil</div></div></div></div>
<div><br><blockquote type=3D"cite"><div>On 19 Nov 2019, at 07:43, Brian Cam=
pbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank">b=
campbell@pingidentity.com</a>&gt; wrote:</div><br><div><div dir=3D"ltr" sty=
le=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-varia=
nt-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;te=
xt-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-=
decoration:none"><br><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=
=3D"gmail_attr">On Thu, Nov 14, 2019 at 7:20 PM Neil Madden &lt;<a href=3D"=
mailto:neil.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.c=
om</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><div>I can&#39;t attend Singapore either in person or remotely due to oth=
er commitments. I broadly support adoption of this draft, but I have some c=
omments/suggestions about it.</div></blockquote><div><br></div><div>Thanks =
Neil. And sorry to hear that you won&#39;t be in Singapore. This kind of st=
uff is definitely more easily discussed in person (for me anyway). But I&#3=
9;ll try and comment on your comments here as best I can. I also plan to al=
so mention them in the Wednesday and/or Thursday presentation.<span>=C2=A0<=
/span></div></div></div></div></blockquote><blockquote type=3D"cite"><div><=
div dir=3D"ltr" style=3D"font-family:HelveticaNeue;font-size:14px;font-styl=
e:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;=
text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=
d-spacing:0px;text-decoration:none"><div class=3D"gmail_quote"><div>=C2=A0<=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>Section 2 =
lists the main objective as being to harden against compromised/malicious A=
S or RS, which may attempt to replay captured tokens elsewhere. While this =
is a good idea, a casual reader might wonder why a simple audience claim in=
 the access token/introspection response is not sufficient to prevent this.=
 Because interactions between the client and RS are supposed to be over TLS=
, is the intended threat model one in which these protections have broken d=
own? (&quot;counterfeit&quot; in the description suggests this). Or is the =
motivation that clients want to get a single broad-scoped access token (for=
 usability/performance reasons) and use it to access multiple resource serv=
ers without giving each of them the ability to replay the token to the othe=
r servers? Or are we thinking of a phishing-type vulnerability were a gener=
al-purpose client might accidentally visit a malicious site which prompts f=
or an access token that the client then blindly goes off and gets? (UMA?) I=
t&#39;s not clear to me which of these scenarios is being considered, so it=
 would be good to tighten up this section.</div></div></blockquote><div><br=
></div><div>It is admittedly a bit loose and I agree it&#39;d be good to ti=
ghten it up. But part of why it&#39;s loose is that it tries to offer some =
protections for all those scenarios and more such as a general lost/stolen =
token. It&#39;s effectively trying to provide as many of the same types of =
protections/assurances that you&#39;d get with TLS based PoP mechanisms (li=
ke OAuth MTLS or Token binding) to the extent that can be done at the HTTP =
application layer. Which can&#39;t realistically be exactly the same but ca=
n maybe be kinda close while actually being accessible and implementable be=
cause it&#39;s all done at the application layer. There are trade-offs, of =
course, and the document writers have endeavored to find a good balance in =
the trade-off decisions we&#39;ve made. But that doesn&#39;t mean they are =
necessarily the right decisions or are closed to discussion. To the casual =
reader I would say that it turns out that getting an appropriate simple aud=
ience claim into an access token isn&#39;t nearly as simple as it might see=
m. And while it will prevent RS to RS replay (as long as both RSs aren&#39;=
t legit audiences) it doesn&#39;t help with preventing the use of tokens st=
olen or leaked by other means (including for refresh tokens issued to publi=
c clients).<span>=C2=A0</span></div></div></div></div></blockquote><blockqu=
ote type=3D"cite"><div><div dir=3D"ltr" style=3D"font-family:HelveticaNeue;=
font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:norma=
l;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=
e;white-space:normal;word-spacing:0px;text-decoration:none"><div class=3D"g=
mail_quote"><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1=
ex"><div><div>Another potential motivation is for mobile apps. Some custome=
rs of ours would like to tie access/refresh tokens to private key material =
generated on a secure element in the device, that can only be accessed afte=
r local biometric authentication (e.g. TouchID/FaceID on iOS). I have sugge=
sted using mTLS cert-bound tokens for this, but have heard some pushback du=
e to the difficulty of configuring support for client certs across diverse =
infrastructure. A simple JWT-based solution like DPoP could fill this need.=
</div></div></blockquote><div><br></div><div>It&#39;s maybe not stated in t=
he draft but this kind of thing is among the objectives (in my mind anyway)=
.<span>=C2=A0</span><br></div><div><br></div><div>=C2=A0</div><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px soli=
d rgb(204,204,204);padding-left:1ex"><div><div>My main concerns with the dr=
aft though are about efficiency and scalability of the proposed approach:</=
div><div><br></div><div>1. The requirement to use public key signatures, al=
ong with the anti-replay nonce, means that the RS is required to perform an=
 expensive signature verification check on every request. That is not going=
 to scale up well. While there are more efficient schemes like Ed25519 now,=
 these are still typically an order of magnitude slower than HMAC and the l=
atency and CPU overhead is likely to be a non-starter for many APIs (especi=
ally when you&#39;re billed by CPU usage). Public key signatures are also n=
otoriously fragile (see e.g. the history of nonce reuse/leakage vulnerabili=
ties in ECDSA or=C2=A0</div></div></blockquote><div><br></div><div>Yes, asy=
mmetric is more processing intensive than symmetric. But if you take away t=
he distributed replay check (see next response), it will scale out just fin=
e. I&#39;m not so sure latency is a real issue here - while these operation=
s are an order of magnitude slower we&#39;re still talking about times that=
 are not perceptible to a human. CPU usage/cost is a part of a trade-off fo=
r the simplicity afforded by public/private keys.=C2=A0 And it is significa=
ntly simpler. The design you sketched out is admittedly quite clever but it=
&#39;s not even in the same ballpark with respect to complexity. And, as yo=
u pointed out, the other suggestion around symmetric keys has rather differ=
ent security properties while still adding complexity. Adding symmetric key=
 support isn&#39;t something that can just be added on easily.=C2=A0</div><=
/div></div></div></blockquote></div><div><blockquote type=3D"cite"><div><di=
v dir=3D"ltr" style=3D"font-family:HelveticaNeue;font-size:14px;font-style:=
normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;te=
xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=
spacing:0px;text-decoration:none"><div class=3D"gmail_quote"><div>=C2=A0</d=
iv><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord=
er-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div><br></div><d=
iv>2. The advice for the RS to store a set of previously used nonces to pre=
vent replay will also hamper scalability, especially in large deployments w=
here such state would need to be replicated to all servers (or use sticky l=
oad balancing, which comes with its own problems). This violates the statel=
essness of HTTP, and it also potentially breaks idempotency of operations: =
Think of the case where the JWT validation and replay protection is done at=
 an API gateway but then the call to the backend API server fails for a tra=
nsient reason. The client (or a proxy/library) cannot simply replay the (id=
empotent) request in this case because it will be rejected by the gateway. =
It must instead recreate the DPoP JWT, incurring additional overheads.</div=
></div></blockquote><div><br></div><div>The actual value of replay checking=
 on jti is somewhat questionable. The DPoP JWT only transits between client=
 and server so a TLS MITM is likely needed to steal a DPoP JWT. But we are =
assuming TLS works here. And an active MITM could thwart this check by just=
 being first to present DPoP JWT. I think the jti check made its way into t=
he draft mostly because it seemed like something was needed to try and brin=
g it closer to the TLS PoP models. Being aware of the scalability concerns,=
 I did endeavor to write the text in such a way so as to leave some wiggle =
room in implementations/deployments with text like &#39;&quot;jti&quot; SHO=
ULD be used by the server for replay detection and prevention` and [ensure =
that] &#39;within a reasonable consideration of accuracy and resource utili=
zation, a JWT with the same &quot;jti&quot; value has not been received pre=
viously&#39;. The idea being that using something eventually consistent or =
even local only to the runtime instance would be permissible. Perhaps that =
allowance and the rational could be made more clear? Or would you suggest t=
o do away with the jti replay stuff al? Or something else?<span>=C2=A0</spa=
n></div></div></div></div></blockquote><blockquote type=3D"cite"><div><div =
dir=3D"ltr" style=3D"font-family:HelveticaNeue;font-size:14px;font-style:no=
rmal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text=
-align:start;text-indent:0px;text-transform:none;white-space:normal;word-sp=
acing:0px;text-decoration:none"><div class=3D"gmail_quote"><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r=
gb(204,204,204);padding-left:1ex"><div><div><br></div><div>3. Minor: The us=
e of a custom header for communicating the DPoP proof will require addition=
al CORS configuration on top of that already done for the Authorization hea=
der, and so adds a small amount of additional friction for adoption. Given =
that CORS configuration changes often require approval by a security team, =
this may make more of an impact than you&#39;d expect.</div></div></blockqu=
ote><div><br></div><div>Feels really minor. I mean, we could try to roll ev=
erything up under one header. But it does seem unwarranted and would compli=
cate things - at least in the model we&#39;ve got now where the proof is se=
nt the same way ono all types of requests.<span>=C2=A0</span></div></div></=
div></div></blockquote><blockquote type=3D"cite"><div><div dir=3D"ltr" styl=
e=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-varian=
t-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;tex=
t-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-d=
ecoration:none"><div class=3D"gmail_quote"><div>=C2=A0</div><div><br></div>=
<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>It&#39;s also n=
ot clear to me exactly what threat the anti-replay nonce is protecting agai=
nst. It does nothing against the replay scenario discussed in section 2, as=
 I understand it - which really seems to be more of a MitM scenario. Given =
that the connection between the client and the RS is supposed to be over TL=
S, and TLS is already protected against replay attacks, I think this part n=
eeds to be better motivated given the obvious costs of implementing it.</di=
v><div><br></div><div>I have a tentative suggestion for an alternative desi=
gn which avoids these problems, but at a cost of potentially more complexit=
y elsewhere. I&#39;ll summarise it here for consideration:</div><div><br></=
div><div>1. The client obtains an access token in the normal way. When call=
ing the token endpoint it provides an EC/okp public key as the confirmation=
 key to be associated with the access/refresh tokens.</div><div><br></div><=
div>2. The first time the client calls an RS it passes its access token in =
the Authorization: Bearer header as normal. (If the RS doesn&#39;t support =
DPoP then this would just succeed and no further action is required by the =
client - allowing clients to opportunistically ask for DPoP without needing=
 a priori knowledge of RS capabilities).</div><div><br></div><div>3. The RS=
 introspects the access token and learns the EC public key associated with =
the access token. As there is no DPoP proof with the access token, the RS w=
ill generate a challenge in the following way:</div><div>=C2=A0 =C2=A0<span=
>=C2=A0</span>o The RS generates an ephemeral EC key pair for the same curv=
e as the confirmation key (e.g. P-256 or X25519).</div><div>=C2=A0 =C2=A0<s=
pan>=C2=A0</span>o The RS stores the ephemeral private key somewhere, assoc=
iated with this access token (see below for a scalable implementation choic=
e)</div><div>=C2=A0 =C2=A0<span>=C2=A0</span>o The RS encodes the ephemeral=
 public key into a JWK (epk) and base64url-encodes it. It uses this as a ch=
allenge to the client by sending back a 401 response with WWW-Authenticate:=
 DPoP &lt;encoded-epk&gt;</div><div><br></div><div>4. The client decodes th=
e epk challenge and performs an ECDH key agreement between its private key =
and the challenge epk as per the method described for the existing JWA ECDH=
-ES encryption algorithm. Rather than deriving an AES key however, it deriv=
es a HMAC key for HS256. The &quot;apu&quot; value is set to the access tok=
en (string value as ASCII bytes) and the &quot;apv&quot; value is set to th=
e hostname of the RS (e.g. &quot;<a href=3D"http://api.example.com/" target=
=3D"_blank">api.example.com</a>&quot;). This ensures that the derived key i=
s cryptographically bound to the context in which it is used.</div><div><br=
></div><div>5. The client uses the HMAC key to create a DPoP proof JWT much=
 like the one in the current draft, but signed using the HS256 key. If a &q=
uot;kid&quot; field was present in the challenge JWK sent by the RS then th=
e same value MUST be used in the &quot;kid&quot; header of this discharge J=
WT. It retries its original request sending Authorization: DPoP &lt;hmac-jw=
t&gt; at=3D&lt;access_token&gt;.</div><div><br></div><div>6. The RS uses it=
s stored ephemeral private key to derive the same HMAC key and verify the D=
PoP discharge JWT. If it validates and all fields are correct then the requ=
est is allowed.</div><div><br></div><div>Efficient implementation trick:</d=
iv><div>Because the client is required to copy and &quot;kid&quot; value fr=
om the challenge JWK, the RS can preemptively carry out the ECDH key agreem=
ent immediately and generate the derived HMAC key. The RS can then encrypt =
this derived key using a local authenticated encryption key (e.g. AES-GCM) =
and use that encrypted value as the &quot;kid&quot; value in the challenge =
(perhaps along with some context or an expiry time). That way the RS only n=
eeds to decrypt this kid value rather than performing the ECDH key agreemen=
t on every request. This also avoids the need for the RS to store any per-c=
lient state locally.</div><div><br></div><div>The challenge-response nature=
 of the scheme prevents traditional replay attacks in the case where a DPoP=
 discharge JWT is accidentally leaked through server logs or some other fla=
w, without needing to store nonces on the server. Using the RS&#39;s hostna=
me in the key derivation process prevents mitm attacks in a similar way to =
how FIDO/WebAuthn prevents this. Most importantly, once a HS256 key has bee=
n derived between a client and RS they can reuse that key for multiple requ=
ests, reducing the overhead of the ECDH key agreement step. Either side can=
 decide as a matter of policy how long to let this occur and when to trigge=
r a fresh challenge-response.</div><div><br></div><div>Because this fits wi=
thin the standard HTTP authentication framework, it also requires no additi=
onal CORS configuration and is relatively easy to plug in to existing HTTP =
client libraries.</div><div><br></div><div>The main downside of this approa=
ch to me is the fact that you can&#39;t simply reuse an existing JWT librar=
y to implement it, and so it will take time for client libs to develop. (Al=
though I think this might be achievable now with existing *COSE* libraries)=
. This would increase the risk of people hand-rolling solutions, rather tha=
n using well-tested libraries. On the other hand, it uses fairly widely sup=
ported primitives so e.g. an implementation using WebCrypto is probably onl=
y a few dozen lines of code.</div><div><br></div><div>-- Neil</div><div><di=
v><br><div><br><blockquote type=3D"cite"><div>On 31 Oct 2019, at 19:20, Bri=
an Campbell &lt;<a href=3D"mailto:bcampbell=3D40pingidentity.com@dmarc.ietf=
.org" target=3D"_blank">bcampbell=3D40pingidentity.com@dmarc.ietf.org</a>&g=
t; wrote:</div><br><div><div dir=3D"ltr"><div>Hello WG,<span>=C2=A0</span><=
br></div><div><br></div><div>Just a quick note to let folks know that -03 o=
f the DPoP draft was published earlier today. The usual various document li=
nks are in the forwarded message below and the relevant snippet from the do=
c history with a summary of the changes is included here for convenience.<s=
pan>=C2=A0</span><br></div><div><br></div><div>Hopefully folks will have ti=
me to read the (relativity) short document before the meeting(s) in Singapo=
re where (spoiler alert) I plan to ask that the WG consider adoption of the=
 draft.<span>=C2=A0</span><br></div><div><br></div><div>Thanks,</div><div><=
br>=C2=A0-03<br>=C2=A0 =C2=A0o =C2=A0rework the text around uniqueness requ=
irements on the jti claim in<br>=C2=A0 =C2=A0 =C2=A0<span>=C2=A0</span>the =
DPoP proof JWT<br>=C2=A0 =C2=A0o =C2=A0make tokens a bit smaller by using &=
quot;htm&quot;, &quot;htu&quot;, and &quot;jkt&quot; rather<br>=C2=A0 =C2=
=A0 =C2=A0<span>=C2=A0</span>than &quot;http_method&quot;, &quot;http_uri&q=
uot;, and &quot;jkt#S256&quot; respectively<br>=C2=A0 =C2=A0o =C2=A0more ex=
plicit recommendation to use mTLS if that is available<br>=C2=A0 =C2=A0o =
=C2=A0added David Waite as co-author<br>=C2=A0 =C2=A0o =C2=A0editorial upda=
tes</div><div><div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D=
"gmail_attr">---------- Forwarded message ---------<br>From:<span>=C2=A0</s=
pan><span dir=3D"auto">&lt;<a href=3D"mailto:internet-drafts@ietf.org" targ=
et=3D"_blank">internet-drafts@ietf.org</a>&gt;</span><br>Date: Thu, Oct 31,=
 2019 at 11:53 AM<br>Subject: New Version Notification for draft-fett-oauth=
-dpop-03.txt<br>To: Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodde=
rstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>&gt;, Michael Jone=
s &lt;<a href=3D"mailto:mbj@microsoft.com" target=3D"_blank">mbj@microsoft.=
com</a>&gt;, John Bradley &lt;<a href=3D"mailto:ve7jtb@ve7jtb..com" target=
=3D"_blank">ve7jtb@ve7jtb.com</a>&gt;, Brian Campbell &lt;<a href=3D"mailto=
:bcampbell@pingidentity.com" target=3D"_blank">bcampbell@pingidentity.com</=
a>&gt;, David Waite &lt;<a href=3D"mailto:david@alkaline-solutions.com" tar=
get=3D"_blank">david@alkaline-solutions.com</a>&gt;, Daniel Fett &lt;<a hre=
f=3D"mailto:mail@danielfett.de" target=3D"_blank">mail@danielfett.de</a>&gt=
;<br></div><br><br><br>A new version of I-D, draft-fett-oauth-dpop-03.txt<b=
r>has been successfully submitted by Brian Campbell and posted to the<br>IE=
TF repository.<br><br>Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-f=
ett-oauth-dpop<br>Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A003<br>Title:=C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 OAuth 2.0 Demonstration of Proof-of-Possession =
at the Application Layer (DPoP)<br>Document date:=C2=A0 2019-10-30<br>Group=
:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>Pages:=C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 15<br>URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0<span>=C2=A0</span><a href=3D"https://www.ietf.org/internet-drafts/dr=
aft-fett-oauth-dpop-03.txt" rel=3D"noreferrer" target=3D"_blank">https://ww=
w.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>Status:=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.ietf.org/doc/=
draft-fett-oauth-dpop/" rel=3D"noreferrer" target=3D"_blank">https://datatr=
acker.ietf.org/doc/draft-fett-oauth-dpop/</a><br>Htmlized:=C2=A0 =C2=A0 =C2=
=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/draft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank">https://tools.ietf.org/html/draft-fett=
-oauth-dpop-03</a><br>Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https:=
//datatracker.ietf.org/doc/html/draft-fett-oauth-dpop" rel=3D"noreferrer" t=
arget=3D"_blank">https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpo=
p</a><br>Diff:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://w=
ww.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" rel=3D"noreferrer" tar=
get=3D"_blank">https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03=
</a><br><br>Abstract:<br>=C2=A0 =C2=A0This document describes a mechanism f=
or sender-constraining OAuth 2.0<br>=C2=A0 =C2=A0tokens via a proof-of-poss=
ession mechanism on the application level.<br>=C2=A0 =C2=A0This mechanism a=
llows for the detection of replay attacks with access<br>=C2=A0 =C2=A0and r=
efresh tokens.<br><br><br><br><br>Please note that it may take a couple of =
minutes from the time of submission<br>until the htmlized version and diff =
are available at<span>=C2=A0</span><a href=3D"http://tools.ietf.org/" rel=
=3D"noreferrer" target=3D"_blank">tools.ietf.org</a>.<br><br>The IETF Secre=
tariat<br><br></div></div></div></div><br><i style=3D"margin:0px;padding:0p=
x;border:0px none;outline:currentcolor none 0px;vertical-align:baseline;bac=
kground-image:none;background-color:rgb(255,255,255);font-family:proxima-no=
va-zendesk,system-ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Ox=
ygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;colo=
r:rgb(85,85,85);background-position:0% 0%;background-repeat:repeat"><span s=
tyle=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor none 0p=
x;vertical-align:baseline;background-image:none;background-color:transparen=
t;font-family:proxima-nova-zendesk,system-ui,-apple-system,BlinkMacSystemFo=
nt,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica=
 Neue&quot;,Arial,sans-serif;font-weight:600;background-position:0% 0%;back=
ground-repeat:repeat"><font size=3D"2">CONFIDENTIALITY NOTICE: This email m=
ay contain confidential and privileged material for the sole use of the int=
ended recipient(s). Any review, use, distribution or disclosure by others i=
s strictly prohibited..=C2=A0 If you have received this communication in er=
ror, please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank you.</font></span></i>__=
_____________________________________________<br>OAuth mailing list<br><a h=
ref=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br><a hr=
ef=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https:=
//www.ietf.org/mailman/listinfo/oauth</a><br></div></blockquote></div><br><=
/div></div></div></blockquote></div></div><br style=3D"font-family:Helvetic=
aNeue;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight=
:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transfo=
rm:none;white-space:normal;word-spacing:0px;text-decoration:none"><i style=
=3D"font-size:14px;font-variant-caps:normal;font-weight:normal;letter-spaci=
ng:normal;text-align:start;text-indent:0px;text-transform:none;white-space:=
normal;word-spacing:0px;text-decoration:none;margin:0px;padding:0px;border:=
0px none;outline:currentcolor none 0px;vertical-align:baseline;background-c=
olor:rgb(255,255,255);font-family:proxima-nova-zendesk,system-ui,-apple-sys=
tem,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quo=
t;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><span style=3D=
"margin:0px;padding:0px;border:0px none;outline:currentcolor none 0px;verti=
cal-align:baseline;background-color:transparent;font-family:proxima-nova-ze=
ndesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Robot=
o,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;=
font-weight:600"><font size=3D"2">CONFIDENTIALITY NOTICE: This email may co=
ntain confidential and privileged material for the sole use of the intended=
 recipient(s). Any review, use, distribution or disclosure by others is str=
ictly prohibited.=C2=A0 If you have received this communication in error, p=
lease notify the sender immediately by e-mail and delete the message and an=
y file attachments from your computer. Thank you.</font></span></i></div></=
blockquote></div><br></div></div></div></blockquote></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000eb1c270597d5555f--


From nobody Thu Nov 21 02:07:39 2019
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F224120AB8 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 02:07:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oW5L4kDqt0MG for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 02:07:33 -0800 (PST)
Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7054C120AB5 for <oauth@ietf.org>; Thu, 21 Nov 2019 02:07:33 -0800 (PST)
Received: by mail-lj1-x235.google.com with SMTP id p18so2530535ljc.6 for <oauth@ietf.org>; Thu, 21 Nov 2019 02:07:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=SVcxCN9DGaHWV0OsLjYPrhLqEdVqYBYT+U3MKdEIll0=; b=sYnBhj0giis6ajzQsuF7m0P4z8OAbW3B2j8mLWIPeEMAWjNzyvfgPn9lh9MGQPyS3J 5xnPwc6gzS+SrhA2uYXwvRTU0WPGUG6A19Vyo7WyFfAtNfgWhBhwRsCXVXF8m8S/pyZL ZVM5HnB9cKauMIDsodetCy8DdNiQkGHVd48D0AkN7/200WO/K0Hj3KSfJGidrGxLFS25 ou75LSiXPJ8YSgw+Nys+RJ0WJNCf40xlQcp3moGGtP3NaErFHSBn9Z+lQ+IRjBiaR0Fl Rzak7M/JomhvNE35o492yILpUJv43rGiRc8xSqZw3vY6HgzYeVbzEcVZUKD7FjWaYa/L dWGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=SVcxCN9DGaHWV0OsLjYPrhLqEdVqYBYT+U3MKdEIll0=; b=rG9t8Mov5uZqHSTbvn6xcOKRCt5+uZH1cq+31DWde/8+77a3o4fbeaS+tGk7blqWVn ITMWolp3mtX7/FOJixk6ghTsERff5WSTYmdIVkHjyv2bZyOGdR7elZP68caMw49nRPXj wNqSin5WtGd7uT5hVHHf3tR5KBztDa+D8SrJ6k1F45amuzrTFfYXMrS8Om+KEI4Nx1Js hfkKLYRQ9SSV697L9JnKmwGnxgkG76zRae3Pl6mpYUDg4ADFytvnuvGXL7renLPZ1YjW 9NFJg2AtnYNRFjyiHq0Vtfw2rEetiJFkqgI3OJD7f8uCrs9MzP2rxxAe2u5vDc/dXuDt ZDdw==
X-Gm-Message-State: APjAAAXS2t4EpjPpWztWunzDMRPs7eBp1bNNxZvNc25ibZLe1wd/D44U MH84G0v9amLH1OamRXHGZ54YGeImcwTmqxASJBmLlV5HYlQZRg==
X-Google-Smtp-Source: APXvYqw/BWsEW1Q/wf40oAgLXXoqkcIsDUXAepvUuWlHgjsIOuqTuBcsMjvrJGdPCvbyAz8POi9llLRWcF43a3pyUWw=
X-Received: by 2002:a2e:3313:: with SMTP id d19mr6835143ljc.240.1574330851279;  Thu, 21 Nov 2019 02:07:31 -0800 (PST)
MIME-Version: 1.0
From: Dick Hardt <dick.hardt@gmail.com>
Date: Thu, 21 Nov 2019 18:07:19 +0800
Message-ID: <CAD9ie-v_Whj=2zbnTaBkfC2QV1OXBYh=0n9B8fo-m-b5G7vASA@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="0000000000002646c00597d87749"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/b6tfoilmfR4I95w8N9_JpVNYUqs>
Subject: [OAUTH-WG] DPoP symmetric key idea
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 10:07:38 -0000

--0000000000002646c00597d87749
Content-Type: text/plain; charset="UTF-8"

One take away I had from the meeting today, and form the mail list, is the
concern of doing asymmetric crypto on API calls. How about if we use the
Client's public key to encrypt a symmetric key and pass that back to the
Client in the token request response?

EG:

In response to the token request, the AS additionally returns a derived
symmetric key (SK) encrypted in a JWE using the Client's public key from
the DPoP Proof.

The SK = hash( salt, R )

R and the salt version V are included in the access token

The AS and the RS share salts with versions.

The Client decrypts the JWE and now has a symmetric key to sign a Symmetric
DPoP Proof.

The RS take R and V to calculate SK, and verify the signature of the
Symmetric DPoP

Here is an updated flow:

+--------+                                          +---------------+
|        |--(A)-- Token Request ------------------->|               |
| Client |        (DPoP Proof)                      | Authorization |
|        |                                          |     Server    |
|        |<-(B)-- DPoP-bound Access Token ----------|               |
|        |        (token_type=DPoP)                 +---------------+
|        |        PoP Refresh Token for public clients
|        |        Symmetric Key JWE

Client decrypts DPoP Symmetric Key

|        |
|        |                                          +---------------+
|        |--(C)-- DPoP-bound Access Token --------->|               |
|        |        (Symmetric DPoP Proof)             |    Resource   |
|        |                                          |     Server    |
|        |<-(D)-- Protected Resource ---------------|               |
|        |                                          +---------------+
+--------+

--0000000000002646c00597d87749
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div>On=
e take away I had from the meeting today, and form the mail list, is the co=
ncern of doing asymmetric=C2=A0crypto on API calls. How about if we use the=
 Client&#39;s public key to encrypt a symmetric key and pass that back to t=
he Client in the token request response?</div><div><br></div><div>EG:=C2=A0=
</div><div><br></div><div>In response to the token request, the AS addition=
ally returns a derived symmetric=C2=A0key (SK) encrypted in a JWE using the=
 Client&#39;s public key from the DPoP Proof.=C2=A0</div><div><br></div><di=
v>The SK =3D hash( salt, R )</div><div><br></div><div>R and the salt versio=
n V are included in the access token</div><div><br></div><div>The AS and th=
e RS share salts with versions.</div><div><br></div><div>The Client decrypt=
s the JWE and now has a symmetric key to sign a Symmetric DPoP Proof.</div>=
<div><br></div><div>The RS take R and V to calculate SK, and verify the sig=
nature of the Symmetric DPoP</div><div><br></div><div>Here is an updated=C2=
=A0flow:</div><div><br></div><div><div><font face=3D"monospace">+--------+=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 +=
---------------+</font></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =
=C2=A0 =C2=A0 |--(A)-- Token Request -------------------&gt;|=C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|</font></div><div><font face=3D"m=
onospace">| Client |=C2=A0 =C2=A0 =C2=A0 =C2=A0 (DPoP Proof)=C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 | Authorizat=
ion |</font></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 |=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 |=C2=A0 =C2=A0 =C2=A0Server=C2=A0 =C2=A0 |</font></div><div><font face=
=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |&lt;-(B)-- DPoP-bound Access T=
oken ----------|=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|</f=
ont></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 (token_type=3DDPoP)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0+---------------+</font></div><div><font fac=
e=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0 =C2=A0 P=
oP Refresh Token for public clients</font></div><div><font face=3D"monospac=
e">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0 =C2=A0 Symmetric=C2=
=A0Key JWE</font></div><div><font face=3D"monospace"><br></font></div><div>=
<font face=3D"monospace">Client decrypts DPoP=C2=A0</font>Symmetric<font fa=
ce=3D"monospace">=C2=A0Key</font></div><div><font face=3D"monospace"><br></=
font></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |</fo=
nt></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 +-------=
--------+</font></div><div><font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 |--(C)-- DPoP-bound Access Token ---------&gt;|=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|</font></div><div><font face=3D"monospac=
e">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0 =C2=A0 (</font>Symmet=
ric<font face=3D"monospace">=C2=A0DPoP Proof)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0|=C2=A0 =C2=A0 Resource=C2=A0 =C2=A0|</font></div><div>=
<font face=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0S=
erver=C2=A0 =C2=A0 |</font></div><div><font face=3D"monospace">|=C2=A0 =C2=
=A0 =C2=A0 =C2=A0 |&lt;-(D)-- Protected Resource ---------------|=C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|</font></div><div><font face=
=3D"monospace">|=C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 +---------------+</font></div=
><div><font face=3D"monospace">+--------+</font></div></div></div></div></d=
iv></div>

--0000000000002646c00597d87749--


From nobody Thu Nov 21 02:49:34 2019
Return-Path: <david@alkaline-solutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0F4412088B for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 02:49:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.106
X-Spam-Level: 
X-Spam-Status: No, score=-1.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RDNS_NONE=0.793, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MP6LUHv1OH_Q for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 02:49:31 -0800 (PST)
Received: from alkaline-solutions.com (unknown [173.255.196.46]) by ietfa.amsl.com (Postfix) with ESMTP id 9139D1200C1 for <oauth@ietf.org>; Thu, 21 Nov 2019 02:49:31 -0800 (PST)
Received: from [IPv6:2601:282:202:b210:1d66:7b80:6a0a:19de] (unknown [IPv6:2601:282:202:b210:1d66:7b80:6a0a:19de]) by alkaline-solutions.com (Postfix) with ESMTPSA id E26C63158C; Thu, 21 Nov 2019 10:49:36 +0000 (UTC)
From: David Waite <david@alkaline-solutions.com>
Message-Id: <DD16FD08-A67E-487A-B286-85D0A364C1B3@alkaline-solutions.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_B757334F-5D94-40A0-BE1A-8D687FF63E4D"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.40.2.2.1\))
Date: Thu, 21 Nov 2019 03:49:30 -0700
In-Reply-To: <CAD9ie-v_Whj=2zbnTaBkfC2QV1OXBYh=0n9B8fo-m-b5G7vASA@mail.gmail.com>
Cc: oauth@ietf.org
To: Dick Hardt <dick.hardt@gmail.com>
References: <CAD9ie-v_Whj=2zbnTaBkfC2QV1OXBYh=0n9B8fo-m-b5G7vASA@mail.gmail.com>
X-Mailer: Apple Mail (2.3608.40.2.2.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/QQyfEcGnwG5lEd9gvTpUd5juIxc>
Subject: Re: [OAUTH-WG] DPoP symmetric key idea
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 10:49:33 -0000

--Apple-Mail=_B757334F-5D94-40A0-BE1A-8D687FF63E4D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

There seems two prevailing approaches:

1. The AS generates a symmetric key and encrypts it to a specific =
audience as part of/associated with the access token (KDC-type model).
2. The client attempts asymmetric use, and the resource server =
negotiates a symmetric key specific to it.

The first model has advantages in terms of potentially eliminating all =
API-level symmetric crypto and of simplifying/optimizing the first =
client/resource interaction.=20

The second model has an advantage of being an extension of the =
asymmetric model, leaving the AS out of a non-authorization requirement =
of the resource server, and amortizes the cost of the crypto over the =
lifetime of the authorization (since the negotiated key can be reused =
with the next access token). The audience target for the token is no =
longer restricted by the shared secret, since you can negotiate a =
separate symmetric key per resource server. The first access of a =
resource does however have an extra round-trip.

The first model has a single shared secret between the AS and RS, which =
would need to be somehow negotiated.  The private key in the second =
model can create issues where a resource server is actually a =
distributed system like a CDN - draft-ietf-tls-subcerts is an effort to =
try to make that more robust in the TLS space. The second model's =
protocol may wind up using a =E2=80=99service ticket=E2=80=99 style =
sharing of a symmetric key so that each RS node does not have to do =
their own challenge and key derivation on first communication, and to =
lighten the need for caching.

Both systems wind up adding complexity around key rotation. The first =
model can report an issue with key rotation by using a 401 to trigger a =
refresh of the access token - the AS would know in this case the RS has =
a new symmetric key and take that into account with the new access =
token. The second model would trigger a renegotiation on the RS itself.

Finally, it is worth considering that some secure elements (such as on =
iOS devices) do not expose support for symmetric keys, and SubtleCrypto =
in browsers will likely require any symmetric key to be imported such =
that the key itself exists in the Javascript sandbox unencrypted, at =
least for some period of time. Use of symmetric keys thus increases the =
risk of exfiltration, so the time between refreshes (or the access token =
lifetime in environments without refresh tokens) may be reduced in =
consideration. Under this reduced lifetime, amortization of asymmetric =
crypto may have less of an effect.

-DW

> On Nov 21, 2019, at 3:07 AM, Dick Hardt <dick.hardt@gmail.com> wrote:
>=20
> One take away I had from the meeting today, and form the mail list, is =
the concern of doing asymmetric crypto on API calls. How about if we use =
the Client's public key to encrypt a symmetric key and pass that back to =
the Client in the token request response?
>=20
> EG:=20
>=20
> In response to the token request, the AS additionally returns a =
derived symmetric key (SK) encrypted in a JWE using the Client's public =
key from the DPoP Proof.=20
>=20
> The SK =3D hash( salt, R )
>=20
> R and the salt version V are included in the access token
>=20
> The AS and the RS share salts with versions.
>=20
> The Client decrypts the JWE and now has a symmetric key to sign a =
Symmetric DPoP Proof.
>=20
> The RS take R and V to calculate SK, and verify the signature of the =
Symmetric DPoP
>=20
> Here is an updated flow:
>=20
> +--------+                                          +---------------+
> |        |--(A)-- Token Request ------------------->|               |
> | Client |        (DPoP Proof)                      | Authorization |
> |        |                                          |     Server    |
> |        |<-(B)-- DPoP-bound Access Token ----------|               |
> |        |        (token_type=3DDPoP)                 =
+---------------+
> |        |        PoP Refresh Token for public clients
> |        |        Symmetric Key JWE
>=20
> Client decrypts DPoP Symmetric Key
>=20
> |        |
> |        |                                          +---------------+
> |        |--(C)-- DPoP-bound Access Token --------->|               |
> |        |        (Symmetric DPoP Proof)             |    Resource   |
> |        |                                          |     Server    |
> |        |<-(D)-- Protected Resource ---------------|               |
> |        |                                          +---------------+
> +--------+
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_B757334F-5D94-40A0-BE1A-8D687FF63E4D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">There=
 seems two prevailing approaches:<div class=3D""><br class=3D""></div><div=
 class=3D"">1. The AS generates a symmetric key and encrypts it to a =
specific audience as part of/associated with the access token (KDC-type =
model).</div><div class=3D"">2. The client attempts asymmetric use, and =
the resource server negotiates a symmetric key specific to it.<br =
class=3D""><div><br class=3D""></div><div>The first model has advantages =
in terms of potentially eliminating all API-level symmetric crypto and =
of simplifying/optimizing the first client/resource =
interaction.&nbsp;</div><div><br class=3D""></div><div>The second model =
has an advantage of being an extension of the asymmetric model, leaving =
the AS out of a non-authorization requirement of the resource server, =
and amortizes the cost of the crypto over the lifetime of the =
authorization (since the negotiated key can be reused with the next =
access token). The audience target for the token is no longer restricted =
by the shared secret, since you can negotiate a separate symmetric key =
per resource server. The first access of a resource does however have an =
extra round-trip.</div><div><br class=3D""></div><div>The first model =
has a single shared secret between the AS and RS, which would need to be =
somehow negotiated. &nbsp;The private key in the second model can create =
issues where a resource server is actually a distributed system like a =
CDN -&nbsp;<span style=3D"color: rgb(0, 0, 0); font-family: &quot;PT =
Mono&quot;, Monaco, monospace; font-size: 14px; background-color: =
rgb(255, 253, 245);" class=3D"">draft-ietf-tls-subcerts</span>&nbsp;is =
an effort to try to make that more robust in the TLS space. The second =
model's protocol may wind up using a =E2=80=99service ticket=E2=80=99 =
style sharing of a symmetric key so that each RS node does not have to =
do their own challenge and key derivation on first communication, and to =
lighten the need for caching.</div><div><br class=3D""></div><div>Both =
systems wind up adding complexity around key rotation. The first model =
can report an issue with key rotation by using a 401 to trigger a =
refresh of the access token - the AS would know in this case the RS has =
a new symmetric key and take that into account with the new access =
token. The second model would trigger a renegotiation on the RS =
itself.</div><div><br class=3D""></div><div>Finally, it is worth =
considering that some secure elements (such as on iOS devices) do not =
expose support for symmetric keys, and SubtleCrypto in browsers will =
likely require any symmetric key to be imported such that the key itself =
exists in the Javascript sandbox unencrypted, at least for some period =
of time. Use of symmetric keys thus increases the risk of exfiltration, =
so the time between refreshes (or the access token lifetime in =
environments without refresh tokens) may be reduced in consideration. =
Under this reduced lifetime, amortization of asymmetric crypto may have =
less of an effect.</div><div><br class=3D""></div><div>-DW</div><div><br =
class=3D""></div><div><blockquote type=3D"cite" class=3D""><div =
class=3D"">On Nov 21, 2019, at 3:07 AM, Dick Hardt &lt;<a =
href=3D"mailto:dick.hardt@gmail.com" =
class=3D"">dick.hardt@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div dir=3D"ltr" class=3D""><div dir=3D"ltr" class=3D""><div =
dir=3D"ltr" class=3D""><div class=3D"">One take away I had from the =
meeting today, and form the mail list, is the concern of doing =
asymmetric&nbsp;crypto on API calls. How about if we use the Client's =
public key to encrypt a symmetric key and pass that back to the Client =
in the token request response?</div><div class=3D""><br =
class=3D""></div><div class=3D"">EG:&nbsp;</div><div class=3D""><br =
class=3D""></div><div class=3D"">In response to the token request, the =
AS additionally returns a derived symmetric&nbsp;key (SK) encrypted in a =
JWE using the Client's public key from the DPoP Proof.&nbsp;</div><div =
class=3D""><br class=3D""></div><div class=3D"">The SK =3D hash( salt, R =
)</div><div class=3D""><br class=3D""></div><div class=3D"">R and the =
salt version V are included in the access token</div><div class=3D""><br =
class=3D""></div><div class=3D"">The AS and the RS share salts with =
versions.</div><div class=3D""><br class=3D""></div><div class=3D"">The =
Client decrypts the JWE and now has a symmetric key to sign a Symmetric =
DPoP Proof.</div><div class=3D""><br class=3D""></div><div class=3D"">The =
RS take R and V to calculate SK, and verify the signature of the =
Symmetric DPoP</div><div class=3D""><br class=3D""></div><div =
class=3D"">Here is an updated&nbsp;flow:</div><div class=3D""><br =
class=3D""></div><div class=3D""><div class=3D""><font face=3D"monospace" =
class=3D"">+--------+&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; +---------------+</font></div><div =
class=3D""><font face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; =
&nbsp; |--(A)-- Token Request -------------------&gt;|&nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|</font></div><div =
class=3D""><font face=3D"monospace" class=3D"">| Client |&nbsp; &nbsp; =
&nbsp; &nbsp; (DPoP Proof)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | Authorization |</font></div><div =
class=3D""><font face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; =
&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; |&nbsp; &nbsp; &nbsp;Server&nbsp; &nbsp; =
|</font></div><div class=3D""><font face=3D"monospace" class=3D"">|&nbsp; =
&nbsp; &nbsp; &nbsp; |&lt;-(B)-- DPoP-bound Access Token =
----------|&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;|</font></div><div class=3D""><font face=3D"monospace" =
class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; =
(token_type=3DDPoP)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp;+---------------+</font></div><div class=3D""><font =
face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; =
&nbsp; &nbsp; &nbsp; PoP Refresh Token for public =
clients</font></div><div class=3D""><font face=3D"monospace" =
class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; =
Symmetric&nbsp;Key JWE</font></div><div class=3D""><font =
face=3D"monospace" class=3D""><br class=3D""></font></div><div =
class=3D""><font face=3D"monospace" class=3D"">Client decrypts =
DPoP&nbsp;</font>Symmetric<font face=3D"monospace" =
class=3D"">&nbsp;Key</font></div><div class=3D""><font face=3D"monospace" =
class=3D""><br class=3D""></font></div><div class=3D""><font =
face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; =
|</font></div><div class=3D""><font face=3D"monospace" class=3D"">|&nbsp; =
&nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; +---------------+</font></div><div =
class=3D""><font face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; =
&nbsp; |--(C)-- DPoP-bound Access Token ---------&gt;|&nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|</font></div><div =
class=3D""><font face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; =
&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; (</font>Symmetric<font =
face=3D"monospace" class=3D"">&nbsp;DPoP Proof)&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp;|&nbsp; &nbsp; Resource&nbsp; =
&nbsp;|</font></div><div class=3D""><font face=3D"monospace" =
class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; =
&nbsp;Server&nbsp; &nbsp; |</font></div><div class=3D""><font =
face=3D"monospace" class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&lt;-(D)-- =
Protected Resource ---------------|&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;|</font></div><div class=3D""><font face=3D"monospace"=
 class=3D"">|&nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
+---------------+</font></div><div class=3D""><font face=3D"monospace" =
class=3D"">+--------+</font></div></div></div></div></div></div>
_______________________________________________<br class=3D"">OAuth =
mailing list<br class=3D""><a href=3D"mailto:OAuth@ietf.org" =
class=3D"">OAuth@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_B757334F-5D94-40A0-BE1A-8D687FF63E4D--


From nobody Thu Nov 21 05:51:04 2019
Return-Path: <pedram.hosseyni@sec.uni-stuttgart.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2D34120811 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 05:51:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.197
X-Spam-Level: 
X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=uni-stuttgart.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id woXv4oth4JlE for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 05:50:59 -0800 (PST)
Received: from mxex1.tik.uni-stuttgart.de (mxex1.tik.uni-stuttgart.de [129.69.192.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08F85120A8E for <oauth@ietf.org>; Thu, 21 Nov 2019 05:50:56 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mxex1.tik.uni-stuttgart.de (Postfix) with ESMTP id 965E6600FE for <oauth@ietf.org>; Thu, 21 Nov 2019 14:50:54 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=uni-stuttgart.de; h=content-language:content-transfer-encoding:content-type :content-type:mime-version:user-agent:date:date:message-id :subject:subject:from:from:received:received; s=dkim; i= @sec.uni-stuttgart.de; t=1574344252; x=1576083053; bh=WJMRYvibWy iFFQ9i5ifbRYXkXh0gNFEJ4AaRebHQmLM=; b=WV2IzOprMSCw0Ber4DF4Y/Mx64 xh1+5OXndofYAPjPsOENm9IOpSdJCxsK4q5GYHT83W0PsM2n1/+n3zxDBLLKvzfu L2oftT1SD+nZgpELcCeT/H9c/flmaGS9l1G3nJNtXUHDyR5yMkTYBSEUoRMxBg/y VGow540yDnGmLKYi+bH5jY0W33sz3O1cXkE5622850VSG+uQVJDZK1E3+J2xy2Ix n2lS9FkdycQWNAfwDcLc0vV9zpN0klfxpSYPwbpGE2wQ6zYuYxwhOjMrmhHuvhNf q4c3BtAfQi9tC5Ut+xsf7ZvV3YfRhbLzmExkqbsCuv2pYm0tPN1aYPTYu9Tw==
X-Virus-Scanned: USTUTT mailrelay AV services at mxex1.tik.uni-stuttgart.de
Received: from mxex1.tik.uni-stuttgart.de ([127.0.0.1]) by localhost (mxex1.tik.uni-stuttgart.de [127.0.0.1]) (amavisd-new, port 10031) with ESMTP id MQiO0WGNqoho for <oauth@ietf.org>; Thu, 21 Nov 2019 14:50:52 +0100 (CET)
Received: from [IPv6:2001:7c0:2049:1d4:1ce0:2fef:f426:f8cd] (unknown [IPv6:2001:7c0:2049:1d4:1ce0:2fef:f426:f8cd]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mxex1.tik.uni-stuttgart.de (Postfix) with ESMTPSA for <oauth@ietf.org>; Thu, 21 Nov 2019 14:50:52 +0100 (CET)
From: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
To: oauth@ietf.org
Message-ID: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de>
Date: Thu, 21 Nov 2019 14:50:52 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/_nRwpVEkuDXYEdWBGJY1nKR_gIg>
Subject: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 13:51:02 -0000

Dear all,

I have a few comments about the leakage of access tokens and the 
underlying assumptions:

Section 2, A5 should be clarified:

"a resource server can be compromised by an attacker": Is the assumption 
that the attacker cannot get access to the resources stored at the 
compromised RS (or only parts of it)? Otherwise, the attacker does not 
need to get an AT anymore. A more differentiated view on RS 
compromisation is already given in Section 4.8.2, but this is not 
reflected in A5.

Also, A5 states that "an access token may be sent to an 
attacker-controlled resource server due to a misconfiguration," which 
does not require the compromisation of an honest RS.

Perhaps one could be more generic here and just say that the AT leaks to 
the attacker. However, a misconfigured RS endpoint not only gets the 
request to this endpoint (containing an AT) but can also respond and 
provide the RO with wrong resources. At the same time, if, say, the RO 
thinks that she is connected to her cloud storage, the attacker would 
get access to all uploaded data.

Is this really what A5 should express, or is the primary focus on the 
leakage of the AT?

Also, for this or the next version of this document, the Cuckoo's Token 
attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ ), should 
be addressed. We also discussed this issue extensively at the last OSW 
in Stuttgart.

Typo: Section 3.5: MTLS -> mTLS

Best regards
Pedram Hosseyni

-- 
Pedram Hosseyni, M.Sc.
Room V38 2.438
Institute of Information Security - SEC
UniversitÃ¤t Stuttgart
UniversitÃ¤tsstraÃŸe 38
D-70569 Stuttgart
Germany
Phone: +49 711 685 88454
https://sec.uni-stuttgart.de


From nobody Thu Nov 21 12:39:30 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D0671200B1 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 12:39:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tL7CcGnVi5lw for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 12:39:22 -0800 (PST)
Received: from mail-wm1-x334.google.com (mail-wm1-x334.google.com [IPv6:2a00:1450:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 284C5120098 for <oauth@ietf.org>; Thu, 21 Nov 2019 12:39:22 -0800 (PST)
Received: by mail-wm1-x334.google.com with SMTP id t26so5242602wmi.4 for <oauth@ietf.org>; Thu, 21 Nov 2019 12:39:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=7G/Zlnb78RzTU9XvPT3JwTlv9Nonk1UEYpxbCe2bBw0=; b=EDUt6+5YH2LfX2gJAeo4KhpgPLSN9O+fqXCIvhbT1UDSA8NcWxPm5Gnr+sD3+5CVnu 5BqVjt9tH5nTIbP+vWW105yUgj/meKjSlotMyyB6Cs114QIZEu8iVMAgtLi33+7sqDAT ltYgIrHtw6ryadJlj+nhOPGbOIoDH1hSn6hV0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=7G/Zlnb78RzTU9XvPT3JwTlv9Nonk1UEYpxbCe2bBw0=; b=cWe1bbCalZO3oOhoxS5Ii0CYm9+EYAW0bhuwsKm9cMffHRz7KCDFW53pxehmnSBfuX P+KKXZCyD91MFDHJAC0DutV578YZvbUCvI6RiVEZbxj+FYR0wOAg0Ozc6QVsuF+0edEb nn23qslzJTJX/BDo5nJh43C0FxmiM5y+oX2Yc4NpnMubNHyr+z/eIIzxHhruGc79YHHD SX9umNhDqgvNKRfaTnFqGi185aWaNMHgF3o7jriy4D2/fseLRaVP4X2HGTAHqUnpqD3c tQMnc8myT2T+ryIv3AwTqo0gEiH7wfMLY5LWe/EWvPG1iDFewHMFQSeDq9qYDJ+LlL4x 91Ig==
X-Gm-Message-State: APjAAAWa39VOKTmJjgIC1gSrbMMSz45cmX8ihYmD0aeq8tx61vKXvdb2 VDPggoMkbAmR1/7s9HVvfIbsAg==
X-Google-Smtp-Source: APXvYqy1FhkC+jcxi57hP46uwaHnWUCsqn9QDU2PnyudMGeDGlgnwR9S+YPN6xRqRDYJzNQl1ibgWQ==
X-Received: by 2002:a1c:e90b:: with SMTP id q11mr12395128wmc.125.1574368760184;  Thu, 21 Nov 2019 12:39:20 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id b186sm828760wmb.21.2019.11.21.12.39.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Nov 2019 12:39:18 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <DC4C3E78-E8C9-4FFF-9598-694E16174E3D@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1EDEE73C-29E0-4C44-BE91-F5043989DCEA"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Thu, 21 Nov 2019 20:39:15 +0000
In-Reply-To: <CA+k3eCQtZt=MaDK4KXzbG+37mo1YRqC3JDR3cmWXRv=Yu==gKQ@mail.gmail.com>
Cc: oauth <oauth@ietf.org>
To: Brian Campbell <bcampbell@pingidentity.com>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com> <5203CB2A-141F-4AB1-96AF-775B20D75923@forgerock.com> <CA+k3eCQtZt=MaDK4KXzbG+37mo1YRqC3JDR3cmWXRv=Yu==gKQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/qk_h9fHSgzpdrtF3WC1c9x6rhvY>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 20:39:29 -0000

--Apple-Mail=_1EDEE73C-29E0-4C44-BE91-F5043989DCEA
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

At the end of my previous email I mentioned that you can achieve some of =
the same aims as DPoP without needing a PoP mechanism at all. This email =
is that follow-up.

OAuth is agnostic about the format of access tokens and many vendors =
support either random string database tokens or JWTs. But there are =
other choices for access token format, some of which have more =
interesting properties. In particular, Google proposed Macaroons a few =
years ago as a "better cookie" [1] and I think they systematically =
address many of these issues when used as an access token format.

For those who aren't familiar with them, Macaroons are a bit like a =
HS256 JWT. They have a location (a bit like the audience in a JWT) and =
an identifier (an arbitrary string) and then are signed with HMAC-SHA256 =
using a secret key. (There's no claims set or headers - they are very =
minimal). In this case the secret key would be owned by the AS and used =
to sign macaroon-based access tokens. Validating the token would be done =
via token introspection at the AS.

The clever bit is that anybody at all can append "caveats" to a macaroon =
at any time, but nobody can remove one once added. Caveats are =
restrictions on the use of a token - they only ever reduce the authority =
granted by the token, never expand it. The AS can validate the token and =
all the caveats with its secret key. So, for example, if an access token =
was a macaroon then the client could append a caveat to reduce the =
scope, or reduce the expiry time, or reduce the audience, and so on.

The really clever bit is that the client can keep a copy of the original =
token and create restricted versions to send to different resource =
servers. Because HMAC is very cheap, the client can even do this before =
each and every request. (This is what the original paper refers to as =
"contextual caveats"). This means that a client can be issued a single =
access token from the AS with broad scope and applicable to many =
different RS and can then locally create restricted copies for each =
individual RS.

The relevance to DPoP is that the client could even append caveats =
equivalent to "htm" and "htu" just before sending the access token to =
the RS, and maybe add an "exp" for 5 seconds in the future, reduce the =
scope, and so on:

  newAccessToken =3D accessToken.withCaveats({
    exp: now + 5seconds,
    scope: "a b",
    htm: "POST",
    ...
  });
  httpClient.post(data, Authorization: Bearer newAccessToken);

Note that the client doesn't need anything extra here - no keys, extra =
tokens etc. They just have the access token and a macaroon library.

The RS will see an opaque access token, send it to the AS for =
introspection. The AS however, will see and validate the new caveats on =
the token and return an introspection response with the restricted scope =
and expiry time, and return the htm/htu restrictions that the RS can =
then enforce.=20

For clients this is transparent until they want to take advantage of it =
and then they can just use an off-the-shelf macaroon library. For the RS =
it is also completely transparent. All the (relatively small) complexity =
lives in the AS, which just has to be able to produce and verify =
macaroons and take caveats into account when performing token =
introspection - e.g. the returned scope should be the intersection of =
the original token scope and any scope caveats. But I don't think this =
would be too much effort.

[1]: https://ai.google/research/pubs/pub41892 =
<https://ai.google/research/pubs/pub41892>

-- Neil

> On 21 Nov 2019, at 06:23, Brian Campbell <bcampbell@pingidentity.com> =
wrote:
>=20
> Yeah, suggestions and/or an MTI about algorithm support would probably =
be worthwhile. Perhaps also some defined means of signaling when an =
unsupported algorithm is used along with any other reason a DPoP is =
invalid or rejected. =20
>=20
> There are a lot of tradeoffs in what claims are required and what =
protections are provided etc. The aim of what was chosen was to do just =
enough to provide some reasonable protections against reuse or use in a =
different context while being simple to implement and deploy.
>=20
>=20
> On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com =
<mailto:neil.madden@forgerock.com>> wrote:
> Thanks for the reply, Brian.=20
>=20
> Collecting my thoughts up here rather than responding blow by blow.
>=20
> Public key signatures are simpler in some respects, more complex in =
others. There are currently 10 public key JWS signature schemes defined =
(ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS =
potentially have to support them all? If not, how do they negotiate =
algorithm support with the client?
>=20
> On the other hand, the ECDH scheme I proposed can be implemented by =
adapting an existing ECDH-ES encryption support in a JWT library. For =
example, I discovered while playing with this that our own internal =
library can implement the full flow I described entirely via the =
existing public API [1], so it's not necessarily as complex as it first =
looks. I even knocked up a from-scratch implementation in WebCrypto =
(JavaScript) without too much code [2].
>=20
> But I admit that using an existing JWT library to sign a JWT with an =
existing algorithm is even easier, and that counts for a lot. Perhaps we =
can make concrete suggestions/requirements about algorithm support? e.g. =
"The RS MUST support RS256 and SHOULD support EdDSA. Other algorithms =
MAY be supported."=20
>=20
> With regards to replay protection, I think there are at least two =
reasonable positions:
>=20
> 1. We assume that TLS is secure and don't try to defend against any =
compromise at that level. (Clearly none of the TLS-based PoP mechanisms =
survive if TLS is compromised, by definition). In this case the main =
attack to defend against is a malicious RS replaying the access token =
elsewhere. Simply signing the origin of the RS would be enough to =
prevent this attack, while letting the client reuse the same JWT for =
many requests (and the RS to cache the JWT validation). None of "jti", =
"htu", or "htm" seem relevant to this model.
>=20
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) =
and try to provide some defense in depth against a MitM attacker =
replaying a token against the same RS. There is a graduated series of =
steps you can take here, depending on how much you want to prevent this:
>    a. The DPoP token can be replayed for arbitrary requests to the =
same RS but has a short time limit (e.g., exp claim or RS-enforced max =
lifetime from iat)
>    b. The DPoP token can be replayed for the same request (htu/htm =
claims)
>    c. The DPoP token can't be replayed at all - either because of jti =
blacklisting on the RS or a challenge-response protocol on each request.
>=20
> (There are also variants such as including a hash of the request =
body/headers, or encoding an ETag into the JWT).
>=20
> I think either are reasonable design goals, but aiming for 2 adds more =
value. I think aiming for 2a is a reasonable default baseline that =
allows the client to reuse a DPoP token for a few requests, reducing the =
cost of the signature (and the RS can cache the validated JWT). Support =
for 2b or 2c can then be listed as optional additions.
>=20
> PS - 2a/2b can be achieved without PoP. I'll save that for another =
email in the next few days though.
>=20
> [1]: =
https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496 =
<https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496>
> [2]: =
https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7 =
<https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7>
>=20
>=20
> -- Neil
>=20
>> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com =
<mailto:bcampbell@pingidentity.com>> wrote:
>>=20
>>=20
>>=20
>> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden =
<neil.madden@forgerock.com <mailto:neil.madden@forgerock.com>> wrote:
>> I can't attend Singapore either in person or remotely due to other =
commitments. I broadly support adoption of this draft, but I have some =
comments/suggestions about it.
>>=20
>> Thanks Neil. And sorry to hear that you won't be in Singapore. This =
kind of stuff is definitely more easily discussed in person (for me =
anyway). But I'll try and comment on your comments here as best I can. I =
also plan to also mention them in the Wednesday and/or Thursday =
presentation.=20
>> =20
>> Section 2 lists the main objective as being to harden against =
compromised/malicious AS or RS, which may attempt to replay captured =
tokens elsewhere. While this is a good idea, a casual reader might =
wonder why a simple audience claim in the access token/introspection =
response is not sufficient to prevent this. Because interactions between =
the client and RS are supposed to be over TLS, is the intended threat =
model one in which these protections have broken down? ("counterfeit" in =
the description suggests this). Or is the motivation that clients want =
to get a single broad-scoped access token (for usability/performance =
reasons) and use it to access multiple resource servers without giving =
each of them the ability to replay the token to the other servers? Or =
are we thinking of a phishing-type vulnerability were a general-purpose =
client might accidentally visit a malicious site which prompts for an =
access token that the client then blindly goes off and gets? (UMA?) It's =
not clear to me which of these scenarios is being considered, so it =
would be good to tighten up this section.
>>=20
>> It is admittedly a bit loose and I agree it'd be good to tighten it =
up. But part of why it's loose is that it tries to offer some =
protections for all those scenarios and more such as a general =
lost/stolen token. It's effectively trying to provide as many of the =
same types of protections/assurances that you'd get with TLS based PoP =
mechanisms (like OAuth MTLS or Token binding) to the extent that can be =
done at the HTTP application layer. Which can't realistically be exactly =
the same but can maybe be kinda close while actually being accessible =
and implementable because it's all done at the application layer. There =
are trade-offs, of course, and the document writers have endeavored to =
find a good balance in the trade-off decisions we've made. But that =
doesn't mean they are necessarily the right decisions or are closed to =
discussion. To the casual reader I would say that it turns out that =
getting an appropriate simple audience claim into an access token isn't =
nearly as simple as it might seem. And while it will prevent RS to RS =
replay (as long as both RSs aren't legit audiences) it doesn't help with =
preventing the use of tokens stolen or leaked by other means (including =
for refresh tokens issued to public clients).=20
>> =20
>> Another potential motivation is for mobile apps. Some customers of =
ours would like to tie access/refresh tokens to private key material =
generated on a secure element in the device, that can only be accessed =
after local biometric authentication (e.g. TouchID/FaceID on iOS). I =
have suggested using mTLS cert-bound tokens for this, but have heard =
some pushback due to the difficulty of configuring support for client =
certs across diverse infrastructure. A simple JWT-based solution like =
DPoP could fill this need.
>>=20
>> It's maybe not stated in the draft but this kind of thing is among =
the objectives (in my mind anyway).=20
>>=20
>> =20
>> My main concerns with the draft though are about efficiency and =
scalability of the proposed approach:
>>=20
>> 1. The requirement to use public key signatures, along with the =
anti-replay nonce, means that the RS is required to perform an expensive =
signature verification check on every request. That is not going to =
scale up well. While there are more efficient schemes like Ed25519 now, =
these are still typically an order of magnitude slower than HMAC and the =
latency and CPU overhead is likely to be a non-starter for many APIs =
(especially when you're billed by CPU usage). Public key signatures are =
also notoriously fragile (see e.g. the history of nonce reuse/leakage =
vulnerabilities in ECDSA or=20
>>=20
>> Yes, asymmetric is more processing intensive than symmetric. But if =
you take away the distributed replay check (see next response), it will =
scale out just fine. I'm not so sure latency is a real issue here - =
while these operations are an order of magnitude slower we're still =
talking about times that are not perceptible to a human. CPU usage/cost =
is a part of a trade-off for the simplicity afforded by public/private =
keys.  And it is significantly simpler. The design you sketched out is =
admittedly quite clever but it's not even in the same ballpark with =
respect to complexity. And, as you pointed out, the other suggestion =
around symmetric keys has rather different security properties while =
still adding complexity. Adding symmetric key support isn't something =
that can just be added on easily.=20
>=20
>> =20
>>=20
>> 2. The advice for the RS to store a set of previously used nonces to =
prevent replay will also hamper scalability, especially in large =
deployments where such state would need to be replicated to all servers =
(or use sticky load balancing, which comes with its own problems). This =
violates the statelessness of HTTP, and it also potentially breaks =
idempotency of operations: Think of the case where the JWT validation =
and replay protection is done at an API gateway but then the call to the =
backend API server fails for a transient reason. The client (or a =
proxy/library) cannot simply replay the (idempotent) request in this =
case because it will be rejected by the gateway. It must instead =
recreate the DPoP JWT, incurring additional overheads.
>>=20
>> The actual value of replay checking on jti is somewhat questionable. =
The DPoP JWT only transits between client and server so a TLS MITM is =
likely needed to steal a DPoP JWT. But we are assuming TLS works here. =
And an active MITM could thwart this check by just being first to =
present DPoP JWT. I think the jti check made its way into the draft =
mostly because it seemed like something was needed to try and bring it =
closer to the TLS PoP models. Being aware of the scalability concerns, I =
did endeavor to write the text in such a way so as to leave some wiggle =
room in implementations/deployments with text like '"jti" SHOULD be used =
by the server for replay detection and prevention` and [ensure that] =
'within a reasonable consideration of accuracy and resource utilization, =
a JWT with the same "jti" value has not been received previously'. The =
idea being that using something eventually consistent or even local only =
to the runtime instance would be permissible. Perhaps that allowance and =
the rational could be made more clear? Or would you suggest to do away =
with the jti replay stuff al? Or something else?=20
>>=20
>> 3. Minor: The use of a custom header for communicating the DPoP proof =
will require additional CORS configuration on top of that already done =
for the Authorization header, and so adds a small amount of additional =
friction for adoption. Given that CORS configuration changes often =
require approval by a security team, this may make more of an impact =
than you'd expect.
>>=20
>> Feels really minor. I mean, we could try to roll everything up under =
one header. But it does seem unwarranted and would complicate things - =
at least in the model we've got now where the proof is sent the same way =
ono all types of requests.=20
>> =20
>>=20
>> It's also not clear to me exactly what threat the anti-replay nonce =
is protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.
>>=20
>> I have a tentative suggestion for an alternative design which avoids =
these problems, but at a cost of potentially more complexity elsewhere. =
I'll summarise it here for consideration:
>>=20
>> 1. The client obtains an access token in the normal way. When calling =
the token endpoint it provides an EC/okp public key as the confirmation =
key to be associated with the access/refresh tokens.
>>=20
>> 2. The first time the client calls an RS it passes its access token =
in the Authorization: Bearer header as normal. (If the RS doesn't =
support DPoP then this would just succeed and no further action is =
required by the client - allowing clients to opportunistically ask for =
DPoP without needing a priori knowledge of RS capabilities).
>>=20
>> 3. The RS introspects the access token and learns the EC public key =
associated with the access token. As there is no DPoP proof with the =
access token, the RS will generate a challenge in the following way:
>>     o The RS generates an ephemeral EC key pair for the same curve as =
the confirmation key (e.g. P-256 or X25519).
>>     o The RS stores the ephemeral private key somewhere, associated =
with this access token (see below for a scalable implementation choice)
>>     o The RS encodes the ephemeral public key into a JWK (epk) and =
base64url-encodes it. It uses this as a challenge to the client by =
sending back a 401 response with WWW-Authenticate: DPoP <encoded-epk>
>>=20
>> 4. The client decodes the epk challenge and performs an ECDH key =
agreement between its private key and the challenge epk as per the =
method described for the existing JWA ECDH-ES encryption algorithm. =
Rather than deriving an AES key however, it derives a HMAC key for =
HS256. The "apu" value is set to the access token (string value as ASCII =
bytes) and the "apv" value is set to the hostname of the RS (e.g. =
"api.example.com <http://api.example.com/>"). This ensures that the =
derived key is cryptographically bound to the context in which it is =
used.
>>=20
>> 5. The client uses the HMAC key to create a DPoP proof JWT much like =
the one in the current draft, but signed using the HS256 key. If a "kid" =
field was present in the challenge JWK sent by the RS then the same =
value MUST be used in the "kid" header of this discharge JWT. It retries =
its original request sending Authorization: DPoP <hmac-jwt> =
at=3D<access_token>.
>>=20
>> 6. The RS uses its stored ephemeral private key to derive the same =
HMAC key and verify the DPoP discharge JWT. If it validates and all =
fields are correct then the request is allowed.
>>=20
>> Efficient implementation trick:
>> Because the client is required to copy and "kid" value from the =
challenge JWK, the RS can preemptively carry out the ECDH key agreement =
immediately and generate the derived HMAC key. The RS can then encrypt =
this derived key using a local authenticated encryption key (e.g. =
AES-GCM) and use that encrypted value as the "kid" value in the =
challenge (perhaps along with some context or an expiry time). That way =
the RS only needs to decrypt this kid value rather than performing the =
ECDH key agreement on every request. This also avoids the need for the =
RS to store any per-client state locally.
>>=20
>> The challenge-response nature of the scheme prevents traditional =
replay attacks in the case where a DPoP discharge JWT is accidentally =
leaked through server logs or some other flaw, without needing to store =
nonces on the server. Using the RS's hostname in the key derivation =
process prevents mitm attacks in a similar way to how FIDO/WebAuthn =
prevents this. Most importantly, once a HS256 key has been derived =
between a client and RS they can reuse that key for multiple requests, =
reducing the overhead of the ECDH key agreement step. Either side can =
decide as a matter of policy how long to let this occur and when to =
trigger a fresh challenge-response.
>>=20
>> Because this fits within the standard HTTP authentication framework, =
it also requires no additional CORS configuration and is relatively easy =
to plug in to existing HTTP client libraries.
>>=20
>> The main downside of this approach to me is the fact that you can't =
simply reuse an existing JWT library to implement it, and so it will =
take time for client libs to develop. (Although I think this might be =
achievable now with existing *COSE* libraries). This would increase the =
risk of people hand-rolling solutions, rather than using well-tested =
libraries. On the other hand, it uses fairly widely supported primitives =
so e.g. an implementation using WebCrypto is probably only a few dozen =
lines of code.
>>=20
>> -- Neil
>>=20
>>=20
>>> On 31 Oct 2019, at 19:20, Brian Campbell =
<bcampbell=3D40pingidentity.com@dmarc.ietf.org =
<mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org>> wrote:
>>>=20
>>> Hello WG,=20
>>>=20
>>> Just a quick note to let folks know that -03 of the DPoP draft was =
published earlier today. The usual various document links are in the =
forwarded message below and the relevant snippet from the doc history =
with a summary of the changes is included here for convenience.=20
>>>=20
>>> Hopefully folks will have time to read the (relativity) short =
document before the meeting(s) in Singapore where (spoiler alert) I plan =
to ask that the WG consider adoption of the draft.=20
>>>=20
>>> Thanks,
>>>=20
>>>  -03
>>>    o  rework the text around uniqueness requirements on the jti =
claim in
>>>       the DPoP proof JWT
>>>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" =
rather
>>>       than "http_method", "http_uri", and "jkt#S256" respectively
>>>    o  more explicit recommendation to use mTLS if that is available
>>>    o  added David Waite as co-author
>>>    o  editorial updates
>>>=20
>>> ---------- Forwarded message ---------
>>> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
>>> Date: Thu, Oct 31, 2019 at 11:53 AM
>>> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
>>> To: Torsten Lodderstedt <torsten@lodderstedt.net =
<mailto:torsten@lodderstedt.net>>, Michael Jones <mbj@microsoft.com =
<mailto:mbj@microsoft.com>>, John Bradley <ve7jtb@ve7jtb.com =
<mailto:ve7jtb@ve7jtb..com>>, Brian Campbell <bcampbell@pingidentity.com =
<mailto:bcampbell@pingidentity.com>>, David Waite =
<david@alkaline-solutions.com <mailto:david@alkaline-solutions.com>>, =
Daniel Fett <mail@danielfett.de <mailto:mail@danielfett.de>>
>>>=20
>>>=20
>>>=20
>>> A new version of I-D, draft-fett-oauth-dpop-03.txt
>>> has been successfully submitted by Brian Campbell and posted to the
>>> IETF repository.
>>>=20
>>> Name:           draft-fett-oauth-dpop
>>> Revision:       03
>>> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at =
the Application Layer (DPoP)
>>> Document date:  2019-10-30
>>> Group:          Individual Submission
>>> Pages:          15
>>> URL:            =
https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt =
<https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt>
>>> Status:         =
https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/ =
<https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/>
>>> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03 =
<https://tools.ietf.org/html/draft-fett-oauth-dpop-03>
>>> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop =
<https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop>
>>> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03 =
<https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03>
>>>=20
>>> Abstract:
>>>    This document describes a mechanism for sender-constraining OAuth =
2.0
>>>    tokens via a proof-of-possession mechanism on the application =
level.
>>>    This mechanism allows for the detection of replay attacks with =
access
>>>    and refresh tokens.
>>>=20
>>>=20
>>>=20
>>>=20
>>> Please note that it may take a couple of minutes from the time of =
submission
>>> until the htmlized version and diff are available at tools.ietf.org =
<http://tools.ietf.org/>.
>>>=20
>>> The IETF Secretariat
>>>=20
>>>=20
>>> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/oauth =
<https://www.ietf.org/mailman/listinfo/oauth>
>>=20
>>=20
>> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited.  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited.  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.


--Apple-Mail=_1EDEE73C-29E0-4C44-BE91-F5043989DCEA
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">At =
the end of my previous email I mentioned that you can achieve some of =
the same aims as DPoP without needing a PoP mechanism at all. This email =
is that follow-up.<div class=3D""><br class=3D""></div><div =
class=3D"">OAuth is agnostic about the format of access tokens and many =
vendors support either random string database tokens or JWTs. But there =
are other choices for access token format, some of which have more =
interesting properties. In particular, Google proposed Macaroons a few =
years ago as a "better cookie" [1] and I think they systematically =
address many of these issues when used as an access token =
format.</div><div class=3D""><br class=3D""></div><div class=3D"">For =
those who aren't familiar with them, Macaroons are a bit like a HS256 =
JWT. They have a location (a bit like the audience in a JWT) and an =
identifier (an arbitrary string) and then are signed with HMAC-SHA256 =
using a secret key. (There's no claims set or headers - they are very =
minimal). In this case the secret key would be owned by the AS and used =
to sign macaroon-based access tokens. Validating the token would be done =
via token introspection at the AS.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The clever bit is that anybody at all =
can append "caveats" to a macaroon at any time, but nobody can remove =
one once added. Caveats are restrictions on the use of a token - they =
only ever reduce the authority granted by the token, never expand it. =
The AS can validate the token and all the caveats with its secret key. =
So, for example, if an access token was a macaroon then the client could =
append a caveat to reduce the scope, or reduce the expiry time, or =
reduce the audience, and so on.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The really clever bit is that the =
client can keep a copy of the original token and create restricted =
versions to send to different resource servers. Because HMAC is very =
cheap, the client can even do this before each and every request. (This =
is what the original paper refers to as "contextual caveats"). This =
means that a client can be issued a single access token from the AS with =
broad scope and applicable to many different RS and can then locally =
create restricted copies for each individual RS.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The relevance to DPoP is that the =
client could even append caveats equivalent to "htm" and "htu" just =
before sending the access token to the RS, and maybe add an "exp" for 5 =
seconds in the future, reduce the scope, and so on:</div><div =
class=3D""><br class=3D""></div><div class=3D"">&nbsp; newAccessToken =3D =
accessToken.withCaveats({</div><div class=3D"">&nbsp; &nbsp; exp: now + =
5seconds,</div><div class=3D"">&nbsp; &nbsp; scope: "a b",</div><div =
class=3D"">&nbsp; &nbsp; htm: "POST",</div><div class=3D"">&nbsp; &nbsp; =
...</div><div class=3D"">&nbsp; });</div><div class=3D"">&nbsp; =
httpClient.post(data, Authorization: Bearer newAccessToken);</div><div =
class=3D""><br class=3D""></div><div class=3D"">Note that the client =
doesn't need anything extra here - no keys, extra tokens etc. They just =
have the access token and a macaroon library.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The RS will see an opaque access token, =
send it to the AS for introspection. The AS however, will see and =
validate the new caveats on the token and return an introspection =
response with the restricted scope and expiry time, and return the =
htm/htu restrictions that the RS can then enforce.&nbsp;</div><div =
class=3D""><br class=3D""></div><div class=3D"">For clients this is =
transparent until they want to take advantage of it and then they can =
just use an off-the-shelf macaroon library. For the RS it is also =
completely transparent. All the (relatively small) complexity lives in =
the AS, which just has to be able to produce and verify macaroons and =
take caveats into account when performing token introspection - e.g. the =
returned scope should be the intersection of the original token scope =
and any scope caveats. But I don't think this would be too much =
effort.</div><div class=3D""><br class=3D""></div><div =
class=3D"">[1]:&nbsp;<a href=3D"https://ai.google/research/pubs/pub41892" =
class=3D"">https://ai.google/research/pubs/pub41892</a></div><div =
class=3D""><br class=3D""></div><div class=3D"">-- Neil<br class=3D"">
<div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 21 Nov 2019, at 06:23, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" =
class=3D"">bcampbell@pingidentity.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"">Yeah, suggestions and/or an MTI about =
algorithm support would probably be worthwhile. Perhaps also some =
defined means of signaling when an unsupported algorithm is used along =
with any other reason a DPoP is invalid or rejected.&nbsp; <br =
class=3D""></div><div class=3D""><br class=3D""></div><div =
class=3D"">There are a lot of tradeoffs in what claims are required and =
what protections are provided etc. The aim of what was chosen was to do =
just enough to provide some reasonable protections against reuse or use =
in a different context while being simple to implement and deploy.<br =
class=3D""></div><br class=3D""></div><br class=3D""><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov =
20, 2019 at 6:34 AM Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D"">Thanks for the reply, =
Brian.&nbsp;<div class=3D""><br class=3D""></div><div =
class=3D"">Collecting my thoughts up here rather than responding blow by =
blow.<div class=3D""><br class=3D""></div><div class=3D""><div =
class=3D"">Public key signatures are simpler in some respects, more =
complex in others. There are currently 10 public key JWS signature =
schemes defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - =
does an RS potentially have to support them all? If not, how do they =
negotiate algorithm support with the client?</div><div class=3D""><br =
class=3D""></div><div class=3D"">On the other hand, the ECDH scheme I =
proposed can be implemented by adapting an existing ECDH-ES encryption =
support in a JWT library. For example, I discovered while playing with =
this that our own internal library can implement the full flow I =
described entirely via the existing public API [1], so it's not =
necessarily as complex as it first looks. I even knocked up a =
from-scratch implementation in WebCrypto (JavaScript) without too much =
code [2].</div><div class=3D""><br class=3D""></div><div class=3D"">But =
I admit that using an existing JWT library to sign a JWT with an =
existing algorithm is even easier, and that counts for a lot. Perhaps we =
can make concrete suggestions/requirements about algorithm support? e.g. =
"The RS MUST support RS256 and SHOULD support EdDSA. Other algorithms =
MAY be supported."&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">With regards to replay protection, I think there are at least =
two reasonable positions:</div><div class=3D""><br class=3D""></div><div =
class=3D"">1. We assume that TLS is secure and don't try to defend =
against any compromise at that level. (Clearly none of the TLS-based PoP =
mechanisms survive if TLS is compromised, by definition). In this case =
the main attack to defend against is a malicious RS replaying the access =
token elsewhere. Simply signing the origin of the RS would be enough to =
prevent this attack, while letting the client reuse the same JWT for =
many requests (and the RS to cache the JWT validation). None of "jti", =
"htu", or "htm" seem relevant to this model.</div><div class=3D""><br =
class=3D""></div><div class=3D"">2. We don't assume that TLS is secure =
(or it's not fully end-to-end) and try to provide some defense in depth =
against a MitM attacker replaying a token against the same RS. There is =
a graduated series of steps you can take here, depending on how much you =
want to prevent this:</div><div class=3D"">&nbsp; &nbsp;a. The DPoP =
token can be replayed for arbitrary requests to the same RS but has a =
short time limit (e.g., exp claim or RS-enforced max lifetime from =
iat)</div><div class=3D"">&nbsp; &nbsp;b. The DPoP token can be replayed =
for the same request (htu/htm claims)</div><div class=3D"">&nbsp; =
&nbsp;c. The DPoP token can't be replayed at all - either because of jti =
blacklisting on the RS or a challenge-response protocol on each =
request.</div><div class=3D""><br class=3D""></div><div class=3D"">(There =
are also variants such as including a hash of the request body/headers, =
or encoding an ETag into the JWT).</div><div class=3D""><br =
class=3D""></div><div class=3D"">I think either are reasonable design =
goals, but aiming for 2 adds more value. I think aiming for 2a is a =
reasonable default baseline that allows the client to reuse a DPoP token =
for a few requests, reducing the cost of the signature (and the RS can =
cache the validated JWT). Support for 2b or 2c can then be listed as =
optional additions.</div><div class=3D""><br class=3D""></div><div =
class=3D"">PS - 2a/2b can be achieved without PoP. I'll save that for =
another email in the next few days though.</div><div class=3D""><br =
class=3D""></div><div class=3D""><div class=3D""><div class=3D""><div =
class=3D"">[1]:&nbsp;<a =
href=3D"https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd949=
6" target=3D"_blank" =
class=3D"">https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd=
9496</a></div><div class=3D"">[2]: <a =
href=3D"https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a=
7" target=3D"_blank" =
class=3D"">https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36e=
c4a7</a></div><div class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div><div class=3D"">-- Neil</div></div></div></div>
<div class=3D""><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank" =
class=3D"">bcampbell@pingidentity.com</a>&gt; wrote:</div><br =
class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><br class=3D""><br class=3D""><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Nov =
14, 2019 at 7:20 PM Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D"">I can't attend =
Singapore either in person or remotely due to other commitments. I =
broadly support adoption of this draft, but I have some =
comments/suggestions about it.</div></blockquote><div class=3D""><br =
class=3D""></div><div class=3D"">Thanks Neil. And sorry to hear that you =
won't be in Singapore. This kind of stuff is definitely more easily =
discussed in person (for me anyway). But I'll try and comment on your =
comments here as best I can. I also plan to also mention them in the =
Wednesday and/or Thursday presentation.<span =
class=3D"">&nbsp;</span></div></div></div></div></blockquote><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D""><div class=3D"">Section=
 2 lists the main objective as being to harden against =
compromised/malicious AS or RS, which may attempt to replay captured =
tokens elsewhere. While this is a good idea, a casual reader might =
wonder why a simple audience claim in the access token/introspection =
response is not sufficient to prevent this. Because interactions between =
the client and RS are supposed to be over TLS, is the intended threat =
model one in which these protections have broken down? ("counterfeit" in =
the description suggests this). Or is the motivation that clients want =
to get a single broad-scoped access token (for usability/performance =
reasons) and use it to access multiple resource servers without giving =
each of them the ability to replay the token to the other servers? Or =
are we thinking of a phishing-type vulnerability were a general-purpose =
client might accidentally visit a malicious site which prompts for an =
access token that the client then blindly goes off and gets? (UMA?) It's =
not clear to me which of these scenarios is being considered, so it =
would be good to tighten up this section.</div></div></blockquote><div =
class=3D""><br class=3D""></div><div class=3D"">It is admittedly a bit =
loose and I agree it'd be good to tighten it up. But part of why it's =
loose is that it tries to offer some protections for all those scenarios =
and more such as a general lost/stolen token. It's effectively trying to =
provide as many of the same types of protections/assurances that you'd =
get with TLS based PoP mechanisms (like OAuth MTLS or Token binding) to =
the extent that can be done at the HTTP application layer. Which can't =
realistically be exactly the same but can maybe be kinda close while =
actually being accessible and implementable because it's all done at the =
application layer. There are trade-offs, of course, and the document =
writers have endeavored to find a good balance in the trade-off =
decisions we've made. But that doesn't mean they are necessarily the =
right decisions or are closed to discussion. To the casual reader I =
would say that it turns out that getting an appropriate simple audience =
claim into an access token isn't nearly as simple as it might seem. And =
while it will prevent RS to RS replay (as long as both RSs aren't legit =
audiences) it doesn't help with preventing the use of tokens stolen or =
leaked by other means (including for refresh tokens issued to public =
clients).<span =
class=3D"">&nbsp;</span></div></div></div></div></blockquote><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D""><div class=3D"">Another=
 potential motivation is for mobile apps. Some customers of ours would =
like to tie access/refresh tokens to private key material generated on a =
secure element in the device, that can only be accessed after local =
biometric authentication (e.g. TouchID/FaceID on iOS). I have suggested =
using mTLS cert-bound tokens for this, but have heard some pushback due =
to the difficulty of configuring support for client certs across diverse =
infrastructure. A simple JWT-based solution like DPoP could fill this =
need.</div></div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">It's maybe not stated in the draft but this kind of thing is =
among the objectives (in my mind anyway).<span class=3D"">&nbsp;</span><br=
 class=3D""></div><div class=3D""><br class=3D""></div><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D""><div class=3D"">My =
main concerns with the draft though are about efficiency and scalability =
of the proposed approach:</div><div class=3D""><br class=3D""></div><div =
class=3D"">1. The requirement to use public key signatures, along with =
the anti-replay nonce, means that the RS is required to perform an =
expensive signature verification check on every request. That is not =
going to scale up well. While there are more efficient schemes like =
Ed25519 now, these are still typically an order of magnitude slower than =
HMAC and the latency and CPU overhead is likely to be a non-starter for =
many APIs (especially when you're billed by CPU usage). Public key =
signatures are also notoriously fragile (see e.g. the history of nonce =
reuse/leakage vulnerabilities in ECDSA =
or&nbsp;</div></div></blockquote><div class=3D""><br class=3D""></div><div=
 class=3D"">Yes, asymmetric is more processing intensive than symmetric. =
But if you take away the distributed replay check (see next response), =
it will scale out just fine. I'm not so sure latency is a real issue =
here - while these operations are an order of magnitude slower we're =
still talking about times that are not perceptible to a human. CPU =
usage/cost is a part of a trade-off for the simplicity afforded by =
public/private keys.&nbsp; And it is significantly simpler. The design =
you sketched out is admittedly quite clever but it's not even in the =
same ballpark with respect to complexity. And, as you pointed out, the =
other suggestion around symmetric keys has rather different security =
properties while still adding complexity. Adding symmetric key support =
isn't something that can just be added on =
easily.&nbsp;</div></div></div></div></blockquote></div><div =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div =
dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div class=3D""><div class=3D""><br =
class=3D""></div><div class=3D"">2. The advice for the RS to store a set =
of previously used nonces to prevent replay will also hamper =
scalability, especially in large deployments where such state would need =
to be replicated to all servers (or use sticky load balancing, which =
comes with its own problems). This violates the statelessness of HTTP, =
and it also potentially breaks idempotency of operations: Think of the =
case where the JWT validation and replay protection is done at an API =
gateway but then the call to the backend API server fails for a =
transient reason. The client (or a proxy/library) cannot simply replay =
the (idempotent) request in this case because it will be rejected by the =
gateway. It must instead recreate the DPoP JWT, incurring additional =
overheads.</div></div></blockquote><div class=3D""><br =
class=3D""></div><div class=3D"">The actual value of replay checking on =
jti is somewhat questionable. The DPoP JWT only transits between client =
and server so a TLS MITM is likely needed to steal a DPoP JWT. But we =
are assuming TLS works here. And an active MITM could thwart this check =
by just being first to present DPoP JWT. I think the jti check made its =
way into the draft mostly because it seemed like something was needed to =
try and bring it closer to the TLS PoP models. Being aware of the =
scalability concerns, I did endeavor to write the text in such a way so =
as to leave some wiggle room in implementations/deployments with text =
like '"jti" SHOULD be used by the server for replay detection and =
prevention` and [ensure that] 'within a reasonable consideration of =
accuracy and resource utilization, a JWT with the same "jti" value has =
not been received previously'. The idea being that using something =
eventually consistent or even local only to the runtime instance would =
be permissible. Perhaps that allowance and the rational could be made =
more clear? Or would you suggest to do away with the jti replay stuff =
al? Or something else?<span =
class=3D"">&nbsp;</span></div></div></div></div></blockquote><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><div class=3D"gmail_quote"><blockquote =
class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px =
solid rgb(204,204,204);padding-left:1ex"><div class=3D""><div =
class=3D""><br class=3D""></div><div class=3D"">3. Minor: The use of a =
custom header for communicating the DPoP proof will require additional =
CORS configuration on top of that already done for the Authorization =
header, and so adds a small amount of additional friction for adoption. =
Given that CORS configuration changes often require approval by a =
security team, this may make more of an impact than you'd =
expect.</div></div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">Feels really minor. I mean, we could try to roll everything =
up under one header. But it does seem unwarranted and would complicate =
things - at least in the model we've got now where the proof is sent the =
same way ono all types of requests.<span =
class=3D"">&nbsp;</span></div></div></div></div></blockquote><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><div class=3D"gmail_quote"><div =
class=3D"">&nbsp;</div><div class=3D""><br class=3D""></div><blockquote =
class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px =
solid rgb(204,204,204);padding-left:1ex"><div class=3D""><div =
class=3D"">It's also not clear to me exactly what threat the anti-replay =
nonce is protecting against. It does nothing against the replay scenario =
discussed in section 2, as I understand it - which really seems to be =
more of a MitM scenario. Given that the connection between the client =
and the RS is supposed to be over TLS, and TLS is already protected =
against replay attacks, I think this part needs to be better motivated =
given the obvious costs of implementing it.</div><div class=3D""><br =
class=3D""></div><div class=3D"">I have a tentative suggestion for an =
alternative design which avoids these problems, but at a cost of =
potentially more complexity elsewhere. I'll summarise it here for =
consideration:</div><div class=3D""><br class=3D""></div><div =
class=3D"">1. The client obtains an access token in the normal way. When =
calling the token endpoint it provides an EC/okp public key as the =
confirmation key to be associated with the access/refresh =
tokens.</div><div class=3D""><br class=3D""></div><div class=3D"">2. The =
first time the client calls an RS it passes its access token in the =
Authorization: Bearer header as normal. (If the RS doesn't support DPoP =
then this would just succeed and no further action is required by the =
client - allowing clients to opportunistically ask for DPoP without =
needing a priori knowledge of RS capabilities).</div><div class=3D""><br =
class=3D""></div><div class=3D"">3. The RS introspects the access token =
and learns the EC public key associated with the access token. As there =
is no DPoP proof with the access token, the RS will generate a challenge =
in the following way:</div><div class=3D"">&nbsp; &nbsp;<span =
class=3D"">&nbsp;</span>o The RS generates an ephemeral EC key pair for =
the same curve as the confirmation key (e.g. P-256 or X25519).</div><div =
class=3D"">&nbsp; &nbsp;<span class=3D"">&nbsp;</span>o The RS stores =
the ephemeral private key somewhere, associated with this access token =
(see below for a scalable implementation choice)</div><div =
class=3D"">&nbsp; &nbsp;<span class=3D"">&nbsp;</span>o The RS encodes =
the ephemeral public key into a JWK (epk) and base64url-encodes it. It =
uses this as a challenge to the client by sending back a 401 response =
with WWW-Authenticate: DPoP &lt;encoded-epk&gt;</div><div class=3D""><br =
class=3D""></div><div class=3D"">4. The client decodes the epk challenge =
and performs an ECDH key agreement between its private key and the =
challenge epk as per the method described for the existing JWA ECDH-ES =
encryption algorithm. Rather than deriving an AES key however, it =
derives a HMAC key for HS256. The "apu" value is set to the access token =
(string value as ASCII bytes) and the "apv" value is set to the hostname =
of the RS (e.g. "<a href=3D"http://api.example.com/" target=3D"_blank" =
class=3D"">api.example.com</a>"). This ensures that the derived key is =
cryptographically bound to the context in which it is used.</div><div =
class=3D""><br class=3D""></div><div class=3D"">5. The client uses the =
HMAC key to create a DPoP proof JWT much like the one in the current =
draft, but signed using the HS256 key. If a "kid" field was present in =
the challenge JWK sent by the RS then the same value MUST be used in the =
"kid" header of this discharge JWT. It retries its original request =
sending Authorization: DPoP &lt;hmac-jwt&gt; =
at=3D&lt;access_token&gt;.</div><div class=3D""><br class=3D""></div><div =
class=3D"">6. The RS uses its stored ephemeral private key to derive the =
same HMAC key and verify the DPoP discharge JWT. If it validates and all =
fields are correct then the request is allowed.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Efficient implementation =
trick:</div><div class=3D"">Because the client is required to copy and =
"kid" value from the challenge JWK, the RS can preemptively carry out =
the ECDH key agreement immediately and generate the derived HMAC key. =
The RS can then encrypt this derived key using a local authenticated =
encryption key (e.g. AES-GCM) and use that encrypted value as the "kid" =
value in the challenge (perhaps along with some context or an expiry =
time). That way the RS only needs to decrypt this kid value rather than =
performing the ECDH key agreement on every request. This also avoids the =
need for the RS to store any per-client state locally.</div><div =
class=3D""><br class=3D""></div><div class=3D"">The challenge-response =
nature of the scheme prevents traditional replay attacks in the case =
where a DPoP discharge JWT is accidentally leaked through server logs or =
some other flaw, without needing to store nonces on the server. Using =
the RS's hostname in the key derivation process prevents mitm attacks in =
a similar way to how FIDO/WebAuthn prevents this. Most importantly, once =
a HS256 key has been derived between a client and RS they can reuse that =
key for multiple requests, reducing the overhead of the ECDH key =
agreement step. Either side can decide as a matter of policy how long to =
let this occur and when to trigger a fresh challenge-response.</div><div =
class=3D""><br class=3D""></div><div class=3D"">Because this fits within =
the standard HTTP authentication framework, it also requires no =
additional CORS configuration and is relatively easy to plug in to =
existing HTTP client libraries.</div><div class=3D""><br =
class=3D""></div><div class=3D"">The main downside of this approach to =
me is the fact that you can't simply reuse an existing JWT library to =
implement it, and so it will take time for client libs to develop. =
(Although I think this might be achievable now with existing *COSE* =
libraries). This would increase the risk of people hand-rolling =
solutions, rather than using well-tested libraries. On the other hand, =
it uses fairly widely supported primitives so e.g. an implementation =
using WebCrypto is probably only a few dozen lines of code.</div><div =
class=3D""><br class=3D""></div><div class=3D"">-- Neil</div><div =
class=3D""><div class=3D""><br class=3D""><div class=3D""><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On 31 =
Oct 2019, at 19:20, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell=3D40pingidentity.com@dmarc.ietf.org" =
target=3D"_blank" =
class=3D"">bcampbell=3D40pingidentity.com@dmarc.ietf.org</a>&gt; =
wrote:</div><br class=3D""><div class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"">Hello WG,<span class=3D"">&nbsp;</span><br =
class=3D""></div><div class=3D""><br class=3D""></div><div class=3D"">Just=
 a quick note to let folks know that -03 of the DPoP draft was published =
earlier today. The usual various document links are in the forwarded =
message below and the relevant snippet from the doc history with a =
summary of the changes is included here for convenience.<span =
class=3D"">&nbsp;</span><br class=3D""></div><div class=3D""><br =
class=3D""></div><div class=3D"">Hopefully folks will have time to read =
the (relativity) short document before the meeting(s) in Singapore where =
(spoiler alert) I plan to ask that the WG consider adoption of the =
draft.<span class=3D"">&nbsp;</span><br class=3D""></div><div =
class=3D""><br class=3D""></div><div class=3D"">Thanks,</div><div =
class=3D""><br class=3D"">&nbsp;-03<br class=3D"">&nbsp; &nbsp;o =
&nbsp;rework the text around uniqueness requirements on the jti claim =
in<br class=3D"">&nbsp; &nbsp; &nbsp;<span class=3D"">&nbsp;</span>the =
DPoP proof JWT<br class=3D"">&nbsp; &nbsp;o &nbsp;make tokens a bit =
smaller by using "htm", "htu", and "jkt" rather<br class=3D"">&nbsp; =
&nbsp; &nbsp;<span class=3D"">&nbsp;</span>than "http_method", =
"http_uri", and "jkt#S256" respectively<br class=3D"">&nbsp; &nbsp;o =
&nbsp;more explicit recommendation to use mTLS if that is available<br =
class=3D"">&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br =
class=3D"">&nbsp; &nbsp;o &nbsp;editorial updates</div><div =
class=3D""><div class=3D""><br class=3D""><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">---------- Forwarded message =
---------<br class=3D"">From:<span class=3D"">&nbsp;</span><span =
dir=3D"auto" class=3D"">&lt;<a href=3D"mailto:internet-drafts@ietf.org" =
target=3D"_blank" class=3D"">internet-drafts@ietf.org</a>&gt;</span><br =
class=3D"">Date: Thu, Oct 31, 2019 at 11:53 AM<br class=3D"">Subject: =
New Version Notification for draft-fett-oauth-dpop-03.txt<br =
class=3D"">To: Torsten Lodderstedt &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank" =
class=3D"">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a =
href=3D"mailto:mbj@microsoft.com" target=3D"_blank" =
class=3D"">mbj@microsoft.com</a>&gt;, John Bradley &lt;<a =
href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank" =
class=3D"">ve7jtb@ve7jtb.com</a>&gt;, Brian Campbell &lt;<a =
href=3D"mailto:bcampbell@pingidentity.com" target=3D"_blank" =
class=3D"">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a =
href=3D"mailto:david@alkaline-solutions.com" target=3D"_blank" =
class=3D"">david@alkaline-solutions.com</a>&gt;, Daniel Fett &lt;<a =
href=3D"mailto:mail@danielfett.de" target=3D"_blank" =
class=3D"">mail@danielfett.de</a>&gt;<br class=3D""></div><br =
class=3D""><br class=3D""><br class=3D"">A new version of I-D, =
draft-fett-oauth-dpop-03.txt<br class=3D"">has been successfully =
submitted by Brian Campbell and posted to the<br class=3D"">IETF =
repository.<br class=3D""><br class=3D"">Name:&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br class=3D"">Revision:&nbsp; =
&nbsp; &nbsp; &nbsp;03<br class=3D"">Title:&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; OAuth 2.0 Demonstration of Proof-of-Possession at the Application =
Layer (DPoP)<br class=3D"">Document date:&nbsp; 2019-10-30<br =
class=3D"">Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual =
Submission<br class=3D"">Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br =
class=3D"">URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span =
class=3D"">&nbsp;</span><a =
href=3D"https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt"=
 rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.t=
xt</a><br class=3D"">Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/</a><br =
class=3D"">Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://tools.ietf.org/html/draft-fett-oauth-dpop-03</a><br =
class=3D"">Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpop</a>=
<br class=3D"">Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a =
href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" =
rel=3D"noreferrer" target=3D"_blank" =
class=3D"">https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a=
><br class=3D""><br class=3D"">Abstract:<br class=3D"">&nbsp; &nbsp;This =
document describes a mechanism for sender-constraining OAuth 2.0<br =
class=3D"">&nbsp; &nbsp;tokens via a proof-of-possession mechanism on =
the application level.<br class=3D"">&nbsp; &nbsp;This mechanism allows =
for the detection of replay attacks with access<br class=3D"">&nbsp; =
&nbsp;and refresh tokens.<br class=3D""><br class=3D""><br class=3D""><br =
class=3D""><br class=3D"">Please note that it may take a couple of =
minutes from the time of submission<br class=3D"">until the htmlized =
version and diff are available at<span class=3D"">&nbsp;</span><a =
href=3D"http://tools.ietf.org/" rel=3D"noreferrer" target=3D"_blank" =
class=3D"">tools.ietf.org</a>.<br class=3D""><br class=3D"">The IETF =
Secretariat<br class=3D""><br class=3D""></div></div></div></div><br =
class=3D""><i style=3D"margin:0px;padding:0px;border:0px =
none;outline:currentcolor none =
0px;vertical-align:baseline;background-image:none;background-color:rgb(255=
,255,255);font-family:proxima-nova-zendesk,system-ui,-apple-system,system-=
ui,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;color:rgb(85,85,85);background-position:0% =
0%;background-repeat:repeat" class=3D""><span =
style=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor =
none =
0px;vertical-align:baseline;background-image:none;background-color:transpa=
rent;font-family:proxima-nova-zendesk,system-ui,-apple-system,BlinkMacSyst=
emFont,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;font-weight:600;background-position:0% =
0%;background-repeat:repeat" class=3D""><font size=3D"2" =
class=3D"">CONFIDENTIALITY NOTICE: This email may contain confidential =
and privileged material for the sole use of the intended recipient(s). =
Any review, use, distribution or disclosure by others is strictly =
prohibited..&nbsp; If you have received this communication in error, =
please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank =
you.</font></span></i>_______________________________________________<br =
class=3D"">OAuth mailing list<br class=3D""><a =
href=3D"mailto:OAuth@ietf.org" target=3D"_blank" =
class=3D"">OAuth@ietf.org</a><br class=3D""><a =
href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank" =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth</a><br =
class=3D""></div></blockquote></div><br =
class=3D""></div></div></div></blockquote></div></div><br =
style=3D"font-family:HelveticaNeue;font-size:14px;font-style:normal;font-v=
ariant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:sta=
rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px=
;text-decoration:none" class=3D""><i =
style=3D"font-size:14px;font-variant-caps:normal;font-weight:normal;letter=
-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white=
-space:normal;word-spacing:0px;text-decoration:none;margin:0px;padding:0px=
;border:0px none;outline:currentcolor none =
0px;vertical-align:baseline;background-color:rgb(255,255,255);font-family:=
proxima-nova-zendesk,system-ui,-apple-system,system-ui,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)" class=3D""><span =
style=3D"margin:0px;padding:0px;border:0px none;outline:currentcolor =
none =
0px;vertical-align:baseline;background-color:transparent;font-family:proxi=
ma-nova-zendesk,system-ui,-apple-system,BlinkMacSystemFont,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;font-weight:600" class=3D""><font size=3D"2" =
class=3D"">CONFIDENTIALITY NOTICE: This email may contain confidential =
and privileged material for the sole use of the intended recipient(s). =
Any review, use, distribution or disclosure by others is strictly =
prohibited.&nbsp; If you have received this communication in error, =
please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank =
you.</font></span></i></div></blockquote></div><br =
class=3D""></div></div></div></blockquote></div>

<br class=3D"">
<i =
style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:base=
line;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-u=
i,-apple-system,system-ui,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)" class=3D""><span =
style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:base=
line;background:transparent;font-family:proxima-nova-zendesk,system-ui,-ap=
ple-system,BlinkMacSystemFont,&quot;Segoe =
UI&quot;,Roboto,Oxygen-Sans,Ubuntu,Cantarell,&quot;Helvetica =
Neue&quot;,Arial,sans-serif;font-weight:600" class=3D""><font size=3D"2" =
class=3D"">CONFIDENTIALITY NOTICE: This email may contain confidential =
and privileged material for the sole use of the intended recipient(s). =
Any review, use, distribution or disclosure by others is strictly =
prohibited.&nbsp; If you have received this communication in error, =
please notify the sender immediately by e-mail and delete the message =
and any file attachments from your computer. Thank =
you.</font></span></i></div></blockquote></div><br =
class=3D""></div></body></html>=

--Apple-Mail=_1EDEE73C-29E0-4C44-BE91-F5043989DCEA--


From nobody Thu Nov 21 17:42:53 2019
Return-Path: <prvs=2222bf29d=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDBF91200A3 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 17:42:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.799
X-Spam-Level: 
X-Spam-Status: No, score=-11.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VJzE2-azsvvA for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 17:42:46 -0800 (PST)
Received: from smtp-fw-6001.amazon.com (smtp-fw-6001.amazon.com [52.95.48.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AFA012008F for <oauth@ietf.org>; Thu, 21 Nov 2019 17:42:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574386966; x=1605922966; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=IigSjgGnsKd/jqROyxsytKeqg7KfcFykRvkM9Dt0LM0=; b=mSgefRJN2c2uzSbPaFw1kocutq9j2WwUbVJQpiucTr0wB5wPc0jN95Yn upbgFEbhz4IUtlWhAoR3VenDcqAb9XPQRmQ8Cms04UPC8kWQSriC9WLsh YdVMtdkDL3wMhHoccxhwj+LesqT2GaJOHQE7JzYQISoy2jJprbFtMRWxF w=;
IronPort-SDR: VIvuZnmZUt+DC+b8um6XOrT8z6rnt8fjm+bHctPClvRaJCfH5TxAaR5CqW1jFgVmEQN0ogIu2V 045uTYmgPzAQ==
X-IronPort-AV: E=Sophos;i="5.69,228,1571702400"; d="scan'208,217";a="5814709"
Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2c-1968f9fa.us-west-2.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6001.iad6.amazon.com with ESMTP; 22 Nov 2019 01:42:44 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan3.pdx.amazon.com [10.170.41.166]) by email-inbound-relay-2c-1968f9fa.us-west-2.amazon.com (Postfix) with ESMTPS id 36250A1F7F; Fri, 22 Nov 2019 01:42:43 +0000 (UTC)
Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 01:42:42 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 01:42:37 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 22 Nov 2019 01:42:37 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>, Brian Campbell <bcampbell@pingidentity.com>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AA=
Date: Fri, 22 Nov 2019 01:42:37 +0000
Message-ID: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com>
References: <157254438077.30463.2012864551682668420.idtracker@ietfa.amsl.com> <CA+k3eCQrdDqMTHD6bgV-jOTC5DRn3tj2RME1=jdzR6H3W45+BA@mail.gmail.com> <B204C984-265C-41E8-9883-A3199FDFD09B@forgerock.com> <CA+k3eCQn1Rt59oee69R5fW_7iay=HFEheRr459CjqP9v3v216w@mail.gmail.com> <5203CB2A-141F-4AB1-96AF-775B20D75923@forgerock.com> <CA+k3eCQtZt=MaDK4KXzbG+37mo1YRqC3JDR3cmWXRv=Yu==gKQ@mail.gmail.com> <DC4C3E78-E8C9-4FFF-9598-694E16174E3D@forgerock.com>
In-Reply-To: <DC4C3E78-E8C9-4FFF-9598-694E16174E3D@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.160.235]
Content-Type: multipart/alternative; boundary="_000_2EF412B8AF8C46429BE01B528B0C63D5amazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/9qNSQ9ltEsNA0hXX5k4otw2Dg1M>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 01:42:51 -0000

--_000_2EF412B8AF8C46429BE01B528B0C63D5amazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_2EF412B8AF8C46429BE01B528B0C63D5amazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <C0F0A38D02BB5444B9C49B1694B399E0@amazon.com>
Content-Transfer-Encoding: base64
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--_000_2EF412B8AF8C46429BE01B528B0C63D5amazoncom_--


From nobody Thu Nov 21 23:08:35 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81D3C120836 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:08:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R4Z5QgR2Ee6J for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:08:29 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8A3712008A for <oauth@ietf.org>; Thu, 21 Nov 2019 23:08:28 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id i12so7255303wrn.11 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:08:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=djuZZoQGrUUCYsCckcq/aQXqWhW7s5luoSKVHiUX51M=; b=FKA1NE6ohQMfrLHuVrR7PL11lVsgPVRPtROKGBOKl7oaSoY8Agt4N/grpn51niAbx+ Ccy/yuawGDpZdvM2fq+sxoepu9YG4Kv9BHjgzTYcn7Dj4PcAvaE6szw+s2Ppx9mWx51d SqT46gGZpxjcjY1s5OaSap5wV36HxwtNDcVH8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=djuZZoQGrUUCYsCckcq/aQXqWhW7s5luoSKVHiUX51M=; b=b58PI2WLjmrxhGuh0rFp6mZWqGOAALKUTSqRx9g/5K9vLyI48B1wRQD88zYR9uyRiD Fp/Nu1kp7mBmrjF816Rj8cO9W/I6lTm8v3E+nkoQobUzEQaS4gLqMKSz2577GqCMJYqP zVCJbhfOK7Iulp+yjQgjxyvHPA/MPZv5A73mpH5/7zZ8II9MmBERkBoW+TYBfqr0Q4bm xWOvBMYBNwNc4U+gs7C6wjiqh2r3jnm6kIZTjhbbqkQU47thP53C5i0M+p0h/I/hsCun 68VXwZrLLDnoEPNZoMkgM7UBIyil9K6Ozu/KKCLIvkj6aGhMBzYPantUhdf8KAlOpoMv vksw==
X-Gm-Message-State: APjAAAUSUz6Y88lYewcCQYETMxYe107J8brCgpUUgEZ2v4G8+sxv2Ue7 JK4LEd40YCPxeTp2+cuZhPNS9Q==
X-Google-Smtp-Source: APXvYqxyfieuGzxKb0VjL5nacqHFq1+/RKWG/Fkfkv7aT0cAyhZR0JwRYhUruinCFbaZufVOyUUTEw==
X-Received: by 2002:adf:d842:: with SMTP id k2mr15879726wrl.163.1574406506922;  Thu, 21 Nov 2019 23:08:26 -0800 (PST)
Received: from [192.168.1.65] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id y6sm6459297wrn.21.2019.11.21.23.08.25 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 21 Nov 2019 23:08:25 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-AE54EF4A-FE1D-4483-BC8E-45FF644A7A7C
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Fri, 22 Nov 2019 07:08:24 +0000
Message-Id: <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com>
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
In-Reply-To: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/nF2gMycguHRKEWZ1R1X3_RkKekY>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:08:34 -0000

--Apple-Mail-AE54EF4A-FE1D-4483-BC8E-45FF644A7A7C
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.com> w=
rote:
>=20
> =EF=BB=BF
> Macaroons are built on proof of possession. In order to add a caveat to a m=
acaroon, the sender has to have the HMAC of the macaroon without their cavea=
t.

Yes of course. But this is the HMAC *tag* not the original key. They can=E2=80=
=99t change anything the AS originally signed.=20

> The distinctive property of macaroons as I see it is that they eliminate t=
he need for key negotiation with the bearer. How much value this has over th=
e AS just returning a symmetric key alongside the access token in the token r=
equest, I=E2=80=99m not sure.

Well, you don=E2=80=99t have to return a key from the token endpoint for a s=
tart. The client doesn=E2=80=99t need to create and send any additional toke=
n. The whole thing works with existing standards and technologies and can be=
 incrementally adopted as required. If RSes do token introspection already t=
hen they need zero changes to support this.

> There are key distribution challenges with that if you are doing validatio=
n at the RS, but validation at the RS using either approach means you=E2=80=99=
ve lost protection against replay by the RS. This brings us back to a core q=
uestion: what threats are in scope for DPoP, and in what contexts?

Agreed, but validation at the RS is premature optimisation in many cases. An=
d if you do need protection against that the client can even append a confir=
mation key as a caveat and retrospectively upgrade a bearer token to a pop t=
oken. They can even do transfer of ownership by creating copies of the origi=
nal token bound to other certificates/public keys.=20

Neil


> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: OAuth <oauth-bounces@ietf.org> on behalf of Neil Madden <neil.madden=
@forgerock.com>
> Date: Friday, November 22, 2019 at 4:40 AM
> To: Brian Campbell <bcampbell@pingidentity.com>
> Cc: oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> At the end of my previous email I mentioned that you can achieve some of t=
he same aims as DPoP without needing a PoP mechanism at all. This email is t=
hat follow-up.
> =20
> OAuth is agnostic about the format of access tokens and many vendors suppo=
rt either random string database tokens or JWTs. But there are other choices=
 for access token format, some of which have more interesting properties. In=
 particular, Google proposed Macaroons a few years ago as a "better cookie" [=
1] and I think they systematically address many of these issues when used as=
 an access token format.
> =20
> For those who aren't familiar with them, Macaroons are a bit like a HS256 J=
WT. They have a location (a bit like the audience in a JWT) and an identifie=
r (an arbitrary string) and then are signed with HMAC-SHA256 using a secret k=
ey. (There's no claims set or headers - they are very minimal). In this case=
 the secret key would be owned by the AS and used to sign macaroon-based acc=
ess tokens. Validating the token would be done via token introspection at th=
e AS.
> =20
> The clever bit is that anybody at all can append "caveats" to a macaroon a=
t any time, but nobody can remove one once added. Caveats are restrictions o=
n the use of a token - they only ever reduce the authority granted by the to=
ken, never expand it. The AS can validate the token and all the caveats with=
 its secret key. So, for example, if an access token was a macaroon then the=
 client could append a caveat to reduce the scope, or reduce the expiry time=
, or reduce the audience, and so on.
> =20
> The really clever bit is that the client can keep a copy of the original t=
oken and create restricted versions to send to different resource servers. B=
ecause HMAC is very cheap, the client can even do this before each and every=
 request. (This is what the original paper refers to as "contextual caveats"=
). This means that a client can be issued a single access token from the AS w=
ith broad scope and applicable to many different RS and can then locally cre=
ate restricted copies for each individual RS.
> =20
> The relevance to DPoP is that the client could even append caveats equival=
ent to "htm" and "htu" just before sending the access token to the RS, and m=
aybe add an "exp" for 5 seconds in the future, reduce the scope, and so on:
> =20
>   newAccessToken =3D accessToken.withCaveats({
>     exp: now + 5seconds,
>     scope: "a b",
>     htm: "POST",
>     ....
>   });
>   httpClient.post(data, Authorization: Bearer newAccessToken);
> =20
> Note that the client doesn't need anything extra here - no keys, extra tok=
ens etc. They just have the access token and a macaroon library.
> =20
> The RS will see an opaque access token, send it to the AS for introspectio=
n. The AS however, will see and validate the new caveats on the token and re=
turn an introspection response with the restricted scope and expiry time, an=
d return the htm/htu restrictions that the RS can then enforce.=20
> =20
> For clients this is transparent until they want to take advantage of it an=
d then they can just use an off-the-shelf macaroon library. For the RS it is=
 also completely transparent. All the (relatively small) complexity lives in=
 the AS, which just has to be able to produce and verify macaroons and take c=
aveats into account when performing token introspection - e.g. the returned s=
cope should be the intersection of the original token scope and any scope ca=
veats. But I don't think this would be too much effort.
> =20
> [1]: https://ai.google/research/pubs/pub41892
> =20
> -- Neil
>=20
>=20
> On 21 Nov 2019, at 06:23, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> Yeah, suggestions and/or an MTI about algorithm support would probably be w=
orthwhile. Perhaps also some defined means of signaling when an unsupported a=
lgorithm is used along with any other reason a DPoP is invalid or rejected.=20=

> =20
> There are a lot of tradeoffs in what claims are required and what protecti=
ons are provided etc. The aim of what was chosen was to do just enough to pr=
ovide some reasonable protections against reuse or use in a different contex=
t while being simple to implement and deploy.
> =20
> =20
> On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> Thanks for the reply, Brian.=20
> =20
> Collecting my thoughts up here rather than responding blow by blow.
> =20
> Public key signatures are simpler in some respects, more complex in others=
. There are currently 10 public key JWS signature schemes defined (ES256/384=
/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS potentially have to s=
upport them all? If not, how do they negotiate algorithm support with the cl=
ient?
> =20
> On the other hand, the ECDH scheme I proposed can be implemented by adapti=
ng an existing ECDH-ES encryption support in a JWT library. For example, I d=
iscovered while playing with this that our own internal library can implemen=
t the full flow I described entirely via the existing public API [1], so it'=
s not necessarily as complex as it first looks. I even knocked up a from-scr=
atch implementation in WebCrypto (JavaScript) without too much code [2].
> =20
> But I admit that using an existing JWT library to sign a JWT with an exist=
ing algorithm is even easier, and that counts for a lot. Perhaps we can make=
 concrete suggestions/requirements about algorithm support? e.g. "The RS MUS=
T support RS256 and SHOULD support EdDSA. Other algorithms MAY be supported.=
"=20
> =20
> With regards to replay protection, I think there are at least two reasonab=
le positions:
> =20
> 1. We assume that TLS is secure and don't try to defend against any compro=
mise at that level. (Clearly none of the TLS-based PoP mechanisms survive if=
 TLS is compromised, by definition). In this case the main attack to defend a=
gainst is a malicious RS replaying the access token elsewhere. Simply signin=
g the origin of the RS would be enough to prevent this attack, while letting=
 the client reuse the same JWT for many requests (and the RS to cache the JW=
T validation). None of "jti", "htu", or "htm" seem relevant to this model.
> =20
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) and t=
ry to provide some defense in depth against a MitM attacker replaying a toke=
n against the same RS. There is a graduated series of steps you can take her=
e, depending on how much you want to prevent this:
>    a. The DPoP token can be replayed for arbitrary requests to the same RS=
 but has a short time limit (e.g., exp claim or RS-enforced max lifetime fro=
m iat)
>    b. The DPoP token can be replayed for the same request (htu/htm claims)=

>    c. The DPoP token can't be replayed at all - either because of jti blac=
klisting on the RS or a challenge-response protocol on each request.
> =20
> (There are also variants such as including a hash of the request body/head=
ers, or encoding an ETag into the JWT).
> =20
> I think either are reasonable design goals, but aiming for 2 adds more val=
ue. I think aiming for 2a is a reasonable default baseline that allows the c=
lient to reuse a DPoP token for a few requests, reducing the cost of the sig=
nature (and the RS can cache the validated JWT). Support for 2b or 2c can th=
en be listed as optional additions.
> =20
> PS - 2a/2b can be achieved without PoP. I'll save that for another email i=
n the next few days though.
> =20
> [1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
> [2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7
> =20
> =20
> -- Neil
>=20
>=20
> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> =20
>=20
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> I can't attend Singapore either in person or remotely due to other commitm=
ents. I broadly support adoption of this draft, but I have some comments/sug=
gestions about it.
> =20
> Thanks Neil. And sorry to hear that you won't be in Singapore. This kind o=
f stuff is definitely more easily discussed in person (for me anyway). But I=
'll try and comment on your comments here as best I can. I also plan to also=
 mention them in the Wednesday and/or Thursday presentation.=20
> =20
> Section 2 lists the main objective as being to harden against compromised/=
malicious AS or RS, which may attempt to replay captured tokens elsewhere. W=
hile this is a good idea, a casual reader might wonder why a simple audience=
 claim in the access token/introspection response is not sufficient to preve=
nt this. Because interactions between the client and RS are supposed to be o=
ver TLS, is the intended threat model one in which these protections have br=
oken down? ("counterfeit" in the description suggests this). Or is the motiv=
ation that clients want to get a single broad-scoped access token (for usabi=
lity/performance reasons) and use it to access multiple resource servers wit=
hout giving each of them the ability to replay the token to the other server=
s? Or are we thinking of a phishing-type vulnerability were a general-purpos=
e client might accidentally visit a malicious site which prompts for an acce=
ss token that the client then blindly goes off and gets? (UMA?) It's not cle=
ar to me which of these scenarios is being considered, so it would be good t=
o tighten up this section.
> =20
> It is admittedly a bit loose and I agree it'd be good to tighten it up. Bu=
t part of why it's loose is that it tries to offer some protections for all t=
hose scenarios and more such as a general lost/stolen token. It's effectivel=
y trying to provide as many of the same types of protections/assurances that=
 you'd get with TLS based PoP mechanisms (like OAuth MTLS or Token binding) t=
o the extent that can be done at the HTTP application layer. Which can't rea=
listically be exactly the same but can maybe be kinda close while actually b=
eing accessible and implementable because it's all done at the application l=
ayer. There are trade-offs, of course, and the document writers have endeavo=
red to find a good balance in the trade-off decisions we've made. But that d=
oesn't mean they are necessarily the right decisions or are closed to discus=
sion. To the casual reader I would say that it turns out that getting an app=
ropriate simple audience claim into an access token isn't nearly as simple a=
s it might seem. And while it will prevent RS to RS replay (as long as both R=
Ss aren't legit audiences) it doesn't help with preventing the use of tokens=
 stolen or leaked by other means (including for refresh tokens issued to pub=
lic clients).=20
> =20
> Another potential motivation is for mobile apps. Some customers of ours wo=
uld like to tie access/refresh tokens to private key material generated on a=
 secure element in the device, that can only be accessed after local biometr=
ic authentication (e.g. TouchID/FaceID on iOS). I have suggested using mTLS c=
ert-bound tokens for this, but have heard some pushback due to the difficult=
y of configuring support for client certs across diverse infrastructure. A s=
imple JWT-based solution like DPoP could fill this need.
> =20
> It's maybe not stated in the draft but this kind of thing is among the obj=
ectives (in my mind anyway).=20
> =20
> =20
> My main concerns with the draft though are about efficiency and scalabilit=
y of the proposed approach:
> =20
> 1. The requirement to use public key signatures, along with the anti-repla=
y nonce, means that the RS is required to perform an expensive signature ver=
ification check on every request. That is not going to scale up well. While t=
here are more efficient schemes like Ed25519 now, these are still typically a=
n order of magnitude slower than HMAC and the latency and CPU overhead is li=
kely to be a non-starter for many APIs (especially when you're billed by CPU=
 usage). Public key signatures are also notoriously fragile (see e.g. the hi=
story of nonce reuse/leakage vulnerabilities in ECDSA or=20
> =20
> Yes, asymmetric is more processing intensive than symmetric. But if you ta=
ke away the distributed replay check (see next response), it will scale out j=
ust fine. I'm not so sure latency is a real issue here - while these operati=
ons are an order of magnitude slower we're still talking about times that ar=
e not perceptible to a human. CPU usage/cost is a part of a trade-off for th=
e simplicity afforded by public/private keys.  And it is significantly simpl=
er. The design you sketched out is admittedly quite clever but it's not even=
 in the same ballpark with respect to complexity. And, as you pointed out, t=
he other suggestion around symmetric keys has rather different security prop=
erties while still adding complexity. Adding symmetric key support isn't som=
ething that can just be added on easily.=20
> =20
> =20
> 2. The advice for the RS to store a set of previously used nonces to preve=
nt replay will also hamper scalability, especially in large deployments wher=
e such state would need to be replicated to all servers (or use sticky load b=
alancing, which comes with its own problems). This violates the statelessnes=
s of HTTP, and it also potentially breaks idempotency of operations: Think o=
f the case where the JWT validation and replay protection is done at an API g=
ateway but then the call to the backend API server fails for a transient rea=
son. The client (or a proxy/library) cannot simply replay the (idempotent) r=
equest in this case because it will be rejected by the gateway. It must inst=
ead recreate the DPoP JWT, incurring additional overheads.
> =20
> The actual value of replay checking on jti is somewhat questionable. The D=
PoP JWT only transits between client and server so a TLS MITM is likely need=
ed to steal a DPoP JWT. But we are assuming TLS works here. And an active MI=
TM could thwart this check by just being first to present DPoP JWT. I think t=
he jti check made its way into the draft mostly because it seemed like somet=
hing was needed to try and bring it closer to the TLS PoP models. Being awar=
e of the scalability concerns, I did endeavor to write the text in such a wa=
y so as to leave some wiggle room in implementations/deployments with text l=
ike '"jti" SHOULD be used by the server for replay detection and prevention`=
 and [ensure that] 'within a reasonable consideration of accuracy and resour=
ce utilization, a JWT with the same "jti" value has not been received previo=
usly'. The idea being that using something eventually consistent or even loc=
al only to the runtime instance would be permissible. Perhaps that allowance=
 and the rational could be made more clear? Or would you suggest to do away w=
ith the jti replay stuff al? Or something else?=20
> =20
> 3. Minor: The use of a custom header for communicating the DPoP proof will=
 require additional CORS configuration on top of that already done for the A=
uthorization header, and so adds a small amount of additional friction for a=
doption. Given that CORS configuration changes often require approval by a s=
ecurity team, this may make more of an impact than you'd expect.
> =20
> Feels really minor. I mean, we could try to roll everything up under one h=
eader. But it does seem unwarranted and would complicate things - at least i=
n the model we've got now where the proof is sent the same way ono all types=
 of requests.=20
> =20
> =20
> It's also not clear to me exactly what threat the anti-replay nonce is pro=
tecting against. It does nothing against the replay scenario discussed in se=
ction 2, as I understand it - which really seems to be more of a MitM scenar=
io. Given that the connection between the client and the RS is supposed to b=
e over TLS, and TLS is already protected against replay attacks, I think thi=
s part needs to be better motivated given the obvious costs of implementing i=
t.
> =20
> I have a tentative suggestion for an alternative design which avoids these=
 problems, but at a cost of potentially more complexity elsewhere. I'll summ=
arise it here for consideration:
> =20
> 1. The client obtains an access token in the normal way. When calling the t=
oken endpoint it provides an EC/okp public key as the confirmation key to be=
 associated with the access/refresh tokens.
> =20
> 2. The first time the client calls an RS it passes its access token in the=
 Authorization: Bearer header as normal. (If the RS doesn't support DPoP the=
n this would just succeed and no further action is required by the client - a=
llowing clients to opportunistically ask for DPoP without needing a priori k=
nowledge of RS capabilities).
> =20
> 3. The RS introspects the access token and learns the EC public key associ=
ated with the access token. As there is no DPoP proof with the access token,=
 the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as the c=
onfirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated with t=
his access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and base64u=
rl-encodes it. It uses this as a challenge to the client by sending back a 4=
01 response with WWW-Authenticate: DPoP <encoded-epk>
> =20
> 4. The client decodes the epk challenge and performs an ECDH key agreement=
 between its private key and the challenge epk as per the method described f=
or the existing JWA ECDH-ES encryption algorithm. Rather than deriving an AE=
S key however, it derives a HMAC key for HS256. The "apu" value is set to th=
e access token (string value as ASCII bytes) and the "apv" value is set to t=
he hostname of the RS (e.g. "api.example.com"). This ensures that the derive=
d key is cryptographically bound to the context in which it is used.
> =20
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the o=
ne in the current draft, but signed using the HS256 key. If a "kid" field wa=
s present in the challenge JWK sent by the RS then the same value MUST be us=
ed in the "kid" header of this discharge JWT. It retries its original reques=
t sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
> =20
> 6. The RS uses its stored ephemeral private key to derive the same HMAC ke=
y and verify the DPoP discharge JWT. If it validates and all fields are corr=
ect then the request is allowed.
> =20
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the challenge J=
WK, the RS can preemptively carry out the ECDH key agreement immediately and=
 generate the derived HMAC key. The RS can then encrypt this derived key usi=
ng a local authenticated encryption key (e.g. AES-GCM) and use that encrypte=
d value as the "kid" value in the challenge (perhaps along with some context=
 or an expiry time). That way the RS only needs to decrypt this kid value ra=
ther than performing the ECDH key agreement on every request. This also avoi=
ds the need for the RS to store any per-client state locally.
> =20
> The challenge-response nature of the scheme prevents traditional replay at=
tacks in the case where a DPoP discharge JWT is accidentally leaked through s=
erver logs or some other flaw, without needing to store nonces on the server=
. Using the RS's hostname in the key derivation process prevents mitm attack=
s in a similar way to how FIDO/WebAuthn prevents this. Most importantly, onc=
e a HS256 key has been derived between a client and RS they can reuse that k=
ey for multiple requests, reducing the overhead of the ECDH key agreement st=
ep. Either side can decide as a matter of policy how long to let this occur a=
nd when to trigger a fresh challenge-response.
> =20
> Because this fits within the standard HTTP authentication framework, it al=
so requires no additional CORS configuration and is relatively easy to plug i=
n to existing HTTP client libraries.
> =20
> The main downside of this approach to me is the fact that you can't simply=
 reuse an existing JWT library to implement it, and so it will take time for=
 client libs to develop. (Although I think this might be achievable now with=
 existing *COSE* libraries). This would increase the risk of people hand-rol=
ling solutions, rather than using well-tested libraries. On the other hand, i=
t uses fairly widely supported primitives so e.g. an implementation using We=
bCrypto is probably only a few dozen lines of code.
> =20
> -- Neil
> =20
>=20
>=20
> On 31 Oct 2019, at 19:20, Brian Campbell <bcampbell=3D40pingidentity.com@d=
marc.ietf.org> wrote:
> =20
> Hello WG,=20
> =20
> Just a quick note to let folks know that -03 of the DPoP draft was publish=
ed earlier today. The usual various document links are in the forwarded mess=
age below and the relevant snippet from the doc history with a summary of th=
e changes is included here for convenience.=20
> =20
> Hopefully folks will have time to read the (relativity) short document bef=
ore the meeting(s) in Singapore where (spoiler alert) I plan to ask that the=
 WG consider adoption of the draft.=20
> =20
> Thanks,
>=20
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
> =20
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <mbj@micr=
osoft.com>, John Bradley <ve7jtb@ve7jtb.com>, Brian Campbell <bcampbell@ping=
identity.com>, David Waite <david@alkaline-solutions.com>, Daniel Fett <mail=
@danielfett.de>
>=20
>=20
>=20
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>=20
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the Appl=
ication Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop=
-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpo=
p
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-=
03
>=20
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of submissi=
on
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited..  If you have rec=
eived this communication in error, please notify the sender immediately by e=
-mail and delete the message and any file attachments from your computer. Th=
ank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
> =20

--Apple-Mail-AE54EF4A-FE1D-4483-BC8E-45FF644A7A7C
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">On 22 Nov 2019, at 01:42, R=
ichard Backman, Annabelle &lt;richanna@amazon.com&gt; wrote:</div><div dir=3D=
"ltr"><blockquote type=3D"cite"><br></blockquote></div><blockquote type=3D"c=
ite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Helvetica Neue";
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:HelveticaNeue;
	panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style>


<div class=3D"WordSection1">
<p class=3D"MsoNormal">Macaroons are built on proof of possession. In order t=
o add a caveat to a macaroon, the sender has to have the HMAC of the macaroo=
n without their caveat. </p></div></div></blockquote><div><br></div><div>Yes=
 of course. But this is the HMAC *tag* not the original key. They can=E2=80=99=
t change anything the AS originally signed.&nbsp;</div><br><blockquote type=3D=
"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal">T=
he distinctive property of macaroons as I see it is that they eliminate the n=
eed
 for key negotiation with the bearer. How much value this has over the AS ju=
st returning a symmetric key alongside the access token in the token request=
, I=E2=80=99m not sure.</p></div></div></blockquote><div><br></div><div>Well=
, you don=E2=80=99t have to return a key from the token endpoint for a start=
. The client doesn=E2=80=99t need to create and send any additional token. T=
he whole thing works with existing standards and technologies and can be inc=
rementally adopted as required. If RSes do token introspection already then t=
hey need zero changes to support this.</div><br><blockquote type=3D"cite"><d=
iv dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"> There are=
 key distribution challenges with that if you are doing validation at the RS=
, but
 validation at the RS using either approach means you=E2=80=99ve lost protec=
tion against replay by the RS. This brings us back to a core question: what t=
hreats are in scope for DPoP, and in what contexts?</p></div></div></blockqu=
ote><div><br></div>Agreed, but validation at the RS is premature optimisatio=
n in many cases. And if you do need protection against that the client can e=
ven append a confirmation key as a caveat and retrospectively upgrade a bear=
er token to a pop token. They can even do transfer of ownership by creating c=
opies of the original token bound to other certificates/public keys.&nbsp;<d=
iv><br></div><div>Neil<br><div><br></div><br><blockquote type=3D"cite"><div d=
ir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"><o:p></o:p></p=
>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity<o:p></o=
:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">OAuth &lt;oauth-bou=
nces@ietf.org&gt; on behalf of Neil Madden &lt;neil.madden@forgerock.com&gt;=
<br>
<b>Date: </b>Friday, November 22, 2019 at 4:40 AM<br>
<b>To: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;<br>
<b>Cc: </b>oauth &lt;oauth@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal">At the end of my previous email I mentioned that you c=
an achieve some of the same aims as DPoP without needing a PoP mechanism at a=
ll. This email is that follow-up.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">OAuth is agnostic about the format of access tokens a=
nd many vendors support either random string database tokens or JWTs. But th=
ere are other choices for access token format, some of which have more inter=
esting properties. In particular,
 Google proposed Macaroons a few years ago as a "better cookie" [1] and I th=
ink they systematically address many of these issues when used as an access t=
oken format.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For those who aren't familiar with them, Macaroons ar=
e a bit like a HS256 JWT. They have a location (a bit like the audience in a=
 JWT) and an identifier (an arbitrary string) and then are signed with HMAC-=
SHA256 using a secret key. (There's
 no claims set or headers - they are very minimal). In this case the secret k=
ey would be owned by the AS and used to sign macaroon-based access tokens. V=
alidating the token would be done via token introspection at the AS.<o:p></o=
:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The clever bit is that anybody at all can append "cav=
eats" to a macaroon at any time, but nobody can remove one once added. Cavea=
ts are restrictions on the use of a token - they only ever reduce the author=
ity granted by the token, never
 expand it. The AS can validate the token and all the caveats with its secre=
t key. So, for example, if an access token was a macaroon then the client co=
uld append a caveat to reduce the scope, or reduce the expiry time, or reduc=
e the audience, and so on.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The really clever bit is that the client can keep a c=
opy of the original token and create restricted versions to send to differen=
t resource servers. Because HMAC is very cheap, the client can even do this b=
efore each and every request.
 (This is what the original paper refers to as "contextual caveats"). This m=
eans that a client can be issued a single access token from the AS with broa=
d scope and applicable to many different RS and can then locally create rest=
ricted copies for each individual
 RS.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The relevance to DPoP is that the client could even a=
ppend caveats equivalent to "htm" and "htu" just before sending the access t=
oken to the RS, and maybe add an "exp" for 5 seconds in the future, reduce t=
he scope, and so on:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; newAccessToken =3D accessToken.withCaveats({<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; exp: now + 5seconds,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; scope: "a b",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; htm: "POST",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; ....<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; });<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; httpClient.post(data, Authorization: Bearer ne=
wAccessToken);<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Note that the client doesn't need anything extra here=
 - no keys, extra tokens etc. They just have the access token and a macaroon=
 library.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The RS will see an opaque access token, send it to th=
e AS for introspection. The AS however, will see and validate the new caveat=
s on the token and return an introspection response with the restricted scop=
e and expiry time, and return the
 htm/htu restrictions that the RS can then enforce.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For clients this is transparent until they want to ta=
ke advantage of it and then they can just use an off-the-shelf macaroon libr=
ary. For the RS it is also completely transparent. All the (relatively small=
) complexity lives in the AS, which
 just has to be able to produce and verify macaroons and take caveats into a=
ccount when performing token introspection - e.g. the returned scope should b=
e the intersection of the original token scope and any scope caveats. But I d=
on't think this would be too
 much effort.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://ai.google/research/pubs/=
pub41892">https://ai.google/research/pubs/pub41892</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 21 Nov 2019, at 06:23, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com">bcampbell@pingidentity.com</a>&gt; wrote=
:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal">Yeah, suggestions and/or an MTI about algorithm suppo=
rt would probably be worthwhile. Perhaps also some defined means of signalin=
g when an unsupported algorithm is used along with any other reason a DPoP i=
s invalid or rejected.&nbsp;
<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">There are a lot of tradeoffs in what claims are requi=
red and what protections are provided etc. The aim of what was chosen was to=
 do just enough to provide some reasonable protections against reuse or use i=
n a different context while being
 simple to implement and deploy.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On Wed, Nov 20, 2019 at 6:34 AM Neil Madden &lt;<a hr=
ef=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">neil.madden@forger=
ock.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class=3D"MsoNormal">Thanks for the reply, Brian.&nbsp; <o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Collecting my thoughts up here rather than responding=
 blow by blow.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">Public key signatures are simpler in some respects, m=
ore complex in others. There are currently 10 public key JWS signature schem=
es defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS=
 potentially have to support them
 all? If not, how do they negotiate algorithm support with the client?<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On the other hand, the ECDH scheme I proposed can be i=
mplemented by adapting an existing ECDH-ES encryption support in a JWT libra=
ry. For example, I discovered while playing with this that our own internal l=
ibrary can implement the full
 flow I described entirely via the existing public API [1], so it's not nece=
ssarily as complex as it first looks. I even knocked up a from-scratch imple=
mentation in WebCrypto (JavaScript) without too much code [2].<o:p></o:p></p=
>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">But I admit that using an existing JWT library to sig=
n a JWT with an existing algorithm is even easier, and that counts for a lot=
. Perhaps we can make concrete suggestions/requirements about algorithm supp=
ort? e.g. "The RS MUST support
 RS256 and SHOULD support EdDSA. Other algorithms MAY be supported."&nbsp;<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">With regards to replay protection, I think there are a=
t least two reasonable positions:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1. We assume that TLS is secure and don't try to defe=
nd against any compromise at that level. (Clearly none of the TLS-based PoP m=
echanisms survive if TLS is compromised, by definition). In this case the ma=
in attack to defend against is
 a malicious RS replaying the access token elsewhere. Simply signing the ori=
gin of the RS would be enough to prevent this attack, while letting the clie=
nt reuse the same JWT for many requests (and the RS to cache the JWT validat=
ion). None of "jti", "htu", or
 "htm" seem relevant to this model.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2. We don't assume that TLS is secure (or it's not fu=
lly end-to-end) and try to provide some defense in depth against a MitM atta=
cker replaying a token against the same RS. There is a graduated series of s=
teps you can take here, depending
 on how much you want to prevent this:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;a. The DPoP token can be replayed for ar=
bitrary requests to the same RS but has a short time limit (e.g., exp claim o=
r RS-enforced max lifetime from iat)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;b. The DPoP token can be replayed for th=
e same request (htu/htm claims)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;c. The DPoP token can't be replayed at a=
ll - either because of jti blacklisting on the RS or a challenge-response pr=
otocol on each request.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">(There are also variants such as including a hash of t=
he request body/headers, or encoding an ETag into the JWT).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I think either are reasonable design goals, but aimin=
g for 2 adds more value. I think aiming for 2a is a reasonable default basel=
ine that allows the client to reuse a DPoP token for a few requests, reducin=
g the cost of the signature (and
 the RS can cache the validated JWT). Support for 2b or 2c can then be liste=
d as optional additions.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">PS - 2a/2b can be achieved without PoP. I'll save tha=
t for another email in the next few days though.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://gist.github.com/NeilMadd=
en/685ea66fb79d37a50c2310f853bd9496" target=3D"_blank">https://gist.github.c=
om/NeilMadden/685ea66fb79d37a50c2310f853bd9496</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[2]: <a href=3D"https://gist.github.com/NeilMadden/70=
e1b232a3b273de02ed731eb36ec4a7" target=3D"_blank">
https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7</a><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com" target=3D"_blank">bcampbell@pingidentity=
.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue"><o:p>&nbsp;</o:p></span></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On Thu, Nov 14, 2019 at 7:20 PM Neil Madden &lt;<a href=3D"mailto:neil=
.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; w=
rote:<o:p></o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I can't attend Singapore either in person or remotely due to other com=
mitments. I broadly support adoption of this draft, but I have some comments=
/suggestions about it.<o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks Neil. And sorry to hear that you won't be in Singapore. This ki=
nd of stuff is definitely more easily discussed in person (for me anyway). B=
ut I'll try and comment on your comments
 here as best I can. I also plan to also mention them in the Wednesday and/o=
r Thursday presentation.&nbsp;<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;<o:p></o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Section 2 lists the main objective as being to harden against compromi=
sed/malicious AS or RS, which may attempt to replay captured tokens elsewher=
e. While this is a good idea, a casual
 reader might wonder why a simple audience claim in the access token/introsp=
ection response is not sufficient to prevent this. Because interactions betw=
een the client and RS are supposed to be over TLS, is the intended threat mo=
del one in which these protections
 have broken down? ("counterfeit" in the description suggests this). Or is t=
he motivation that clients want to get a single broad-scoped access token (f=
or usability/performance reasons) and use it to access multiple resource ser=
vers without giving each of them
 the ability to replay the token to the other servers? Or are we thinking of=
 a phishing-type vulnerability were a general-purpose client might accidenta=
lly visit a malicious site which prompts for an access token that the client=
 then blindly goes off and gets?
 (UMA?) It's not clear to me which of these scenarios is being considered, s=
o it would be good to tighten up this section.<o:p></o:p></span></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It is admittedly a bit loose and I agree it'd be good to tighten it up=
. But part of why it's loose is that it tries to offer some protections for a=
ll those scenarios and more such
 as a general lost/stolen token. It's effectively trying to provide as many o=
f the same types of protections/assurances that you'd get with TLS based PoP=
 mechanisms (like OAuth MTLS or Token binding) to the extent that can be don=
e at the HTTP application layer.
 Which can't realistically be exactly the same but can maybe be kinda close w=
hile actually being accessible and implementable because it's all done at th=
e application layer. There are trade-offs, of course, and the document write=
rs have endeavored to find a
 good balance in the trade-off decisions we've made. But that doesn't mean t=
hey are necessarily the right decisions or are closed to discussion. To the c=
asual reader I would say that it turns out that getting an appropriate simpl=
e audience claim into an access
 token isn't nearly as simple as it might seem. And while it will prevent RS=
 to RS replay (as long as both RSs aren't legit audiences) it doesn't help w=
ith preventing the use of tokens stolen or leaked by other means (including f=
or refresh tokens issued to
 public clients).&nbsp;<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;<o:p></o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Another potential motivation is for mobile apps. Some customers of our=
s would like to tie access/refresh tokens to private key material generated o=
n a secure element in the device,
 that can only be accessed after local biometric authentication (e.g. TouchI=
D/FaceID on iOS). I have suggested using mTLS cert-bound tokens for this, bu=
t have heard some pushback due to the difficulty of configuring support for c=
lient certs across diverse infrastructure.
 A simple JWT-based solution like DPoP could fill this need.<o:p></o:p></spa=
n></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's maybe not stated in the draft but this kind of thing is among the=
 objectives (in my mind anyway).&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;<o:p></o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">My main concerns with the draft though are about efficiency and scalab=
ility of the proposed approach:<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The requirement to use public key signatures, along with the anti-r=
eplay nonce, means that the RS is required to perform an expensive signature=
 verification check on every request.
 That is not going to scale up well. While there are more efficient schemes l=
ike Ed25519 now, these are still typically an order of magnitude slower than=
 HMAC and the latency and CPU overhead is likely to be a non-starter for man=
y APIs (especially when you're
 billed by CPU usage). Public key signatures are also notoriously fragile (s=
ee e.g. the history of nonce reuse/leakage vulnerabilities in ECDSA or&nbsp;=
<o:p></o:p></span></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Yes, asymmetric is more processing intensive than symmetric. But if yo=
u take away the distributed replay check (see next response), it will scale o=
ut just fine. I'm not so sure latency
 is a real issue here - while these operations are an order of magnitude slo=
wer we're still talking about times that are not perceptible to a human. CPU=
 usage/cost is a part of a trade-off for the simplicity afforded by public/p=
rivate keys.&nbsp; And it is significantly
 simpler. The design you sketched out is admittedly quite clever but it's no=
t even in the same ballpark with respect to complexity. And, as you pointed o=
ut, the other suggestion around symmetric keys has rather different security=
 properties while still adding
 complexity. Adding symmetric key support isn't something that can just be a=
dded on easily.&nbsp;<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;<o:p></o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The advice for the RS to store a set of previously used nonces to p=
revent replay will also hamper scalability, especially in large deployments w=
here such state would need to be
 replicated to all servers (or use sticky load balancing, which comes with i=
ts own problems). This violates the statelessness of HTTP, and it also poten=
tially breaks idempotency of operations: Think of the case where the JWT val=
idation and replay protection
 is done at an API gateway but then the call to the backend API server fails=
 for a transient reason. The client (or a proxy/library) cannot simply repla=
y the (idempotent) request in this case because it will be rejected by the g=
ateway. It must instead recreate
 the DPoP JWT, incurring additional overheads.<o:p></o:p></span></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The actual value of replay checking on jti is somewhat questionable. T=
he DPoP JWT only transits between client and server so a TLS MITM is likely n=
eeded to steal a DPoP JWT. But we
 are assuming TLS works here. And an active MITM could thwart this check by j=
ust being first to present DPoP JWT. I think the jti check made its way into=
 the draft mostly because it seemed like something was needed to try and bri=
ng it closer to the TLS PoP
 models. Being aware of the scalability concerns, I did endeavor to write th=
e text in such a way so as to leave some wiggle room in implementations/depl=
oyments with text like '"jti" SHOULD be used by the server for replay detect=
ion and prevention` and [ensure
 that] 'within a reasonable consideration of accuracy and resource utilizati=
on, a JWT with the same "jti" value has not been received previously'. The i=
dea being that using something eventually consistent or even local only to t=
he runtime instance would be
 permissible. Perhaps that allowance and the rational could be made more cle=
ar? Or would you suggest to do away with the jti replay stuff al? Or somethi=
ng else?&nbsp;<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. Minor: The use of a custom header for communicating the DPoP proof w=
ill require additional CORS configuration on top of that already done for th=
e Authorization header, and so adds
 a small amount of additional friction for adoption. Given that CORS configu=
ration changes often require approval by a security team, this may make more=
 of an impact than you'd expect.<o:p></o:p></span></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Feels really minor. I mean, we could try to roll everything up under o=
ne header. But it does seem unwarranted and would complicate things - at lea=
st in the model we've got now where
 the proof is sent the same way ono all types of requests.&nbsp;<o:p></o:p><=
/span></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's also not clear to me exactly what threat the anti-replay nonce is=
 protecting against. It does nothing against the replay scenario discussed i=
n section 2, as I understand it -
 which really seems to be more of a MitM scenario. Given that the connection=
 between the client and the RS is supposed to be over TLS, and TLS is alread=
y protected against replay attacks, I think this part needs to be better mot=
ivated given the obvious costs
 of implementing it.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I have a tentative suggestion for an alternative design which avoids t=
hese problems, but at a cost of potentially more complexity elsewhere. I'll s=
ummarise it here for consideration:<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The client obtains an access token in the normal way. When calling t=
he token endpoint it provides an EC/okp public key as the confirmation key t=
o be associated with the access/refresh
 tokens.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The first time the client calls an RS it passes its access token in=
 the Authorization: Bearer header as normal. (If the RS doesn't support DPoP=
 then this would just succeed and
 no further action is required by the client - allowing clients to opportuni=
stically ask for DPoP without needing a priori knowledge of RS capabilities)=
.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. The RS introspects the access token and learns the EC public key as=
sociated with the access token. As there is no DPoP proof with the access to=
ken, the RS will generate a challenge
 in the following way:<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS generates an ephemeral EC key pair for the=
 same curve as the confirmation key (e.g. P-256 or X25519).<o:p></o:p></span=
></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS stores the ephemeral private key somewhere=
, associated with this access token (see below for a scalable implementation=
 choice)<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS encodes the ephemeral public key into a JW=
K (epk) and base64url-encodes it. It uses this as a challenge to the client b=
y sending back a 401 response with WWW-Authenticate:
 DPoP &lt;encoded-epk&gt;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">4. The client decodes the epk challenge and performs an ECDH key agree=
ment between its private key and the challenge epk as per the method describ=
ed for the existing JWA ECDH-ES encryption
 algorithm. Rather than deriving an AES key however, it derives a HMAC key f=
or HS256. The "apu" value is set to the access token (string value as ASCII b=
ytes) and the "apv" value is set to the hostname of the RS (e.g. "<a href=3D=
"http://api.example.com/" target=3D"_blank">api.example.com</a>").
 This ensures that the derived key is cryptographically bound to the context=
 in which it is used.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">5. The client uses the HMAC key to create a DPoP proof JWT much like t=
he one in the current draft, but signed using the HS256 key. If a "kid" fiel=
d was present in the challenge JWK
 sent by the RS then the same value MUST be used in the "kid" header of this=
 discharge JWT. It retries its original request sending Authorization: DPoP &=
lt;hmac-jwt&gt; at=3D&lt;access_token&gt;.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">6. The RS uses its stored ephemeral private key to derive the same HMA=
C key and verify the DPoP discharge JWT. If it validates and all fields are c=
orrect then the request is allowed.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Efficient implementation trick:<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because the client is required to copy and "kid" value from the challe=
nge JWK, the RS can preemptively carry out the ECDH key agreement immediatel=
y and generate the derived HMAC key.
 The RS can then encrypt this derived key using a local authenticated encryp=
tion key (e.g. AES-GCM) and use that encrypted value as the "kid" value in t=
he challenge (perhaps along with some context or an expiry time). That way t=
he RS only needs to decrypt this
 kid value rather than performing the ECDH key agreement on every request. T=
his also avoids the need for the RS to store any per-client state locally.<o=
:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The challenge-response nature of the scheme prevents traditional repla=
y attacks in the case where a DPoP discharge JWT is accidentally leaked thro=
ugh server logs or some other flaw,
 without needing to store nonces on the server. Using the RS's hostname in t=
he key derivation process prevents mitm attacks in a similar way to how FIDO=
/WebAuthn prevents this. Most importantly, once a HS256 key has been derived=
 between a client and RS they
 can reuse that key for multiple requests, reducing the overhead of the ECDH=
 key agreement step. Either side can decide as a matter of policy how long t=
o let this occur and when to trigger a fresh challenge-response.<o:p></o:p><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because this fits within the standard HTTP authentication framework, i=
t also requires no additional CORS configuration and is relatively easy to p=
lug in to existing HTTP client libraries.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The main downside of this approach to me is the fact that you can't si=
mply reuse an existing JWT library to implement it, and so it will take time=
 for client libs to develop. (Although
 I think this might be achievable now with existing *COSE* libraries). This w=
ould increase the risk of people hand-rolling solutions, rather than using w=
ell-tested libraries. On the other hand, it uses fairly widely supported pri=
mitives so e.g. an implementation
 using WebCrypto is probably only a few dozen lines of code.<o:p></o:p></spa=
n></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">-- Neil<o:p></o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
<br>
<o:p></o:p></span></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On 31 Oct 2019, at 19:20, Brian Campbell &lt;<a href=3D"mailto:bcampbe=
ll=3D40pingidentity.com@dmarc.ietf.org" target=3D"_blank">bcampbell=3D40ping=
identity.com@dmarc.ietf.org</a>&gt; wrote:<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hello WG,&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Just a quick note to let folks know that -03 of the DPoP draft was pub=
lished earlier today. The usual various document links are in the forwarded m=
essage below and the relevant snippet
 from the doc history with a summary of the changes is included here for con=
venience.&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hopefully folks will have time to read the (relativity) short document=
 before the meeting(s) in Singapore where (spoiler alert) I plan to ask that=
 the WG consider adoption of the
 draft.&nbsp;<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
&nbsp;-03<br>
&nbsp; &nbsp;o &nbsp;rework the text around uniqueness requirements on the j=
ti claim in<br>
&nbsp; &nbsp; &nbsp;&nbsp;the DPoP proof JWT<br>
&nbsp; &nbsp;o &nbsp;make tokens a bit smaller by using "htm", "htu", and "j=
kt" rather<br>
&nbsp; &nbsp; &nbsp;&nbsp;than "http_method", "http_uri", and "jkt#S256" res=
pectively<br>
&nbsp; &nbsp;o &nbsp;more explicit recommendation to use mTLS if that is ava=
ilable<br>
&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br>
&nbsp; &nbsp;o &nbsp;editorial updates<o:p></o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">---------- Forwarded message ---------<br>
From:&nbsp;&lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank"=
>internet-drafts@ietf.org</a>&gt;<br>
Date: Thu, Oct 31, 2019 at 11:53 AM<br>
Subject: New Version Notification for draft-fett-oauth-dpop-03.txt<br>
To: Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" targe=
t=3D"_blank">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a href=3D"m=
ailto:mbj@microsoft.com" target=3D"_blank">mbj@microsoft.com</a>&gt;, John B=
radley &lt;<a href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank">ve7jtb@ve=
7jtb.com</a>&gt;,
 Brian Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"=
_blank">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a href=3D"mailt=
o:david@alkaline-solutions.com" target=3D"_blank">david@alkaline-solutions.c=
om</a>&gt;, Daniel Fett &lt;<a href=3D"mailto:mail@danielfett.de" target=3D"=
_blank">mail@danielfett.de</a>&gt;<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue"><br>
<br>
<br>
A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
has been successfully submitted by Brian Campbell and posted to the<br>
IETF repository.<br>
<br>
Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br>
Revision:&nbsp; &nbsp; &nbsp; &nbsp;03<br>
Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; OAuth 2.0 Demonstration of Proof-of=
-Possession at the Application Layer (DPoP)<br>
Document date:&nbsp; 2019-10-30<br>
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br>
Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br>
URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<a href=3D"https://www.ie=
tf.org/internet-drafts/draft-fett-oauth-dpop-03.txt" target=3D"_blank">https=
://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>
Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf=
.org/doc/draft-fett-oauth-dpop/" target=3D"_blank">https://datatracker.ietf.=
org/doc/draft-fett-oauth-dpop/</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://tools.ietf.org/html/d=
raft-fett-oauth-dpop-03" target=3D"_blank">https://tools.ietf.org/html/draft=
-fett-oauth-dpop-03</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf.org/=
doc/html/draft-fett-oauth-dpop" target=3D"_blank">https://datatracker.ietf.o=
rg/doc/html/draft-fett-oauth-dpop</a><br>
Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://www.ietf.or=
g/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" target=3D"_blank">https://www.iet=
f.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a><br>
<br>
Abstract:<br>
&nbsp; &nbsp;This document describes a mechanism for sender-constraining OAu=
th 2.0<br>
&nbsp; &nbsp;tokens via a proof-of-possession mechanism on the application l=
evel.<br>
&nbsp; &nbsp;This mechanism allows for the detection of replay attacks with a=
ccess<br>
&nbsp; &nbsp;and refresh tokens.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission=
<br>
until the htmlized version and diff are available at&nbsp;<a href=3D"http://=
tools.ietf.org/" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d..&nbsp; If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</span></i></b><span style=3D"font-size:10.=
5pt;font-family:HelveticaNeue">_____________________________________________=
__<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/oauth</a><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><o:p>&nbsp;</o:p></span></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d.&nbsp; If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachment=
s from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><br>
<b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neue&quot;=
;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOT=
ICE: This email may contain confidential and privileged material for the sol=
e use of the intended recipient(s). Any review,
 use, distribution or disclosure by others is strictly prohibited.&nbsp; If y=
ou have received this communication in error, please notify the sender immed=
iately by e-mail and delete the message and any file attachments from your c=
omputer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>


</div></blockquote></div></body></html>=

--Apple-Mail-AE54EF4A-FE1D-4483-BC8E-45FF644A7A7C--


From nobody Thu Nov 21 23:13:19 2019
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9861D12083F for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:13:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8JSANUCviw0w for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:13:15 -0800 (PST)
Received: from mail-lf1-x131.google.com (mail-lf1-x131.google.com [IPv6:2a00:1450:4864:20::131]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1020120836 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:13:14 -0800 (PST)
Received: by mail-lf1-x131.google.com with SMTP id b20so4694885lfp.4 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:13:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=XtmPC2FHWEvi0P4LlK2xeMQFNoyn3TZVkYWATXon1Sc=; b=d9V7UmY2ei8Khs9+tzFJzKeh3fYG8UUhe+N5k5Liy6izarIPyzHqrg0ODFXC1HvcEP uCqUcGpv07+cJlCYgvNf7YwbeHlaTrXlw8VI2o2ODbMzImk7fz9ml+4T8PnGVhEpXwr7 ElzdFxM7gpbosz6Kdf2XnRrTOdyCWgRGZfa2u2XJyIzDQnWDGQCoBdKDroq08TZV+gRM thEgVN625NiLygN4xIj8Ms/IJMtZD40kXdpYBypp/HdS3uZGud8huqcIiuaXLlbKRZMy bR/egKVXoMsxSDXPLwgVyM0B55nufzGTSE6XA04RUOO6xiApUkfk/ls3kNZ/q1MUvm/W fWOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=XtmPC2FHWEvi0P4LlK2xeMQFNoyn3TZVkYWATXon1Sc=; b=uDpA2WT6xFDBdP70P776n2vMI6DEvsMY24jZ2po6zJ8qcQB3wvasS95xczkkwcpH5L BFVEqOitjSzx8/bPyvt91o4QxqboP4LVJozvq5WQVV8ScodcdFpNnAluLRU940fSL8HA tyqLIJnChaAzS4iBqvCmEz9OB8waZDvYM2aImJSruC5ABkSRtAoNPdGiXLCv0guWj1YU 8oz1+m+q/qJ5zITYAB9B6+jz8byBcr2SIJyexof9EXcqQfRjEG0Z5Ewq/iAiaCZ0ZO1S S8QPcNyHE/MfPIOXFZ6f7bwFrXqdRTcXPbXbuXW28yD4kw7eOtzzO/eglu4qHUeKH0jr 0xmg==
X-Gm-Message-State: APjAAAUPQktjDxT/9ygIBEqIlOKQLiHY1RGttCxxZFvB3+heIKER3aq4 MW+8WiojAxeHk7zhbTcM0dAhjW3E5X7b/su+/Gw=
X-Google-Smtp-Source: APXvYqzk3+MGayEaWljxHuzxUyVKNSiZ+FUAJoHFtfyAEQ3UJVwNWgpuCQ3xIycP/x4/PlFY/fkY40i4YHifBBi9W74=
X-Received: by 2002:ac2:59dd:: with SMTP id x29mr4036901lfn.95.1574406792856;  Thu, 21 Nov 2019 23:13:12 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com>
In-Reply-To: <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com>
From: Dick Hardt <dick.hardt@gmail.com>
Date: Fri, 22 Nov 2019 15:13:01 +0800
Message-ID: <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: "Richard Backman, Annabelle" <richanna@amazon.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000009ec94b0597ea2574"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1le2JuLRJVt_LvGccbzQygYN0tg>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:13:17 -0000

--0000000000009ec94b0597ea2574
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com>
wrote:

> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.com=
>
> wrote:
>
> There are key distribution challenges with that if you are doing
> validation at the RS, but validation at the RS using either approach mean=
s
> you=E2=80=99ve lost protection against replay by the RS. This brings us b=
ack to a
> core question: what threats are in scope for DPoP, and in what contexts?
>
>
> Agreed, but validation at the RS is premature optimisation in many cases.
> And if you do need protection against that the client can even append a
> confirmation key as a caveat and retrospectively upgrade a bearer token t=
o
> a pop token. They can even do transfer of ownership by creating copies of
> the original token bound to other certificates/public keys.
>

While validation at the RS may be an optimization in many cases, it is
still a requirement for deployments.

I echo Annabelle's last question: what threats are in scope (and out of
scope) for DPoP?

--0000000000009ec94b0597ea2574
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 22, 2019 at 3:08 PM Neil =
Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com">neil.madden@forgero=
ck.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"m=
argin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left=
:1ex"><div dir=3D"auto"><div dir=3D"ltr">On 22 Nov 2019, at 01:42, Richard =
Backman, Annabelle &lt;<a href=3D"mailto:richanna@amazon.com" target=3D"_bl=
ank">richanna@amazon.com</a>&gt; wrote:</div><div dir=3D"ltr"><blockquote t=
ype=3D"cite">There are key distribution challenges with that if you are doi=
ng validation at the RS, but
 validation at the RS using either approach means you=E2=80=99ve lost prote=
ction against replay by the RS. This brings us back to a core question: wha=
t threats are in scope for DPoP, and in what contexts?<br></blockquote></di=
v><div><br></div>Agreed, but validation at the RS is premature optimisation=
 in many cases. And if you do need protection against that the client can e=
ven append a confirmation key as a caveat and retrospectively upgrade a bea=
rer token to a pop token. They can even do transfer of ownership by creatin=
g copies of the original token bound to other certificates/public keys.=C2=
=A0</div></blockquote><div><br></div><div>While validation at the RS may be=
 an optimization in many cases, it is still a requirement for deployments.<=
/div><div><br></div><div>I echo Annabelle&#39;s last question: what threats=
 are in scope (and out of scope) for DPoP?</div><div><br></div><div><br></d=
iv></div></div>

--0000000000009ec94b0597ea2574--


From nobody Thu Nov 21 23:24:53 2019
Return-Path: <jricher@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB5E5120033 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:24:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.198
X-Spam-Level: 
X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NE5iIjJ3PAj7 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:24:50 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D2B812008A for <oauth@ietf.org>; Thu, 21 Nov 2019 23:24:49 -0800 (PST)
Received: from dhcp-9862.meeting.ietf.org (dhcp-9862.meeting.ietf.org [31.133.152.98]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAM7OgNo020786 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 22 Nov 2019 02:24:46 -0500
From: Justin Richer <jricher@mit.edu>
Message-Id: <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu>
Content-Type: multipart/alternative; boundary="Apple-Mail=_A139A001-C7CB-47B1-8D4C-B3F2F17CFA6D"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Fri, 22 Nov 2019 15:24:41 +0800
In-Reply-To: <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com>
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
To: Dick Hardt <dick.hardt@gmail.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/IETUKInc85FTdNIy9qKJn6Wgb8I>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:24:52 -0000

--Apple-Mail=_A139A001-C7CB-47B1-8D4C-B3F2F17CFA6D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about the =
scope here. That was the one major thing that struck me during the DPoP =
discussions in Singapore yesterday: we don=E2=80=99t seem to agree on =
what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20

If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20

I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out.

 =E2=80=94 Justin

> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
>=20
>=20
>=20
> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com =
<mailto:neil.madden@forgerock.com>> wrote:
> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com <mailto:richanna@amazon.com>> wrote:
>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>=20
>=20
> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>=20
> While validation at the RS may be an optimization in many cases, it is =
still a requirement for deployments.
>=20
> I echo Annabelle's last question: what threats are in scope (and out =
of scope) for DPoP?
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_A139A001-C7CB-47B1-8D4C-B3F2F17CFA6D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">I=E2=80=
=99m going to +1 Dick and Annabelle=E2=80=99s question about the scope =
here. That was the one major thing that struck me during the DPoP =
discussions in Singapore yesterday: we don=E2=80=99t seem to agree on =
what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.&nbsp;<div class=3D""><br class=3D""></div><div =
class=3D"">If it=E2=80=99s the former, then it should be explicitly tied =
to one specific set of things. If it=E2=80=99s the latter, then it needs =
to be expanded.&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">I=E2=80=99ll repeat what I said at the mic line: My take is =
that we should explicitly narrow down DPoP so that it does exactly one =
thing and solves one narrow use case. And for a general solution? =
Let=E2=80=99s move that discussion into the next major revision of the =
protocol where we=E2=80=99ll have a bit more running room to figure =
things out.</div><div class=3D""><br class=3D""></div><div =
class=3D"">&nbsp;=E2=80=94 Justin<br class=3D""><div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">On Nov =
22, 2019, at 3:13 PM, Dick Hardt &lt;<a =
href=3D"mailto:dick.hardt@gmail.com" =
class=3D"">dick.hardt@gmail.com</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><meta =
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div dir=3D"ltr" class=3D""><div dir=3D"ltr" class=3D""><br =
class=3D""></div><br class=3D""><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 22, 2019 at 3:08 PM Neil =
Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div dir=3D"auto" class=3D""><div =
dir=3D"ltr" class=3D"">On 22 Nov 2019, at 01:42, Richard Backman, =
Annabelle &lt;<a href=3D"mailto:richanna@amazon.com" target=3D"_blank" =
class=3D"">richanna@amazon.com</a>&gt; wrote:</div><div dir=3D"ltr" =
class=3D""><blockquote type=3D"cite" class=3D"">There are key =
distribution challenges with that if you are doing validation at the RS, =
but
 validation at the RS using either approach means you=E2=80=99ve lost =
protection against replay by the RS. This brings us back to a core =
question: what threats are in scope for DPoP, and in what contexts?<br =
class=3D""></blockquote></div><div class=3D""><br class=3D""></div>Agreed,=
 but validation at the RS is premature optimisation in many cases. And =
if you do need protection against that the client can even append a =
confirmation key as a caveat and retrospectively upgrade a bearer token =
to a pop token. They can even do transfer of ownership by creating =
copies of the original token bound to other certificates/public =
keys.&nbsp;</div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">While validation at the RS may be an optimization in many =
cases, it is still a requirement for deployments.</div><div class=3D""><br=
 class=3D""></div><div class=3D"">I echo Annabelle's last question: what =
threats are in scope (and out of scope) for DPoP?</div><div class=3D""><br=
 class=3D""></div><div class=3D""><br class=3D""></div></div></div>
_______________________________________________<br class=3D"">OAuth =
mailing list<br class=3D""><a href=3D"mailto:OAuth@ietf.org" =
class=3D"">OAuth@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_A139A001-C7CB-47B1-8D4C-B3F2F17CFA6D--


From nobody Thu Nov 21 23:52:51 2019
Return-Path: <robertotto@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7272812011E for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:52:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ALoAAsFBv_g for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:52:46 -0800 (PST)
Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9DDF1200B5 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:52:46 -0800 (PST)
Received: by mail-pl1-x62a.google.com with SMTP id a18so2766051plm.10 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:52:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OkzWV7VUfDUq/z3pN2+tQGmpJkCs0yO+Ez8HyXOWqBc=; b=VQKsliS8LjjIvX/fH91Fhdd9A7hoyxyh3r6YXycRl1eXSZ/+OOFvUswVN3eVTNbT7H Zolb7AvI8CMYZMz4bXXNSoh7a9BRQDR4cT70ae3rMzJllMa3R1oc+NovIRs1Hl6TVPJS 9JEDXeF0y+DiFEV9i51a6447FJb9SNuoMWFsXNr97heMHagoJsw+x1frXZ2Bwvt9H9Om RmaDZ1p4FDamIlMGTES5LX/goKpl2BlyTPdBzD0OEDAyrBS7kL1+BXkjkn8tKz8rGUw7 i5qgYQ38mmjk9I4f2ZiZUL6oYIzddGw3JtgsUIOUioJWP2rUtjghvYc1ROkP4l0UNGpm IJvQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OkzWV7VUfDUq/z3pN2+tQGmpJkCs0yO+Ez8HyXOWqBc=; b=U2Fl7rgkW5eEzkY9sdb74uiQD+YU+VFlSDIHIQGN4P3HbG3IN8MQtzcRhg2ubMX/s8 UHl7xe8s21zykFu4RL2Hyoj0MNVuZvirjtF1tbLdLuRRccAWIJ4+4qnm2jILiGWKqAEG 9X2oUjwNX4f7IvOff7duuTNTCkj5d45xlem1+x4spcL3z7vxBZ4UCqzRD1bGuDbyDm1n De5cjSfWFFl1a8q8hVFRqMu1s8K/3wfg4oqEqDoVn/7TZrviWfoURGlMtOXfsLBVSip0 1MCfLDh/pDu4hMulu9yUYxBVm5WFshHyCEXJBPp6wMfCQfm9jWGMjgs4Yd91zimES00o cdhQ==
X-Gm-Message-State: APjAAAUTPShKdbYf+DsuaiblkCKxaLaRih5UzonUO9NSZCAPe5JrpBU4 DCLRz8jRnh9SCnULPzmQkp1s1QYNNhXmUYppkgm8ituwd3KikqOjg+cyHHcxVWkEQ926GQqkFSO AVR7NydcTpn7Q5Q==
X-Google-Smtp-Source: APXvYqxlc3ve2HJ/+SbmaYRuMPO5cZAWLZc53JeW7JXZx3NvKQMpNbhX2geIvpM/Um0TnRVdlIIBn8m6sOoEezI3soc=
X-Received: by 2002:a17:902:b481:: with SMTP id y1mr12508178plr.76.1574409166046;  Thu, 21 Nov 2019 23:52:46 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu>
In-Reply-To: <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu>
From: Rob Otto <robotto@pingidentity.com>
Date: Fri, 22 Nov 2019 07:52:35 +0000
Message-ID: <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com>
To: Justin Richer <jricher@mit.edu>
Cc: Dick Hardt <dick.hardt@gmail.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000012e55e0597eab357"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/DD764MimjLR12IeOeL628kxRN9g>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:52:49 -0000

--00000000000012e55e0597eab357
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi everyone

I'd agree with this. I'm looking at DPOP as an alternative and
ultimately simpler way to accomplish what we can already do with MTLS-bound
Access Tokens, for use cases such as the ones we address in Open Banking;
these are API transactions that demand a high level of assurance and as
such we absolutely must have a mechanism to constrain those tokens to the
intended bearer. Requiring MTLS across the ecosystem, however, adds
significant overhead in terms of infrastructural complexity and is always
going to limit the extent to which such a model can scale.

DPOP, to me, appears to be a rather more elegant way of solving the same
problem, with the benefit of significantly reducing the complexity of (and
dependency on) the transport layer. I would not argue, however, that it is
meant to be a solution intended for ubiquitous adoption across all
OAuth-protected API traffic. Clients still need to manage private keys
under this model and my experience is that there is typically a steep
learning curve for developers to negotiate any time you introduce a
requirement to hold and use keys within  an application.

I guess I'm with Justin - let's look at DPOP as an alternative to
MTLS-bound tokens for high-assurance use cases, at least initially, without
trying to make it solve every problem.

Best regards
Rob


On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:

> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about the s=
cope here. That
> was the one major thing that struck me during the DPoP discussions in
> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for. =
Some
> (including the authors, it seems) see it as a quick point-solution to a
> specific use case. Others see it as a general PoP mechanism.
>
> If it=E2=80=99s the former, then it should be explicitly tied to one spec=
ific set
> of things. If it=E2=80=99s the latter, then it needs to be expanded.
>
> I=E2=80=99ll repeat what I said at the mic line: My take is that we shoul=
d
> explicitly narrow down DPoP so that it does exactly one thing and solves
> one narrow use case. And for a general solution? Let=E2=80=99s move that =
discussion
> into the next major revision of the protocol where we=E2=80=99ll have a b=
it more
> running room to figure things out.
>
>  =E2=80=94 Justin
>
> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
>
>
>
> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com>
> wrote:
>
>> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.co=
m>
>> wrote:
>>
>> There are key distribution challenges with that if you are doing
>> validation at the RS, but validation at the RS using either approach mea=
ns
>> you=E2=80=99ve lost protection against replay by the RS. This brings us =
back to a
>> core question: what threats are in scope for DPoP, and in what contexts?
>>
>>
>> Agreed, but validation at the RS is premature optimisation in many cases=
.
>> And if you do need protection against that the client can even append a
>> confirmation key as a caveat and retrospectively upgrade a bearer token =
to
>> a pop token. They can even do transfer of ownership by creating copies o=
f
>> the original token bound to other certificates/public keys.
>>
>
> While validation at the RS may be an optimization in many cases, it is
> still a requirement for deployments.
>
> I echo Annabelle's last question: what threats are in scope (and out of
> scope) for DPoP?
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


--=20
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
Rob Otto
EMEA Field CTO/Solutions Architect
robertotto@pingidentity.com

c: +44 (0) 777 135 6092
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11=
,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Google+ logo]
<https://plus.google.com/u/0/114266977739397708540> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/dam/pi=
ng-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?id=
%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=3Dgmail&ust=3D15416936085260=
00&usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ>
<https://www.pingidentity.com/en/events/d/identify-2019.html>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--00000000000012e55e0597eab357
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:tahoma,s=
ans-serif;color:#0b5394">Hi everyone</div><div class=3D"gmail_default" styl=
e=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div><div class=3D"g=
mail_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394">I&#39;d=
 agree with this. I&#39;m looking at DPOP as an alternative and ultimately=
=C2=A0simpler way to accomplish what we can already do with MTLS-bound Acce=
ss Tokens, for use cases such as the ones we address in Open Banking; these=
 are API transactions that demand a high level of assurance and as such we =
absolutely must have a mechanism to constrain those tokens to the intended =
bearer. Requiring MTLS across the ecosystem, however, adds significant over=
head in terms of infrastructural=C2=A0complexity and is always going to lim=
it the extent to which such a model can scale.</div><div class=3D"gmail_def=
ault" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div><div =
class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b539=
4">DPOP, to me, appears to be a rather more elegant way of solving the same=
 problem, with the benefit of significantly reducing the complexity of (and=
 dependency on) the transport layer. I would not argue, however, that=C2=A0=
it is meant to be a solution intended for ubiquitous adoption across all OA=
uth-protected API traffic. Clients still need to manage private keys under =
this model and my experience is that there is typically a steep learning cu=
rve for developers to negotiate any time you introduce a requirement to hol=
d and use keys within=C2=A0 an application.=C2=A0</div><div class=3D"gmail_=
default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div><d=
iv class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0b=
5394">I guess I&#39;m with Justin - let&#39;s look at DPOP as an alternativ=
e to MTLS-bound tokens for high-assurance use cases, at least initially, wi=
thout trying to make it solve every problem.=C2=A0</div><div class=3D"gmail=
_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div><=
div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#0=
b5394">Best regards</div><div class=3D"gmail_default" style=3D"font-family:=
tahoma,sans-serif;color:#0b5394">Rob</div><div class=3D"gmail_default" styl=
e=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div></div><br><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, 22 Nov =
2019 at 07:24, Justin Richer &lt;<a href=3D"mailto:jricher@mit.edu">jricher=
@mit.edu</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le=
ft:1ex"><div style=3D"overflow-wrap: break-word;">I=E2=80=99m going to +1 D=
ick and Annabelle=E2=80=99s question about the scope here. That was the one=
 major thing that struck me during the DPoP discussions in Singapore yester=
day: we don=E2=80=99t seem to agree on what DPoP is for. Some (including th=
e authors, it seems) see it as a quick point-solution to a specific use cas=
e. Others see it as a general PoP mechanism.=C2=A0<div><br></div><div>If it=
=E2=80=99s the former, then it should be explicitly tied to one specific se=
t of things. If it=E2=80=99s the latter, then it needs to be expanded.=C2=
=A0</div><div><br></div><div>I=E2=80=99ll repeat what I said at the mic lin=
e: My take is that we should explicitly narrow down DPoP so that it does ex=
actly one thing and solves one narrow use case. And for a general solution?=
 Let=E2=80=99s move that discussion into the next major revision of the pro=
tocol where we=E2=80=99ll have a bit more running room to figure things out=
.</div><div><br></div><div>=C2=A0=E2=80=94 Justin<br><div><br><blockquote t=
ype=3D"cite"><div>On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;<a href=3D"ma=
ilto:dick.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; w=
rote:</div><br><div><div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div cl=
ass=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 22, 2=
019 at 3:08 PM Neil Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com"=
 target=3D"_blank">neil.madden@forgerock.com</a>&gt; wrote:<br></div><block=
quote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1=
px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"auto"><div dir=3D"l=
tr">On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;<a href=3D"mai=
lto:richanna@amazon.com" target=3D"_blank">richanna@amazon.com</a>&gt; wrot=
e:</div><div dir=3D"ltr"><blockquote type=3D"cite">There are key distributi=
on challenges with that if you are doing validation at the RS, but
 validation at the RS using either approach means you=E2=80=99ve lost prote=
ction against replay by the RS. This brings us back to a core question: wha=
t threats are in scope for DPoP, and in what contexts?<br></blockquote></di=
v><div><br></div>Agreed, but validation at the RS is premature optimisation=
 in many cases. And if you do need protection against that the client can e=
ven append a confirmation key as a caveat and retrospectively upgrade a bea=
rer token to a pop token. They can even do transfer of ownership by creatin=
g copies of the original token bound to other certificates/public keys.=C2=
=A0</div></blockquote><div><br></div><div>While validation at the RS may be=
 an optimization in many cases, it is still a requirement for deployments.<=
/div><div><br></div><div>I echo Annabelle&#39;s last question: what threats=
 are in scope (and out of scope) for DPoP?</div><div><br></div><div><br></d=
iv></div></div>
_______________________________________________<br>OAuth mailing list<br><a=
 href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br><a =
href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">http=
s://www.ietf.org/mailman/listinfo/oauth</a><br></div></blockquote></div><br=
></div></div>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div style=3D"padding:0px;margin:0px">    <table=
 style=3D"border-collapse:collapse;padding:0px;margin:0px">			<tbody><tr>		=
		<td style=3D"width:113px">					<a href=3D"https://www.pingidentity.com" t=
arget=3D"_blank"></a><a href=3D"https://www.pingidentity.com" target=3D"_bl=
ank"><img alt=3D"Ping Identity" src=3D"https://www.pingidentity.com/content=
/dam/pic/images/misc/signature/ping-logo.png"></a>				</td>				<td>					<ta=
ble>												<tbody><tr>			        <td style=3D"vertical-align:top">				=
        <span style=3D"color:rgb(230,29,60);display:inline-block;margin-bot=
tom:3px;font-family:arial,helvetica,sans-serif;font-weight:bold;font-size:1=
4px">Rob Otto</span>								<br>								<span style=3D"color:rgb(0,0,0);dis=
play:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;=
font-weight:normal;font-size:14px">EMEA Field CTO/Solutions Architect</span=
>								<br>								<span style=3D"font-family:arial,helvetica,sans-serif;=
font-size:14px;display:inline-block;margin-bottom:3px"><a href=3D"mailto:ro=
bertotto@pingidentity.com" target=3D"_blank">robertotto@pingidentity.com</a=
></span>								<br>								<span style=3D"color:rgb(0,0,0);display:inline-=
block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:=
normal;font-size:14px">								</span>								<br>								<span style=3D"co=
lor:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,hel=
vetica,sans-serif;font-weight:normal;font-size:14px">								c: +44 (0) 777=
 135 6092</span>							</td>			      </tr>					</tbody></table>				</td>			=
</tr>			<tr>				        <td colspan=3D"2">          <table style=3D"border-=
collapse:collapse;border:none;margin:8px 0px 0px;width:100%">          	<tb=
ody><tr style=3D"height:40px;border-top:1px solid rgb(211,211,211);border-b=
ottom:1px solid rgb(211,211,211)">              <td style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:14px;font-weight:bold;color:rgb(64,71,75=
)">Connect with us: </td>              <td style=3D"padding:4px 0px 0px 20p=
x">                <a href=3D"https://www.glassdoor.com/Overview/Working-at=
-Ping-Identity-EI_IE380907.11,24.htm" style=3D"text-decoration:none;margin-=
right:16px" title=3D"Ping on Glassdoor" target=3D"_blank"><img src=3D"https=
://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassd=
oor.png" style=3D"border: none; margin: 0px;" alt=3D"Glassdoor logo"></a>		=
								<a href=3D"https://www.linkedin.com/company/21870" style=3D"text-de=
coration:none;margin-right:16px" title=3D"Ping on LinkedIn" target=3D"_blan=
k"><img src=3D"https://www.pingidentity.com/content/dam/pic/images/misc/sig=
nature/social-linkedin.png" style=3D"border: none; margin: 0px;" alt=3D"Lin=
kedIn logo"></a>                                        <a href=3D"https://=
twitter.com/pingidentity" style=3D"text-decoration:none;margin-right:16px" =
title=3D"Ping on Twitter" target=3D"_blank"><img src=3D"https://www.pingide=
ntity.com/content/dam/pic/images/misc/signature/social-twitter.png" style=
=3D"border: none; margin: 0px;" alt=3D"twitter logo"></a>										<a href=
=3D"https://www.facebook.com/pingidentitypage" style=3D"text-decoration:non=
e;margin-right:16px" title=3D"Ping on Facebook" target=3D"_blank"><img src=
=3D"https://www.pingidentity.com/content/dam/pic/images/misc/signature/soci=
al-facebook.png" style=3D"border: none; margin: 0px;" alt=3D"facebook logo"=
></a>								<a href=3D"https://www.youtube.com/user/PingIdentityTV" style=
=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Youtube" targe=
t=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/image=
s/misc/signature/social-youtube.png" style=3D"border: none; margin: 0px 0px=
 3px;" alt=3D"youtube logo"></a>														<a href=3D"https://plus.googl=
e.com/u/0/114266977739397708540" style=3D"text-decoration:none;margin-right=
:16px" title=3D"Ping on Google+" target=3D"_blank"><img src=3D"https://www.=
pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.pn=
g" style=3D"border: none; margin: 0px;" alt=3D"Google+ logo"></a>          =
                                              <a href=3D"https://www.pingid=
entity.com/en/blog.html" style=3D"text-decoration:none;margin-right:16px" t=
itle=3D"Ping Blog" target=3D"_blank"><img src=3D"https://www.pingidentity.c=
om/content/dam/pic/images/misc/signature/social-blog.png" style=3D"border: =
none; margin: 0px;" alt=3D"Blog logo"></a>															</td>            <=
/tr>          </tbody></table>				</td>      </tr>    </tbody></table><a hr=
ef=3D"https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/d=
am/ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.p=
df?id%3Db6322a80-f285-11e3-ac10-0800200c9a66&amp;source=3Dgmail&amp;ust=3D1=
541693608526000&amp;usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target=3D"_bl=
ank"></a><a href=3D"https://www.pingidentity.com/en/events/d/identify-2019.=
html" target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/da=
m/ping-6-2-assets/images/misc/emailSignature/identify-email-image.png"></a>=
  </div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--00000000000012e55e0597eab357--


From nobody Thu Nov 21 23:53:55 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 450A112011E for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:53:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5767lAhCCifh for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:53:52 -0800 (PST)
Received: from mail-pj1-x102f.google.com (mail-pj1-x102f.google.com [IPv6:2607:f8b0:4864:20::102f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC25E1200B5 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:53:51 -0800 (PST)
Received: by mail-pj1-x102f.google.com with SMTP id ep1so2711356pjb.7 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:53:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=P2Fw4Hf93wdDmE87X0PqRskW5huArnWa/3G/8ssqHMs=; b=Vt5FCpgUD6Ud6gUJqe/ePSlqv+KiosUxXxvRTNDV/ybVwvgaS1UwOsQ4dV5UkWTq+d 1QRVe5qfo5S8gx/pEX9oASXg+Nq85zo5lwnE1RPRYX5WzB/RmsAOoBqALoe8iIll1UUp w6qc3xHEhYTDZuTEoZsBxcSx6P5K5p5ZVhGyBadoMmEsXcv9bjtjldVm6oIxL1enKvrm +I3AOqTB/GKs3garayi39995vdHoQQNPRYwLj1LQvdn26ijX3BgdQl+SHGKuzL/nQX+9 UZz4NsRaLDdcB1Pp1w8EIXq4DDrOn8ue20GaSbYwNjGJkiFLDo3WqLkD/O2hafNkJqlV QgbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=P2Fw4Hf93wdDmE87X0PqRskW5huArnWa/3G/8ssqHMs=; b=g/jIOeKgz2pxxHNW9i92OwPGR8D89JNlmcp4X7O/iweuv8djs7t5g90qA23sMzhlth J+rksCztOGj/jMSQIVxcQ+vEUerCy5Ycavir+XpVNTx9PsAb7uU4Um5iVi9RyoqNpEGW 9NV/H+Ix5oCGv6zHjEde+EHExKpwbLYLsE1FGMGs/d6PAh4kViOWjKUf4FL6VJOk0u7n 5NGP/8v6aOebCva+mDv3vAMnfLz9Nu36UnSsBo5VQ6adzFvHskwa5FonB97nU46CnH+H s92wm/GM8a/um3rtAC0XV7QD94kEwd2JiGJo1BddLYVdvmuCupG5BlOSj4P0J1thDbnk v3VA==
X-Gm-Message-State: APjAAAUNPNS4X9TsfB0GFEXJRpnERM/yC/oSnnBZeRMoDUvHYdc2bz6q EPCJ8wP82/gxD8IQXq7k86aIBQ==
X-Google-Smtp-Source: APXvYqyBov1ZQxsc8Pf2NOc4cWyVA7/r/ERJvi1tNFMIsoAjPmMjIKX+br/v6Hd+8X+xJxCsov17Yg==
X-Received: by 2002:a17:902:aa0b:: with SMTP id be11mr13155594plb.258.1574409231251;  Thu, 21 Nov 2019 23:53:51 -0800 (PST)
Received: from [10.80.110.155] ([103.137.210.130]) by smtp.gmail.com with ESMTPSA id r4sm6435030pfl.61.2019.11.21.23.53.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Nov 2019 23:53:50 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_6F9378CF-02D0-4963-A5BE-BC05C56A9C13"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 15:53:43 +0800
In-Reply-To: <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu>
Cc: Dick Hardt <dick.hardt@gmail.com>, oauth <oauth@ietf.org>
To: Justin Richer <jricher@mit.edu>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/kEnLAp6IrVw3jOotJAecmH7DXfQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:53:54 -0000

--Apple-Mail=_6F9378CF-02D0-4963-A5BE-BC05C56A9C13
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>=20
> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>=20
> If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20

as a co-author of the DPoP draft I state again what I said yesterday: =
DPoP is a mechanism for sender-constraining access tokens sent from SPAs =
only. The threat to be prevented is token replay.

The general mechanism for sender constrained access token should be =
TLS-based as recommended by the Security BCP (see =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-3.=
2).

Why: that=E2=80=99s the easiest way from a client developer's =
perspective.=20

Application level signatures, on the other hand, are inherently more =
fragile as illustrated by the OAuth 1 experience. They also require =
additional effort (and state) on the server side to implement replay =
detection.=20

As kind of an entertaining read I added two posts/threads from 2010, =
when this WG discussed whether TLS/SSL should be the primary OAuth 2.0 =
security mechanism.

https://mailarchive.ietf.org/arch/msg/oauth/crVvDNtbdN0E0ccmk5fLdNS66v0
=
https://mailarchive.ietf.org/arch/browse/oauth/?gbt=3D1&index=3Dxvlxuly1Dj=
QiZgWZpHwgj7q2k0g

The decision to go with TLS only was, in my opinion, one of the key =
success factors that made OAuth 2 so incredibly successful.

To re-state: =46rom my perspective, DPoP is intended to be used by SPA =
developers only for token replay detection (or better put to provide RSs =
with the pre-requisites to do so). =20

Why? Because we unfortunately currently lack a TLS-based mechanism for =
sender-constraining.

Building it on asymmetrical crypto only makes it easier to implement and =
to handle than methods based on shared secrets.

I also think we must look for alternative methods to enable TLS-based =
methods in the browser.=20


>=20
> I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out.
>=20
>  =E2=80=94 Justin
>=20
>> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
>>=20
>>=20
>>=20
>> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
>> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>>=20
>> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>>=20
>> While validation at the RS may be an optimization in many cases, it =
is still a requirement for deployments.
>>=20
>> I echo Annabelle's last question: what threats are in scope (and out =
of scope) for DPoP?
>>=20
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_6F9378CF-02D0-4963-A5BE-BC05C56A9C13
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_6F9378CF-02D0-4963-A5BE-BC05C56A9C13--


From nobody Thu Nov 21 23:59:25 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF302120033 for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:59:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2YAp9IdPUYIQ for <oauth@ietfa.amsl.com>; Thu, 21 Nov 2019 23:59:22 -0800 (PST)
Received: from mail-pf1-x434.google.com (mail-pf1-x434.google.com [IPv6:2607:f8b0:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E389C12000F for <oauth@ietf.org>; Thu, 21 Nov 2019 23:59:21 -0800 (PST)
Received: by mail-pf1-x434.google.com with SMTP id s5so3095718pfh.9 for <oauth@ietf.org>; Thu, 21 Nov 2019 23:59:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=17v24MmpoLIMq2LW3G6uMvt6IS6VKa9wqCbZEEJutUQ=; b=pydG0fp0cTY2SkLauNcnlkL2NvSxvszuwP84J/qR6Y5JOoA59aaERDgeAg3YLhBRqG IBaO+S9hfszvG1g2f3Dmw7Ghtg7+5QhKMggQt1jtSj09mMeN7beqyAUk7pQKgmoEYZ5S 8ucEMvXTWYDelAh5PJesjAJJDp3w/8RlV49Ts7ZZegNz1FPYm/ORdewbRzf0uOpRKUkB CjoF3TZ3+22x6oOd2ETYswBCAw7gY8aKQWgIApn/7G2RdSdRB3FDUzVwFe8lpXJLlZ58 Y4QjY3YW43Wh84Sq/fbqHvCz1UtEkK1OHCHRy8/+OuzPIL44JWXcx8yaalTERPiMygF8 9AFg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=17v24MmpoLIMq2LW3G6uMvt6IS6VKa9wqCbZEEJutUQ=; b=GXJn3dqHyJM7JEqa2kaQ3rD5WB2Fk8XSpGuQvh/mkhHgvEPKe1gnDuLzxUTUwrpsVw Q8tgvKa9mTE6fiftIy38+smMEbIXhd6Vxan1B/2oDt7lnMR+Sy+UwCoSYxlw57z/EKcz bfbeX1Png6etc0nSu4wswgCe+62Z0X6Fhcaaqctt0DE+lWVfqSzc0Ts10Ls0zM6zT1+8 Gg5DH7etRi36v6qbhd/k+OAOhswfOOUXFZhwzGyYxHKI3p+VnVGwlZiGqR/EGsQEXRRh oYcZwoRtQ93SxLACj2JI62hvQ0mYruMr9anrgYxuztYqm817RKito/j63paCygHwFmnz C6EA==
X-Gm-Message-State: APjAAAXr2RF25M4ZKHhFRTAmzO6f5kgUjKVhcwDn4hJI/AARSsQ54QNp 2Gne07w5pv80886lrDoxhhrOwQ==
X-Google-Smtp-Source: APXvYqwWzObNsIrgrKiziIUoD8LQqZYBxP5RUSAgg6wAcTig52pB5OTiA+9LdE3vXxFlG9ICiDjKkg==
X-Received: by 2002:a62:2b55:: with SMTP id r82mr15568440pfr.56.1574409561264;  Thu, 21 Nov 2019 23:59:21 -0800 (PST)
Received: from [10.80.110.155] ([103.137.210.130]) by smtp.gmail.com with ESMTPSA id r5sm6196467pfh.179.2019.11.21.23.59.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Nov 2019 23:59:20 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_8D723F04-0A50-4FD5-8E9C-FEF99BD1F6A3"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 15:59:13 +0800
In-Reply-To: <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uPyWNSiUhl4H4xPFNctbRqIir14>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 07:59:24 -0000

--Apple-Mail=_8D723F04-0A50-4FD5-8E9C-FEF99BD1F6A3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Rob,=20

> On 22. Nov 2019, at 15:52, Rob Otto =
<robotto=3D40pingidentity.com@dmarc.ietf.org> wrote:
>=20
> Hi everyone
>=20
> I'd agree with this. I'm looking at DPOP as an alternative and =
ultimately simpler way to accomplish what we can already do with =
MTLS-bound Access Tokens, for use cases such as the ones we address in =
Open Banking; these are API transactions that demand a high level of =
assurance and as such we absolutely must have a mechanism to constrain =
those tokens to the intended bearer. Requiring MTLS across the =
ecosystem, however, adds significant overhead in terms of =
infrastructural complexity and is always going to limit the extent to =
which such a model can scale.

I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead =
in terms of infrastructural complexity=E2=80=9D. Can you please dig into =
details?

Our experience so far: It can be a headache to set up in a microservice =
architecture with TLS terminating proxies but once it runs it=E2=80=99s =
ok. On the other side, it=E2=80=99s easy to use for client developers =
and it combines client authentication and sender constraining nicely. =20=


>=20
> DPOP, to me, appears to be a rather more elegant way of solving the =
same problem, with the benefit of significantly reducing the complexity =
of (and dependency on) the transport layer. I would not argue, however, =
that it is meant to be a solution intended for ubiquitous adoption =
across all OAuth-protected API traffic. Clients still need to manage =
private keys under this model and my experience is that there is =
typically a steep learning curve for developers to negotiate any time =
you introduce a requirement to hold and use keys within  an application.=20=


My experience is most developer don=E2=80=99t even get the URL right (in =
the signature and the value used on the receiving end). So the total =
cost of ownership is increased by numerous support inquiries.

best regards,
Torsten.=20

>=20
> I guess I'm with Justin - let's look at DPOP as an alternative to =
MTLS-bound tokens for high-assurance use cases, at least initially, =
without trying to make it solve every problem.=20
>=20
> Best regards
> Rob
>=20
>=20
> On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>=20
> If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20
>=20
> I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out..
>=20
>  =E2=80=94 Justin
>=20
>> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
>>=20
>>=20
>>=20
>> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
>> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>>=20
>> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>>=20
>> While validation at the RS may be an optimization in many cases, it =
is still a requirement for deployments.
>>=20
>> I echo Annabelle's last question: what threats are in scope (and out =
of scope) for DPoP?
>>=20
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
> --=20
> =09
> Rob Otto=09
> EMEA Field CTO/Solutions Architect=09
> robertotto@pingidentity.com=09
> =09
> c: +44 (0) 777 135 6092
> Connect with us: 		   	 	 	   			=
										=
	=09
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_8D723F04-0A50-4FD5-8E9C-FEF99BD1F6A3
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ
KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH
EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV
U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw
MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx
EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj
dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq
KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb
M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L
bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH
fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB
AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy
/AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH
MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv
bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6
Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM
AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh
Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi
tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp
VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7
T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI
9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI
ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon
M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ
z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx
CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv
cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G
CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
Fw0xOTExMjIwNzU5MTNaMC8GCSqGSIb3DQEJBDEiBCC9ekgBX8F6Ts+RwQ31SDDKo3fcc5wwMEkl
quetWe8a8jCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0
ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl
IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ
BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx
GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1
dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG
SIb3DQEBAQUABIIBALP56zWqFObE4x6gsDAsi44QtPWNTpviGBeg7lO4g3DmAxb75ZuIGoGQxVb5
xpujMSqmt/wJH5W8tzffRqKdxNOgfyDZVfzVCZ3uuQHPZRbSLgGp+33+DX6mJRysj7LQMLN8mntg
wBVqCmv+Ee4GV3YbbG6rRsUvEg56TmNho+7XMDCpighZyff0YZoxf86MI+2//Ojz2KowEv5diAL0
1WJ8HkeWNzN5eQiYBDYxTKsGkWJv2UDnNf3bydd9Okxl9vJJS8NYYeNvZR5x+QeYHtS7szt4DwyK
hmTVNTeFi27fKe/LmAjx9B5qAQ+u7yNFD4iJy+z6ukd1iuykpqmW6XoAAAAAAAA=
--Apple-Mail=_8D723F04-0A50-4FD5-8E9C-FEF99BD1F6A3--


From nobody Fri Nov 22 00:00:27 2019
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 776BE120033 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:00:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w3YqCjqDDjAo for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:00:23 -0800 (PST)
Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650120.outbound.protection.outlook.com [40.107.65.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DBEA12000F for <oauth@ietf.org>; Fri, 22 Nov 2019 00:00:23 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HZMKhGVYX5DiVdrHpZQ516EkGRGEVBbynns/ZOo/YqsCyPHcPZAuD5KVclTGKQmmYYYmSAaZZuJtPOpJL8BWrc/hCvWFbaOJLEKXdD2uRpaoV3ypqi91vwJjDWIMZu2vuI5T2lF7TK8EjHfs96pOCD+/Tsqxc5jWaUlkM/ZPDFF2jv78Hx0PXD6SzkzI5vEyaRzDwhb2FzVC853IXnb6BIWnlznakt551cdeqAv89CjUYOJBrJ4Hzraauea+L+Db4meYelJJle2EOCizcKK3IaZQ0PSfhqhdKnvKzc1n9m02av5fKKto3Mlpd2e41XbHOCR+rU935HR8IzvIw6YlUg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tS3j/XgwyllbN/oT+DnPCb0SjAid9bOqIMmsYUjRcw8=; b=PUTqURDtMIeD/S6XkmoOKjGD/HZSBW/t+cPO7BJv0YkvsDOQ0aA7/hicSNPv/F04YXEGBM0ooPwgYlg2bMUsoRCA5jxzgd8Q4+0SgNgbn4HpbmktKKyl5M3gD+FjOj2rMci9ceg8831Nell5fAuGxuYv5HwayYj0mhOX6Cln6azIO1UDMSbf7R+lsHqK4aztLMd1vxAPBz9Dy8mxMYVaDllNy921XW4N1BlpBP8NUAF+ukgpUfEq7bfl6i691+jgI5uVj8rOK8ncZmIQLkqzDoJUgfnnaDCaftFW2QrMCsZ09Yc2UgbpdhD61wUwNgkTCXHy65VU/zROdEXqAybJ9g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tS3j/XgwyllbN/oT+DnPCb0SjAid9bOqIMmsYUjRcw8=; b=W4ErAYR7EcJokEZu2636a1/snBmLKGcBKqtYnal6GS2xe69mguvJN3dQPC/OCwE78kiDeR3Kn3Jj5VITWz2cI8CtoJHaxZQyseTpKSN8Z5GVwlB7ic3K7+ueXVQGzQy+UL0pUxB8nlz/pwD0bbnjBiMg6bqBVMoWsuEGcTpFPbw=
Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0614.namprd00.prod.outlook.com (20.178.207.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2518.0; Fri, 22 Nov 2019 08:00:19 +0000
Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::501c:9720:3c93:15f2]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::501c:9720:3c93:15f2%3]) with mapi id 15.20.2511.000; Fri, 22 Nov 2019 08:00:19 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, Justin Richer <jricher@mit.edu>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AdWhCuA0RlhHUexKRuKkSyIMvu0qlg==
Date: Fri, 22 Nov 2019 08:00:17 +0000
Message-ID: <BYAPR00MB05670A1669745F5EFE6C8302F5490@BYAPR00MB0567.namprd00.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=82129f54-8fd9-4701-9b9d-0000688df064; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-22T07:55:14Z;  MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; 
x-originating-ip: [31.133.159.128]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 1447e0fa-0766-4ac5-ccd8-08d76f220479
x-ms-traffictypediagnostic: BYAPR00MB0614:
x-microsoft-antispam-prvs: <BYAPR00MB0614C70FFD9F09F7415669A8F5490@BYAPR00MB0614.namprd00.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 02296943FF
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(39860400002)(376002)(346002)(136003)(13464003)(189003)(199004)(86362001)(256004)(110136005)(14444005)(6306002)(6436002)(9686003)(55016002)(6246003)(2171002)(229853002)(6116002)(66574012)(4326008)(71190400001)(71200400001)(2906002)(186003)(26005)(3846002)(52536014)(15650500001)(10090500001)(8936002)(66476007)(66556008)(64756008)(66446008)(81156014)(81166006)(66946007)(8990500004)(316002)(8676002)(25786009)(99286004)(22452003)(6506007)(53546011)(102836004)(76116006)(14454004)(305945005)(7696005)(66066001)(478600001)(10290500003)(966005)(7736002)(5660300002)(74316002)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0614; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: SkwVAm3ImjCTd5OKsIpP8DeHTa1qEaEQ9admHvYfEMoLXneFXczcF/tBZCqTtYC7lkYDxwHURJg+jwSMSAhiLFmQW01KmYPSZ8MepRg+RC4jXkHZW+7T+FeppUvY58B1aaUkDdcJ0q0DY2Vy71sjGOwah/o9eSd7j+PNecdyTCg1Ojp8FcMFEtw6tIvtKs1ktvHmjUQKeJvocP0INShLeOyLiAFSoh7g0MmxtiTedlvZA6iSG/Rdd8EpyrXzEUQbp8AAa5HRI0QmSnuljOsjXjKs4VfCizRaeUhOAoBWjWlD88sRAMSUzy+2FCVW4s5ifYmWN6vQlwNV/x46u9OkMr0u9ZHSJV8Pw2AflJ2DKQbedOkbcBFFvGjQgDQed9hjGrxh3BHOWtjeXGn9+Xpp2YKKs9++KEPVUV4PQpHhJKr0a13Coeqixg1AZdO7IK6SdxEf8WUoN62C+EvOJvo0kJL7p0j0+hD8hWsvIbB8yqw=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1447e0fa-0766-4ac5-ccd8-08d76f220479
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2019 08:00:18.0253 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Yo+tgRsYO7s043eRFaAL95uswnOqAE1JdwxUoV0/D235OQ2gsX+Gein+Z6ATkuA/qakRYEhvZ+5ByS3nMK7QxQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0614
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/f_LAFFYpkxD63SofJoQND7fpXR4>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:00:25 -0000
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From nobody Fri Nov 22 00:04:51 2019
Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6C301200B5 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:04:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tmQDT8NinmbG for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:04:47 -0800 (PST)
Received: from mail-ot1-x330.google.com (mail-ot1-x330.google.com [IPv6:2607:f8b0:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 199C01208F8 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:04:47 -0800 (PST)
Received: by mail-ot1-x330.google.com with SMTP id 94so5422982oty.8 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:04:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=TiR9odxSh2MUEi7lG+obngZK4v4pPjXBLZ+07X7pW0E=; b=E6j1OizquW7MDXwqZA5b1GCSxoVlA5+oxtw3jxDWIYZnK/p90MB2WM39H0corDwxOQ UT4ZbqLe57YZ3UM749vCJJ4Z2HpJh/NWS/GaZVERSlrAevEr/2y5tK81hJRjHr+brAxm jRFAvaGAa1OyqEVJHBaMFkz65GibjKr0b5VBtIexnwz9stTVI0xo/GqqiD1uod5vOTjE Z5fyp9EbkxWb1qGB+pfAcSwSwHlpWGTLqOjyElNxPGOWE62Is4qmtttkT8eBfNa4bPXJ a8iYwVAOMRFLN7k095+F/aRBL0w7Wh0zJ2mCz2BRhkwTQiqiLvd6FFvT5ZnCUpodAUyc 6qeA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=TiR9odxSh2MUEi7lG+obngZK4v4pPjXBLZ+07X7pW0E=; b=j3r6x0WA8xwNHmImqN6vsKYSv2RMbn6r4ocVIJxjdF7M78unb/3xo8Cic12jqAO0u9 tkqk7o+4Ko/T/7naM1TkNrb/8yborih1Rjd+R9w4x2FslNR0T06CgkMArkVsALRo9GnC nfOeReT0Q57rQ0PuVDs1dM4cVihxtLzGixU87X4DpJt7vgfS459lp7SUoJftpv+148nS Ixdmdgujx2flbL/LlLWlPiHuA9GZBOcuUZK1lx6NVtKA/FhrzcEv8luAiS5MNJUCHMlC /vz9Zaz2ZvNnuNBH9GE1grsVeKmBJns+6dCU3N8SMm+WDOR9uxYm9rZmh41yRLViKov/ L+zw==
X-Gm-Message-State: APjAAAV5ALBfCq5AJ1T/mhfM5lzZMWsqV6Os5nLLzJwiWAnwCwE7hInV jyYUA+I67g40IOlnvYRT4Its3AAIyrafyrZ/sA==
X-Google-Smtp-Source: APXvYqxL7CV73Kd+nOcrP0jDst49Nk93Jli/MM8tIUvc1h7u57esRiR4qfqr4xmy5m7JCFwvo0N8+HhFhfXxIEvjBBY=
X-Received: by 2002:a9d:5e0f:: with SMTP id d15mr8631478oti.96.1574409886238;  Fri, 22 Nov 2019 00:04:46 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net>
In-Reply-To: <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net>
From: Filip Skokan <panva.ip@gmail.com>
Date: Fri, 22 Nov 2019 09:04:34 +0100
Message-ID: <CALAqi_-pFN+WG9hMq4yx91+dyXGFBQVa3x=QkLFZzfn42OgyxQ@mail.gmail.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000000b140597eade51"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Kb1YwFCKpYUW727lK0jakaoxrLI>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:04:50 -0000

--000000000000000b140597eade51
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I agree with Torsten,

plus we're getting sender-constrained refresh tokens for said public
clients and SPAs so that the AS doesn't have to (according to the browser
based apps draft) rotate them, we all know the pain SPA developers have
with those.

S pozdravem,
*Filip Skokan*


On Fri, 22 Nov 2019 at 08:54, Torsten Lodderstedt <torsten=3D
40lodderstedt.net@dmarc.ietf.org> wrote:

>
>
> > On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
> >
> > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about the=
 scope here. That
> was the one major thing that struck me during the DPoP discussions in
> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for. =
Some
> (including the authors, it seems) see it as a quick point-solution to a
> specific use case. Others see it as a general PoP mechanism.
> >
> > If it=E2=80=99s the former, then it should be explicitly tied to one sp=
ecific
> set of things. If it=E2=80=99s the latter, then it needs to be expanded.
>
> as a co-author of the DPoP draft I state again what I said yesterday: DPo=
P
> is a mechanism for sender-constraining access tokens sent from SPAs only.
> The threat to be prevented is token replay.
>
> The general mechanism for sender constrained access token should be
> TLS-based as recommended by the Security BCP (see
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-3=
.2
> ).
>
> Why: that=E2=80=99s the easiest way from a client developer's perspective=
.
>
> Application level signatures, on the other hand, are inherently more
> fragile as illustrated by the OAuth 1 experience. They also require
> additional effort (and state) on the server side to implement replay
> detection.
>
> As kind of an entertaining read I added two posts/threads from 2010, when
> this WG discussed whether TLS/SSL should be the primary OAuth 2.0 securit=
y
> mechanism.
>
> https://mailarchive.ietf.org/arch/msg/oauth/crVvDNtbdN0E0ccmk5fLdNS66v0
>
> https://mailarchive.ietf.org/arch/browse/oauth/?gbt=3D1&index=3Dxvlxuly1D=
jQiZgWZpHwgj7q2k0g
>
> The decision to go with TLS only was, in my opinion, one of the key
> success factors that made OAuth 2 so incredibly successful.
>
> To re-state: From my perspective, DPoP is intended to be used by SPA
> developers only for token replay detection (or better put to provide RSs
> with the pre-requisites to do so).
>
> Why? Because we unfortunately currently lack a TLS-based mechanism for
> sender-constraining.
>
> Building it on asymmetrical crypto only makes it easier to implement and
> to handle than methods based on shared secrets.
>
> I also think we must look for alternative methods to enable TLS-based
> methods in the browser.
>
>
> >
> > I=E2=80=99ll repeat what I said at the mic line: My take is that we sho=
uld
> explicitly narrow down DPoP so that it does exactly one thing and solves
> one narrow use case. And for a general solution? Let=E2=80=99s move that =
discussion
> into the next major revision of the protocol where we=E2=80=99ll have a b=
it more
> running room to figure things out.
> >
> >  =E2=80=94 Justin
> >
> >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
> >>
> >>
> >>
> >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com=
>
> wrote:
> >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <
> richanna@amazon.com> wrote:
> >>> There are key distribution challenges with that if you are doing
> validation at the RS, but validation at the RS using either approach mean=
s
> you=E2=80=99ve lost protection against replay by the RS. This brings us b=
ack to a
> core question: what threats are in scope for DPoP, and in what contexts?
> >>
> >> Agreed, but validation at the RS is premature optimisation in many
> cases. And if you do need protection against that the client can even
> append a confirmation key as a caveat and retrospectively upgrade a beare=
r
> token to a pop token. They can even do transfer of ownership by creating
> copies of the original token bound to other certificates/public keys.
> >>
> >> While validation at the RS may be an optimization in many cases, it is
> still a requirement for deployments.
> >>
> >> I echo Annabelle's last question: what threats are in scope (and out o=
f
> scope) for DPoP?
> >>
> >>
> >> _______________________________________________
> >> OAuth mailing list
> >> OAuth@ietf.org
> >> https://www.ietf.org/mailman/listinfo/oauth
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000000b140597eade51
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>I agree with Torsten,</div><div><br></div><div>plus w=
e&#39;re getting sender-constrained refresh tokens for said public clients =
and SPAs so that the AS doesn&#39;t have to (according to the browser based=
 apps draft) rotate them, we all know the pain SPA developers have with tho=
se.</div><br clear=3D"all"><div><div dir=3D"ltr" data-smartmail=3D"gmail_si=
gnature">S pozdravem,<br><b>Filip Skokan</b></div></div><br></div><br><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, 22 Nov =
2019 at 08:54, Torsten Lodderstedt &lt;torsten=3D<a href=3D"mailto:40lodder=
stedt.net@dmarc.ietf.org" target=3D"_blank">40lodderstedt.net@dmarc.ietf.or=
g</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin=
:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"=
><br>
<br>
&gt; On 22. Nov 2019, at 15:24, Justin Richer &lt;<a href=3D"mailto:jricher=
@mit.edu" target=3D"_blank">jricher@mit.edu</a>&gt; wrote:<br>
&gt; <br>
&gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about th=
e scope here. That was the one major thing that struck me during the DPoP d=
iscussions in Singapore yesterday: we don=E2=80=99t seem to agree on what D=
PoP is for. Some (including the authors, it seems) see it as a quick point-=
solution to a specific use case. Others see it as a general PoP mechanism. =
<br>
&gt; <br>
&gt; If it=E2=80=99s the former, then it should be explicitly tied to one s=
pecific set of things. If it=E2=80=99s the latter, then it needs to be expa=
nded. <br>
<br>
as a co-author of the DPoP draft I state again what I said yesterday: DPoP =
is a mechanism for sender-constraining access tokens sent from SPAs only. T=
he threat to be prevented is token replay.<br>
<br>
The general mechanism for sender constrained access token should be TLS-bas=
ed as recommended by the Security BCP (see <a href=3D"https://tools.ietf.or=
g/html/draft-ietf-oauth-security-topics-13#section-3.2" rel=3D"noreferrer" =
target=3D"_blank">https://tools.ietf.org/html/draft-ietf-oauth-security-top=
ics-13#section-3.2</a>).<br>
<br>
Why: that=E2=80=99s the easiest way from a client developer&#39;s perspecti=
ve. <br>
<br>
Application level signatures, on the other hand, are inherently more fragil=
e as illustrated by the OAuth 1 experience. They also require additional ef=
fort (and state) on the server side to implement replay detection. <br>
<br>
As kind of an entertaining read I added two posts/threads from 2010, when t=
his WG discussed whether TLS/SSL should be the primary OAuth 2.0 security m=
echanism.<br>
<br>
<a href=3D"https://mailarchive.ietf.org/arch/msg/oauth/crVvDNtbdN0E0ccmk5fL=
dNS66v0" rel=3D"noreferrer" target=3D"_blank">https://mailarchive.ietf.org/=
arch/msg/oauth/crVvDNtbdN0E0ccmk5fLdNS66v0</a><br>
<a href=3D"https://mailarchive.ietf.org/arch/browse/oauth/?gbt=3D1&amp;inde=
x=3Dxvlxuly1DjQiZgWZpHwgj7q2k0g" rel=3D"noreferrer" target=3D"_blank">https=
://mailarchive.ietf.org/arch/browse/oauth/?gbt=3D1&amp;index=3Dxvlxuly1DjQi=
ZgWZpHwgj7q2k0g</a><br>
<br>
The decision to go with TLS only was, in my opinion, one of the key success=
 factors that made OAuth 2 so incredibly successful.<br>
<br>
To re-state: From my perspective, DPoP is intended to be used by SPA develo=
pers only for token replay detection (or better put to provide RSs with the=
 pre-requisites to do so).=C2=A0 <br>
<br>
Why? Because we unfortunately currently lack a TLS-based mechanism for send=
er-constraining.<br>
<br>
Building it on asymmetrical crypto only makes it easier to implement and to=
 handle than methods based on shared secrets.<br>
<br>
I also think we must look for alternative methods to enable TLS-based metho=
ds in the browser. <br>
<br>
<br>
&gt; <br>
&gt; I=E2=80=99ll repeat what I said at the mic line: My take is that we sh=
ould explicitly narrow down DPoP so that it does exactly one thing and solv=
es one narrow use case. And for a general solution? Let=E2=80=99s move that=
 discussion into the next major revision of the protocol where we=E2=80=99l=
l have a bit more running room to figure things out.<br>
&gt; <br>
&gt;=C2=A0 =E2=80=94 Justin<br>
&gt; <br>
&gt;&gt; On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;<a href=3D"mailto:dick=
.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote:<br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;<a href=3D"mailto:=
neil.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&=
gt; wrote:<br>
&gt;&gt; On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;<a href=
=3D"mailto:richanna@amazon.com" target=3D"_blank">richanna@amazon.com</a>&g=
t; wrote:<br>
&gt;&gt;&gt; There are key distribution challenges with that if you are doi=
ng validation at the RS, but validation at the RS using either approach mea=
ns you=E2=80=99ve lost protection against replay by the RS. This brings us =
back to a core question: what threats are in scope for DPoP, and in what co=
ntexts?<br>
&gt;&gt; <br>
&gt;&gt; Agreed, but validation at the RS is premature optimisation in many=
 cases. And if you do need protection against that the client can even appe=
nd a confirmation key as a caveat and retrospectively upgrade a bearer toke=
n to a pop token. They can even do transfer of ownership by creating copies=
 of the original token bound to other certificates/public keys. <br>
&gt;&gt; <br>
&gt;&gt; While validation at the RS may be an optimization in many cases, i=
t is still a requirement for deployments.<br>
&gt;&gt; <br>
&gt;&gt; I echo Annabelle&#39;s last question: what threats are in scope (a=
nd out of scope) for DPoP?<br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; OAuth mailing list<br>
&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org=
</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"nor=
eferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><=
br>
&gt; <br>
&gt; _______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--000000000000000b140597eade51--


From nobody Fri Nov 22 00:05:13 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FEB512000F for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:05:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YbHw48lHcV1y for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:05:09 -0800 (PST)
Received: from mail-pf1-x430.google.com (mail-pf1-x430.google.com [IPv6:2607:f8b0:4864:20::430]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DF0D12003E for <oauth@ietf.org>; Fri, 22 Nov 2019 00:05:09 -0800 (PST)
Received: by mail-pf1-x430.google.com with SMTP id s5so3103622pfh.9 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:05:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=h+zJf6ENiW2n2fdd+Ymv3NvpVGQpDQpzddocExQVh9g=; b=Z41rhEJMBBTHkLVJY9CztYUonyhKdbC7QJ8JYzqLsptDTnoc3IAgAe06FWop717er6 q3Ml3SRD1JBLf1FxIlUevzsMpq2LO2FcuV4eFDzvE6oXPmeESXs2CHGcgf3lM7kj7Jp9 o4Qx9xRbDdlUpOWDMwrtItWg+GKXTwJFU8LXq2CNSRQcdfQRAYpvtHMxy1jTNxcUf4qN K24XelCYYuuUmNVrQsng1y4Zsv95EtZG9Q+uweQApvjhk938rFzqhphlixz2BKnf/Nk4 /YXsahtiWgNqxV6m2vZUn1kNHmMF3kaewuTR+YXX7q/4TG6H1HQYlJpitkNJF1dbJwQY TDog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=h+zJf6ENiW2n2fdd+Ymv3NvpVGQpDQpzddocExQVh9g=; b=lBBt74ZM/y++0V1noSmFLQbUEsp5PflPA3xvVw5azDjzZnyrZ61f/ovsldlkouCKBk 9cjAy8WPoQjDPRbOKfF+GdSQgoo01Cgv3J4/9PaFRMu1aFe6JMorCboMBfioWd5uOkHb nSFIQnwkqgIsQMDBrXFCl7iGCJWUAz6pzIw4cJ96mKA004QD974SryhGKfVMPFiffELF hfl+shrV2RgoucQSmnLxD08CsrActFxm47z0zoSW45RCp8qsPREgw6N6rJa1talBRxE2 CU6oCarfKEj3MDrzmOqtab6t4T/nsdlru5LjZCjNy1JQsDl4M99PgGSxHawIPsn6YrBw aXUg==
X-Gm-Message-State: APjAAAW2NjyK8nPkj8uyzg0a13DO7rQF5a2HY+4qXaFwFPomI5BpUK6Y FeEZrHhNrSuEUAJOQmlK5TniU7mLEBqKM2tC
X-Google-Smtp-Source: APXvYqx/hJ2avBSNoGUv82pueoLnGA2EMiJ04Ib9KoxDU3FEooTspyWF7MUS7hSzZAwnTuMiVoU97w==
X-Received: by 2002:a63:1f09:: with SMTP id f9mr13882878pgf.89.1574409908540;  Fri, 22 Nov 2019 00:05:08 -0800 (PST)
Received: from [10.80.110.155] ([103.137.210.130]) by smtp.gmail.com with ESMTPSA id z10sm6486624pfr.139.2019.11.22.00.05.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 00:05:07 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <96F5D42B-9724-49E5-AB18-219FFEF8207E@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_C9B7E9B8-E81B-452E-8566-9DFEF2528EFA"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 16:05:01 +0800
In-Reply-To: <BYAPR00MB05670A1669745F5EFE6C8302F5490@BYAPR00MB0567.namprd00.prod.outlook.com>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
References: <BYAPR00MB05670A1669745F5EFE6C8302F5490@BYAPR00MB0567.namprd00.prod.outlook.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/HQY2Ks1XJ23zSsvO0htY7Fe919g>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:05:12 -0000

--Apple-Mail=_C9B7E9B8-E81B-452E-8566-9DFEF2528EFA
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Mike,=20

> On 22. Nov 2019, at 16:00, Mike Jones =
<Michael.Jones=3D40microsoft.com@dmarc.ietf.org> wrote:
>=20
> TLS on Web Servers is nearly ubiquitous now and works great.  Trying =
to use mutual TLS on many platforms results in a nearly intractable user =
experience, where the end-users are asked to install certificates into =
certificate stores.  Success rates for those UXs are very low.
>=20
> And it's even worse than that.  If you use multiple browsers, you'll =
have to get the person to install the client certificates into multiple =
certificate stores.  For instance, on Windows, Edge, Firefox, and Chrome =
all use different certificate stores.
>=20
> Server-side TLS works because end-users don't have to do anything =
difficult to use it.  That can't be said for client-side TLS.

That=E2=80=99s true for the user experience in a browser. That=E2=80=99s =
why we currently need an alternative for exactly this client type.=20

It=E2=80=99s completely different for mobile apps and server-side web =
applications since mTLS does not have any impact on the user experience =
at all.=20

Instead, the developer just needs to drop the key pair/cert into the =
HTTP stack and is done with both client authentication and sender =
constrained tokens.=20

best regards,
Torsten.=20

>=20
> 				-- Mike
>=20
> -----Original Message-----
> From: OAuth <oauth-bounces@ietf.org> On Behalf Of Torsten Lodderstedt
> Sent: Thursday, November 21, 2019 11:54 PM
> To: Justin Richer <jricher@mit.edu>
> Cc: oauth <oauth@ietf.org>
> Subject: [EXTERNAL] Re: [OAUTH-WG] New Version Notification for =
draft-fett-oauth-dpop-03.txt
>=20
>=20
>=20
>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>=20
>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>>=20
>> If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20
>=20
> as a co-author of the DPoP draft I state again what I said yesterday: =
DPoP is a mechanism for sender-constraining access tokens sent from SPAs =
only. The threat to be prevented is token replay.
>=20
> The general mechanism for sender constrained access token should be =
TLS-based as recommended by the Security BCP (see =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.=
ietf.org%2Fhtml%2Fdraft-ietf-oauth-security-topics-13%23section-3.2&amp;da=
ta=3D02%7C01%7CMichael.Jones%40microsoft.com%7Cfa8cfb57efe34b5dfafa08d76f2=
1234d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100060427907236&amp;=
sdata=3DtvqS9JnASGHWeVZnxm0x6Rr7sSCaMX5Hd7ImpyoN%2BqE%3D&amp;reserved=3D0)=
.
>=20
> Why: that=E2=80=99s the easiest way from a client developer's =
perspective.=20
>=20
> Application level signatures, on the other hand, are inherently more =
fragile as illustrated by the OAuth 1 experience. They also require =
additional effort (and state) on the server side to implement replay =
detection.=20
>=20
> As kind of an entertaining read I added two posts/threads from 2010, =
when this WG discussed whether TLS/SSL should be the primary OAuth 2.0 =
security mechanism.
>=20
> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fmailar=
chive.ietf.org%2Farch%2Fmsg%2Foauth%2FcrVvDNtbdN0E0ccmk5fLdNS66v0&amp;data=
=3D02%7C01%7CMichael.Jones%40microsoft.com%7Cfa8cfb57efe34b5dfafa08d76f212=
34d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100060427907236&amp;sd=
ata=3DEYJcPaUIPorvsaZtHTcRhztyoc7aT5HvoISpCe%2FJi2w%3D&amp;reserved=3D0
> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fmailar=
chive.ietf.org%2Farch%2Fbrowse%2Foauth%2F%3Fgbt%3D1%26index%3Dxvlxuly1DjQi=
ZgWZpHwgj7q2k0g&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Cfa8cf=
b57efe34b5dfafa08d76f21234d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C6=
37100060427907236&amp;sdata=3DEaoRe%2BF2guKYB%2B9exMnl3oeyAEmS3%2FvQXV2BcX=
gYyOg%3D&amp;reserved=3D0
>=20
> The decision to go with TLS only was, in my opinion, one of the key =
success factors that made OAuth 2 so incredibly successful.
>=20
> To re-state: =46rom my perspective, DPoP is intended to be used by SPA =
developers only for token replay detection (or better put to provide RSs =
with the pre-requisites to do so). =20
>=20
> Why? Because we unfortunately currently lack a TLS-based mechanism for =
sender-constraining.
>=20
> Building it on asymmetrical crypto only makes it easier to implement =
and to handle than methods based on shared secrets.
>=20
> I also think we must look for alternative methods to enable TLS-based =
methods in the browser.=20
>=20
>=20
>>=20
>> I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out.
>>=20
>> =E2=80=94 Justin
>>=20
>>> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> =
wrote:
>>>=20
>>>=20
>>>=20
>>> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
>>> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>>>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>>>=20
>>> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>>>=20
>>> While validation at the RS may be an optimization in many cases, it =
is still a requirement for deployments.
>>>=20
>>> I echo Annabelle's last question: what threats are in scope (and out =
of scope) for DPoP?
>>>=20
>>>=20
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7Cfa8cfb57efe34b5dfafa08d76f21234d%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100060427907236&amp;sdata=3DhOjycnvqIbTATvSdKNl1%2Bw=
ZMcNZcip99Yozys9%2FXy8w%3D&amp;reserved=3D0
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7Cfa8cfb57efe34b5dfafa08d76f21234d%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100060427907236&amp;sdata=3DhOjycnvqIbTATvSdKNl1%2Bw=
ZMcNZcip99Yozys9%2FXy8w%3D&amp;reserved=3D0
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_C9B7E9B8-E81B-452E-8566-9DFEF2528EFA
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_C9B7E9B8-E81B-452E-8566-9DFEF2528EFA--


From nobody Fri Nov 22 00:10:21 2019
Return-Path: <robertotto@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFB09120133 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:10:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.988
X-Spam-Level: 
X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vlsm_QJ69yfr for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:10:18 -0800 (PST)
Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9A5E12003E for <oauth@ietf.org>; Fri, 22 Nov 2019 00:10:17 -0800 (PST)
Received: by mail-pl1-x62a.google.com with SMTP id d7so2810781pls.3 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:10:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=s6QA1G2b66fpp9ApLL45YOuLrOgxIzcDYro2Ugzfch0=; b=N2jH1jNyXFVVGt0mJrW35xy3uWVKMbVVLZj8RsmQP7tDoyO4QCKxybAWJefUy4d/e1 B2CDSSj++Hl1yhRf/IC43OSxbIV015wA9+zx0mf2XcqYwEO/u6vzNj/9L2X1cYEETukU y93On7Be/S8gks0Qo0FVzCzxeMkurh3GE/aApoB6onbs9Yjp8MQMxh7S43GsE7CDBViP ttXraZrj8LFvzrV0l1yNG4arfyVPKIiLyPbcCixu0Pe6fhziw3KvdL0k/QsT5LLWxd4c svQVQDkwn4VIm8rSj+sn8sjJ79pKDo+hfzmWDu5N9jgWD1HNUBHKR3xh7a1IdcKM7xnZ BJIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=s6QA1G2b66fpp9ApLL45YOuLrOgxIzcDYro2Ugzfch0=; b=F5jWDjH2j1+Agrn/ubq4npL5MLhqX+ifR3TUdOLSrOF+6BaSlqXNMc1PAv8PfJ+7+z Ma8ndHEdXHT12RzuNssjcmTPrO8SGy/ZCEcgYnYmoLy3UOGq9tp/+46uhsUPcG8thU7X NeQWA+oU4tos5hPExGWee+5ptN1EyLEWj3ZPNNNucQC33Wp8pPw/6i+J1FYeuHh7wm6N y8DxLLtjEsqRBO720sjYXoU8EYDc5hhljlv22R8aJzwrAc3J385u9/qC3dONh4nIbk4B D0zWZnSft+EgHdkBB8HmhvcMtu+Cpwa1QieWSEccZOLg+y8KlhX+nMj6MBXrjhO17oq3 c7SQ==
X-Gm-Message-State: APjAAAUnh2wxjywf9sDB8YzkNwLOUsHUgyJG0aoVwjjdlejJoKyxfLJQ QQZ2/IiLvU8RosM1pi3puzVx/gjIg/31sdcUoQ3QMC4iN3sZS1sMM1/fuOSlIaJTqTwXGKEWL0m K9TXs6e6rUPhis+tf
X-Google-Smtp-Source: APXvYqwIA02JG2f+ZQ7VkAz9BwPP79uZbeRDzwToD3X1yjzArZvXfqKt1jB8B7Vcc2+AEjhALTUn8a+FnhdKT7rTbtI=
X-Received: by 2002:a17:90a:f84:: with SMTP id 4mr16789695pjz.110.1574410217182;  Fri, 22 Nov 2019 00:10:17 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net>
In-Reply-To: <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net>
From: Rob Otto <robotto@pingidentity.com>
Date: Fri, 22 Nov 2019 08:10:06 +0000
Message-ID: <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b9f18a0597eaf1b1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Ao2lIcZO-xRatYYR7DkcjZdGzU0>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:10:21 -0000

--000000000000b9f18a0597eaf1b1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Torsten - thanks for the reply.

Responses in line.

Gr=C3=BCsse
Rob

On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt <torsten=3D
40lodderstedt.net@dmarc.ietf.org> wrote:

> Hi Rob,
>
> > On 22. Nov 2019, at 15:52, Rob Otto <robotto=3D
> 40pingidentity.com@dmarc.ietf.org> wrote:
> >
> > Hi everyone
> >
> > I'd agree with this. I'm looking at DPOP as an alternative and
> ultimately simpler way to accomplish what we can already do with MTLS-bou=
nd
> Access Tokens, for use cases such as the ones we address in Open Banking;
> these are API transactions that demand a high level of assurance and as
> such we absolutely must have a mechanism to constrain those tokens to the
> intended bearer. Requiring MTLS across the ecosystem, however, adds
> significant overhead in terms of infrastructural complexity and is always
> going to limit the extent to which such a model can scale.
>
> I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead in=
 terms of
> infrastructural complexity=E2=80=9D. Can you please dig into details?
>

I guess it's mostly that every RS-endpoint (or what sits in front of it)
has to have a mechanism for accepting/terminating mTLS, managing roots of
trust, validating/OCSP, etc and then passing the certificates downstream as
headers. None of it is necessarily difficult or impossible to do in
isolation, but I meet many many people every week who simply don't know how
to do any of this stuff. And these are typically "network people", for want
of a better word. There are quite a few SaaS API management and edge
solutions out there that don't even support mTLS at all. You also have the
difficulty in handling a combination of MTLS and non-MTLS traffic to the
same endpoints. Again, it's possible to do, but far from straightforward.



>
> Our experience so far: It can be a headache to set up in a microservice
> architecture with TLS terminating proxies but once it runs it=E2=80=99s o=
k. On the
> other side, it=E2=80=99s easy to use for client developers and it combine=
s client
> authentication and sender constraining nicely.
>

I do think its an elegant solution, don't get me wrong. It's just that
there are plenty of moving parts that you need to get right and that can be
a challenge, particularly in large, complex environments.



>
> >
> > DPOP, to me, appears to be a rather more elegant way of solving the sam=
e
> problem, with the benefit of significantly reducing the complexity of (an=
d
> dependency on) the transport layer. I would not argue, however, that it i=
s
> meant to be a solution intended for ubiquitous adoption across all
> OAuth-protected API traffic. Clients still need to manage private keys
> under this model and my experience is that there is typically a steep
> learning curve for developers to negotiate any time you introduce a
> requirement to hold and use keys within  an application.
>
> My experience is most developer don=E2=80=99t even get the URL right (in =
the
> signature and the value used on the receiving end). So the total cost of
> ownership is increased by numerous support inquiries.
>
I'll not comment, at the risk of offending developers :)

>
> best regards,
> Torsten.
>
> >
> > I guess I'm with Justin - let's look at DPOP as an alternative to
> MTLS-bound tokens for high-assurance use cases, at least initially, witho=
ut
> trying to make it solve every problem.
> >
> > Best regards
> > Rob
> >
> >
> > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
> > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about the=
 scope here. That
> was the one major thing that struck me during the DPoP discussions in
> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for. =
Some
> (including the authors, it seems) see it as a quick point-solution to a
> specific use case. Others see it as a general PoP mechanism.
> >
> > If it=E2=80=99s the former, then it should be explicitly tied to one sp=
ecific
> set of things. If it=E2=80=99s the latter, then it needs to be expanded.
> >
> > I=E2=80=99ll repeat what I said at the mic line: My take is that we sho=
uld
> explicitly narrow down DPoP so that it does exactly one thing and solves
> one narrow use case. And for a general solution? Let=E2=80=99s move that =
discussion
> into the next major revision of the protocol where we=E2=80=99ll have a b=
it more
> running room to figure things out..
> >
> >  =E2=80=94 Justin
> >
> >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
> >>
> >>
> >>
> >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com=
>
> wrote:
> >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <
> richanna@amazon.com> wrote:
> >>> There are key distribution challenges with that if you are doing
> validation at the RS, but validation at the RS using either approach mean=
s
> you=E2=80=99ve lost protection against replay by the RS. This brings us b=
ack to a
> core question: what threats are in scope for DPoP, and in what contexts?
> >>
> >> Agreed, but validation at the RS is premature optimisation in many
> cases. And if you do need protection against that the client can even
> append a confirmation key as a caveat and retrospectively upgrade a beare=
r
> token to a pop token. They can even do transfer of ownership by creating
> copies of the original token bound to other certificates/public keys.
> >>
> >> While validation at the RS may be an optimization in many cases, it is
> still a requirement for deployments.
> >>
> >> I echo Annabelle's last question: what threats are in scope (and out o=
f
> scope) for DPoP?
> >>
> >>
> >> _______________________________________________
> >> OAuth mailing list
> >> OAuth@ietf.org
> >> https://www.ietf.org/mailman/listinfo/oauth
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >
> >
> > --
> >
> > Rob Otto
> > EMEA Field CTO/Solutions Architect
> > robertotto@pingidentity.com
> >
> > c: +44 (0) 777 135 6092
> > Connect with us:
>
>
> >
> >
> > CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you._______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>
>

--=20
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
Rob Otto
EMEA Field CTO/Solutions Architect
robertotto@pingidentity.com

c: +44 (0) 777 135 6092
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11=
,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Google+ logo]
<https://plus.google.com/u/0/114266977739397708540> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/dam/pi=
ng-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?id=
%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=3Dgmail&ust=3D15416936085260=
00&usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ>
<https://www.pingidentity.com/en/events/d/identify-2019.html>

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000b9f18a0597eaf1b1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:tahoma,sans-serif;color:#0b5394">Hi Torsten - thanks for the reply=
.</div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;=
color:#0b5394"><br></div><div class=3D"gmail_default" style=3D"font-family:=
tahoma,sans-serif;color:#0b5394">Responses in line.</div><div class=3D"gmai=
l_default" style=3D"font-family:tahoma,sans-serif;color:#0b5394"><br></div>=
<div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:#=
0b5394">Gr=C3=BCsse</div><div class=3D"gmail_default" style=3D"font-family:=
tahoma,sans-serif;color:#0b5394">Rob</div></div><br><div class=3D"gmail_quo=
te"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, 22 Nov 2019 at 07:59, Tor=
sten Lodderstedt &lt;torsten=3D<a href=3D"mailto:40lodderstedt.net@dmarc.ie=
tf.org">40lodderstedt.net@dmarc.ietf.org</a>&gt; wrote:<br></div><blockquot=
e class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px s=
olid rgb(204,204,204);padding-left:1ex">Hi Rob, <br>
<br>
&gt; On 22. Nov 2019, at 15:52, Rob Otto &lt;robotto=3D<a href=3D"mailto:40=
pingidentity.com@dmarc.ietf.org" target=3D"_blank">40pingidentity.com@dmarc=
.ietf.org</a>&gt; wrote:<br>
&gt; <br>
&gt; Hi everyone<br>
&gt; <br>
&gt; I&#39;d agree with this. I&#39;m looking at DPOP as an alternative and=
 ultimately simpler way to accomplish what we can already do with MTLS-boun=
d Access Tokens, for use cases such as the ones we address in Open Banking;=
 these are API transactions that demand a high level of assurance and as su=
ch we absolutely must have a mechanism to constrain those tokens to the int=
ended bearer. Requiring MTLS across the ecosystem, however, adds significan=
t overhead in terms of infrastructural complexity and is always going to li=
mit the extent to which such a model can scale.<br>
<br>
I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead in t=
erms of infrastructural complexity=E2=80=9D. Can you please dig into detail=
s?<br></blockquote><div><br></div><div><div class=3D"gmail_default" style=
=3D"font-family:tahoma,sans-serif;color:rgb(11,83,148)">I guess it&#39;s mo=
stly that every RS-endpoint (or what sits in front of it) has to have a mec=
hanism for accepting/terminating mTLS, managing roots of trust, validating/=
OCSP, etc and then passing the certificates downstream as headers. None of =
it is necessarily=C2=A0difficult or impossible to do in isolation, but I me=
et many many people every week who simply don&#39;t know how to do any of t=
his stuff. And these are typically &quot;network people&quot;, for want of =
a better word. There are quite a few SaaS API management and edge solutions=
 out there that don&#39;t even support mTLS at all. You also have the diffi=
culty in handling a combination of MTLS and non-MTLS=C2=A0traffic to the sa=
me endpoints. Again, it&#39;s possible to do, but far from straightforward.=
=C2=A0</div><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex">
<br>
Our experience so far: It can be a headache to set up in a microservice arc=
hitecture with TLS terminating proxies but once it runs it=E2=80=99s ok. On=
 the other side, it=E2=80=99s easy to use for client developers and it comb=
ines client authentication and sender constraining nicely.=C2=A0 <br></bloc=
kquote><div><br></div><div><div class=3D"gmail_default" style=3D"font-famil=
y:tahoma,sans-serif;color:rgb(11,83,148)">I do think its an elegant solutio=
n, don&#39;t get me wrong. It&#39;s just that there are plenty of moving pa=
rts that you need to get right and that can be a challenge, particularly in=
 large, complex environments.=C2=A0</div><br></div><div>=C2=A0</div><blockq=
uote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1p=
x solid rgb(204,204,204);padding-left:1ex">
<br>
&gt; <br>
&gt; DPOP, to me, appears to be a rather more elegant way of solving the sa=
me problem, with the benefit of significantly reducing the complexity of (a=
nd dependency on) the transport layer. I would not argue, however, that it =
is meant to be a solution intended for ubiquitous adoption across all OAuth=
-protected API traffic. Clients still need to manage private keys under thi=
s model and my experience is that there is typically a steep learning curve=
 for developers to negotiate any time you introduce a requirement to hold a=
nd use keys within=C2=A0 an application. <br>
<br>
My experience is most developer don=E2=80=99t even get the URL right (in th=
e signature and the value used on the receiving end). So the total cost of =
ownership is increased by numerous support inquiries.<br></blockquote><div>=
<span class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:=
rgb(11,83,148)"></span></div><div><span class=3D"gmail_default" style=3D"fo=
nt-family:tahoma,sans-serif;color:rgb(11,83,148)">I&#39;ll not comment, at =
the risk of offending developers :) </span>=C2=A0</div><blockquote class=3D=
"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(2=
04,204,204);padding-left:1ex">
<br>
best regards,<br>
Torsten. <br>
<br>
&gt; <br>
&gt; I guess I&#39;m with Justin - let&#39;s look at DPOP as an alternative=
 to MTLS-bound tokens for high-assurance use cases, at least initially, wit=
hout trying to make it solve every problem. <br>
&gt; <br>
&gt; Best regards<br>
&gt; Rob<br>
&gt; <br>
&gt; <br>
&gt; On Fri, 22 Nov 2019 at 07:24, Justin Richer &lt;<a href=3D"mailto:jric=
her@mit.edu" target=3D"_blank">jricher@mit.edu</a>&gt; wrote:<br>
&gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about th=
e scope here. That was the one major thing that struck me during the DPoP d=
iscussions in Singapore yesterday: we don=E2=80=99t seem to agree on what D=
PoP is for. Some (including the authors, it seems) see it as a quick point-=
solution to a specific use case. Others see it as a general PoP mechanism. =
<br>
&gt; <br>
&gt; If it=E2=80=99s the former, then it should be explicitly tied to one s=
pecific set of things. If it=E2=80=99s the latter, then it needs to be expa=
nded. <br>
&gt; <br>
&gt; I=E2=80=99ll repeat what I said at the mic line: My take is that we sh=
ould explicitly narrow down DPoP so that it does exactly one thing and solv=
es one narrow use case. And for a general solution? Let=E2=80=99s move that=
 discussion into the next major revision of the protocol where we=E2=80=99l=
l have a bit more running room to figure things out..<br>
&gt; <br>
&gt;=C2=A0 =E2=80=94 Justin<br>
&gt; <br>
&gt;&gt; On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;<a href=3D"mailto:dick=
.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote:<br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;<a href=3D"mailto:=
neil.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&=
gt; wrote:<br>
&gt;&gt; On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;<a href=
=3D"mailto:richanna@amazon.com" target=3D"_blank">richanna@amazon.com</a>&g=
t; wrote:<br>
&gt;&gt;&gt; There are key distribution challenges with that if you are doi=
ng validation at the RS, but validation at the RS using either approach mea=
ns you=E2=80=99ve lost protection against replay by the RS. This brings us =
back to a core question: what threats are in scope for DPoP, and in what co=
ntexts?<br>
&gt;&gt; <br>
&gt;&gt; Agreed, but validation at the RS is premature optimisation in many=
 cases. And if you do need protection against that the client can even appe=
nd a confirmation key as a caveat and retrospectively upgrade a bearer toke=
n to a pop token. They can even do transfer of ownership by creating copies=
 of the original token bound to other certificates/public keys. <br>
&gt;&gt; <br>
&gt;&gt; While validation at the RS may be an optimization in many cases, i=
t is still a requirement for deployments.<br>
&gt;&gt; <br>
&gt;&gt; I echo Annabelle&#39;s last question: what threats are in scope (a=
nd out of scope) for DPoP?<br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; OAuth mailing list<br>
&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org=
</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"nor=
eferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><=
br>
&gt; <br>
&gt; _______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0<br>
&gt; Rob Otto=C2=A0 =C2=A0 =C2=A0 <br>
&gt; EMEA Field CTO/Solutions Architect=C2=A0 =C2=A0 <br>
&gt; <a href=3D"mailto:robertotto@pingidentity.com" target=3D"_blank">rober=
totto@pingidentity.com</a>=C2=A0 =C2=A0<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0<br>
&gt; c: +44 (0) 777 135 6092<br>
&gt; Connect with us:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <br>
&gt; <br>
&gt; <br>
&gt; CONFIDENTIALITY NOTICE: This email may contain confidential and privil=
eged material for the sole use of the intended recipient(s). Any review, us=
e, distribution or disclosure by others is strictly prohibited..=C2=A0 If y=
ou have received this communication in error, please notify the sender imme=
diately by e-mail and delete the message and any file attachments from your=
 computer. Thank you._______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div style=3D"padding:0px;margin:0px">    <table=
 style=3D"border-collapse:collapse;padding:0px;margin:0px">			<tbody><tr>		=
		<td style=3D"width:113px">					<a href=3D"https://www.pingidentity.com" t=
arget=3D"_blank"></a><a href=3D"https://www.pingidentity.com" target=3D"_bl=
ank"><img alt=3D"Ping Identity" src=3D"https://www.pingidentity.com/content=
/dam/pic/images/misc/signature/ping-logo.png"></a>				</td>				<td>					<ta=
ble>												<tbody><tr>			        <td style=3D"vertical-align:top">				=
        <span style=3D"color:rgb(230,29,60);display:inline-block;margin-bot=
tom:3px;font-family:arial,helvetica,sans-serif;font-weight:bold;font-size:1=
4px">Rob Otto</span>								<br>								<span style=3D"color:rgb(0,0,0);dis=
play:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;=
font-weight:normal;font-size:14px">EMEA Field CTO/Solutions Architect</span=
>								<br>								<span style=3D"font-family:arial,helvetica,sans-serif;=
font-size:14px;display:inline-block;margin-bottom:3px"><a href=3D"mailto:ro=
bertotto@pingidentity.com" target=3D"_blank">robertotto@pingidentity.com</a=
></span>								<br>								<span style=3D"color:rgb(0,0,0);display:inline-=
block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:=
normal;font-size:14px">								</span>								<br>								<span style=3D"co=
lor:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,hel=
vetica,sans-serif;font-weight:normal;font-size:14px">								c: +44 (0) 777=
 135 6092</span>							</td>			      </tr>					</tbody></table>				</td>			=
</tr>			<tr>				        <td colspan=3D"2">          <table style=3D"border-=
collapse:collapse;border:none;margin:8px 0px 0px;width:100%">          	<tb=
ody><tr style=3D"height:40px;border-top:1px solid rgb(211,211,211);border-b=
ottom:1px solid rgb(211,211,211)">              <td style=3D"font-family:ar=
ial,helvetica,sans-serif;font-size:14px;font-weight:bold;color:rgb(64,71,75=
)">Connect with us: </td>              <td style=3D"padding:4px 0px 0px 20p=
x">                <a href=3D"https://www.glassdoor.com/Overview/Working-at=
-Ping-Identity-EI_IE380907.11,24.htm" style=3D"text-decoration:none;margin-=
right:16px" title=3D"Ping on Glassdoor" target=3D"_blank"><img src=3D"https=
://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassd=
oor.png" style=3D"border: none; margin: 0px;" alt=3D"Glassdoor logo"></a>		=
								<a href=3D"https://www.linkedin.com/company/21870" style=3D"text-de=
coration:none;margin-right:16px" title=3D"Ping on LinkedIn" target=3D"_blan=
k"><img src=3D"https://www.pingidentity.com/content/dam/pic/images/misc/sig=
nature/social-linkedin.png" style=3D"border: none; margin: 0px;" alt=3D"Lin=
kedIn logo"></a>                                        <a href=3D"https://=
twitter.com/pingidentity" style=3D"text-decoration:none;margin-right:16px" =
title=3D"Ping on Twitter" target=3D"_blank"><img src=3D"https://www.pingide=
ntity.com/content/dam/pic/images/misc/signature/social-twitter.png" style=
=3D"border: none; margin: 0px;" alt=3D"twitter logo"></a>										<a href=
=3D"https://www.facebook.com/pingidentitypage" style=3D"text-decoration:non=
e;margin-right:16px" title=3D"Ping on Facebook" target=3D"_blank"><img src=
=3D"https://www.pingidentity.com/content/dam/pic/images/misc/signature/soci=
al-facebook.png" style=3D"border: none; margin: 0px;" alt=3D"facebook logo"=
></a>								<a href=3D"https://www.youtube.com/user/PingIdentityTV" style=
=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Youtube" targe=
t=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/image=
s/misc/signature/social-youtube.png" style=3D"border: none; margin: 0px 0px=
 3px;" alt=3D"youtube logo"></a>														<a href=3D"https://plus.googl=
e.com/u/0/114266977739397708540" style=3D"text-decoration:none;margin-right=
:16px" title=3D"Ping on Google+" target=3D"_blank"><img src=3D"https://www.=
pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.pn=
g" style=3D"border: none; margin: 0px;" alt=3D"Google+ logo"></a>          =
                                              <a href=3D"https://www.pingid=
entity.com/en/blog.html" style=3D"text-decoration:none;margin-right:16px" t=
itle=3D"Ping Blog" target=3D"_blank"><img src=3D"https://www.pingidentity.c=
om/content/dam/pic/images/misc/signature/social-blog.png" style=3D"border: =
none; margin: 0px;" alt=3D"Blog logo"></a>															</td>            <=
/tr>          </tbody></table>				</td>      </tr>    </tbody></table><a hr=
ef=3D"https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/d=
am/ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.p=
df?id%3Db6322a80-f285-11e3-ac10-0800200c9a66&amp;source=3Dgmail&amp;ust=3D1=
541693608526000&amp;usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target=3D"_bl=
ank"></a><a href=3D"https://www.pingidentity.com/en/events/d/identify-2019.=
html" target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/da=
m/ping-6-2-assets/images/misc/emailSignature/identify-email-image.png"></a>=
  </div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000b9f18a0597eaf1b1--


From nobody Fri Nov 22 00:19:21 2019
Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D908120147 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:19:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.987
X-Spam-Level: 
X-Spam-Status: No, score=-0.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DiC_InB57ZPb for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:19:17 -0800 (PST)
Received: from mail-oi1-x231.google.com (mail-oi1-x231.google.com [IPv6:2607:f8b0:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F66C12003E for <oauth@ietf.org>; Fri, 22 Nov 2019 00:19:17 -0800 (PST)
Received: by mail-oi1-x231.google.com with SMTP id s71so5740812oih.11 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:19:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=nZ1JJSpGtmO+32lnOkDlTExV5HtI2n1dKMe62b8038Q=; b=W0yNmXul8adN+DaUfEtYsWhupJn2DXT5CilvjIoYCNPsTG2ZujUWim8BzfCcUVb5xh anNH+nO9axDKEw86c5eoELByeRc+EvJ+MadsjPrUB3CRGCj2r9P48Qn9c85vaU6aSrac uofNQ+qx6MMhCaOSy1ZOIuIEVZV375oV2wlFLXWICFDmz2H5y0tbMH7aTMCzzaNFohct Z0r8F2P9pBCtR7PIlVaIMdcrxL/p+9ozhxkzHsfp8vtZB+XxRf9bcFnO6j32H3dgJmVw d+H/lynchASTxkg8T32nvAoaINxSI1VzXj/A+1j3Mz0aJdW71JF+hCVa4V0iFdePaL8I +BUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=nZ1JJSpGtmO+32lnOkDlTExV5HtI2n1dKMe62b8038Q=; b=C2rVbvRgYhR/cNJG4ew4GY49pWgz1iEPTSNbmxbn0uO6U62xEevUWFEJN96JCX4CQ5 NyJR61o2hTldQxBoP6bHMplYyk2SPqHZgGBz2UW/J5Stl9OMUeuJmdgGFEAKMaJYXrv9 piwsbMbYj00L28aAVqs/PL1rZPFKeRnnGzV994phOJrKLGacAjpY0OJ1vr1CmzBU3eVw qKmSb7gaUXaSZpRba6eiHeI/38r9KgiDwdF56uMBA+vWj0rvYaDujItsU15XKS32DLZF m1jB6qxi7xciAYZa/apBkKUoXpqlJsKVSkGFBNXCzjod9npOzpunCEkG1YYZU0ut70Eg gPQw==
X-Gm-Message-State: APjAAAXwiHX4UirgILD6lyTWwgsflcP4C2+a1G9Of9Xre07hM1lJ5e3l yZ7ebkTxIEoX8Wvvq6pZMRT3lQ+UqO97A1DvRA==
X-Google-Smtp-Source: APXvYqyzqtJggC0eYGAQOzhFqglrQFhgQ2KcQ86u1phVkQdU/1Jr0vUoIlvGvLo9zdGPriSGPnnzEsKt1C1M7vc69Uo=
X-Received: by 2002:aca:ddc2:: with SMTP id u185mr11409197oig.174.1574410756493;  Fri, 22 Nov 2019 00:19:16 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>
In-Reply-To: <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>
From: Filip Skokan <panva.ip@gmail.com>
Date: Fri, 22 Nov 2019 09:19:05 +0100
Message-ID: <CALAqi_8j-7n_vJzRGh1DhrnvnDpNAqf_35t++GoUbSCc0DE9KQ@mail.gmail.com>
To: Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000df17b60597eb115c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1FPe8-xRfcUXZNKz3mIwx3gD2Bk>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:19:20 -0000

--000000000000df17b60597eb115c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Rob, I agree that managing roots of trust, validating/OCSP etc is not
"easy" per se, but the MTLS setup gets really simple with the Self-Signed
Certificate Mutual-TLS Method
<https://tools.ietf.org/html/draft-ietf-oauth-mtls-17#section-2.2> and we
made sure combined traffic is simple to signal by the AS and simple to
detect and use by clients using the mtls_endpoint_aliases discovery
metadata.

S pozdravem,
*Filip Skokan*


On Fri, 22 Nov 2019 at 09:10, Rob Otto <robotto=3D
40pingidentity.com@dmarc.ietf.org> wrote:

> Hi Torsten - thanks for the reply..
>
> Responses in line.
>
> Gr=C3=BCsse
> Rob
>
> On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt <torsten=3D
> 40lodderstedt.net@dmarc.ietf.org> wrote:
>
>> Hi Rob,
>>
>> > On 22. Nov 2019, at 15:52, Rob Otto <robotto=3D
>> 40pingidentity.com@dmarc..ietf.org <40pingidentity.com@dmarc.ietf.org>>
>> wrote:
>> >
>> > Hi everyone
>> >
>> > I'd agree with this. I'm looking at DPOP as an alternative and
>> ultimately simpler way to accomplish what we can already do with MTLS-bo=
und
>> Access Tokens, for use cases such as the ones we address in Open Banking=
;
>> these are API transactions that demand a high level of assurance and as
>> such we absolutely must have a mechanism to constrain those tokens to th=
e
>> intended bearer. Requiring MTLS across the ecosystem, however, adds
>> significant overhead in terms of infrastructural complexity and is alway=
s
>> going to limit the extent to which such a model can scale.
>>
>> I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead i=
n terms
>> of infrastructural complexity=E2=80=9D. Can you please dig into details?
>>
>
> I guess it's mostly that every RS-endpoint (or what sits in front of it)
> has to have a mechanism for accepting/terminating mTLS, managing roots of
> trust, validating/OCSP, etc and then passing the certificates downstream =
as
> headers. None of it is necessarily difficult or impossible to do in
> isolation, but I meet many many people every week who simply don't know h=
ow
> to do any of this stuff. And these are typically "network people", for wa=
nt
> of a better word. There are quite a few SaaS API management and edge
> solutions out there that don't even support mTLS at all. You also have th=
e
> difficulty in handling a combination of MTLS and non-MTLS traffic to the
> same endpoints. Again, it's possible to do, but far from straightforward.
>
>
>
>>
>> Our experience so far: It can be a headache to set up in a microservice
>> architecture with TLS terminating proxies but once it runs it=E2=80=99s =
ok. On the
>> other side, it=E2=80=99s easy to use for client developers and it combin=
es client
>> authentication and sender constraining nicely.
>>
>
> I do think its an elegant solution, don't get me wrong. It's just that
> there are plenty of moving parts that you need to get right and that can =
be
> a challenge, particularly in large, complex environments.
>
>
>
>>
>> >
>> > DPOP, to me, appears to be a rather more elegant way of solving the
>> same problem, with the benefit of significantly reducing the complexity =
of
>> (and dependency on) the transport layer. I would not argue, however, tha=
t
>> it is meant to be a solution intended for ubiquitous adoption across all
>> OAuth-protected API traffic. Clients still need to manage private keys
>> under this model and my experience is that there is typically a steep
>> learning curve for developers to negotiate any time you introduce a
>> requirement to hold and use keys within  an application.
>>
>> My experience is most developer don=E2=80=99t even get the URL right (in=
 the
>> signature and the value used on the receiving end). So the total cost of
>> ownership is increased by numerous support inquiries.
>>
> I'll not comment, at the risk of offending developers :)
>
>>
>> best regards,
>> Torsten.
>>
>> >
>> > I guess I'm with Justin - let's look at DPOP as an alternative to
>> MTLS-bound tokens for high-assurance use cases, at least initially, with=
out
>> trying to make it solve every problem.
>> >
>> > Best regards
>> > Rob
>> >
>> >
>> > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
>> > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about th=
e scope here.
>> That was the one major thing that struck me during the DPoP discussions =
in
>> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for.=
 Some
>> (including the authors, it seems) see it as a quick point-solution to a
>> specific use case. Others see it as a general PoP mechanism.
>> >
>> > If it=E2=80=99s the former, then it should be explicitly tied to one s=
pecific
>> set of things. If it=E2=80=99s the latter, then it needs to be expanded.
>> >
>> > I=E2=80=99ll repeat what I said at the mic line: My take is that we sh=
ould
>> explicitly narrow down DPoP so that it does exactly one thing and solves
>> one narrow use case. And for a general solution? Let=E2=80=99s move that=
 discussion
>> into the next major revision of the protocol where we=E2=80=99ll have a =
bit more
>> running room to figure things out..
>> >
>> >  =E2=80=94 Justin
>> >
>> >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com
>> <dick..hardt@gmail.com>> wrote:
>> >>
>> >>
>> >>
>> >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.co=
m>
>> wrote:
>> >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <
>> richanna@amazon.com> wrote:
>> >>> There are key distribution challenges with that if you are doing
>> validation at the RS, but validation at the RS using either approach mea=
ns
>> you=E2=80=99ve lost protection against replay by the RS. This brings us =
back to a
>> core question: what threats are in scope for DPoP, and in what contexts?
>> >>
>> >> Agreed, but validation at the RS is premature optimisation in many
>> cases. And if you do need protection against that the client can even
>> append a confirmation key as a caveat and retrospectively upgrade a bear=
er
>> token to a pop token. They can even do transfer of ownership by creating
>> copies of the original token bound to other certificates/public keys.
>> >>
>> >> While validation at the RS may be an optimization in many cases, it i=
s
>> still a requirement for deployments.
>> >>
>> >> I echo Annabelle's last question: what threats are in scope (and out
>> of scope) for DPoP?
>> >>
>> >>
>> >> _______________________________________________
>> >> OAuth mailing list
>> >> OAuth@ietf.org
>> >> https://www.ietf.org/mailman/listinfo/oauth
>> >
>> > _______________________________________________
>> > OAuth mailing list
>> > OAuth@ietf.org
>> > https://www.ietf.org/mailman/listinfo/oauth
>> >
>> >
>> > --
>> >
>> > Rob Otto
>> > EMEA Field CTO/Solutions Architect
>> > robertotto@pingidentity.com
>> >
>> > c: +44 (0) 777 135 6092
>> > Connect with us:
>>
>>
>> >
>> >
>> > CONFIDENTIALITY NOTICE: This email may contain confidential and
>> privileged material for the sole use of the intended recipient(s). Any
>> review, use, distribution or disclosure by others is strictly prohibited=
..
>> If you have received this communication in error, please notify the send=
er
>> immediately by e-mail and delete the message and any file attachments fr=
om
>> your computer. Thank you._______________________________________________
>> > OAuth mailing list
>> > OAuth@ietf.org
>> > https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>
> --
> <https://www.pingidentity.com>[image: Ping Identity]
> <https://www.pingidentity.com>
> Rob Otto
> EMEA Field CTO/Solutions Architect
> robertotto@pingidentity.com
>
> c: +44 (0) 777 135 6092
> Connect with us: [image: Glassdoor logo]
> <https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.=
11,24.htm> [image:
> LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
> logo] <https://twitter.com/pingidentity> [image: facebook logo]
> <https://www.facebook.com/pingidentitypage> [image: youtube logo]
> <https://www.youtube.com/user/PingIdentityTV> [image: Google+ logo]
> <https://plus.google.com/u/0/114266977739397708540> [image: Blog logo]
> <https://www.pingidentity.com/en/blog.html>
> <https://www.google.com/url?q=3Dhttps://www.pingidentity.com/content/dam/=
ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?=
id%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=3Dgmail&ust=3D154169360852=
6000&usg=3DAFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ>
> <https://www.pingidentity.com/en/events/d/identify-2019.html>
>
> *CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.*_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000df17b60597eb115c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Rob, I agree that managing roots of trust, validating=
/OCSP etc is not &quot;easy&quot; per se, but the MTLS setup gets really si=
mple with the=C2=A0<span style=3D"color:rgb(0,0,0);font-size:13.3333px"><a =
href=3D"https://tools.ietf.org/html/draft-ietf-oauth-mtls-17#section-2.2">S=
elf-Signed Certificate Mutual-TLS Method</a>=C2=A0and we made sure combined=
 traffic is simple to signal by the AS and simple to detect and use by clie=
nts using the=C2=A0</span>mtls_endpoint_aliases discovery metadata.</div><b=
r clear=3D"all"><div><div dir=3D"ltr" class=3D"gmail_signature" data-smartm=
ail=3D"gmail_signature">S pozdravem,<br><b>Filip Skokan</b></div></div><br>=
</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">=
On Fri, 22 Nov 2019 at 09:10, Rob Otto &lt;robotto=3D<a href=3D"mailto:40pi=
ngidentity.com@dmarc.ietf.org">40pingidentity.com@dmarc.ietf.org</a>&gt; wr=
ote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px=
 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D=
"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:ta=
homa,sans-serif;color:rgb(11,83,148)">Hi Torsten - thanks for the reply..</=
div><div class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;col=
or:rgb(11,83,148)"><br></div><div class=3D"gmail_default" style=3D"font-fam=
ily:tahoma,sans-serif;color:rgb(11,83,148)">Responses in line.</div><div cl=
ass=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:rgb(11,8=
3,148)"><br></div><div class=3D"gmail_default" style=3D"font-family:tahoma,=
sans-serif;color:rgb(11,83,148)">Gr=C3=BCsse</div><div class=3D"gmail_defau=
lt" style=3D"font-family:tahoma,sans-serif;color:rgb(11,83,148)">Rob</div><=
/div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">O=
n Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt &lt;torsten=3D<a href=3D"m=
ailto:40lodderstedt.net@dmarc.ietf.org" target=3D"_blank">40lodderstedt.net=
@dmarc.ietf.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pad=
ding-left:1ex">Hi Rob, <br>
<br>
&gt; On 22. Nov 2019, at 15:52, Rob Otto &lt;robotto=3D<a href=3D"mailto:40=
pingidentity.com@dmarc.ietf.org" target=3D"_blank">40pingidentity.com@dmarc=
..ietf.org</a>&gt; wrote:<br>
&gt; <br>
&gt; Hi everyone<br>
&gt; <br>
&gt; I&#39;d agree with this. I&#39;m looking at DPOP as an alternative and=
 ultimately simpler way to accomplish what we can already do with MTLS-boun=
d Access Tokens, for use cases such as the ones we address in Open Banking;=
 these are API transactions that demand a high level of assurance and as su=
ch we absolutely must have a mechanism to constrain those tokens to the int=
ended bearer. Requiring MTLS across the ecosystem, however, adds significan=
t overhead in terms of infrastructural complexity and is always going to li=
mit the extent to which such a model can scale.<br>
<br>
I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead in t=
erms of infrastructural complexity=E2=80=9D. Can you please dig into detail=
s?<br></blockquote><div><br></div><div><div class=3D"gmail_default" style=
=3D"font-family:tahoma,sans-serif;color:rgb(11,83,148)">I guess it&#39;s mo=
stly that every RS-endpoint (or what sits in front of it) has to have a mec=
hanism for accepting/terminating mTLS, managing roots of trust, validating/=
OCSP, etc and then passing the certificates downstream as headers. None of =
it is necessarily=C2=A0difficult or impossible to do in isolation, but I me=
et many many people every week who simply don&#39;t know how to do any of t=
his stuff. And these are typically &quot;network people&quot;, for want of =
a better word. There are quite a few SaaS API management and edge solutions=
 out there that don&#39;t even support mTLS at all. You also have the diffi=
culty in handling a combination of MTLS and non-MTLS=C2=A0traffic to the sa=
me endpoints. Again, it&#39;s possible to do, but far from straightforward.=
=C2=A0</div><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex">
<br>
Our experience so far: It can be a headache to set up in a microservice arc=
hitecture with TLS terminating proxies but once it runs it=E2=80=99s ok. On=
 the other side, it=E2=80=99s easy to use for client developers and it comb=
ines client authentication and sender constraining nicely.=C2=A0 <br></bloc=
kquote><div><br></div><div><div class=3D"gmail_default" style=3D"font-famil=
y:tahoma,sans-serif;color:rgb(11,83,148)">I do think its an elegant solutio=
n, don&#39;t get me wrong. It&#39;s just that there are plenty of moving pa=
rts that you need to get right and that can be a challenge, particularly in=
 large, complex environments.=C2=A0</div><br></div><div>=C2=A0</div><blockq=
uote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1p=
x solid rgb(204,204,204);padding-left:1ex">
<br>
&gt; <br>
&gt; DPOP, to me, appears to be a rather more elegant way of solving the sa=
me problem, with the benefit of significantly reducing the complexity of (a=
nd dependency on) the transport layer. I would not argue, however, that it =
is meant to be a solution intended for ubiquitous adoption across all OAuth=
-protected API traffic. Clients still need to manage private keys under thi=
s model and my experience is that there is typically a steep learning curve=
 for developers to negotiate any time you introduce a requirement to hold a=
nd use keys within=C2=A0 an application. <br>
<br>
My experience is most developer don=E2=80=99t even get the URL right (in th=
e signature and the value used on the receiving end). So the total cost of =
ownership is increased by numerous support inquiries.<br></blockquote><div>=
<span class=3D"gmail_default" style=3D"font-family:tahoma,sans-serif;color:=
rgb(11,83,148)"></span></div><div><span class=3D"gmail_default" style=3D"fo=
nt-family:tahoma,sans-serif;color:rgb(11,83,148)">I&#39;ll not comment, at =
the risk of offending developers :) </span>=C2=A0</div><blockquote class=3D=
"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(2=
04,204,204);padding-left:1ex">
<br>
best regards,<br>
Torsten. <br>
<br>
&gt; <br>
&gt; I guess I&#39;m with Justin - let&#39;s look at DPOP as an alternative=
 to MTLS-bound tokens for high-assurance use cases, at least initially, wit=
hout trying to make it solve every problem. <br>
&gt; <br>
&gt; Best regards<br>
&gt; Rob<br>
&gt; <br>
&gt; <br>
&gt; On Fri, 22 Nov 2019 at 07:24, Justin Richer &lt;<a href=3D"mailto:jric=
her@mit.edu" target=3D"_blank">jricher@mit.edu</a>&gt; wrote:<br>
&gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about th=
e scope here. That was the one major thing that struck me during the DPoP d=
iscussions in Singapore yesterday: we don=E2=80=99t seem to agree on what D=
PoP is for. Some (including the authors, it seems) see it as a quick point-=
solution to a specific use case. Others see it as a general PoP mechanism. =
<br>
&gt; <br>
&gt; If it=E2=80=99s the former, then it should be explicitly tied to one s=
pecific set of things. If it=E2=80=99s the latter, then it needs to be expa=
nded. <br>
&gt; <br>
&gt; I=E2=80=99ll repeat what I said at the mic line: My take is that we sh=
ould explicitly narrow down DPoP so that it does exactly one thing and solv=
es one narrow use case. And for a general solution? Let=E2=80=99s move that=
 discussion into the next major revision of the protocol where we=E2=80=99l=
l have a bit more running room to figure things out..<br>
&gt; <br>
&gt;=C2=A0 =E2=80=94 Justin<br>
&gt; <br>
&gt;&gt; On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;<a href=3D"mailto:dick=
..hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote:<br=
>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;<a href=3D"mailto:=
neil.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&=
gt; wrote:<br>
&gt;&gt; On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;<a href=
=3D"mailto:richanna@amazon.com" target=3D"_blank">richanna@amazon.com</a>&g=
t; wrote:<br>
&gt;&gt;&gt; There are key distribution challenges with that if you are doi=
ng validation at the RS, but validation at the RS using either approach mea=
ns you=E2=80=99ve lost protection against replay by the RS. This brings us =
back to a core question: what threats are in scope for DPoP, and in what co=
ntexts?<br>
&gt;&gt; <br>
&gt;&gt; Agreed, but validation at the RS is premature optimisation in many=
 cases. And if you do need protection against that the client can even appe=
nd a confirmation key as a caveat and retrospectively upgrade a bearer toke=
n to a pop token. They can even do transfer of ownership by creating copies=
 of the original token bound to other certificates/public keys. <br>
&gt;&gt; <br>
&gt;&gt; While validation at the RS may be an optimization in many cases, i=
t is still a requirement for deployments.<br>
&gt;&gt; <br>
&gt;&gt; I echo Annabelle&#39;s last question: what threats are in scope (a=
nd out of scope) for DPoP?<br>
&gt;&gt; <br>
&gt;&gt; <br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; OAuth mailing list<br>
&gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org=
</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"nor=
eferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><=
br>
&gt; <br>
&gt; _______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0<br>
&gt; Rob Otto=C2=A0 =C2=A0 =C2=A0 <br>
&gt; EMEA Field CTO/Solutions Architect=C2=A0 =C2=A0 <br>
&gt; <a href=3D"mailto:robertotto@pingidentity.com" target=3D"_blank">rober=
totto@pingidentity.com</a>=C2=A0 =C2=A0<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0<br>
&gt; c: +44 (0) 777 135 6092<br>
&gt; Connect with us:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <br>
&gt; <br>
&gt; <br>
&gt; CONFIDENTIALITY NOTICE: This email may contain confidential and privil=
eged material for the sole use of the intended recipient(s). Any review, us=
e, distribution or disclosure by others is strictly prohibited..=C2=A0 If y=
ou have received this communication in error, please notify the sender imme=
diately by e-mail and delete the message and any file attachments from your=
 computer. Thank you._______________________________________________<br>
&gt; OAuth mailing list<br>
&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>=
<br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"norefer=
rer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
><div style=3D"padding:0px;margin:0px">    <table style=3D"border-collapse:=
collapse;padding:0px;margin:0px">			<tbody><tr>				<td style=3D"width:113px=
">					<a href=3D"https://www.pingidentity.com" target=3D"_blank"></a><a hr=
ef=3D"https://www.pingidentity.com" target=3D"_blank"><img alt=3D"Ping Iden=
tity" src=3D"https://www.pingidentity.com/content/dam/pic/images/misc/signa=
ture/ping-logo.png"></a>				</td>				<td>					<table>												<tbody><tr=
>			        <td style=3D"vertical-align:top">				        <span style=3D"col=
or:rgb(230,29,60);display:inline-block;margin-bottom:3px;font-family:arial,=
helvetica,sans-serif;font-weight:bold;font-size:14px">Rob Otto</span>						=
		<br>								<span style=3D"color:rgb(0,0,0);display:inline-block;margin-b=
ottom:2px;font-family:arial,helvetica,sans-serif;font-weight:normal;font-si=
ze:14px">EMEA Field CTO/Solutions Architect</span>								<br>								<span=
 style=3D"font-family:arial,helvetica,sans-serif;font-size:14px;display:inl=
ine-block;margin-bottom:3px"><a href=3D"mailto:robertotto@pingidentity.com"=
 target=3D"_blank">robertotto@pingidentity.com</a></span>								<br>						=
		<span style=3D"color:rgb(0,0,0);display:inline-block;margin-bottom:2px;fo=
nt-family:arial,helvetica,sans-serif;font-weight:normal;font-size:14px">			=
					</span>								<br>								<span style=3D"color:rgb(0,0,0);display:inl=
ine-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-wei=
ght:normal;font-size:14px">								c: +44 (0) 777 135 6092</span>							</t=
d>			      </tr>					</tbody></table>				</td>			</tr>			<tr>				        <t=
d colspan=3D"2">          <table style=3D"border-collapse:collapse;border:n=
one;margin:8px 0px 0px;width:100%">          	<tbody><tr style=3D"height:40=
px;border-top:1px solid rgb(211,211,211);border-bottom:1px solid rgb(211,21=
1,211)">              <td style=3D"font-family:arial,helvetica,sans-serif;f=
ont-size:14px;font-weight:bold;color:rgb(64,71,75)">Connect with us: </td> =
             <td style=3D"padding:4px 0px 0px 20px">                <a href=
=3D"https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907=
.11,24.htm" style=3D"text-decoration:none;margin-right:16px" title=3D"Ping =
on Glassdoor" target=3D"_blank"><img src=3D"https://www.pingidentity.com/co=
ntent/dam/pic/images/misc/signature/social-glassdoor.png" style=3D"border: =
none; margin: 0px;" alt=3D"Glassdoor logo"></a>										<a href=3D"https:/=
/www.linkedin.com/company/21870" style=3D"text-decoration:none;margin-right=
:16px" title=3D"Ping on LinkedIn" target=3D"_blank"><img src=3D"https://www=
.pingidentity.com/content/dam/pic/images/misc/signature/social-linkedin.png=
" style=3D"border: none; margin: 0px;" alt=3D"LinkedIn logo"></a>          =
                              <a href=3D"https://twitter.com/pingidentity" =
style=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Twitter" =
target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/=
images/misc/signature/social-twitter.png" style=3D"border: none; margin: 0p=
x;" alt=3D"twitter logo"></a>										<a href=3D"https://www.facebook.com/=
pingidentitypage" style=3D"text-decoration:none;margin-right:16px" title=3D=
"Ping on Facebook" target=3D"_blank"><img src=3D"https://www.pingidentity.c=
om/content/dam/pic/images/misc/signature/social-facebook.png" style=3D"bord=
er: none; margin: 0px;" alt=3D"facebook logo"></a>								<a href=3D"https:=
//www.youtube.com/user/PingIdentityTV" style=3D"text-decoration:none;margin=
-right:16px" title=3D"Ping on Youtube" target=3D"_blank"><img src=3D"https:=
//www.pingidentity.com/content/dam/pic/images/misc/signature/social-youtube=
.png" style=3D"border: none; margin: 0px 0px 3px;" alt=3D"youtube logo"></a=
>														<a href=3D"https://plus.google.com/u/0/114266977739397708540=
" style=3D"text-decoration:none;margin-right:16px" title=3D"Ping on Google+=
" target=3D"_blank"><img src=3D"https://www.pingidentity.com/content/dam/pi=
c/images/misc/signature/social-googleplus.png" style=3D"border: none; margi=
n: 0px;" alt=3D"Google+ logo"></a>                                         =
               <a href=3D"https://www.pingidentity.com/en/blog.html" style=
=3D"text-decoration:none;margin-right:16px" title=3D"Ping Blog" target=3D"_=
blank"><img src=3D"https://www.pingidentity.com/content/dam/pic/images/misc=
/signature/social-blog.png" style=3D"border: none; margin: 0px;" alt=3D"Blo=
g logo"></a>															</td>            </tr>          </tbody></table>=
				</td>      </tr>    </tbody></table><a href=3D"https://www.google.com/u=
rl?q=3Dhttps://www.pingidentity.com/content/dam/ping-6-2-assets/Assets/faqs=
/en/consumer-attitudes-post-breach-era-3375.pdf?id%3Db6322a80-f285-11e3-ac1=
0-0800200c9a66&amp;source=3Dgmail&amp;ust=3D1541693608526000&amp;usg=3DAFQj=
CNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target=3D"_blank"></a><a href=3D"https://ww=
w.pingidentity.com/en/events/d/identify-2019.html" target=3D"_blank"><img s=
rc=3D"https://www.pingidentity.com/content/dam/ping-6-2-assets/images/misc/=
emailSignature/identify-email-image.png"></a>  </div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
..=C2=A0 If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachme=
nts from your computer. Thank you.</font></span></i>_______________________=
________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--000000000000df17b60597eb115c--


From nobody Fri Nov 22 00:21:16 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8766120143 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:21:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 60fQpg6YxRAQ for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:21:07 -0800 (PST)
Received: from mail-pg1-x530.google.com (mail-pg1-x530.google.com [IPv6:2607:f8b0:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2871D120967 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:21:06 -0800 (PST)
Received: by mail-pg1-x530.google.com with SMTP id k13so3020891pgh.3 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:21:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=HKiY2JdnRPDKPzD2Kz/QiQN0WCW0Sh+chfT/lACzF2Y=; b=J+N0mI/E59ajCjcWXLO+no4T+AopbnBEDUBlHV+dSfRwEPIVICQ8sqI8666e9++py9 yuSuWMgM1gJ69DAVA5FEAiOjGTE2Yc28U4P6g6HhAgI7nHZgRy1/CldAk8+qNyJeYRT9 zCqQYgvv2qyHL4FSvWTtdOq3sj7YTMoZxhAPivdnpX1VYh+lMIMQ70sdGZU/TGasI8E2 3IAUZXwiEGqOStyJJcAlF3vUvZbDE7joEdHvJxJkewTXY+oNd8xWMm9+o7NZkQ8uP89X KaVSCxZGCoYsu46Mo3JrZNXQJh17KZjhH+ZlNX8cNiAAucu9dK0PrQV7DJ8VxVfVAXX2 fP+g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=HKiY2JdnRPDKPzD2Kz/QiQN0WCW0Sh+chfT/lACzF2Y=; b=eKvKqZhmsQdX4QC2n0ZiGIbZQPjogH+8toAvtqiLAhLSt9GPjdpdBxpdIi0rrZe5Y3 FwUaKsLO3FCTfm8kLQZH71QwbzQG5cQ8rxcLDCeUJJR/kAGXbhzb46hEK/ZbWhy64H+v Kz8n18pr4oFCcpnjCY7jrAVSIyIuMt/Cyohegt5chTzasaXzF9+rj4r3WHLjUQsM6nOp SOz1vROVCA/MQ/7qIxjFbPEgbDDPePuuvFfIsGPiI0YpJEfnIWQqtJVH6i8L1NfHsibd gNesP/LGIV3ksEm7zFQk3HIGnOTAWPawdA9BgXfgxwmi6pASDKoqFrl15I1YKREnmHC2 Il0Q==
X-Gm-Message-State: APjAAAV/b3nnSn/Fr6ZGasNTDdFnC8rVVoRnuQYVqVXNPyeJ33v6aAQR su+WDozp9OBiqcZlsjr3j24MXgjkg3YAUKPp
X-Google-Smtp-Source: APXvYqzpYANXgbgy1COZQDSLpFAUNL3JHWHo4OEyFi4DMaYY4vG9sEnKW8upkBplxpYG2r7YN8Xm8Q==
X-Received: by 2002:a62:ac06:: with SMTP id v6mr15871980pfe.210.1574410865425;  Fri, 22 Nov 2019 00:21:05 -0800 (PST)
Received: from [10.80.110.155] ([103.137.210.130]) by smtp.gmail.com with ESMTPSA id w6sm5491439pge.92.2019.11.22.00.21.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 00:21:04 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_677579D4-A21E-471B-9A87-A8333BF4C16E"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 16:20:58 +0800
In-Reply-To: <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/heXLPrk0RA2o3EPa30O-8SKxNfE>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:21:11 -0000

--Apple-Mail=_677579D4-A21E-471B-9A87-A8333BF4C16E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Rob,

> On 22. Nov 2019, at 16:10, Rob Otto =
<robotto=3D40pingidentity.com@dmarc.ietf.org> wrote:
>=20
> Hi Torsten - thanks for the reply..
>=20
> Responses in line.
>=20
> Gr=C3=BCsse
> Rob
>=20
> On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
> Hi Rob,=20
>=20
> > On 22. Nov 2019, at 15:52, Rob Otto =
<robotto=3D40pingidentity.com@dmarc..ietf.org> wrote:
> >=20
> > Hi everyone
> >=20
> > I'd agree with this. I'm looking at DPOP as an alternative and =
ultimately simpler way to accomplish what we can already do with =
MTLS-bound Access Tokens, for use cases such as the ones we address in =
Open Banking; these are API transactions that demand a high level of =
assurance and as such we absolutely must have a mechanism to constrain =
those tokens to the intended bearer. Requiring MTLS across the =
ecosystem, however, adds significant overhead in terms of =
infrastructural complexity and is always going to limit the extent to =
which such a model can scale.
>=20
> I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead =
in terms of infrastructural complexity=E2=80=9D. Can you please dig into =
details?
>=20
> I guess it's mostly that every RS-endpoint (or what sits in front of =
it) has to have a mechanism for accepting/terminating mTLS, managing =
roots of trust, validating/OCSP, etc

You use a PKI then. We use mTLS with self-signed certs. That requires =
the RS to not check the X.509 trust chain, which requires a special =
setting (optionalNoCA).=20

> and then passing the certificates downstream as headers. None of it is =
necessarily difficult or impossible to do in isolation, but I meet many =
many people every week who simply don't know how to do any of this =
stuff. And these are typically "network people", for want of a better =
word. There are quite a few SaaS API management and edge solutions out =
there that don't even support mTLS at all. You also have the difficulty =
in handling a combination of MTLS and non-MTLS traffic to the same =
endpoints.

yep. You better split them, especially if that=E2=80=99s a user facing =
endpoint.

> Again, it's possible to do, but far from straightforward.=20
>=20
> =20
>=20
> Our experience so far: It can be a headache to set up in a =
microservice architecture with TLS terminating proxies but once it runs =
it=E2=80=99s ok. On the other side, it=E2=80=99s easy to use for client =
developers and it combines client authentication and sender constraining =
nicely. =20
>=20
> I do think its an elegant solution, don't get me wrong. It's just that =
there are plenty of moving parts that you need to get right and that can =
be a challenge, particularly in large, complex environments.=20

I agree. I also tend there is a tendency to think Client TLS =
authentication is bad. I understand that from historical and recent =
experience with PKI.=20

But anybody considering to use a application level signing solution =
based on _raw_ public keys should directly move towards self-signed =
certificates. That brings you all the benefits of TLS without the (PKI) =
headache.=20

>=20
> =20
>=20
> >=20
> > DPOP, to me, appears to be a rather more elegant way of solving the =
same problem, with the benefit of significantly reducing the complexity =
of (and dependency on) the transport layer. I would not argue, however, =
that it is meant to be a solution intended for ubiquitous adoption =
across all OAuth-protected API traffic. Clients still need to manage =
private keys under this model and my experience is that there is =
typically a steep learning curve for developers to negotiate any time =
you introduce a requirement to hold and use keys within  an application.=20=

>=20
> My experience is most developer don=E2=80=99t even get the URL right =
(in the signature and the value used on the receiving end). So the total =
cost of ownership is increased by numerous support inquiries.
> I'll not comment, at the risk of offending developers :) =20

Alright. Ultimately, I just want to get in touch with those who respond =
:-)

best regards,
Torsten.=20

>=20
> best regards,
> Torsten.=20
>=20
> >=20
> > I guess I'm with Justin - let's look at DPOP as an alternative to =
MTLS-bound tokens for high-assurance use cases, at least initially, =
without trying to make it solve every problem.=20
> >=20
> > Best regards
> > Rob
> >=20
> >=20
> > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
> > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
> >=20
> > If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20
> >=20
> > I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out..
> >=20
> >  =E2=80=94 Justin
> >=20
> >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> =
wrote:
> >>=20
> >>=20
> >>=20
> >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
> >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
> >>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
> >>=20
> >> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
> >>=20
> >> While validation at the RS may be an optimization in many cases, it =
is still a requirement for deployments.
> >>=20
> >> I echo Annabelle's last question: what threats are in scope (and =
out of scope) for DPoP?
> >>=20
> >>=20
> >> _______________________________________________
> >> OAuth mailing list
> >> OAuth@ietf.org
> >> https://www.ietf.org/mailman/listinfo/oauth
> >=20
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
> >=20
> >=20
> > --=20
> >      =20
> > Rob Otto     =20
> > EMEA Field CTO/Solutions Architect   =20
> > robertotto@pingidentity.com  =20
> >      =20
> > c: +44 (0) 777 135 6092
> > Connect with us:                                                     =
                                                                         =
                               =20
> >=20
> >=20
> > CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
>=20
> --=20
> =09
> Rob Otto=09
> EMEA Field CTO/Solutions Architect=09
> robertotto@pingidentity.com=09
> =09
> c: +44 (0) 777 135 6092
> Connect with us: 		   	 	 	   			=
										=
	=09
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.


--Apple-Mail=_677579D4-A21E-471B-9A87-A8333BF4C16E
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_677579D4-A21E-471B-9A87-A8333BF4C16E--


From nobody Fri Nov 22 00:50:20 2019
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 995C6120804 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:50:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGLnUAJxzLDL for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:50:14 -0800 (PST)
Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640132.outbound.protection.outlook.com [40.107.64.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 989A712018B for <oauth@ietf.org>; Fri, 22 Nov 2019 00:50:14 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UJzB6aBJwZA9VFecn8hizybRV1cdaLjtvrWW4WazVGI3Kz0s3OxhNxxOmXDgZDfPLdrTrQ0S/ohR268QRpMx2RSsnpZ/N4DHRFxZ3fbcv6B0bAAWFSmcd+t0wIagCy1vIJzQi6VnyRB7dnOJMK2AfjQD6k565/ND5OQ5nBeAze061HLZGuJN/GON2dNaGKjypNetMgwCmVHvLA7pRZ7FpESJDj7psOa3LXp3vrBJkHL1nxlaxgVA6lMgDI90kQYLRnQBfsF5wHxbZt+v2Cn5luV9hJMPFcAP+eWv4mdsj/mkeDcMXmyfNwPcc2p2xiRFd2O/sSypN3WAda82q4gbMA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ajJc5fggUDT2OVisHfs5ukjugEK6vO/KjXhHj/u6ZgQ=; b=DelQ3ilFSshcgCnuASPB1l5CfprZIRVKeiANgS9y4f2nmNpSM3H8eXSffn1yUHCln+5M8ZKPTK2XNLK9qHS/vpnBP7dwsa0d0vFpixWcZBNKu5F4x59gDWvZINuC4fF9wFFDWHvF6/xup6pUm0hUie2bJA7D9TzVXgOOb9ED3YCvwhkbVD9waD+/Y4x0QvvkYMzBh1OAXYvm41qMDDrE5fSyNjDzPC4FjjvdPZUugzjLqOs4E0KS+1a/rVdihsZXwD/OHZgD0kmguZNFIX2PwuquggfJccs4UWRIXRa+IeJVnG4G7ZY91KL8Ei9MthuOs24PIiU75TyYhD3GqEBzXQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ajJc5fggUDT2OVisHfs5ukjugEK6vO/KjXhHj/u6ZgQ=; b=dFHW0ZclfwKCMGvIt+gH/HfS4taQvoPQStD68DLTUBzYQghHPVkQepqnEuKECRgPBMQGrZRMqsRjLdCghcCbQ9ITlklJGJioo5Xz8bmcW1/mmAIk1zs7no6FGgyO2mXoYLbS92MlGLP4cW+XbI76ySf4cV0wClkRA9cd8mpuDB4=
Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0455.namprd00.prod.outlook.com (20.178.52.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2511.0; Fri, 22 Nov 2019 08:50:11 +0000
Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::501c:9720:3c93:15f2]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::501c:9720:3c93:15f2%3]) with mapi id 15.20.2511.000; Fri, 22 Nov 2019 08:50:11 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVoRHZZf3Z3AdmhU60T9ezfwot0Q==
Date: Fri, 22 Nov 2019 08:50:11 +0000
Message-ID: <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com>, <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net>
In-Reply-To: <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-22T08:47:14.8769331Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Privileged
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; 
x-originating-ip: [166.216.158.173]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 19b2555c-2d76-43fb-45a7-08d76f28fc4f
x-ms-traffictypediagnostic: BYAPR00MB0455:
x-microsoft-antispam-prvs: <BYAPR00MB04559220D5E9FD74FE14A3D7F5490@BYAPR00MB0455.namprd00.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:3173;
x-forefront-prvs: 02296943FF
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39860400002)(396003)(136003)(366004)(376002)(53754006)(199004)(189003)(51914003)(71200400001)(478600001)(71190400001)(8990500004)(64756008)(66556008)(66446008)(66946007)(76116006)(966005)(81156014)(81166006)(86362001)(8936002)(14454004)(110136005)(99286004)(6246003)(236005)(9686003)(316002)(66476007)(22452003)(4326008)(5660300002)(2906002)(446003)(54896002)(6306002)(6116002)(6436002)(76176011)(7696005)(52536014)(55016002)(102836004)(10090500001)(15650500001)(53546011)(6506007)(14444005)(256004)(5024004)(7736002)(10290500003)(74316002)(66574012)(8676002)(66066001)(606006)(26005)(229853002)(186003)(25786009)(33656002)(11346002)(3846002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0455; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: /0GhRcWYNIhU0J/gl7wz3q8Vmsl9GQjWdejz4xc+I0uZ7sRaqDkfY2UHcuUj3KddXteGPuSvguE8uLIGPm4xjTxdoDNrYtQaitQkxonk8v00Eb+Ji1FYTLoGEhMZXlWke7LNEqSNDfH79wSahpJJeogqrxickpo4GCsUyY0q+BAm2ZBQggKuRnMipKN+fl4/0IfcL6IYtxy+YstZ7Zc5zzAUvgzsT545lgBoAatm71gQhLhZ1MAJNbZGBt/uA0lDkTAjrmRmDNiCPaHQstQDBYnbYnhggZEcq4coeMtV5OD93S0avubTM+23xHaiKNyAzBAaCYBiaxRJDBrwqhYIa89M1lRXyzeJwc9AXFu1IFN1n/THTzsfETxwTQccPzQmTfYJhzVxBcP/BxYJ0gDIs2PCSlLat9SBQGudPtWawn67QHlwnkRH5VgJBkjExJEJC6lKqBqQTKBJIFr4+SPq5vnHRwLHipgi6z8QdfWklU8=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BYAPR00MB05674C455BCBA825BA6C906DF5490BYAPR00MB0567namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 19b2555c-2d76-43fb-45a7-08d76f28fc4f
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2019 08:50:11.7613 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pMqWfDwGfmiIwNEgnArUXp7dJWfTpu6SgN1g42bfMFXlOkxmFD4eGNJAlCp5+g35ni2eC2emJ5bpAJjWclYP0g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0455
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/wqxU6mKfQFM_CWFxX_bNb4SU4EE>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:50:19 -0000

--_000_BYAPR00MB05674C455BCBA825BA6C906DF5490BYAPR00MB0567namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

I hear you about the difference between Web apps and native apps, Torsten. =
 But using different mechanisms for different application types is a cost i=
n and of itself.

It's good to understand the tradeoffs.

-- Mike


________________________________
From: OAuth <oauth-bounces@ietf.org> on behalf of Torsten Lodderstedt <tors=
ten=3D40lodderstedt.net@dmarc.ietf.org>
Sent: Friday, November 22, 2019 4:20:58 PM
To: Rob Otto <robotto=3D40pingidentity.com@dmarc.ietf.org>
Cc: oauth <oauth@ietf.org>
Subject: [EXTERNAL] Re: [OAUTH-WG] New Version Notification for draft-fett-=
oauth-dpop-03.txt

Hi Rob,

> On 22. Nov 2019, at 16:10, Rob Otto <robotto=3D40pingidentity.com@dmarc.i=
etf.org> wrote:
>
> Hi Torsten - thanks for the reply..
>
> Responses in line.
>
> Gr=FCsse
> Rob
>
> On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt <torsten=3D40loddersted=
t.net@dmarc.ietf.org> wrote:
> Hi Rob,
>
> > On 22. Nov 2019, at 15:52, Rob Otto <robotto=3D40pingidentity.com@dmarc=
..ietf.org> wrote:
> >
> > Hi everyone
> >
> > I'd agree with this. I'm looking at DPOP as an alternative and ultimate=
ly simpler way to accomplish what we can already do with MTLS-bound Access =
Tokens, for use cases such as the ones we address in Open Banking; these ar=
e API transactions that demand a high level of assurance and as such we abs=
olutely must have a mechanism to constrain those tokens to the intended bea=
rer. Requiring MTLS across the ecosystem, however, adds significant overhea=
d in terms of infrastructural complexity and is always going to limit the e=
xtent to which such a model can scale.
>
> I would like to unterstand why mTLS adds =93significant overhead in terms=
 of infrastructural complexity=94. Can you please dig into details?
>
> I guess it's mostly that every RS-endpoint (or what sits in front of it) =
has to have a mechanism for accepting/terminating mTLS, managing roots of t=
rust, validating/OCSP, etc

You use a PKI then. We use mTLS with self-signed certs. That requires the R=
S to not check the X.509 trust chain, which requires a special setting (opt=
ionalNoCA).

> and then passing the certificates downstream as headers. None of it is ne=
cessarily difficult or impossible to do in isolation, but I meet many many =
people every week who simply don't know how to do any of this stuff. And th=
ese are typically "network people", for want of a better word. There are qu=
ite a few SaaS API management and edge solutions out there that don't even =
support mTLS at all. You also have the difficulty in handling a combination=
 of MTLS and non-MTLS traffic to the same endpoints.

yep. You better split them, especially if that=92s a user facing endpoint.

> Again, it's possible to do, but far from straightforward.
>
>
>
> Our experience so far: It can be a headache to set up in a microservice a=
rchitecture with TLS terminating proxies but once it runs it=92s ok. On the=
 other side, it=92s easy to use for client developers and it combines clien=
t authentication and sender constraining nicely.
>
> I do think its an elegant solution, don't get me wrong. It's just that th=
ere are plenty of moving parts that you need to get right and that can be a=
 challenge, particularly in large, complex environments.

I agree. I also tend there is a tendency to think Client TLS authentication=
 is bad. I understand that from historical and recent experience with PKI.

But anybody considering to use a application level signing solution based o=
n _raw_ public keys should directly move towards self-signed certificates. =
That brings you all the benefits of TLS without the (PKI) headache.

>
>
>
> >
> > DPOP, to me, appears to be a rather more elegant way of solving the sam=
e problem, with the benefit of significantly reducing the complexity of (an=
d dependency on) the transport layer. I would not argue, however, that it i=
s meant to be a solution intended for ubiquitous adoption across all OAuth-=
protected API traffic. Clients still need to manage private keys under this=
 model and my experience is that there is typically a steep learning curve =
for developers to negotiate any time you introduce a requirement to hold an=
d use keys within  an application.
>
> My experience is most developer don=92t even get the URL right (in the si=
gnature and the value used on the receiving end). So the total cost of owne=
rship is increased by numerous support inquiries.
> I'll not comment, at the risk of offending developers :)

Alright. Ultimately, I just want to get in touch with those who respond :-)

best regards,
Torsten.

>
> best regards,
> Torsten.
>
> >
> > I guess I'm with Justin - let's look at DPOP as an alternative to MTLS-=
bound tokens for high-assurance use cases, at least initially, without tryi=
ng to make it solve every problem.
> >
> > Best regards
> > Rob
> >
> >
> > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
> > I=92m going to +1 Dick and Annabelle=92s question about the scope here.=
 That was the one major thing that struck me during the DPoP discussions in=
 Singapore yesterday: we don=92t seem to agree on what DPoP is for. Some (i=
ncluding the authors, it seems) see it as a quick point-solution to a speci=
fic use case. Others see it as a general PoP mechanism.
> >
> > If it=92s the former, then it should be explicitly tied to one specific=
 set of things. If it=92s the latter, then it needs to be expanded.
> >
> > I=92ll repeat what I said at the mic line: My take is that we should ex=
plicitly narrow down DPoP so that it does exactly one thing and solves one =
narrow use case. And for a general solution? Let=92s move that discussion i=
nto the next major revision of the protocol where we=92ll have a bit more r=
unning room to figure things out..
> >
> >  =97 Justin
> >
> >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
> >>
> >>
> >>
> >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com=
> wrote:
> >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.=
com> wrote:
> >>> There are key distribution challenges with that if you are doing vali=
dation at the RS, but validation at the RS using either approach means you=
=92ve lost protection against replay by the RS. This brings us back to a co=
re question: what threats are in scope for DPoP, and in what contexts?
> >>
> >> Agreed, but validation at the RS is premature optimisation in many cas=
es. And if you do need protection against that the client can even append a=
 confirmation key as a caveat and retrospectively upgrade a bearer token to=
 a pop token. They can even do transfer of ownership by creating copies of =
the original token bound to other certificates/public keys.
> >>
> >> While validation at the RS may be an optimization in many cases, it is=
 still a requirement for deployments.
> >>
> >> I echo Annabelle's last question: what threats are in scope (and out o=
f scope) for DPoP?
> >>
> >>
> >> _______________________________________________
> >> OAuth mailing list
> >> OAuth@ietf.org
> >> https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fww=
w.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%=
40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d=
7cd011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmk=
HbvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> >
> > _______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww=
.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> >
> >
> > --
> >
> > Rob Otto
> > EMEA Field CTO/Solutions Architect
> > robertotto@pingidentity.com
> >
> > c: +44 (0) 777 135 6092
> > Connect with us:
> >
> >
> > CONFIDENTIALITY NOTICE: This email may contain confidential and privile=
ged material for the sole use of the intended recipient(s). Any review, use=
, distribution or disclosure by others is strictly prohibited..  If you hav=
e received this communication in error, please notify the sender immediatel=
y by e-mail and delete the message and any file attachments from your compu=
ter. Thank you._______________________________________________
> > OAuth mailing list
> > OAuth@ietf.org
> > https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww=
.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
>
>
>
> --
>
> Rob Otto
> EMEA Field CTO/Solutions Architect
> robertotto@pingidentity.com
>
> c: +44 (0) 777 135 6092
> Connect with us:
>
>
> CONFIDENTIALITY NOTICE: This email may contain confidential and privilege=
d material for the sole use of the intended recipient(s). Any review, use, =
distribution or disclosure by others is strictly prohibited..  If you have =
received this communication in error, please notify the sender immediately =
by e-mail and delete the message and any file attachments from your compute=
r. Thank you.


--_000_BYAPR00MB05674C455BCBA825BA6C906DF5490BYAPR00MB0567namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
</head>
<body>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
I hear you about the difference between Web apps and native apps, Torsten.&=
nbsp; But using different mechanisms for different application types is a c=
ost in and of itself.</div>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
<br>
</div>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
It's good to understand the tradeoffs.</div>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
<br>
</div>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
-- Mike</div>
<div style=3D"color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);=
 text-align: left;" dir=3D"auto">
<br>
</div>
<div id=3D"ms-outlook-mobile-signature">
<div><br>
</div>
</div>
<hr style=3D"display:inline-block;width:98%" tabindex=3D"-1">
<div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st=
yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> OAuth &lt;oauth-bounc=
es@ietf.org&gt; on behalf of Torsten Lodderstedt &lt;torsten=3D40loddersted=
t.net@dmarc.ietf.org&gt;<br>
<b>Sent:</b> Friday, November 22, 2019 4:20:58 PM<br>
<b>To:</b> Rob Otto &lt;robotto=3D40pingidentity.com@dmarc.ietf.org&gt;<br>
<b>Cc:</b> oauth &lt;oauth@ietf.org&gt;<br>
<b>Subject:</b> [EXTERNAL] Re: [OAUTH-WG] New Version Notification for draf=
t-fett-oauth-dpop-03.txt</font>
<div>&nbsp;</div>
</div>
<div class=3D"BodyFragment"><font size=3D"2"><span style=3D"font-size:11pt;=
">
<div class=3D"PlainText">Hi Rob,<br>
<br>
&gt; On 22. Nov 2019, at 16:10, Rob Otto &lt;robotto=3D40pingidentity.com@d=
marc.ietf.org&gt; wrote:<br>
&gt; <br>
&gt; Hi Torsten - thanks for the reply..<br>
&gt; <br>
&gt; Responses in line.<br>
&gt; <br>
&gt; Gr=FCsse<br>
&gt; Rob<br>
&gt; <br>
&gt; On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt &lt;torsten=3D40lodd=
erstedt.net@dmarc.ietf.org&gt; wrote:<br>
&gt; Hi Rob, <br>
&gt; <br>
&gt; &gt; On 22. Nov 2019, at 15:52, Rob Otto &lt;robotto=3D40pingidentity.=
com@dmarc..ietf.org&gt; wrote:<br>
&gt; &gt; <br>
&gt; &gt; Hi everyone<br>
&gt; &gt; <br>
&gt; &gt; I'd agree with this. I'm looking at DPOP as an alternative and ul=
timately simpler way to accomplish what we can already do with MTLS-bound A=
ccess Tokens, for use cases such as the ones we address in Open Banking; th=
ese are API transactions that demand a
 high level of assurance and as such we absolutely must have a mechanism to=
 constrain those tokens to the intended bearer. Requiring MTLS across the e=
cosystem, however, adds significant overhead in terms of infrastructural co=
mplexity and is always going to
 limit the extent to which such a model can scale.<br>
&gt; <br>
&gt; I would like to unterstand why mTLS adds =93significant overhead in te=
rms of infrastructural complexity=94. Can you please dig into details?<br>
&gt; <br>
&gt; I guess it's mostly that every RS-endpoint (or what sits in front of i=
t) has to have a mechanism for accepting/terminating mTLS, managing roots o=
f trust, validating/OCSP, etc<br>
<br>
You use a PKI then. We use mTLS with self-signed certs. That requires the R=
S to not check the X.509 trust chain, which requires a special setting (opt=
ionalNoCA).
<br>
<br>
&gt; and then passing the certificates downstream as headers. None of it is=
 necessarily difficult or impossible to do in isolation, but I meet many ma=
ny people every week who simply don't know how to do any of this stuff. And=
 these are typically &quot;network people&quot;,
 for want of a better word. There are quite a few SaaS API management and e=
dge solutions out there that don't even support mTLS at all. You also have =
the difficulty in handling a combination of MTLS and non-MTLS traffic to th=
e same endpoints.<br>
<br>
yep. You better split them, especially if that=92s a user facing endpoint.<=
br>
<br>
&gt; Again, it's possible to do, but far from straightforward. <br>
&gt; <br>
&gt;&nbsp; <br>
&gt; <br>
&gt; Our experience so far: It can be a headache to set up in a microservic=
e architecture with TLS terminating proxies but once it runs it=92s ok. On =
the other side, it=92s easy to use for client developers and it combines cl=
ient authentication and sender constraining
 nicely.&nbsp; <br>
&gt; <br>
&gt; I do think its an elegant solution, don't get me wrong. It's just that=
 there are plenty of moving parts that you need to get right and that can b=
e a challenge, particularly in large, complex environments.
<br>
<br>
I agree. I also tend there is a tendency to think Client TLS authentication=
 is bad. I understand that from historical and recent experience with PKI.
<br>
<br>
But anybody considering to use a application level signing solution based o=
n _raw_ public keys should directly move towards self-signed certificates. =
That brings you all the benefits of TLS without the (PKI) headache.
<br>
<br>
&gt; <br>
&gt;&nbsp; <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; DPOP, to me, appears to be a rather more elegant way of solving t=
he same problem, with the benefit of significantly reducing the complexity =
of (and dependency on) the transport layer. I would not argue, however, tha=
t it is meant to be a solution intended
 for ubiquitous adoption across all OAuth-protected API traffic. Clients st=
ill need to manage private keys under this model and my experience is that =
there is typically a steep learning curve for developers to negotiate any t=
ime you introduce a requirement
 to hold and use keys within&nbsp; an application. <br>
&gt; <br>
&gt; My experience is most developer don=92t even get the URL right (in the=
 signature and the value used on the receiving end). So the total cost of o=
wnership is increased by numerous support inquiries.<br>
&gt; I'll not comment, at the risk of offending developers :)&nbsp; <br>
<br>
Alright. Ultimately, I just want to get in touch with those who respond :-)=
<br>
<br>
best regards,<br>
Torsten. <br>
<br>
&gt; <br>
&gt; best regards,<br>
&gt; Torsten. <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; I guess I'm with Justin - let's look at DPOP as an alternative to=
 MTLS-bound tokens for high-assurance use cases, at least initially, withou=
t trying to make it solve every problem.
<br>
&gt; &gt; <br>
&gt; &gt; Best regards<br>
&gt; &gt; Rob<br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; On Fri, 22 Nov 2019 at 07:24, Justin Richer &lt;jricher@mit.edu&g=
t; wrote:<br>
&gt; &gt; I=92m going to &#43;1 Dick and Annabelle=92s question about the s=
cope here. That was the one major thing that struck me during the DPoP disc=
ussions in Singapore yesterday: we don=92t seem to agree on what DPoP is fo=
r. Some (including the authors, it seems) see it
 as a quick point-solution to a specific use case. Others see it as a gener=
al PoP mechanism.
<br>
&gt; &gt; <br>
&gt; &gt; If it=92s the former, then it should be explicitly tied to one sp=
ecific set of things. If it=92s the latter, then it needs to be expanded.
<br>
&gt; &gt; <br>
&gt; &gt; I=92ll repeat what I said at the mic line: My take is that we sho=
uld explicitly narrow down DPoP so that it does exactly one thing and solve=
s one narrow use case. And for a general solution? Let=92s move that discus=
sion into the next major revision of the protocol
 where we=92ll have a bit more running room to figure things out..<br>
&gt; &gt; <br>
&gt; &gt;&nbsp; =97 Justin<br>
&gt; &gt; <br>
&gt; &gt;&gt; On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;dick.hardt@gmail.=
com&gt; wrote:<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;neil.madden@f=
orgerock.com&gt; wrote:<br>
&gt; &gt;&gt; On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;rich=
anna@amazon.com&gt; wrote:<br>
&gt; &gt;&gt;&gt; There are key distribution challenges with that if you ar=
e doing validation at the RS, but validation at the RS using either approac=
h means you=92ve lost protection against replay by the RS. This brings us b=
ack to a core question: what threats are in scope
 for DPoP, and in what contexts?<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; Agreed, but validation at the RS is premature optimisation in=
 many cases. And if you do need protection against that the client can even=
 append a confirmation key as a caveat and retrospectively upgrade a bearer=
 token to a pop token. They can even do transfer
 of ownership by creating copies of the original token bound to other certi=
ficates/public keys.
<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; While validation at the RS may be an optimization in many cas=
es, it is still a requirement for deployments.<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; I echo Annabelle's last question: what threats are in scope (=
and out of scope) for DPoP?<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; _______________________________________________<br>
&gt; &gt;&gt; OAuth mailing list<br>
&gt; &gt;&gt; OAuth@ietf.org<br>
&gt; &gt;&gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?ur=
l=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D=
02%7C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%=
7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sda=
ta=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0"=
>
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; &gt; <br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; OAuth@ietf.org<br>
&gt; &gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3D=
https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7=
C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72=
f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=
=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0">
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; -- <br>
&gt; &gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; &gt; Rob Otto&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; &gt; EMEA Field CTO/Solutions Architect&nbsp;&nbsp;&nbsp; <br>
&gt; &gt; robertotto@pingidentity.com&nbsp;&nbsp; <br>
&gt; &gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; &gt; c: &#43;44 (0) 777 135 6092<br>
&gt; &gt; Connect with us:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; CONFIDENTIALITY NOTICE: This email may contain confidential and p=
rivileged material for the sole use of the intended recipient(s). Any revie=
w, use, distribution or disclosure by others is strictly prohibited..&nbsp;=
 If you have received this communication in
 error, please notify the sender immediately by e-mail and delete the messa=
ge and any file attachments from your computer. Thank you._________________=
______________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; OAuth@ietf.org<br>
&gt; &gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3D=
https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7=
C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72=
f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=
=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0">
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; Rob Otto&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; EMEA Field CTO/Solutions Architect&nbsp;&nbsp;&nbsp; <br>
&gt; robertotto@pingidentity.com&nbsp;&nbsp; <br>
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>
&gt; c: &#43;44 (0) 777 135 6092<br>
&gt; Connect with us:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;
<br>
&gt; <br>
&gt; <br>
&gt; CONFIDENTIALITY NOTICE: This email may contain confidential and privil=
eged material for the sole use of the intended recipient(s). Any review, us=
e, distribution or disclosure by others is strictly prohibited..&nbsp; If y=
ou have received this communication in error,
 please notify the sender immediately by e-mail and delete the message and =
any file attachments from your computer. Thank you.<br>
<br>
</div>
</span></font></div>
</body>
</html>

--_000_BYAPR00MB05674C455BCBA825BA6C906DF5490BYAPR00MB0567namp_--


From nobody Fri Nov 22 00:53:52 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B393912080B for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:53:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rcNTQXyZXECl for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 00:53:48 -0800 (PST)
Received: from mail-pj1-x1029.google.com (mail-pj1-x1029.google.com [IPv6:2607:f8b0:4864:20::1029]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 294AF120804 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:53:48 -0800 (PST)
Received: by mail-pj1-x1029.google.com with SMTP id o14so2790547pjr.0 for <oauth@ietf.org>; Fri, 22 Nov 2019 00:53:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=PbAE9Xa0yuCI2SeA04vLseiGV0mshXXxCpC2QN0NJuo=; b=Xe1jzQfPtqvgUIV9hBGRL7XIQDH+6nMQdhfv7fDgzCucwibGRhRA/KO04UklWD7HRj MJtO+IiYUDcTABrKjKlKPASqn2CISzf+0A/ex3RnsHychCt5Jqsyp0VPQWbK3fIPWvml tq3vco12kyeRe43pqwovmRIlrMlmFT7U0ygi1xBsXvMlZaHXzANEDrzW3y1JjoNWQ3iy vfNPqP/7eF4VyDEW0vYciezlNb90oCsva2r0hNwfZ4OzaP+ui74gD4JMsyimJGHq6LHP e6KJMQmobX8cFUm46iqmzh+/fhouM9g98L66faJQmDe5ul1edL1eGiWJNjdA2mVuQf2o VPHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=PbAE9Xa0yuCI2SeA04vLseiGV0mshXXxCpC2QN0NJuo=; b=OEql7B0oUNOIQm9jNNDzMigqWwQtn4bv1E9AapcOGP/B1vSZ/oklvABtcbsbxr+ScD c2XNnNEnr2nzChGh07Om8FcLZvYYi6jyGLQpeX/HxIvJvGlC5VhwpTL8lizGRyPLxwcd Nk90GyHeh4kmgjp8g9tmxVMw/ZOw/d4H1BMkKUR+EmEzV19Eiw3nJjBVIjrmest4n5pj npxW12vI2N3Q53yjXin+HRFTPqLjgo+8VRmOJu0D9iASE+G4iAgE/4LoITwXAiLwLt1P LAoV4bWYbfdJ2GD3dHQmElGVqjb0tMS2LRnPT6vZ8nzIcahVG51729khB3bpKv9e1uyv 7CAQ==
X-Gm-Message-State: APjAAAX+DneC3+K5S7/c4UdorUq8wnfJWvbQDMQbmxo//E0Ob4CyBdW3 EawIFv4hXqFD1HxLS33iE7QtpA==
X-Google-Smtp-Source: APXvYqx/H4M10Ch62JI0i19ihMdM1LgfPs0T5D5f2ll74aar08mH7i6ct8QyljcsGnGowoscwYcH2A==
X-Received: by 2002:a17:902:aa4c:: with SMTP id c12mr13094833plr.309.1574412827405;  Fri, 22 Nov 2019 00:53:47 -0800 (PST)
Received: from [10.80.110.155] ([103.137.210.130]) by smtp.gmail.com with ESMTPSA id q199sm6564144pfq.147.2019.11.22.00.53.44 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 00:53:46 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <1F50E494-5AA7-4739-BC17-9DC08FC0A254@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_0AE77D3B-041A-47EB-BDAE-F018F79BE9FA"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 16:53:39 +0800
In-Reply-To: <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>, oauth <oauth@ietf.org>
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com> <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net> <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/4SUydno2TEGGIG2lcnruok4_ju4>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 08:53:51 -0000

--Apple-Mail=_0AE77D3B-041A-47EB-BDAE-F018F79BE9FA
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

I couldn't agree more. I think we should, again, try to find a way to =
utilise TLS in the browser as well.=20

> On 22. Nov 2019, at 16:50, Mike Jones =
<Michael.Jones=3D40microsoft.com@dmarc.ietf.org> wrote:
>=20
> I hear you about the difference between Web apps and native apps, =
Torsten.  But using different mechanisms for different application types =
is a cost in and of itself.
>=20
> It's good to understand the tradeoffs.
>=20
> -- Mike
>=20
>=20
> From: OAuth <oauth-bounces@ietf.org> on behalf of Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org>
> Sent: Friday, November 22, 2019 4:20:58 PM
> To: Rob Otto <robotto=3D40pingidentity.com@dmarc.ietf.org>
> Cc: oauth <oauth@ietf.org>
> Subject: [EXTERNAL] Re: [OAUTH-WG] New Version Notification for =
draft-fett-oauth-dpop-03.txt
> =20
> Hi Rob,
>=20
> > On 22. Nov 2019, at 16:10, Rob Otto =
<robotto=3D40pingidentity.com@dmarc.ietf.org> wrote:
> >=20
> > Hi Torsten - thanks for the reply..
> >=20
> > Responses in line.
> >=20
> > Gr=C3=BCsse
> > Rob
> >=20
> > On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
> > Hi Rob,=20
> >=20
> > > On 22. Nov 2019, at 15:52, Rob Otto =
<robotto=3D40pingidentity.com@dmarc..ietf.org> wrote:
> > >=20
> > > Hi everyone
> > >=20
> > > I'd agree with this. I'm looking at DPOP as an alternative and =
ultimately simpler way to accomplish what we can already do with =
MTLS-bound Access Tokens, for use cases such as the ones we address in =
Open Banking; these are API transactions that demand a high level of =
assurance and as such we absolutely must have a mechanism to constrain =
those tokens to the intended bearer. Requiring MTLS across the =
ecosystem, however, adds significant overhead in terms of =
infrastructural complexity and is always going to limit the extent to =
which such a model can scale.
> >=20
> > I would like to unterstand why mTLS adds =E2=80=9Csignificant =
overhead in terms of infrastructural complexity=E2=80=9D. Can you please =
dig into details?
> >=20
> > I guess it's mostly that every RS-endpoint (or what sits in front of =
it) has to have a mechanism for accepting/terminating mTLS, managing =
roots of trust, validating/OCSP, etc
>=20
> You use a PKI then. We use mTLS with self-signed certs. That requires =
the RS to not check the X.509 trust chain, which requires a special =
setting (optionalNoCA).=20
>=20
> > and then passing the certificates downstream as headers. None of it =
is necessarily difficult or impossible to do in isolation, but I meet =
many many people every week who simply don't know how to do any of this =
stuff. And these are typically "network people", for want of a better =
word. There are quite a few SaaS API management and edge solutions out =
there that don't even support mTLS at all. You also have the difficulty =
in handling a combination of MTLS and non-MTLS traffic to the same =
endpoints.
>=20
> yep. You better split them, especially if that=E2=80=99s a user facing =
endpoint.
>=20
> > Again, it's possible to do, but far from straightforward.=20
> >=20
> > =20
> >=20
> > Our experience so far: It can be a headache to set up in a =
microservice architecture with TLS terminating proxies but once it runs =
it=E2=80=99s ok. On the other side, it=E2=80=99s easy to use for client =
developers and it combines client authentication and sender constraining =
nicely. =20
> >=20
> > I do think its an elegant solution, don't get me wrong. It's just =
that there are plenty of moving parts that you need to get right and =
that can be a challenge, particularly in large, complex environments.=20
>=20
> I agree. I also tend there is a tendency to think Client TLS =
authentication is bad. I understand that from historical and recent =
experience with PKI.=20
>=20
> But anybody considering to use a application level signing solution =
based on _raw_ public keys should directly move towards self-signed =
certificates. That brings you all the benefits of TLS without the (PKI) =
headache.=20
>=20
> >=20
> > =20
> >=20
> > >=20
> > > DPOP, to me, appears to be a rather more elegant way of solving =
the same problem, with the benefit of significantly reducing the =
complexity of (and dependency on) the transport layer. I would not =
argue, however, that it is meant to be a solution intended for =
ubiquitous adoption across all OAuth-protected API traffic. Clients =
still need to manage private keys under this model and my experience is =
that there is typically a steep learning curve for developers to =
negotiate any time you introduce a requirement to hold and use keys =
within  an application.=20
> >=20
> > My experience is most developer don=E2=80=99t even get the URL right =
(in the signature and the value used on the receiving end). So the total =
cost of ownership is increased by numerous support inquiries.
> > I'll not comment, at the risk of offending developers :) =20
>=20
> Alright. Ultimately, I just want to get in touch with those who =
respond :-)
>=20
> best regards,
> Torsten.=20
>=20
> >=20
> > best regards,
> > Torsten.=20
> >=20
> > >=20
> > > I guess I'm with Justin - let's look at DPOP as an alternative to =
MTLS-bound tokens for high-assurance use cases, at least initially, =
without trying to make it solve every problem.=20
> > >=20
> > > Best regards
> > > Rob
> > >=20
> > >=20
> > > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> =
wrote:
> > > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question =
about the scope here. That was the one major thing that struck me during =
the DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to =
agree on what DPoP is for. Some (including the authors, it seems) see it =
as a quick point-solution to a specific use case. Others see it as a =
general PoP mechanism.=20
> > >=20
> > > If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
> > >=20
> > > I=E2=80=99ll repeat what I said at the mic line: My take is that =
we should explicitly narrow down DPoP so that it does exactly one thing =
and solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out..
> > >=20
> > >  =E2=80=94 Justin
> > >=20
> > >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> =
wrote:
> > >>=20
> > >>=20
> > >>=20
> > >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
> > >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
> > >>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
> > >>=20
> > >> Agreed, but validation at the RS is premature optimisation in =
many cases. And if you do need protection against that the client can =
even append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
> > >>=20
> > >> While validation at the RS may be an optimization in many cases, =
it is still a requirement for deployments.
> > >>=20
> > >> I echo Annabelle's last question: what threats are in scope (and =
out of scope) for DPoP?
> > >>=20
> > >>=20
> > >> _______________________________________________
> > >> OAuth mailing list
> > >> OAuth@ietf.org
> > >> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> > >=20
> > > _______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > > =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> > >=20
> > >=20
> > > --=20
> > >      =20
> > > Rob Otto     =20
> > > EMEA Field CTO/Solutions Architect   =20
> > > robertotto@pingidentity.com  =20
> > >      =20
> > > c: +44 (0) 777 135 6092
> > > Connect with us:                                                   =
                                                                         =
                                 =20
> > >=20
> > >=20
> > > CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > > =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> >=20
> >=20
> >=20
> > --=20
> >       =20
> > Rob Otto     =20
> > EMEA Field CTO/Solutions Architect   =20
> > robertotto@pingidentity.com  =20
> >       =20
> > c: +44 (0) 777 135 6092
> > Connect with us:                                                     =
                                                                         =
                        =20
> >=20
> >=20
> > CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_0AE77D3B-041A-47EB-BDAE-F018F79BE9FA
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_0AE77D3B-041A-47EB-BDAE-F018F79BE9FA--


From nobody Fri Nov 22 01:23:08 2019
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1233120807 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 01:23:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VdBYlAqebBjh for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 01:23:04 -0800 (PST)
Received: from mail-lj1-x229.google.com (mail-lj1-x229.google.com [IPv6:2a00:1450:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8249120810 for <oauth@ietf.org>; Fri, 22 Nov 2019 01:23:03 -0800 (PST)
Received: by mail-lj1-x229.google.com with SMTP id q2so6548832ljg.7 for <oauth@ietf.org>; Fri, 22 Nov 2019 01:23:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dZdPRfbT8ZcVV5RkpohPICsV++yPFBNanU1HfRuvais=; b=SEFjjZVSt5Bcx/6dUG9x+EYiuNOKzfFKLofG9T9W3aKTnPQML1rnfvHgXaFIqJEtYD hvmJHR/3g3VEyjcKZjvKmKNevvR+docSOk+qoepEyNLvPK8M1jwW/MTgRe2ACo0+iMcK 5r6z52gRqPtUah+INP9nbkI5Lwy4wd+V5mX2I3XjIXjpfKDXdM6QU4pVJmFxQvoZmW38 cHxk9xsw3zpbLyP5NtlDO8FBcAXNA0rPgBMBveX4HN2h/c5RJWUXdKyGKcDYYF6alwVl WBk3I5hHU+OdXSNbcMQO1T9bX0i1XH7R6l2uW7flCuKCbuHn/zmMMIhkIArw7W3XcBMc RCuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dZdPRfbT8ZcVV5RkpohPICsV++yPFBNanU1HfRuvais=; b=Q0isHvJ+2XNcwmL7Vn+fnSz5B+bNnSi3ohnMlsRe32ArZ1pwH7BREH8patji3KTRjG KJl7TXgeD6/noO6RCoPRZjsbqa23+hOiJjPYJXo4+piuHv9eeqfq5YF94XH7V+6hL8OD Z4i3cAjhpgkr8zp1VvVwVRnkM2PgkXBMNgdinljpwqBL0xZpb2q+prsu9jnvFX6p3Fjj AHfAyDeQo7/b711hgvHVezUPoldt+BtYNRmC48mEgVZIWocUcup4A5/Oe0fpkPjeM7qt t47JOPRmiDO6S9ihWcokE75qI0wcSNYqKRQK5lw8pA8v2rx1eKmbIItBP9IpEsHbO3E8 5bug==
X-Gm-Message-State: APjAAAXUwR9cQrR3JYqunrEzuwlgDDKFNKYVZ/HUcFG26/9N3Gp23X8D H3Slh2QndicdYe7dmhqhxlmhRvtkJGvS+WaGP0k2OBdC6KM=
X-Google-Smtp-Source: APXvYqzsnUdkiNQ7YJahpOWoYRlhNJpwXQPsXTlQiFoasrdeJ+V0WNqnw0FPXLr0CRaU5yPtkHBaMdtxftwtnrfapsg=
X-Received: by 2002:a2e:85d0:: with SMTP id h16mr11834630ljj.75.1574414581891;  Fri, 22 Nov 2019 01:23:01 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com> <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net> <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com>
In-Reply-To: <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com>
From: Dick Hardt <dick.hardt@gmail.com>
Date: Fri, 22 Nov 2019 17:22:50 +0800
Message-ID: <CAD9ie-tSYjq3UkTajGg8RfBYxeimFycnxWX4ruvp-AykfHw=GA@mail.gmail.com>
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>,  Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e207f40597ebf579"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/RETMXueQb4HMuKZ7Fanv3zBqpXI>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 09:23:08 -0000

--000000000000e207f40597ebf579
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Another dimension on SPA is that lots of 1P deployments use only SPA. For
them, there is only one type of deployment.

On Fri, Nov 22, 2019 at 4:50 PM Mike Jones <Michael.Jones=3D
40microsoft.com@dmarc.ietf.org> wrote:

> I hear you about the difference between Web apps and native apps,
> Torsten.  But using different mechanisms for different application types =
is
> a cost in and of itself.
>
> It's good to understand the tradeoffs.
>
> -- Mike
>
>
> ------------------------------
> *From:* OAuth <oauth-bounces@ietf.org> on behalf of Torsten Lodderstedt
> <torsten=3D40lodderstedt.net@dmarc.ietf.org>
> *Sent:* Friday, November 22, 2019 4:20:58 PM
> *To:* Rob Otto <robotto=3D40pingidentity.com@dmarc.ietf.org>
> *Cc:* oauth <oauth@ietf.org>
> *Subject:* [EXTERNAL] Re: [OAUTH-WG] New Version Notification for
> draft-fett-oauth-dpop-03.txt
>
> Hi Rob,
>
> > On 22. Nov 2019, at 16:10, Rob Otto <robotto=3D
> 40pingidentity.com@dmarc.ietf.org> wrote:
> >
> > Hi Torsten - thanks for the reply..
> >
> > Responses in line.
> >
> > Gr=C3=BCsse
> > Rob
> >
> > On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt <torsten=3D
> 40lodderstedt.net@dmarc.ietf.org> wrote:
> > Hi Rob,
> >
> > > On 22. Nov 2019, at 15:52, Rob Otto <robotto=3D40pingidentity.com@dma=
rc.
> .ietf.org> wrote:
> > >
> > > Hi everyone
> > >
> > > I'd agree with this. I'm looking at DPOP as an alternative and
> ultimately simpler way to accomplish what we can already do with MTLS-bou=
nd
> Access Tokens, for use cases such as the ones we address in Open Banking;
> these are API transactions that demand a high level of assurance and as
> such we absolutely must have a mechanism to constrain those tokens to the
> intended bearer. Requiring MTLS across the ecosystem, however, adds
> significant overhead in terms of infrastructural complexity and is always
> going to limit the extent to which such a model can scale.
> >
> > I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead =
in terms
> of infrastructural complexity=E2=80=9D. Can you please dig into details?
> >
> > I guess it's mostly that every RS-endpoint (or what sits in front of it=
)
> has to have a mechanism for accepting/terminating mTLS, managing roots of
> trust, validating/OCSP, etc
>
> You use a PKI then. We use mTLS with self-signed certs. That requires the
> RS to not check the X.509 trust chain, which requires a special setting
> (optionalNoCA).
>
> > and then passing the certificates downstream as headers. None of it is
> necessarily difficult or impossible to do in isolation, but I meet many
> many people every week who simply don't know how to do any of this stuff.
> And these are typically "network people", for want of a better word. Ther=
e
> are quite a few SaaS API management and edge solutions out there that don=
't
> even support mTLS at all. You also have the difficulty in handling a
> combination of MTLS and non-MTLS traffic to the same endpoints.
>
> yep. You better split them, especially if that=E2=80=99s a user facing en=
dpoint.
>
> > Again, it's possible to do, but far from straightforward.
> >
> >
> >
> > Our experience so far: It can be a headache to set up in a microservice
> architecture with TLS terminating proxies but once it runs it=E2=80=99s o=
k. On the
> other side, it=E2=80=99s easy to use for client developers and it combine=
s client
> authentication and sender constraining nicely.
> >
> > I do think its an elegant solution, don't get me wrong. It's just that
> there are plenty of moving parts that you need to get right and that can =
be
> a challenge, particularly in large, complex environments.
>
> I agree. I also tend there is a tendency to think Client TLS
> authentication is bad. I understand that from historical and recent
> experience with PKI.
>
> But anybody considering to use a application level signing solution based
> on _raw_ public keys should directly move towards self-signed certificate=
s.
> That brings you all the benefits of TLS without the (PKI) headache.
>
> >
> >
> >
> > >
> > > DPOP, to me, appears to be a rather more elegant way of solving the
> same problem, with the benefit of significantly reducing the complexity o=
f
> (and dependency on) the transport layer. I would not argue, however, that
> it is meant to be a solution intended for ubiquitous adoption across all
> OAuth-protected API traffic. Clients still need to manage private keys
> under this model and my experience is that there is typically a steep
> learning curve for developers to negotiate any time you introduce a
> requirement to hold and use keys within  an application.
> >
> > My experience is most developer don=E2=80=99t even get the URL right (i=
n the
> signature and the value used on the receiving end). So the total cost of
> ownership is increased by numerous support inquiries.
> > I'll not comment, at the risk of offending developers :)
>
> Alright. Ultimately, I just want to get in touch with those who respond :=
-)
>
> best regards,
> Torsten.
>
> >
> > best regards,
> > Torsten.
> >
> > >
> > > I guess I'm with Justin - let's look at DPOP as an alternative to
> MTLS-bound tokens for high-assurance use cases, at least initially, witho=
ut
> trying to make it solve every problem.
> > >
> > > Best regards
> > > Rob
> > >
> > >
> > > On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> wrote:
> > > I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about t=
he scope here.
> That was the one major thing that struck me during the DPoP discussions i=
n
> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for. =
Some
> (including the authors, it seems) see it as a quick point-solution to a
> specific use case. Others see it as a general PoP mechanism.
> > >
> > > If it=E2=80=99s the former, then it should be explicitly tied to one =
specific
> set of things. If it=E2=80=99s the latter, then it needs to be expanded.
> > >
> > > I=E2=80=99ll repeat what I said at the mic line: My take is that we s=
hould
> explicitly narrow down DPoP so that it does exactly one thing and solves
> one narrow use case. And for a general solution? Let=E2=80=99s move that =
discussion
> into the next major revision of the protocol where we=E2=80=99ll have a b=
it more
> running room to figure things out..
> > >
> > >  =E2=80=94 Justin
> > >
> > >> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> wrote=
:
> > >>
> > >>
> > >>
> > >> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <
> neil.madden@forgerock.com> wrote:
> > >> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <
> richanna@amazon.com> wrote:
> > >>> There are key distribution challenges with that if you are doing
> validation at the RS, but validation at the RS using either approach mean=
s
> you=E2=80=99ve lost protection against replay by the RS. This brings us b=
ack to a
> core question: what threats are in scope for DPoP, and in what contexts?
> > >>
> > >> Agreed, but validation at the RS is premature optimisation in many
> cases. And if you do need protection against that the client can even
> append a confirmation key as a caveat and retrospectively upgrade a beare=
r
> token to a pop token. They can even do transfer of ownership by creating
> copies of the original token bound to other certificates/public keys.
> > >>
> > >> While validation at the RS may be an optimization in many cases, it
> is still a requirement for deployments.
> > >>
> > >> I echo Annabelle's last question: what threats are in scope (and out
> of scope) for DPoP?
> > >>
> > >>
> > >> _______________________________________________
> > >> OAuth mailing list
> > >> OAuth@ietf.org
> > >>
> https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i=
etf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7cd=
011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkHbv=
OYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> > >
> > > _______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > >
> https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i=
etf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7cd=
011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkHbv=
OYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> > >
> > >
> > > --
> > >
> > > Rob Otto
> > > EMEA Field CTO/Solutions Architect
> > > robertotto@pingidentity.com
> > >
> > > c: +44 (0) 777 135 6092
> > > Connect with
> us:
>
> > >
> > >
> > > CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you._______________________________________________
> > > OAuth mailing list
> > > OAuth@ietf.org
> > >
> https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i=
etf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7cd=
011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkHbv=
OYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
> >
> >
> >
> > --
> >
> > Rob Otto
> > EMEA Field CTO/Solutions Architect
> > robertotto@pingidentity.com
> >
> > c: +44 (0) 777 135 6092
> > Connect with
> us:
>
> >
> >
> > CONFIDENTIALITY NOTICE: This email may contain confidential and
> privileged material for the sole use of the intended recipient(s). Any
> review, use, distribution or disclosure by others is strictly prohibited.=
.
> If you have received this communication in error, please notify the sende=
r
> immediately by e-mail and delete the message and any file attachments fro=
m
> your computer. Thank you.
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000e207f40597ebf579
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Another dimension=C2=A0on SPA is that lots of 1P deploymen=
ts use only SPA. For them, there is only one type of deployment.=C2=A0</div=
><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fr=
i, Nov 22, 2019 at 4:50 PM Mike Jones &lt;Michael.Jones=3D<a href=3D"mailto=
:40microsoft.com@dmarc.ietf.org">40microsoft.com@dmarc.ietf.org</a>&gt; wro=
te:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">



<div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
I hear you about the difference between Web apps and native apps, Torsten.=
=C2=A0 But using different mechanisms for different application types is a =
cost in and of itself.</div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
<br>
</div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
It&#39;s good to understand the tradeoffs.</div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
<br>
</div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
-- Mike</div>
<div style=3D"color:rgb(33,33,33);background-color:rgb(255,255,255);text-al=
ign:left" dir=3D"auto">
<br>
</div>
<div id=3D"gmail-m_1010797244660256791ms-outlook-mobile-signature">
<div><br>
</div>
</div>
<hr style=3D"display:inline-block;width:98%">
<div id=3D"gmail-m_1010797244660256791divRplyFwdMsg" dir=3D"ltr"><font face=
=3D"Calibri, sans-serif" style=3D"font-size:11pt" color=3D"#000000"><b>From=
:</b> OAuth &lt;<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank"=
>oauth-bounces@ietf.org</a>&gt; on behalf of Torsten Lodderstedt &lt;torste=
n=3D<a href=3D"mailto:40lodderstedt.net@dmarc.ietf.org" target=3D"_blank">4=
0lodderstedt.net@dmarc.ietf.org</a>&gt;<br>
<b>Sent:</b> Friday, November 22, 2019 4:20:58 PM<br>
<b>To:</b> Rob Otto &lt;robotto=3D<a href=3D"mailto:40pingidentity.com@dmar=
c.ietf.org" target=3D"_blank">40pingidentity.com@dmarc.ietf.org</a>&gt;<br>
<b>Cc:</b> oauth &lt;<a href=3D"mailto:oauth@ietf.org" target=3D"_blank">oa=
uth@ietf.org</a>&gt;<br>
<b>Subject:</b> [EXTERNAL] Re: [OAUTH-WG] New Version Notification for draf=
t-fett-oauth-dpop-03.txt</font>
<div>=C2=A0</div>
</div>
<div><font size=3D"2"><span style=3D"font-size:11pt">
<div>Hi Rob,<br>
<br>
&gt; On 22. Nov 2019, at 16:10, Rob Otto &lt;robotto=3D<a href=3D"mailto:40=
pingidentity.com@dmarc.ietf.org" target=3D"_blank">40pingidentity.com@dmarc=
.ietf.org</a>&gt; wrote:<br>
&gt; <br>
&gt; Hi Torsten - thanks for the reply..<br>
&gt; <br>
&gt; Responses in line.<br>
&gt; <br>
&gt; Gr=C3=BCsse<br>
&gt; Rob<br>
&gt; <br>
&gt; On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt &lt;torsten=3D<a hre=
f=3D"mailto:40lodderstedt.net@dmarc.ietf.org" target=3D"_blank">40lodderste=
dt.net@dmarc.ietf.org</a>&gt; wrote:<br>
&gt; Hi Rob, <br>
&gt; <br>
&gt; &gt; On 22. Nov 2019, at 15:52, Rob Otto &lt;robotto=3D40pingidentity.=
com@dmarc..<a href=3D"http://ietf.org" target=3D"_blank">ietf.org</a>&gt; w=
rote:<br>
&gt; &gt; <br>
&gt; &gt; Hi everyone<br>
&gt; &gt; <br>
&gt; &gt; I&#39;d agree with this. I&#39;m looking at DPOP as an alternativ=
e and ultimately simpler way to accomplish what we can already do with MTLS=
-bound Access Tokens, for use cases such as the ones we address in Open Ban=
king; these are API transactions that demand a
 high level of assurance and as such we absolutely must have a mechanism to=
 constrain those tokens to the intended bearer. Requiring MTLS across the e=
cosystem, however, adds significant overhead in terms of infrastructural co=
mplexity and is always going to
 limit the extent to which such a model can scale.<br>
&gt; <br>
&gt; I would like to unterstand why mTLS adds =E2=80=9Csignificant overhead=
 in terms of infrastructural complexity=E2=80=9D. Can you please dig into d=
etails?<br>
&gt; <br>
&gt; I guess it&#39;s mostly that every RS-endpoint (or what sits in front =
of it) has to have a mechanism for accepting/terminating mTLS, managing roo=
ts of trust, validating/OCSP, etc<br>
<br>
You use a PKI then. We use mTLS with self-signed certs. That requires the R=
S to not check the X.509 trust chain, which requires a special setting (opt=
ionalNoCA).
<br>
<br>
&gt; and then passing the certificates downstream as headers. None of it is=
 necessarily difficult or impossible to do in isolation, but I meet many ma=
ny people every week who simply don&#39;t know how to do any of this stuff.=
 And these are typically &quot;network people&quot;,
 for want of a better word. There are quite a few SaaS API management and e=
dge solutions out there that don&#39;t even support mTLS at all. You also h=
ave the difficulty in handling a combination of MTLS and non-MTLS traffic t=
o the same endpoints.<br>
<br>
yep. You better split them, especially if that=E2=80=99s a user facing endp=
oint.<br>
<br>
&gt; Again, it&#39;s possible to do, but far from straightforward. <br>
&gt; <br>
&gt;=C2=A0 <br>
&gt; <br>
&gt; Our experience so far: It can be a headache to set up in a microservic=
e architecture with TLS terminating proxies but once it runs it=E2=80=99s o=
k. On the other side, it=E2=80=99s easy to use for client developers and it=
 combines client authentication and sender constraining
 nicely.=C2=A0 <br>
&gt; <br>
&gt; I do think its an elegant solution, don&#39;t get me wrong. It&#39;s j=
ust that there are plenty of moving parts that you need to get right and th=
at can be a challenge, particularly in large, complex environments.
<br>
<br>
I agree. I also tend there is a tendency to think Client TLS authentication=
 is bad. I understand that from historical and recent experience with PKI.
<br>
<br>
But anybody considering to use a application level signing solution based o=
n _raw_ public keys should directly move towards self-signed certificates. =
That brings you all the benefits of TLS without the (PKI) headache.
<br>
<br>
&gt; <br>
&gt;=C2=A0 <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; DPOP, to me, appears to be a rather more elegant way of solving t=
he same problem, with the benefit of significantly reducing the complexity =
of (and dependency on) the transport layer. I would not argue, however, tha=
t it is meant to be a solution intended
 for ubiquitous adoption across all OAuth-protected API traffic. Clients st=
ill need to manage private keys under this model and my experience is that =
there is typically a steep learning curve for developers to negotiate any t=
ime you introduce a requirement
 to hold and use keys within=C2=A0 an application. <br>
&gt; <br>
&gt; My experience is most developer don=E2=80=99t even get the URL right (=
in the signature and the value used on the receiving end). So the total cos=
t of ownership is increased by numerous support inquiries.<br>
&gt; I&#39;ll not comment, at the risk of offending developers :)=C2=A0 <br=
>
<br>
Alright. Ultimately, I just want to get in touch with those who respond :-)=
<br>
<br>
best regards,<br>
Torsten. <br>
<br>
&gt; <br>
&gt; best regards,<br>
&gt; Torsten. <br>
&gt; <br>
&gt; &gt; <br>
&gt; &gt; I guess I&#39;m with Justin - let&#39;s look at DPOP as an altern=
ative to MTLS-bound tokens for high-assurance use cases, at least initially=
, without trying to make it solve every problem.
<br>
&gt; &gt; <br>
&gt; &gt; Best regards<br>
&gt; &gt; Rob<br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; On Fri, 22 Nov 2019 at 07:24, Justin Richer &lt;<a href=3D"mailto=
:jricher@mit.edu" target=3D"_blank">jricher@mit.edu</a>&gt; wrote:<br>
&gt; &gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question abo=
ut the scope here. That was the one major thing that struck me during the D=
PoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree on w=
hat DPoP is for. Some (including the authors, it seems) see it
 as a quick point-solution to a specific use case. Others see it as a gener=
al PoP mechanism.
<br>
&gt; &gt; <br>
&gt; &gt; If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to be=
 expanded.
<br>
&gt; &gt; <br>
&gt; &gt; I=E2=80=99ll repeat what I said at the mic line: My take is that =
we should explicitly narrow down DPoP so that it does exactly one thing and=
 solves one narrow use case. And for a general solution? Let=E2=80=99s move=
 that discussion into the next major revision of the protocol
 where we=E2=80=99ll have a bit more running room to figure things out..<br=
>
&gt; &gt; <br>
&gt; &gt;=C2=A0 =E2=80=94 Justin<br>
&gt; &gt; <br>
&gt; &gt;&gt; On Nov 22, 2019, at 3:13 PM, Dick Hardt &lt;<a href=3D"mailto=
:dick.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote=
:<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;<a href=3D"ma=
ilto:neil.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com=
</a>&gt; wrote:<br>
&gt; &gt;&gt; On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;<a h=
ref=3D"mailto:richanna@amazon.com" target=3D"_blank">richanna@amazon.com</a=
>&gt; wrote:<br>
&gt; &gt;&gt;&gt; There are key distribution challenges with that if you ar=
e doing validation at the RS, but validation at the RS using either approac=
h means you=E2=80=99ve lost protection against replay by the RS. This bring=
s us back to a core question: what threats are in scope
 for DPoP, and in what contexts?<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; Agreed, but validation at the RS is premature optimisation in=
 many cases. And if you do need protection against that the client can even=
 append a confirmation key as a caveat and retrospectively upgrade a bearer=
 token to a pop token. They can even do transfer
 of ownership by creating copies of the original token bound to other certi=
ficates/public keys.
<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; While validation at the RS may be an optimization in many cas=
es, it is still a requirement for deployments.<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; I echo Annabelle&#39;s last question: what threats are in sco=
pe (and out of scope) for DPoP?<br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; <br>
&gt; &gt;&gt; _______________________________________________<br>
&gt; &gt;&gt; OAuth mailing list<br>
&gt; &gt;&gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@iet=
f.org</a><br>
&gt; &gt;&gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?ur=
l=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D=
02%7C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%=
7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sda=
ta=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0"=
 target=3D"_blank">
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; &gt; <br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3D=
https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7=
C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72=
f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=
=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0" t=
arget=3D"_blank">
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; -- <br>
&gt; &gt;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; &gt; Rob Otto=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; &gt; EMEA Field CTO/Solutions Architect=C2=A0=C2=A0=C2=A0 <br>
&gt; &gt; <a href=3D"mailto:robertotto@pingidentity.com" target=3D"_blank">=
robertotto@pingidentity.com</a>=C2=A0=C2=A0 <br>
&gt; &gt;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; &gt; c: +44 (0) 777 135 6092<br>
&gt; &gt; Connect with us:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
<br>
&gt; &gt; <br>
&gt; &gt; <br>
&gt; &gt; CONFIDENTIALITY NOTICE: This email may contain confidential and p=
rivileged material for the sole use of the intended recipient(s). Any revie=
w, use, distribution or disclosure by others is strictly prohibited..=C2=A0=
 If you have received this communication in
 error, please notify the sender immediately by e-mail and delete the messa=
ge and any file attachments from your computer. Thank you._________________=
______________________________<br>
&gt; &gt; OAuth mailing list<br>
&gt; &gt; <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.or=
g</a><br>
&gt; &gt; <a href=3D"https://nam06.safelinks.protection.outlook.com/?url=3D=
https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7=
C01%7CMichael.Jones%40microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72=
f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=
=3D6x%2Fjtuo2qkObT8bAdMUmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0" t=
arget=3D"_blank">
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Foauth&amp;amp;data=3D02%7C01%7CMichael.Jones%4=
0microsoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7=
cd011db47%7C1%7C0%7C637100076834776598&amp;amp;sdata=3D6x%2Fjtuo2qkObT8bAdM=
UmkHbvOYr8wZX7pngViwA4e0Q%3D&amp;amp;reserved=3D0</a><br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; Rob Otto=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; EMEA Field CTO/Solutions Architect=C2=A0=C2=A0=C2=A0 <br>
&gt; <a href=3D"mailto:robertotto@pingidentity.com" target=3D"_blank">rober=
totto@pingidentity.com</a>=C2=A0=C2=A0 <br>
&gt;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <br>
&gt; c: +44 (0) 777 135 6092<br>
&gt; Connect with us:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0
<br>
&gt; <br>
&gt; <br>
&gt; CONFIDENTIALITY NOTICE: This email may contain confidential and privil=
eged material for the sole use of the intended recipient(s). Any review, us=
e, distribution or disclosure by others is strictly prohibited..=C2=A0 If y=
ou have received this communication in error,
 please notify the sender immediately by e-mail and delete the message and =
any file attachments from your computer. Thank you.<br>
<br>
</div>
</span></font></div>
</div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--000000000000e207f40597ebf579--


From nobody Fri Nov 22 01:44:20 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EA6D120288 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 01:44:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7FctrR4rmMmk for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 01:44:16 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51A60120048 for <oauth@ietf.org>; Fri, 22 Nov 2019 01:44:16 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id z3so7807244wru.3 for <oauth@ietf.org>; Fri, 22 Nov 2019 01:44:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=BwQqM8E7ypPfR229QCojV7JHMY1dS1e8fDEk7bHl7mk=; b=XWo6635MDso49RANvtFVOUEwmuFsdN6GqzhxKiP/k1wGLeObqTfQCjs6G89qK4pqh7 gPAebKsWzhFCVJZHADeT/wPBnXj111b+8i9t9KUvHJBw4k+ZrRoA4+OX7GN2pelphZ58 QcpeeVgcbPzulL7EkWV5KMoenim/3VULe+fr4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=BwQqM8E7ypPfR229QCojV7JHMY1dS1e8fDEk7bHl7mk=; b=lNxsv9TH/jMUKV+8Uk+km8mKEjQj+LEcnPyUW0Y7Sy2mj/+P7RySddHYGvzQLVAoAZ HjihTIt/P4XFVpxiASKoPpDe1CfyVKlPQOebbyqOzvp2XyRbhBjPssSNKn8V0dg3hhPu ueuvXzpcl0e0YuEBFz5r+jBFoUpI+58E7VOaveGvzfOZr0YtM13nBZQlA0Odyqc0S1iU mmbxpLW702cdj0z0Fk7ZJ64niNq0KZNkDIfVpqg9g1b+ry1sOqiPoWyMLSL/CRObokX1 7MRiz9tQlQyLzrMKmon0MUXt6E/xEyYNBj9usXpwg6VHvJ/QuYVLwtFEfisCTPKN+9ON basg==
X-Gm-Message-State: APjAAAX6Cgbkvw2WtjmoKlK3RauU7k2FKWEl/kewSjeqdALratIR43s5 YqLEHyk9cdyZQeX2+RWk2UwqKg==
X-Google-Smtp-Source: APXvYqx1VVNtRYpnp5lt8IsbKJwiUUhwiEsLt7pAvb3NIEuMRAvY+Ds+01hwwim4gzaG5GOlnkfgSA==
X-Received: by 2002:a5d:6b45:: with SMTP id x5mr416814wrw.16.1574415854433; Fri, 22 Nov 2019 01:44:14 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id c76sm2892803wme.18.2019.11.22.01.44.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 01:44:13 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <939F3170-151F-411B-B52B-722D05E4E320@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_06FFFFD5-D7DB-4807-A54C-07785AB758CE"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 09:44:11 +0000
In-Reply-To: <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com>
Cc: "Richard Backman, Annabelle" <richanna@amazon.com>, oauth <oauth@ietf.org>
To: Dick Hardt <dick.hardt@gmail.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/-6wq8IcbcgLgGdX7Pr145uRXODU>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 09:44:19 -0000

--Apple-Mail=_06FFFFD5-D7DB-4807-A54C-07785AB758CE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On 22 Nov 2019, at 07:13, Dick Hardt <dick.hardt@gmail.com> wrote:
>=20
> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden <neil.madden@forgerock.com =
<mailto:neil.madden@forgerock.com>> wrote:
> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com <mailto:richanna@amazon.com>> wrote:
>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>=20
>=20
> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>=20
> While validation at the RS may be an optimization in many cases, it is =
still a requirement for deployments.

It's a pattern currently used in some deployments. But as Brian (I =
believe) mentioned at the last OSW in Trento, you often really want to =
setup a shared key between the AS and the RS and use authenticated =
encryption instead for performance and PII protection reasons. And if =
you do that then (a) replay by the RS is not possible because each RS =
has a different key and (b) you can use the shared key for macaroons =
too.

(This is why I proposed adding public key authenticated encryption to =
JOSE [1] after OSW, and why the initial version of the draft included a =
simple two-way handshake to derive a symmetric session key that could be =
used for subsequent messages. That handshake had perfect forward secrecy =
and key compromise impersonation protection as well, which is overkill =
for DPoP hence my later simplified challenge-response version).

>=20
> I echo Annabelle's last question: what threats are in scope (and out =
of scope) for DPoP?

I agree this is the crucial question as per my original post a week ago =
asking what the intended threat model is [2].

[1]: https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02 =
<https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02>=20
[2]: =
https://mailarchive.ietf.org/arch/msg/oauth/1Zltt75p5taPw0DRmhoKLbavu9s =
<https://mailarchive.ietf.org/arch/msg/oauth/1Zltt75p5taPw0DRmhoKLbavu9s>

-- Neil=

--Apple-Mail=_06FFFFD5-D7DB-4807-A54C-07785AB758CE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">On =
22 Nov 2019, at 07:13, Dick Hardt &lt;<a =
href=3D"mailto:dick.hardt@gmail.com" =
class=3D"">dick.hardt@gmail.com</a>&gt; wrote:<div><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><br =
class=3D""><div class=3D"gmail_quote"><div dir=3D"ltr" =
class=3D"gmail_attr">On Fri, Nov 22, 2019 at 3:08 PM Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex"><div dir=3D"auto" class=3D""><div =
dir=3D"ltr" class=3D"">On 22 Nov 2019, at 01:42, Richard Backman, =
Annabelle &lt;<a href=3D"mailto:richanna@amazon.com" target=3D"_blank" =
class=3D"">richanna@amazon.com</a>&gt; wrote:</div><div dir=3D"ltr" =
class=3D""><blockquote type=3D"cite" class=3D"">There are key =
distribution challenges with that if you are doing validation at the RS, =
but
 validation at the RS using either approach means you=E2=80=99ve lost =
protection against replay by the RS. This brings us back to a core =
question: what threats are in scope for DPoP, and in what contexts?<br =
class=3D""></blockquote></div><div class=3D""><br class=3D""></div>Agreed,=
 but validation at the RS is premature optimisation in many cases. And =
if you do need protection against that the client can even append a =
confirmation key as a caveat and retrospectively upgrade a bearer token =
to a pop token. They can even do transfer of ownership by creating =
copies of the original token bound to other certificates/public =
keys.&nbsp;</div></blockquote><div class=3D""><br class=3D""></div><div =
class=3D"">While validation at the RS may be an optimization in many =
cases, it is still a requirement for =
deployments.</div></div></div></div></blockquote><div><br =
class=3D""></div><div>It's a pattern currently used in some deployments. =
But as Brian (I believe) mentioned at the last OSW in Trento, you often =
really want to setup a shared key between the AS and the RS and use =
authenticated encryption instead for performance and PII protection =
reasons. And if you do that then (a) replay by the RS is not possible =
because each RS has a different key and (b) you can use the shared key =
for macaroons too.</div><div><br class=3D""></div><div>(This is why I =
proposed adding public key authenticated encryption to JOSE [1] after =
OSW, and why the initial version of the draft included a simple two-way =
handshake to derive a symmetric session key that could be used for =
subsequent messages. That handshake had perfect forward secrecy and key =
compromise impersonation protection as well, which is overkill for DPoP =
hence my later simplified challenge-response version).</div><div><br =
class=3D""></div><blockquote type=3D"cite" class=3D""><div class=3D""><div=
 dir=3D"ltr" class=3D""><div class=3D"gmail_quote"><div class=3D""><br =
class=3D""></div><div class=3D"">I echo Annabelle's last question: what =
threats are in scope (and out of scope) for =
DPoP?</div></div></div></div></blockquote><br class=3D""></div><div>I =
agree this is the crucial question as per my original post a week ago =
asking what the intended threat model is [2].</div><div><br =
class=3D""></div><div>[1]:&nbsp;<a =
href=3D"https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02" =
class=3D"">https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02</a>&n=
bsp;</div><div>[2]:&nbsp;<a =
href=3D"https://mailarchive.ietf.org/arch/msg/oauth/1Zltt75p5taPw0DRmhoKLb=
avu9s" =
class=3D"">https://mailarchive.ietf.org/arch/msg/oauth/1Zltt75p5taPw0DRmho=
KLbavu9s</a></div><div><br class=3D""></div><div>-- =
Neil</div></body></html>=

--Apple-Mail=_06FFFFD5-D7DB-4807-A54C-07785AB758CE--


From nobody Fri Nov 22 02:08:40 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6752A1202A0 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:08:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9YA6C791bpf6 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:08:38 -0800 (PST)
Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B904812080E for <oauth@ietf.org>; Fri, 22 Nov 2019 02:08:37 -0800 (PST)
Received: by mail-wr1-x434.google.com with SMTP id b18so7866423wrj.8 for <oauth@ietf.org>; Fri, 22 Nov 2019 02:08:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=bNFJknvfw3j+SGS8ng96CeAuLNRm3AzqH4lZa1H9Log=; b=LpF+8YP41eJlRYRRObyboUWsnhRKVQsCjUbQ55xuqCsfBJ3BtkWKjcdW8nW1vlQHCg o7EEp7wcxpSWFqT9RdjvQ2wiLiSMIeVBXiCkGLUkh1wsDhFp3KTrtbwhoKj9nelA99kP bKIjMz6Spiqi6EVdIaO87u73PjOLqRuBQEEmM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=bNFJknvfw3j+SGS8ng96CeAuLNRm3AzqH4lZa1H9Log=; b=cEFaVf3JNGTWQKDFBbbXHL+Pr5xncMaYCIIV824rtPz6t7thccjrONH1QY4tSYjz7n Y/IXkZDaxKa6alkh0M1LO4DfHhs2iHJMtclIjTYbq123f9A3uxYhawV4s9IRHzZ/WsRK QnYbvCaPE7fcTW7+ZJuQ5AGK9MoIvf6BEzz3GCikBDA3RIqfO7sENSlBRfbURhP/2yFS 7eIYc5ZqKT+VpSXwts4U9ALbrjyzRlth+oeE7v3ndFWI+F3Se9Xy2tGBfZD/RMJ6qdCk Z7XhmuB0/ollCn1/zHA1v6QIKJtEWMe86/N/8AlDye/fit18KCyrYDsP8BUHRZ4/GzD0 cqkw==
X-Gm-Message-State: APjAAAUsspXqDjz5d3vXVX8r0Q0yp5USRo7vtFndAPat0irnqcPfS4tk lhHrEB+GUB9W2+T/gKu9luJjDw==
X-Google-Smtp-Source: APXvYqy+cxCZp9KH6Ncm4YB0WZRhebw9hq+/LwXq6bXd5hXslzi0EiYJpbH9iVoiXejJvsjcFLhYZQ==
X-Received: by 2002:a5d:6a83:: with SMTP id s3mr16467945wru.159.1574417316076;  Fri, 22 Nov 2019 02:08:36 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id a17sm7068661wrs.33.2019.11.22.02.08.34 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 02:08:34 -0800 (PST)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
From: Neil Madden <neil.madden@forgerock.com>
In-Reply-To: <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net>
Date: Fri, 22 Nov 2019 10:08:33 +0000
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/qRL5llTZrWg-TXdwooD_9MCM-dQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 10:08:39 -0000

On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>=20
>=20
>=20
>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>=20
>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>>=20
>> If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20
>=20
> as a co-author of the DPoP draft I state again what I said yesterday: =
DPoP is a mechanism for sender-constraining access tokens sent from SPAs =
only. The threat to be prevented is token replay.

I think the phrase "token replay" is ambiguous. Traditionally it refers =
to an attacker being able to capture a token (or whole requests) in use =
and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).

But if that's the case then there are much simpler defences than those =
proposed in the current draft:

1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
2. Make the DPoP token be a simple JWT with an "iat" and the origin of =
the RS. This stops the token being reused elsewhere but the client can =
reuse it (replay it) for many requests.
3. Issue a macaroon-based access token and the client can add a correct =
audience and scope restrictions at the point of use.

Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.

-- Neil=


From nobody Fri Nov 22 02:20:16 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 748F21207FD for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:20:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level: 
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GVgF8otNMQXO for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:20:12 -0800 (PST)
Received: from mail-il1-x130.google.com (mail-il1-x130.google.com [IPv6:2607:f8b0:4864:20::130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18A3112080E for <oauth@ietf.org>; Fri, 22 Nov 2019 02:20:12 -0800 (PST)
Received: by mail-il1-x130.google.com with SMTP id q15so6407201ils.8 for <oauth@ietf.org>; Fri, 22 Nov 2019 02:20:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=WTHXEjQvfCtm7o8KG5MhiQiFzEcmU8LBhZbrOsRYoA4=; b=yCtlhGWLoIXbfrt+MDsy9lfAQGTQJiRXaiYMpVeh/dhgV02+Rq4nxzZGYcKHQgvsUf QkJa1AUw7N0iYPKkdV3C5lqdocfdn3jUA2tjbcNoTndXTDee4ak5mIHsjDGK7v5f6QEh 3TpdztlnT70C/MG3zZiUV5SolJOO4cDdyqgD9UqPRbBL8jTGXrS+RmVOX5yReC5mePkG vmpJqqbFiu/uASEmk31qdJzRBDlD1HHz8y0P7GrqrRgBgKeP/HLMrbKjNdNhNIoRAkwN rgEhXNISNPIAYmJVBvnHh7w1haWlYSu/kC+nzi/a94hGn4kOdddB4q3tX7//Yb9iVj/u PytQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=WTHXEjQvfCtm7o8KG5MhiQiFzEcmU8LBhZbrOsRYoA4=; b=AB7oIBlUYxkir7QBkqxeU/rFxDXqdPgJo+5j7vrCDT5H8vf648qJHDh8gj6IUoSG52 k94urrG47WVFoXkd67Mz1S+bYlKuijIhBPny+ucRHbaZp8Y/Sgoyar/AXuBJdFej2o5n r59yseykTw5ZxKBUSLLVJhN0rrzlHI8O2aopfOfiQHKRkyPbipHNCg+KlKMDwkobsdOB oR88oI+rGkGCK5Lr/zUJZ5CdeqpN+Nv44aobVfEdSX00THdA853T1JmGyMTVZr4qNOQb 6JIJNeCpfWKpwUKX9o0SqSXVHs33akv5+dKdnuBeA6sGZTzYlldvkmrGjgzsIblkVIfC KDIw==
X-Gm-Message-State: APjAAAXx36Qk7RwRsDh8lhgnOd2OLGFRdUkBl30jHpQQIKQ3/CGbot7F +DrGf3spluETZ4sR678wz4BeEA2fzJE++Q==
X-Google-Smtp-Source: APXvYqzuXvtX8MqZm09Egb37G9T3W9jMG2ehZNwNQ1gaeGsahQkEOQrXz85HQLQE0XBlzNuxEJKw6Q==
X-Received: by 2002:a92:9f1c:: with SMTP id u28mr14611224ili.97.1574418011141;  Fri, 22 Nov 2019 02:20:11 -0800 (PST)
Received: from mail-il1-f171.google.com (mail-il1-f171.google.com. [209.85.166.171]) by smtp.gmail.com with ESMTPSA id n28sm2660317ili.70.2019.11.22.02.20.10 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 22 Nov 2019 02:20:10 -0800 (PST)
Received: by mail-il1-f171.google.com with SMTP id s75so6448609ilc.3 for <oauth@ietf.org>; Fri, 22 Nov 2019 02:20:10 -0800 (PST)
X-Received: by 2002:a92:5ac1:: with SMTP id b62mr15601793ilg.46.1574418009892;  Fri, 22 Nov 2019 02:20:09 -0800 (PST)
MIME-Version: 1.0
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com>
In-Reply-To: <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com>
From: Aaron Parecki <aaron@parecki.com>
Date: Fri, 22 Nov 2019 18:19:58 +0800
X-Gmail-Original-Message-ID: <CAGBSGjoSkwOJ2ajG=AeC-Z7H6noCMekRpi8jDJXd8uk2tOp=Ow@mail.gmail.com>
Message-ID: <CAGBSGjoSkwOJ2ajG=AeC-Z7H6noCMekRpi8jDJXd8uk2tOp=Ow@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003532e80597ecc23d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ZrsYGbj-Xsq7d0fhg45im8U1HqQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 10:20:14 -0000

--0000000000003532e80597ecc23d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

The main concern about token replay in a SPA is that the access token may
be extracted from the app, such as via XSS. Using the Web Crypto API has
the advantage of being able to generate a public private key pair where the
JS code can't access the private key at all, it can only be used to sign
things, making it impossible for an attacker to extract an access token and
use it for anything. You might then say that if a JS app is vulnerable to
XSS then the attacker could just call the signing API anyway, which is a
concern, but that's a different threat profile.

Aaron




On Fri, Nov 22, 2019 at 6:08 PM Neil Madden <neil.madden@forgerock.com>
wrote:

> On 22 Nov 2019, at 07:53, Torsten Lodderstedt <torsten=3D
> 40lodderstedt.net@dmarc.ietf.org> wrote:
> >
> >
> >
> >> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
> >>
> >> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about th=
e scope here.
> That was the one major thing that struck me during the DPoP discussions i=
n
> Singapore yesterday: we don=E2=80=99t seem to agree on what DPoP is for. =
Some
> (including the authors, it seems) see it as a quick point-solution to a
> specific use case. Others see it as a general PoP mechanism.
> >>
> >> If it=E2=80=99s the former, then it should be explicitly tied to one s=
pecific
> set of things. If it=E2=80=99s the latter, then it needs to be expanded.
> >
> > as a co-author of the DPoP draft I state again what I said yesterday:
> DPoP is a mechanism for sender-constraining access tokens sent from SPAs
> only. The threat to be prevented is token replay.
>
> I think the phrase "token replay" is ambiguous. Traditionally it refers t=
o
> an attacker being able to capture a token (or whole requests) in use and
> then replay it against the same RS. This is already protected against by
> the use of normal TLS on the connection between the client and the RS. I
> think instead you are referring to a malicious/compromised RS replaying t=
he
> token to a different RS - which has more of the flavour of a man in the
> middle attack (of the phishing kind).
>
> But if that's the case then there are much simpler defences than those
> proposed in the current draft:
>
> 1. Get separate access tokens for each RS with correct audience and
> scopes. The consensus appears to be that this is hard to do in some cases=
,
> hence the draft.
> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of th=
e
> RS. This stops the token being reused elsewhere but the client can reuse =
it
> (replay it) for many requests.
> 3. Issue a macaroon-based access token and the client can add a correct
> audience and scope restrictions at the point of use.
>
> Protecting against the first kind of replay attacks only becomes an issue
> if we assume the protections in TLS have failed. But if DPoP is only
> intended for cases where mTLS can't be used, it shouldn't have to protect
> against a stronger threat model in which we assume that TLS security has
> been lost.
>
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
--=20
----
Aaron Parecki
aaronparecki.com
@aaronpk <http://twitter.com/aaronpk>

--0000000000003532e80597ecc23d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div dir=3D"auto">The main concern about token replay in a SPA is that=
 the access token may be extracted from the app, such as via XSS. Using the=
 Web Crypto API has the advantage of being able to generate a public privat=
e key pair where the JS code can&#39;t access the private key at all, it ca=
n only be used to sign things, making it impossible for an attacker to extr=
act an access token and use it for anything. You might then say that if a J=
S app is vulnerable to XSS then the attacker could just call the signing AP=
I anyway, which is a concern, but that&#39;s a different threat profile.=C2=
=A0</div></div><div dir=3D"auto"><br></div><div dir=3D"auto">Aaron</div><di=
v dir=3D"auto"><br></div><div dir=3D"auto"><br></div><div dir=3D"auto"><br>=
</div><div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_a=
ttr">On Fri, Nov 22, 2019 at 6:08 PM Neil Madden &lt;<a href=3D"mailto:neil=
.madden@forgerock.com">neil.madden@forgerock.com</a>&gt; wrote:<br></div><b=
lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =
#ccc solid;padding-left:1ex">On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
&lt;torsten=3D<a href=3D"mailto:40lodderstedt.net@dmarc.ietf.org" target=3D=
"_blank">40lodderstedt.net@dmarc.ietf.org</a>&gt; wrote:<br>
&gt; <br>
&gt; <br>
&gt; <br>
&gt;&gt; On 22. Nov 2019, at 15:24, Justin Richer &lt;<a href=3D"mailto:jri=
cher@mit.edu" target=3D"_blank">jricher@mit.edu</a>&gt; wrote:<br>
&gt;&gt; <br>
&gt;&gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question abou=
t the scope here. That was the one major thing that struck me during the DP=
oP discussions in Singapore yesterday: we don=E2=80=99t seem to agree on wh=
at DPoP is for. Some (including the authors, it seems) see it as a quick po=
int-solution to a specific use case. Others see it as a general PoP mechani=
sm. <br>
&gt;&gt; <br>
&gt;&gt; If it=E2=80=99s the former, then it should be explicitly tied to o=
ne specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded. <br>
&gt; <br>
&gt; as a co-author of the DPoP draft I state again what I said yesterday: =
DPoP is a mechanism for sender-constraining access tokens sent from SPAs on=
ly. The threat to be prevented is token replay.<br>
<br>
I think the phrase &quot;token replay&quot; is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) in =
use and then replay it against the same RS. This is already protected again=
st by the use of normal TLS on the connection between the client and the RS=
. I think instead you are referring to a malicious/compromised RS replaying=
 the token to a different RS - which has more of the flavour of a man in th=
e middle attack (of the phishing kind).<br>
<br>
But if that&#39;s the case then there are much simpler defences than those =
proposed in the current draft:<br>
<br>
1. Get separate access tokens for each RS with correct audience and scopes.=
 The consensus appears to be that this is hard to do in some cases, hence t=
he draft.<br>
2. Make the DPoP token be a simple JWT with an &quot;iat&quot; and the orig=
in of the RS. This stops the token being reused elsewhere but the client ca=
n reuse it (replay it) for many requests.<br>
3. Issue a macaroon-based access token and the client can add a correct aud=
ience and scope restrictions at the point of use.<br>
<br>
Protecting against the first kind of replay attacks only becomes an issue i=
f we assume the protections in TLS have failed. But if DPoP is only intende=
d for cases where mTLS can&#39;t be used, it shouldn&#39;t have to protect =
against a stronger threat model in which we assume that TLS security has be=
en lost.<br>
<br>
-- Neil<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature"><div>----</div><div>Aaron Parecki</div><=
div><a href=3D"http://aaronparecki.com" target=3D"_blank">aaronparecki.com<=
/a></div><div><a href=3D"http://twitter.com/aaronpk" target=3D"_blank">@aar=
onpk</a></div><div><br></div></div>

--0000000000003532e80597ecc23d--


From nobody Fri Nov 22 02:23:35 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE93A120822 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:23:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oA0gOFRF7L6l for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 02:23:31 -0800 (PST)
Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E7D61207FD for <oauth@ietf.org>; Fri, 22 Nov 2019 02:23:30 -0800 (PST)
Received: by mail-wm1-x335.google.com with SMTP id 8so6985095wmo.0 for <oauth@ietf.org>; Fri, 22 Nov 2019 02:23:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=MD4YNH3bske2KLjGsswKrFeJikR4PNVBGCD19qVxXPA=; b=OxMVPIPMKLk2uzajDsKveAtCs9bTGAgR0UFbJLa9aimNUkxK2qGgFIEzgwjxay7Udc 3lsMNTciN0zX2GUv22J6FlaBnD1g8/BmeTGrrESB0ep+bQWHzrQx0p9OLWZrAuGqBVlz jp4wffi24RykTYHG0UEeAUT8vQrjUfauZADWI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=MD4YNH3bske2KLjGsswKrFeJikR4PNVBGCD19qVxXPA=; b=mYUJXBCQBXbeKElDlU8ufzYY2nNGcMKg630Jb7tO8qgwY+wCV7Fot1iDARuo9ZvKZ9 aaUBDTgbucBdn6nj5IbrDfWXrp77GcvcLrUQTqXPgWJcZ6fhYc46GILJumRpSHIINpaj AjuzwhQOoVYUULOORExhMK6coq9NoXqCun1Xpb2tOdaTdi8qpZnTy6/ClePRkC5oO6EO q9xIa98cctbKfKxj9iypY16MxKosvwumgj3/i9KrOwoGlFnEK6a3gkSWaMsA3Ete4QMX uFhL0VjtircuuqqHvdcDprdWGquz4FdKzEHgonjTyF3hxyQXuaQ/eFNgz1uDUN6kOgfl qk/w==
X-Gm-Message-State: APjAAAVvSuDnZhvoalBU5Qt5ZLBIx7c0wRIjWAB+sPDvD0UAiIvvkzp7 QzX6pwNp9/fKFNIC9DQNW1PGrA==
X-Google-Smtp-Source: APXvYqybNzNZzyHVBYijcCAI2lzX+Tk/+PnhrNQnH6K716RC+RNFNx7jAVGFU2gFbSdUM69WC+Bb4A==
X-Received: by 2002:a1c:23c1:: with SMTP id j184mr15134810wmj.83.1574418209398;  Fri, 22 Nov 2019 02:23:29 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id x7sm7071616wrq.41.2019.11.22.02.23.28 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 02:23:28 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <B15ABCF0-B931-4AEE-9109-A626278CD88C@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_3F0BA50E-DD75-48F4-ADF3-40244582E78F"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 10:23:26 +0000
In-Reply-To: <CAGBSGjoSkwOJ2ajG=AeC-Z7H6noCMekRpi8jDJXd8uk2tOp=Ow@mail.gmail.com>
Cc: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, oauth <oauth@ietf.org>
To: Aaron Parecki <aaron@parecki.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <CAGBSGjoSkwOJ2ajG=AeC-Z7H6noCMekRpi8jDJXd8uk2tOp=Ow@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ZXhMv8VDVzfU9SpP71wtsX9pAyw>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 10:23:34 -0000

--Apple-Mail=_3F0BA50E-DD75-48F4-ADF3-40244582E78F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

It's not a different threat profile. This is the same assumption people =
made when introducing HttpOnly cookies, which just led to attackers =
switching to proxy everything through the browser as per things like =
https://beefproject.com <https://beefproject.com/> . (This is actually =
nicer for the attacker as their requests then appear to come from the =
legitimate user, masking their true origin and allowing them to carry =
out attacks bypassing the corporate firewall). DPoP is not a protection =
against XSS and shouldn't be sold as such.

-- Neil

> On 22 Nov 2019, at 10:19, Aaron Parecki <aaron@parecki.com> wrote:
>=20
> The main concern about token replay in a SPA is that the access token =
may be extracted from the app, such as via XSS. Using the Web Crypto API =
has the advantage of being able to generate a public private key pair =
where the JS code can't access the private key at all, it can only be =
used to sign things, making it impossible for an attacker to extract an =
access token and use it for anything. You might then say that if a JS =
app is vulnerable to XSS then the attacker could just call the signing =
API anyway, which is a concern, but that's a different threat profile.=20=

>=20
> Aaron
>=20
>=20
>=20
>=20
> On Fri, Nov 22, 2019 at 6:08 PM Neil Madden <neil.madden@forgerock.com =
<mailto:neil.madden@forgerock.com>> wrote:
> On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org =
<mailto:40lodderstedt.net@dmarc.ietf.org>> wrote:
> >=20
> >=20
> >=20
> >> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu =
<mailto:jricher@mit.edu>> wrote:
> >>=20
> >> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
> >>=20
> >> If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
> >=20
> > as a co-author of the DPoP draft I state again what I said =
yesterday: DPoP is a mechanism for sender-constraining access tokens =
sent from SPAs only. The threat to be prevented is token replay.
>=20
> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>=20
> But if that's the case then there are much simpler defences than those =
proposed in the current draft:
>=20
> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of =
the RS. This stops the token being reused elsewhere but the client can =
reuse it (replay it) for many requests.
> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>=20
> Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.
>=20
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org <mailto:OAuth@ietf.org>
> https://www.ietf.org/mailman/listinfo/oauth =
<https://www.ietf.org/mailman/listinfo/oauth>
> --=20
> ----
> Aaron Parecki
> aaronparecki.com <http://aaronparecki.com/>
> @aaronpk <http://twitter.com/aaronpk>
>=20


--Apple-Mail=_3F0BA50E-DD75-48F4-ADF3-40244582E78F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">It's =
not a different threat profile. This is the same assumption people made =
when introducing HttpOnly cookies, which just led to attackers switching =
to proxy everything through the browser as per things like&nbsp;<a =
href=3D"https://beefproject.com" =
class=3D"">https://beefproject.com</a>&nbsp;. (This is actually nicer =
for the attacker as their requests then appear to come from the =
legitimate user, masking their true origin and allowing them to carry =
out attacks bypassing the corporate firewall). DPoP is not a protection =
against XSS and shouldn't be sold as such.<div class=3D""><br =
class=3D""></div><div class=3D"">-- Neil<br class=3D"">
<div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 22 Nov 2019, at 10:19, Aaron Parecki &lt;<a =
href=3D"mailto:aaron@parecki.com" class=3D"">aaron@parecki.com</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div =
class=3D""><div dir=3D"auto" class=3D"">The main concern about token =
replay in a SPA is that the access token may be extracted from the app, =
such as via XSS. Using the Web Crypto API has the advantage of being =
able to generate a public private key pair where the JS code can't =
access the private key at all, it can only be used to sign things, =
making it impossible for an attacker to extract an access token and use =
it for anything. You might then say that if a JS app is vulnerable to =
XSS then the attacker could just call the signing API anyway, which is a =
concern, but that's a different threat profile.&nbsp;</div></div><div =
dir=3D"auto" class=3D""><br class=3D""></div><div dir=3D"auto" =
class=3D"">Aaron</div><div dir=3D"auto" class=3D""><br =
class=3D""></div><div dir=3D"auto" class=3D""><br class=3D""></div><div =
dir=3D"auto" class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""><div class=3D"gmail_quote"><div dir=3D"ltr" =
class=3D"gmail_attr">On Fri, Nov 22, 2019 at 6:08 PM Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br =
class=3D""></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex">On 22 Nov 2019, at =
07:53, Torsten Lodderstedt &lt;torsten=3D<a =
href=3D"mailto:40lodderstedt.net@dmarc.ietf.org" target=3D"_blank" =
class=3D"">40lodderstedt.net@dmarc.ietf.org</a>&gt; wrote:<br class=3D"">
&gt; <br class=3D"">
&gt; <br class=3D"">
&gt; <br class=3D"">
&gt;&gt; On 22. Nov 2019, at 15:24, Justin Richer &lt;<a =
href=3D"mailto:jricher@mit.edu" target=3D"_blank" =
class=3D"">jricher@mit.edu</a>&gt; wrote:<br class=3D"">
&gt;&gt; <br class=3D"">
&gt;&gt; I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question =
about the scope here. That was the one major thing that struck me during =
the DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to =
agree on what DPoP is for. Some (including the authors, it seems) see it =
as a quick point-solution to a specific use case. Others see it as a =
general PoP mechanism. <br class=3D"">
&gt;&gt; <br class=3D"">
&gt;&gt; If it=E2=80=99s the former, then it should be explicitly tied =
to one specific set of things. If it=E2=80=99s the latter, then it needs =
to be expanded. <br class=3D"">
&gt; <br class=3D"">
&gt; as a co-author of the DPoP draft I state again what I said =
yesterday: DPoP is a mechanism for sender-constraining access tokens =
sent from SPAs only. The threat to be prevented is token replay.<br =
class=3D"">
<br class=3D"">
I think the phrase "token replay" is ambiguous. Traditionally it refers =
to an attacker being able to capture a token (or whole requests) in use =
and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).<br class=3D"">
<br class=3D"">
But if that's the case then there are much simpler defences than those =
proposed in the current draft:<br class=3D"">
<br class=3D"">
1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.<br class=3D"">
2. Make the DPoP token be a simple JWT with an "iat" and the origin of =
the RS. This stops the token being reused elsewhere but the client can =
reuse it (replay it) for many requests.<br class=3D"">
3. Issue a macaroon-based access token and the client can add a correct =
audience and scope restrictions at the point of use.<br class=3D"">
<br class=3D"">
Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.<br class=3D"">
<br class=3D"">
-- Neil<br class=3D"">
_______________________________________________<br class=3D"">
OAuth mailing list<br class=3D"">
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank" =
class=3D"">OAuth@ietf.org</a><br class=3D"">
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer"=
 target=3D"_blank" =
class=3D"">https://www.ietf.org/mailman/listinfo/oauth</a><br class=3D"">
</blockquote></div></div>-- <br class=3D""><div dir=3D"ltr" =
class=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div =
class=3D"">----</div><div class=3D"">Aaron Parecki</div><div class=3D""><a=
 href=3D"http://aaronparecki.com/" target=3D"_blank" =
class=3D"">aaronparecki.com</a></div><div class=3D""><a =
href=3D"http://twitter.com/aaronpk" target=3D"_blank" =
class=3D"">@aaronpk</a></div><div class=3D""><br class=3D""></div></div>
</div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_3F0BA50E-DD75-48F4-ADF3-40244582E78F--


From nobody Fri Nov 22 03:39:06 2019
Return-Path: <Petteri.Stenius@ubisecure.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CEAF12083F for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 03:39:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ubisecure.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eT5e-RvPnfZ5 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 03:39:01 -0800 (PST)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150050.outbound.protection.outlook.com [40.107.15.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 887E312082E for <oauth@ietf.org>; Fri, 22 Nov 2019 03:39:00 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MjqVReNCo3/omNzkPGIaxGCp81U05RnZwMg1WqclIb4J8j9UdnC5PiqvHdK6IY1sIAfQTWf/nHrqSj6O9HeP8nT8x9pAVCQCdGD70xpURu1FIXEpDYaBBjGKTjK3woFJQ8x+2KM3RNGkTBqQoeUlHXnoMf1ikuckUYfrM2wPNNWPcoVzT15bVom8nA+lFibolhWoZQnUnwWeUMuITzZMPYP2VtcvSDCpnQ4SdiL8ozt5vAs9aa51Ww8W4kpeP8htL+QmTIF9T0SjUB2uuXid+HAghP7zo9glo/nYjBpz1CWxnhxVcEQtAeDL54X/tb/UHAumRTQFeN36EcI3Wp3pHg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OsIU1XiXop73GT9vXdra+yafv+Oqp70FdhGSePvwfyY=; b=WpH/MaGdHf7WOO8yiOwkVN2tP45xpj7wDlYfEf9qq3Xm1/dl64H6ZipLBCLpy3ykIi33WtJF1T4P3Rq9RFQW0WLyTj8Q42mlcypSKZ/fziZICiMk2O4lC8lR8dzu0g7sj7WnDPvc92MVBr0Xspg0wW8Cbf2oU0oJFYQkjDfQOaWrn95YU/wCuHSLxafU44kzR9FdQ84xQzjnREYh5FcMnbflSAeQRjnpt3Ir8mRAdk2IlNImUQAP4/7xd5WolYZH+BchTYsUxKxH+LRdv/9eiroaM0FsZQdsF7tldOBkt02lYbvZ9lhj7iz3sKdq3PlEeztmahuXC/1mcJX4Adejlg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ubisecure.com; dmarc=pass action=none header.from=ubisecure.com; dkim=pass header.d=ubisecure.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ubisecure.onmicrosoft.com; s=selector2-ubisecure-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OsIU1XiXop73GT9vXdra+yafv+Oqp70FdhGSePvwfyY=; b=X4QLHYfj7HIMZAgO4vEfiNA5j7tR6oYemsJum7UAWKG+bqC4fj3gY83Mztv+HaECohcumGcWpKPvD9vAvSh5Ii4fyAgWZ2IcInXziDDCla86UFa6YgtYG54/N+SbdF7VgVd+DQfgOtB/Wtp53fZr/b7h4CUDBV2jVPpNwN/FmG4=
Received: from HE1PR05MB4713.eurprd05.prod.outlook.com (20.176.165.141) by HE1PR05MB4537.eurprd05.prod.outlook.com (20.176.166.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Fri, 22 Nov 2019 11:38:57 +0000
Received: from HE1PR05MB4713.eurprd05.prod.outlook.com ([fe80::1936:22f0:1ba8:a82a]) by HE1PR05MB4713.eurprd05.prod.outlook.com ([fe80::1936:22f0:1ba8:a82a%5]) with mapi id 15.20.2451.029; Fri, 22 Nov 2019 11:38:57 +0000
From: Petteri Stenius <Petteri.Stenius@ubisecure.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
CC: oauth <oauth@ietf.org>, Rob Otto <robotto=40pingidentity.com@dmarc.ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2WYkCzW+83c0eZIRdcZT2QwqeSJFIAgAD4+QCAAhU5gIAA7zuAgABUwoCAAFsGAIAAAUqAgAADQ4CAAAfLgIAAAduAgAADCgCAAAMJAIAACCqAgAAA+ICAAC1lUA==
Date: Fri, 22 Nov 2019 11:38:57 +0000
Message-ID: <HE1PR05MB47138B16B12E3EEAF8B9B9CDFA490@HE1PR05MB4713.eurprd05.prod.outlook.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com> <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net> <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com> <1F50E494-5AA7-4739-BC17-9DC08FC0A254@lodderstedt.net>
In-Reply-To: <1F50E494-5AA7-4739-BC17-9DC08FC0A254@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Petteri.Stenius@ubisecure.com; 
x-originating-ip: [195.197.205.34]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 181eae9e-8d2b-49ba-1bb3-08d76f408fd3
x-ms-traffictypediagnostic: HE1PR05MB4537:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <HE1PR05MB4537E5F10AF8B9B00EDBEFBEFA490@HE1PR05MB4537.eurprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:3173;
x-forefront-prvs: 02296943FF
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(136003)(39840400004)(396003)(366004)(13464003)(51914003)(189003)(199004)(53754006)(8936002)(81166006)(8676002)(86362001)(33656002)(76116006)(66556008)(99286004)(64756008)(66476007)(66446008)(52536014)(66574012)(66066001)(66946007)(15650500001)(14444005)(5024004)(229853002)(256004)(71200400001)(81156014)(4326008)(5660300002)(71190400001)(76176011)(6116002)(3846002)(9686003)(6436002)(2906002)(55016002)(6306002)(6246003)(102836004)(6506007)(186003)(446003)(53546011)(26005)(74316002)(305945005)(11346002)(25786009)(508600001)(966005)(7736002)(45080400002)(7696005)(54906003)(316002)(14454004)(110136005); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR05MB4537; H:HE1PR05MB4713.eurprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: ubisecure.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: z8hKzry2/QjFjS3q0CKj//q/k/t+9BnSnQ9ZRFFhV0vOrpOELwZZ47DrsmQBb2sfqO6msEFS5cKGB3qeiAITajB24QmKTYttoOgZJaCrDuQ+hZvTjbdBosl7aIS95Wv6noNY+I0iYFBZA5mCmWWQ+GOA04U+nDioU+nc81kzDEoAg6842lALGHJG4yoXzcq/oR+PTqrfsby2IinQxrONNMgw6oB3ebgrkbXOqAHgZ+ta18DjoadF1zCd9n9b4pLlLmYHoFfMUKILhc/xoDuu5M++qjKchHpvJK1E7C+M0qTI6XiNz4DUtcvB1q4O6ipKGLt5OUyXXeNEgjqKuFZTVW9rk3JQWJHVWm+tFtszt/Xjsnf2Wy80DANyN65a4VBikuPQQeD9lPaAWi26SEWDfi/5+ITc0deA8eLpWkRWyPJscTpjbpHfK2pPTUA48VoCaqh96O3h5Nk5edZ1MaVgJtAkaJ94A5onRkpCbu1C/wI=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ubisecure.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 181eae9e-8d2b-49ba-1bb3-08d76f408fd3
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2019 11:38:57.6512 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: feaa1139-6ffc-4422-9c7b-980ad003c1a7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /+tCROSNavjZRbLKSY8rcXAE8AJjER3+I35T+fv8xdf7h3ATNg61PrfzS1vBg0EC1Jht3dwfPDqC64xCr5C40ppHO1kmmwNOxVdg/Jk9kLA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR05MB4537
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/V2TDPy-6wigLEuagOXcHwrLPb8c>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 11:39:04 -0000
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From nobody Fri Nov 22 04:16:10 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B38D81208A5 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:16:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fr3iPdSu41Ae for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:16:04 -0800 (PST)
Received: from mail-pf1-x433.google.com (mail-pf1-x433.google.com [IPv6:2607:f8b0:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5281120970 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:16:01 -0800 (PST)
Received: by mail-pf1-x433.google.com with SMTP id c13so3417558pfp.5 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:16:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=DC7VW0B0nq+enVc6xFyDxjmSPuMPTx1yI7/NrEu2/uE=; b=rtVQdqKvtsoETZJzErlTuj4wzeBmxIBswFOprF7qR+QAYzDgqNQHQtRxD1DNBNGVuU E+7b6d+LxDG4mzXfP5gs/6JRIind5idUboAzCwwDB3f/S271raiU0nr83VZuwQk/VwTh I+D+TQgZxphG+l7Q9zwSVjzBxhr2gytrRtN7C1Ky/cxxpSVjVK1SDwaPxYz6TOVxsYp/ XtRy/l1zyyelhbhM1sA1Ma9F4fIYJ3YFC5Socm7Clmzo3evW5bw1e25rMHrO+VP4d2Yv wc6N9KjxW2iVya2RTKK6dA3DWXs0hinMZAaUBj0RZchDfbTKZe6JCg9tSNpKtZgH43j8 wuKA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=DC7VW0B0nq+enVc6xFyDxjmSPuMPTx1yI7/NrEu2/uE=; b=Nntq5RHY60dmI0YL6eoRWKvgWCSgAMXb2zVgg/JRl85IiDuVULficu2tcCMoaAPCz+ IWMvzGo4ycr/CQAjLSEvdPPnR7yrGJB5bpB/3WRZln/Jf97pp+TkF981H8usIX5l8Yfd huMFpRLSoTXv5LquJ1UmyJkxIbwf90Xiy72L48GHBZ6ZuXFuyGNYQ/2SiMKqVsqkFDFi MV3Bzt/i4w2SQmF1xeqyr8+jXh2eMXD3WUD4yXOU3QQeWIIJQBEJB+lVNadK8hI30kmT 03v06g/t3i3zBwZr3yFTu7b4a/8DZaeZ6c4kmL5t10iR5/wMZflJHVpScNgRn+XRFuWo CVIg==
X-Gm-Message-State: APjAAAV93j5VUGyh0nV7iNAsDUCCMgYjb86XKqgizWUa/Bfs0r8eWxxX 6ySrBnPJ7lhB20/8fRi48o/Tzg==
X-Google-Smtp-Source: APXvYqxRxje4UTBomDvWy5L2Q51Rf9i/7D8mE/JJkTBQdjKSKVnhGwVlPO+rwP3pVtUGyliQ+OxeWw==
X-Received: by 2002:a63:1c0e:: with SMTP id c14mr15098896pgc.96.1574424961141;  Fri, 22 Nov 2019 04:16:01 -0800 (PST)
Received: from [10.84.13.52] ([103.137.210.94]) by smtp.gmail.com with ESMTPSA id i13sm7029705pfo.39.2019.11.22.04.15.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 04:16:00 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_8202B533-C1CC-473F-85C8-EFDE7004B350"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 20:15:49 +0800
In-Reply-To: <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Neil Madden <neil.madden@forgerock.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/7VN6wRYEH1FDuHOuXeCFakK2yr8>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 12:16:09 -0000

--Apple-Mail=_8202B533-C1CC-473F-85C8-EFDE7004B350
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Neil,

> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>=20
> On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>=20
>>=20
>>=20
>>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>>=20
>>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>>>=20
>>> If it=E2=80=99s the former, then it should be explicitly tied to one =
specific set of things. If it=E2=80=99s the latter, then it needs to be =
expanded.=20
>>=20
>> as a co-author of the DPoP draft I state again what I said yesterday: =
DPoP is a mechanism for sender-constraining access tokens sent from SPAs =
only. The threat to be prevented is token replay.
>=20
> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).

I would argue TLS basically prevents leakage and not replay. The threats =
we try to cope with can be found in the Security BCP. There are multiple =
ways access tokens can leak, including referrer headers, mix-up, open =
redirection, browser history, and all sorts of access token leakage at =
the resource server

Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=


=
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.

>=20
> But if that's the case then there are much simpler defences than those =
proposed in the current draft:
>=20
> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.

How many deployments do you know that today are able to issue =
RS-specific access tokens?
BTW: how would you identify the RS?

I agree that would be an alternative and I=E2=80=99m a great fan of such =
tokens (and used them a lot at Deutsche Telekom) but in my perception =
this pattern needs still to be established in the market. Moreover, they =
basically protect from a rough RS (if the URL is used as audience) =
replaying the token someplace else, but they do not protect from all =
other kinds of leakage/replay (e.g. log files).

> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of =
the RS. This stops the token being reused elsewhere but the client can =
reuse it (replay it) for many requests.
> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.

Why is this needed if the access token is already audience restricted? =
Or do you propose this as alternative?=20

>=20
> Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.

I agree.=20

best regards,
Torsten.=20

>=20
> -- Neil


--Apple-Mail=_8202B533-C1CC-473F-85C8-EFDE7004B350
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_8202B533-C1CC-473F-85C8-EFDE7004B350--


From nobody Fri Nov 22 04:17:03 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 720EA12084D for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:17:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIgmMgZEh1h0 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:16:58 -0800 (PST)
Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F05DD120832 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:16:57 -0800 (PST)
Received: by mail-pl1-x62c.google.com with SMTP id o9so3051375plk.6 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:16:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=nekcKt/AtnoM1glAZw5Vgv7uiD+xeuCOZHc3v6K6gr0=; b=2z4xSp20Ll7wGDhcaV2S7J6C7KOV8LI+SWpCQPxaToGxk9193xq8H7r9ybr8Q2nN/Y YapSEvC8WSWFBZ2g8tjWvmd35/cEkjS/G2jGGlAYJ0XptbPZLFENaM1gtB+dRB6sUqlg +W0iMhj/iQjj5ubxLeQFPP8990Av6ufYL3av4/jKVdzfVtLocE6B8M7UcMvE0sReJ5Vm 97OCYN8xjdj9WNvEITKrtdcQpq/Xfefq2/7PhkMr5P7SGCBcHw4K2XQGRiWq9uDwULqA Mn3NEZhMMheRa/RxQBUIx4HyI9aJfI0in1CQ55G58HuVz3rfUmvbiivWTjGKVhExABIh r70w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=nekcKt/AtnoM1glAZw5Vgv7uiD+xeuCOZHc3v6K6gr0=; b=s97FWYRG+VRxipoTJ41CaE4zaqEZMt6VFj0JlZupvny1EnvmDAaqjgAU0uZfCxQslD 8TWIYzlSiUhyc47CPUKaJ0mh2tRlIh6kOHUbHCP9Bz8zyUAOFx4CC/3MWb82hji1eKZF nSbPCbx5nkgN06Ol4mlBlDQ/mdTTu+pGDhESxHhxo6Fx7NkLADKnf7acDEmdLpUQInjb NDLbDJZ49tQdIeIV2v2QMz4frV2I7R280PveFmr/3FQfo2xjhAqSfMGEUQavtG/tvMmI u4PoV/zi0LmuJgosbyYdAjUzmevZZHqixtmhAVTTwKeX+iyut/G/tW3h3yvBI9gEbzVx 89YA==
X-Gm-Message-State: APjAAAWBPRRxjzDwgKh9RSNF9qrQyYDv+U094XpeEmW36uNqLPsKvWgG M8NiuUFYTYSbPkKOcBlIBQgYcIEuUYrZohbY
X-Google-Smtp-Source: APXvYqyhxEIi0dicrgp71OYP/pf9QC2C7eu0Ak4e3nI+LnUTaU8YllXHkBR2NisxsQNzMqrIRWq9qQ==
X-Received: by 2002:a17:902:758d:: with SMTP id j13mr14436953pll.55.1574425017311;  Fri, 22 Nov 2019 04:16:57 -0800 (PST)
Received: from [10.84.13.52] ([103.137.210.94]) by smtp.gmail.com with ESMTPSA id i13sm7029705pfo.39.2019.11.22.04.16.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 04:16:56 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <47A8F67C-4F4F-4E1A-B087-8A468F0AD99D@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_10CDEE9F-4BAA-40DA-B4D7-DE0BCDFB5A05"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 20:16:51 +0800
In-Reply-To: <HE1PR05MB47138B16B12E3EEAF8B9B9CDFA490@HE1PR05MB4713.eurprd05.prod.outlook.com>
Cc: Mike Jones <Michael.Jones@microsoft.com>, oauth <oauth@ietf.org>, Rob Otto <robotto@pingidentity.com>
To: Petteri Stenius <Petteri.Stenius@ubisecure.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <CABh6VRHoBqbQAe4U8UxXodCc8oOpOb=GRb_82gT6X9H5rp0n8Q@mail.gmail.com> <1119B3F6-01A0-4885-A352-5C719A7CDE2C@lodderstedt.net> <CABh6VRG7nZ0JhX8u8OM6cxR_2m6ZebbkCDPd_OzRHvBv2EQtkA@mail.gmail.com> <7590824B-18B6-4896-AD30-1903A86F5F0A@lodderstedt.net> <BYAPR00MB05674C455BCBA825BA6C906DF5490@BYAPR00MB0567.namprd00.prod.outlook.com> <1F50E494-5AA7-4739-BC17-9DC08FC0A254@lodderstedt.net> <HE1PR05MB47138B16B12E3EEAF8B9B9CDFA490@HE1PR05MB4713.eurprd05.prod.outlook.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/eMFht1onFCOBTbPpjjoEl53N_xk>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 12:17:00 -0000

--Apple-Mail=_10CDEE9F-4BAA-40DA-B4D7-DE0BCDFB5A05
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

I would love see this happen!
Note: you would also need to create a cert.

> On 22. Nov 2019, at 19:38, Petteri Stenius =
<Petteri.Stenius@ubisecure.com> wrote:
>=20
> Hi all,
>=20
> For browser based apps it is basically limitations of Fetch API that =
prevent MTLS binding, as Fetch uses client certificate dialogs and =
stores. Does it make sense to suggest browser vendors fix the Fetch API =
to better support MTLS?
>=20
> For example if Fetch API allowed setting up a MTLS request with a =
WebCrypto generated and managed key it would be sufficient for MTLS =
binding.=20
>=20
> Petteri
>=20
> Fetch API - https://fetch.spec.whatwg.org/=20
>=20
> -----Original Message-----
> From: OAuth <oauth-bounces@ietf.org> On Behalf Of Torsten Lodderstedt
> Sent: perjantai 22. marraskuuta 2019 10.54
> To: Mike Jones <Michael.Jones=3D40microsoft.com@dmarc.ietf.org>
> Cc: oauth <oauth@ietf.org>; Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org>; Rob Otto =
<robotto=3D40pingidentity.com@dmarc.ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for =
draft-fett-oauth-dpop-03.txt
>=20
> I couldn't agree more. I think we should, again, try to find a way to =
utilise TLS in the browser as well.=20
>=20
>> On 22. Nov 2019, at 16:50, Mike Jones =
<Michael.Jones=3D40microsoft.com@dmarc.ietf.org> wrote:
>>=20
>> I hear you about the difference between Web apps and native apps, =
Torsten.  But using different mechanisms for different application types =
is a cost in and of itself.
>>=20
>> It's good to understand the tradeoffs.
>>=20
>> -- Mike
>>=20
>>=20
>> From: OAuth <oauth-bounces@ietf.org> on behalf of Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org>
>> Sent: Friday, November 22, 2019 4:20:58 PM
>> To: Rob Otto <robotto=3D40pingidentity.com@dmarc.ietf.org>
>> Cc: oauth <oauth@ietf.org>
>> Subject: [EXTERNAL] Re: [OAUTH-WG] New Version Notification for =
draft-fett-oauth-dpop-03.txt
>>=20
>> Hi Rob,
>>=20
>>> On 22. Nov 2019, at 16:10, Rob Otto =
<robotto=3D40pingidentity.com@dmarc.ietf.org> wrote:
>>>=20
>>> Hi Torsten - thanks for the reply..
>>>=20
>>> Responses in line.
>>>=20
>>> Gr=C3=BCsse
>>> Rob
>>>=20
>>> On Fri, 22 Nov 2019 at 07:59, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>> Hi Rob,=20
>>>=20
>>>> On 22. Nov 2019, at 15:52, Rob Otto =
<robotto=3D40pingidentity.com@dmarc..ietf.org> wrote:
>>>>=20
>>>> Hi everyone
>>>>=20
>>>> I'd agree with this. I'm looking at DPOP as an alternative and =
ultimately simpler way to accomplish what we can already do with =
MTLS-bound Access Tokens, for use cases such as the ones we address in =
Open Banking; these are API transactions that demand a high level of =
assurance and as such we absolutely must have a mechanism to constrain =
those tokens to the intended bearer. Requiring MTLS across the =
ecosystem, however, adds significant overhead in terms of =
infrastructural complexity and is always going to limit the extent to =
which such a model can scale.
>>>=20
>>> I would like to unterstand why mTLS adds =E2=80=9Csignificant =
overhead in terms of infrastructural complexity=E2=80=9D. Can you please =
dig into details?
>>>=20
>>> I guess it's mostly that every RS-endpoint (or what sits in front of =
it) has to have a mechanism for accepting/terminating mTLS, managing =
roots of trust, validating/OCSP, etc
>>=20
>> You use a PKI then. We use mTLS with self-signed certs. That requires =
the RS to not check the X.509 trust chain, which requires a special =
setting (optionalNoCA).=20
>>=20
>>> and then passing the certificates downstream as headers. None of it =
is necessarily difficult or impossible to do in isolation, but I meet =
many many people every week who simply don't know how to do any of this =
stuff. And these are typically "network people", for want of a better =
word. There are quite a few SaaS API management and edge solutions out =
there that don't even support mTLS at all. You also have the difficulty =
in handling a combination of MTLS and non-MTLS traffic to the same =
endpoints.
>>=20
>> yep. You better split them, especially if that=E2=80=99s a user =
facing endpoint.
>>=20
>>> Again, it's possible to do, but far from straightforward.=20
>>>=20
>>>=20
>>>=20
>>> Our experience so far: It can be a headache to set up in a =
microservice architecture with TLS terminating proxies but once it runs =
it=E2=80=99s ok. On the other side, it=E2=80=99s easy to use for client =
developers and it combines client authentication and sender constraining =
nicely. =20
>>>=20
>>> I do think its an elegant solution, don't get me wrong. It's just =
that there are plenty of moving parts that you need to get right and =
that can be a challenge, particularly in large, complex environments.=20
>>=20
>> I agree. I also tend there is a tendency to think Client TLS =
authentication is bad. I understand that from historical and recent =
experience with PKI.=20
>>=20
>> But anybody considering to use a application level signing solution =
based on _raw_ public keys should directly move towards self-signed =
certificates. That brings you all the benefits of TLS without the (PKI) =
headache.=20
>>=20
>>>=20
>>>=20
>>>=20
>>>>=20
>>>> DPOP, to me, appears to be a rather more elegant way of solving the =
same problem, with the benefit of significantly reducing the complexity =
of (and dependency on) the transport layer. I would not argue, however, =
that it is meant to be a solution intended for ubiquitous adoption =
across all OAuth-protected API traffic. Clients still need to manage =
private keys under this model and my experience is that there is =
typically a steep learning curve for developers to negotiate any time =
you introduce a requirement to hold and use keys within  an application.=20=

>>>=20
>>> My experience is most developer don=E2=80=99t even get the URL right =
(in the signature and the value used on the receiving end). So the total =
cost of ownership is increased by numerous support inquiries.
>>> I'll not comment, at the risk of offending developers :) =20
>>=20
>> Alright. Ultimately, I just want to get in touch with those who =
respond :-)
>>=20
>> best regards,
>> Torsten.=20
>>=20
>>>=20
>>> best regards,
>>> Torsten.=20
>>>=20
>>>>=20
>>>> I guess I'm with Justin - let's look at DPOP as an alternative to =
MTLS-bound tokens for high-assurance use cases, at least initially, =
without trying to make it solve every problem.=20
>>>>=20
>>>> Best regards
>>>> Rob
>>>>=20
>>>>=20
>>>> On Fri, 22 Nov 2019 at 07:24, Justin Richer <jricher@mit.edu> =
wrote:
>>>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>>>>=20
>>>> If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
>>>>=20
>>>> I=E2=80=99ll repeat what I said at the mic line: My take is that we =
should explicitly narrow down DPoP so that it does exactly one thing and =
solves one narrow use case. And for a general solution? Let=E2=80=99s =
move that discussion into the next major revision of the protocol where =
we=E2=80=99ll have a bit more running room to figure things out..
>>>>=20
>>>> =E2=80=94 Justin
>>>>=20
>>>>> On Nov 22, 2019, at 3:13 PM, Dick Hardt <dick.hardt@gmail.com> =
wrote:
>>>>>=20
>>>>>=20
>>>>>=20
>>>>> On Fri, Nov 22, 2019 at 3:08 PM Neil Madden =
<neil.madden@forgerock.com> wrote:
>>>>> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>>>>>> There are key distribution challenges with that if you are doing =
validation at the RS, but validation at the RS using either approach =
means you=E2=80=99ve lost protection against replay by the RS. This =
brings us back to a core question: what threats are in scope for DPoP, =
and in what contexts?
>>>>>=20
>>>>> Agreed, but validation at the RS is premature optimisation in many =
cases. And if you do need protection against that the client can even =
append a confirmation key as a caveat and retrospectively upgrade a =
bearer token to a pop token. They can even do transfer of ownership by =
creating copies of the original token bound to other certificates/public =
keys.=20
>>>>>=20
>>>>> While validation at the RS may be an optimization in many cases, =
it is still a requirement for deployments.
>>>>>=20
>>>>> I echo Annabelle's last question: what threats are in scope (and =
out of scope) for DPoP?
>>>>>=20
>>>>>=20
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
>>>>=20
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
>>>>=20
>>>>=20
>>>> --=20
>>>>=20
>>>> Rob Otto     =20
>>>> EMEA Field CTO/Solutions Architect   =20
>>>> robertotto@pingidentity.com  =20
>>>>=20
>>>> c: +44 (0) 777 135 6092
>>>> Connect with us:                                                    =
                                                                         =
                                =20
>>>>=20
>>>>=20
>>>> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank =
you._______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> =
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie=
tf.org%2Fmailman%2Flistinfo%2Foauth&amp;data=3D02%7C01%7CMichael.Jones%40m=
icrosoft.com%7C2ddae7c4050348d9405a08d76f24f315%7C72f988bf86f141af91ab2d7c=
d011db47%7C1%7C0%7C637100076834776598&amp;sdata=3D6x%2Fjtuo2qkObT8bAdMUmkH=
bvOYr8wZX7pngViwA4e0Q%3D&amp;reserved=3D0
>>>=20
>>>=20
>>>=20
>>> --=20
>>>=20
>>> Rob Otto     =20
>>> EMEA Field CTO/Solutions Architect   =20
>>> robertotto@pingidentity.com  =20
>>>=20
>>> c: +44 (0) 777 135 6092
>>> Connect with us:                                                     =
                                                                         =
                        =20
>>>=20
>>>=20
>>> CONFIDENTIALITY NOTICE: This email may contain confidential and =
privileged material for the sole use of the intended recipient(s). Any =
review, use, distribution or disclosure by others is strictly =
prohibited..  If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any =
file attachments from your computer. Thank you.
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20


--Apple-Mail=_10CDEE9F-4BAA-40DA-B4D7-DE0BCDFB5A05
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_10CDEE9F-4BAA-40DA-B4D7-DE0BCDFB5A05--


From nobody Fri Nov 22 04:26:26 2019
Return-Path: <prvs=2222bf29d=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB7A812084D for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:26:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.799
X-Spam-Level: 
X-Spam-Status: No, score=-11.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lzaBImL0T4GJ for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:26:20 -0800 (PST)
Received: from smtp-fw-6002.amazon.com (smtp-fw-6002.amazon.com [52.95.49.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38D671200A1 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:26:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574425580; x=1605961580; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=shko+2XV89ClpU+iBqj6l9MK6nwrAOMSjOFNhcK/I7U=; b=mB22cV+L+vCPe2ioPpygIla6jfJPRAZtOxpMWWa83MWHKUaTOPVKeRxx 8koXcTUR2ct24iaTdHUCeUTIOI5FOJnalHlqxN4tm4v/7FTwg1imh6CVQ GeKoSuycsFuXNlommCx1mKU5nsa+SZlwqBzP5H4OVa+nZ0CKnJcox+1Ok M=;
IronPort-SDR: OUqcAbJD+v28uGRj0xZWs+tSYZrorp9i+/sHMz5YWGdj5W0A1TonSJzpxdokPe5X63hihx1qQE xpuHA7H3J/7w==
X-IronPort-AV: E=Sophos;i="5.69,229,1571702400"; d="scan'208,217";a="4433675"
Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2a-d0be17ee.us-west-2.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6002.iad6.amazon.com with ESMTP; 22 Nov 2019 12:26:18 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan3.pdx.amazon.com [10.170.41.166]) by email-inbound-relay-2a-d0be17ee.us-west-2.amazon.com (Postfix) with ESMTPS id 6C9B7A1DFB; Fri, 22 Nov 2019 12:26:17 +0000 (UTC)
Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 12:26:16 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 12:26:16 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 22 Nov 2019 12:26:16 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAA3uqA
Date: Fri, 22 Nov 2019 12:26:16 +0000
Message-ID: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com>
In-Reply-To: <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.160.160]
Content-Type: multipart/alternative; boundary="_000_C7041D135F5548AF8E8E92A030E2796Aamazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/OqP_XbKrRwG2Svp2fYj081UtDUM>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 12:26:25 -0000

--_000_C7041D135F5548AF8E8E92A030E2796Aamazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_C7041D135F5548AF8E8E92A030E2796Aamazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <B81022599ABAF34B8AF835C3E0AB6301@amazon.com>
Content-Transfer-Encoding: base64
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--_000_C7041D135F5548AF8E8E92A030E2796Aamazoncom_--


From nobody Fri Nov 22 04:49:50 2019
Return-Path: <jim@manicode.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFC581200D8 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:49:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=manicode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xtZZskWMOui2 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:49:43 -0800 (PST)
Received: from mail-qv1-xf2d.google.com (mail-qv1-xf2d.google.com [IPv6:2607:f8b0:4864:20::f2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1B52120147 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:49:42 -0800 (PST)
Received: by mail-qv1-xf2d.google.com with SMTP id cv8so2813765qvb.3 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:49:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=manicode.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=FDphUX0PPau6HiPjdFjHsHW6+DHCnkDxW4IoRsqNyho=; b=GPqYvIOjrrgKoxFnj5oDM5QMEF8niuEFm/R+ENfCzZJIKfMV2bh4PQ2EiRj+Wsg4zU 2/A1Pptk4wu7mq42NkKHds4w4CT94yxpA4QfGMymWpybsRlqtWBJkSJ7vHPYHyHUPT9h RJgLESAYGgzrK3ZlvqLti+xdgm+gArjenrXzlaKnUAueSeymhdcpgyoSQGeUgFPRYmWR eWUlm+M+Yx5oTEsGyeLcqYDYM/SnPTpvNctKtAIlfPqPJbbZXrSBQkgDZ+8A5Ye9FQXP 7nTe7l3vPuO2Ll+6OowKdUunwgkxl6x4g1gU5LunGJC/4LooAk4cob/Si0woAlOCCNfh lLkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=FDphUX0PPau6HiPjdFjHsHW6+DHCnkDxW4IoRsqNyho=; b=R/cXa8RsU0e7CPu0aj/wWaH+wWHmDABhOnoa08lpU3lWeKVwXhir760ahjo+7S97o8 a3uveuIYYp+1Y42iY0dSOt5zsfXbe02VDZ1e7m7ipnW94YyylTMM2Uc3SlN2DVjflMDd x6597p141KpOAmZrP3msD2oriMInHDjEokSbrg/JlMYEDJ3k6gCTZv91hUnOsB+iEuYh miTod9EOZOwoQqZtdRjNjx2ffgmDyCn7wAcskMNW8S/crWnUFsNjPOQJVHeGSmhx7CB/ VsHf34bWhxvW1GIKz+mGfHLQi3LlOB7od1+Bbbg9/dgnY3ThRIV59fR8KUvk8GAXvMQN WHGQ==
X-Gm-Message-State: APjAAAW8BWgVUdYFP+G0YYwA6EIxLzQCe/9yCre42/UTPN3v495S/sqa FQrNOR7JJZDEdpoS33xP3BnfeQ==
X-Google-Smtp-Source: APXvYqzoFE3bAJoelBJYXZPNE/02XDhmeoFYVQfP+TsvWLiYIsv9xC62RdpKjGtKN4CgMqsjtRWY3w==
X-Received: by 2002:a0c:f74e:: with SMTP id e14mr3371927qvo.140.1574426981290;  Fri, 22 Nov 2019 04:49:41 -0800 (PST)
Received: from [192.168.0.197] (pool-173-66-45-125.washdc.fios.verizon.net. [173.66.45.125]) by smtp.gmail.com with ESMTPSA id w5sm2884151qkf.43.2019.11.22.04.49.39 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 22 Nov 2019 04:49:40 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-E6EF82FA-A98D-4D4C-8C41-2B542A4B6295
Content-Transfer-Encoding: 7bit
From: Jim Manico <jim@manicode.com>
Mime-Version: 1.0 (1.0)
Date: Fri, 22 Nov 2019 07:49:39 -0500
Message-Id: <52B6FD65-3D57-4ECD-AED6-B0D95F231B8B@manicode.com>
References: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com>
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
In-Reply-To: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com>
To: "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
X-Mailer: iPhone Mail (17B102)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/wUAeTdsGcxncwN5TWjIrokyAhXw>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 12:49:49 -0000

--Apple-Mail-E6EF82FA-A98D-4D4C-8C41-2B542A4B6295
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

> I would argue TLS basically prevents leakage and not replay

Doesn=E2=80=99t token binding, which is esentially a TLS extension, prevent s=
ome forms of token replay?

--
Jim Manico
@Manicode
Secure Coding Education
+1 (808) 652-3805

> On Nov 22, 2019, at 7:26 AM, Richard Backman, Annabelle <richanna=3D40amaz=
on.com@dmarc.ietf.org> wrote:
>=20
> =EF=BB=BF
> > Yes of course. But this is the HMAC *tag* not the original key.
> Sure. And if the client attenuates the macaroon, it is used as a key that t=
he client proves possession of by presenting the chained HMAC. Clients doing=
 DPoP aren=E2=80=99t proving possession of the =E2=80=9Coriginal key=E2=80=9D=
 (i.e., a key used to generate the access token) either.
> =20
> > Well, you don=E2=80=99t have to return a key from the token endpoint for=
 a start.
> Yes, that=E2=80=99s what I meant by saying that it eliminates key negotiat=
ion. Though I suppose it=E2=80=99s more correct to say that it inlines it. T=
he AS still provides a key, it just happens to be part of the access token.
> =20
> Macaroons are an interesting pattern, but not because they=E2=80=99re not d=
oing PoP. Proof of possession is pretty core to the whole idea of digital si=
gnatures and HMACs. What makes them interesting is the way they inline key d=
istribution. Whether or not they=E2=80=99re applicable to DPoP depends, ulti=
mately, on the use cases DPoP is targeting and the threats it is trying to m=
itigate.
> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: Neil Madden <neil.madden@forgerock.com>
> Date: Friday, November 22, 2019 at 3:09 PM
> To: "Richard Backman, Annabelle" <richanna@amazon.com>
> Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> =20
> Macaroons are built on proof of possession. In order to add a caveat to a m=
acaroon, the sender has to have the HMAC of the macaroon without their cavea=
t.
> =20
> Yes of course. But this is the HMAC *tag* not the original key. They can=E2=
=80=99t change anything the AS originally signed.=20
>=20
>=20
> The distinctive property of macaroons as I see it is that they eliminate t=
he need for key negotiation with the bearer. How much value this has over th=
e AS just returning a symmetric key alongside the access token in the token r=
equest, I=E2=80=99m not sure.
> =20
> Well, you don=E2=80=99t have to return a key from the token endpoint for a=
 start. The client doesn=E2=80=99t need to create and send any additional to=
ken. The whole thing works with existing standards and technologies and can b=
e incrementally adopted as required. If RSes do token introspection already t=
hen they need zero changes to support this.
>=20
>=20
> There are key distribution challenges with that if you are doing validatio=
n at the RS, but validation at the RS using either approach means you=E2=80=99=
ve lost protection against replay by the RS. This brings us back to a core q=
uestion: what threats are in scope for DPoP, and in what contexts?
> =20
> Agreed, but validation at the RS is premature optimisation in many cases. A=
nd if you do need protection against that the client can even append a confi=
rmation key as a caveat and retrospectively upgrade a bearer token to a pop t=
oken. They can even do transfer of ownership by creating copies of the origi=
nal token bound to other certificates/public keys.=20
> =20
> Neil
> =20
>=20
>=20
> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: OAuth <oauth-bounces@ietf.org> on behalf of Neil Madden <neil.madden=
@forgerock.com>
> Date: Friday, November 22, 2019 at 4:40 AM
> To: Brian Campbell <bcampbell@pingidentity.com>
> Cc: oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> At the end of my previous email I mentioned that you can achieve some of t=
he same aims as DPoP without needing a PoP mechanism at all. This email is t=
hat follow-up.
> =20
> OAuth is agnostic about the format of access tokens and many vendors suppo=
rt either random string database tokens or JWTs. But there are other choices=
 for access token format, some of which have more interesting properties. In=
 particular, Google proposed Macaroons a few years ago as a "better cookie" [=
1] and I think they systematically address many of these issues when used as=
 an access token format.
> =20
> For those who aren't familiar with them, Macaroons are a bit like a HS256 J=
WT. They have a location (a bit like the audience in a JWT) and an identifie=
r (an arbitrary string) and then are signed with HMAC-SHA256 using a secret k=
ey. (There's no claims set or headers - they are very minimal). In this case=
 the secret key would be owned by the AS and used to sign macaroon-based acc=
ess tokens. Validating the token would be done via token introspection at th=
e AS.
> =20
> The clever bit is that anybody at all can append "caveats" to a macaroon a=
t any time, but nobody can remove one once added. Caveats are restrictions o=
n the use of a token - they only ever reduce the authority granted by the to=
ken, never expand it. The AS can validate the token and all the caveats with=
 its secret key. So, for example, if an access token was a macaroon then the=
 client could append a caveat to reduce the scope, or reduce the expiry time=
, or reduce the audience, and so on.
> =20
> The really clever bit is that the client can keep a copy of the original t=
oken and create restricted versions to send to different resource servers. B=
ecause HMAC is very cheap, the client can even do this before each and every=
 request. (This is what the original paper refers to as "contextual caveats"=
). This means that a client can be issued a single access token from the AS w=
ith broad scope and applicable to many different RS and can then locally cre=
ate restricted copies for each individual RS.
> =20
> The relevance to DPoP is that the client could even append caveats equival=
ent to "htm" and "htu" just before sending the access token to the RS, and m=
aybe add an "exp" for 5 seconds in the future, reduce the scope, and so on:
> =20
>   newAccessToken =3D accessToken.withCaveats({
>     exp: now + 5seconds,
>     scope: "a b",
>     htm: "POST",
>     ....
>   });
>   httpClient.post(data, Authorization: Bearer newAccessToken);
> =20
> Note that the client doesn't need anything extra here - no keys, extra tok=
ens etc. They just have the access token and a macaroon library.
> =20
> The RS will see an opaque access token, send it to the AS for introspectio=
n. The AS however, will see and validate the new caveats on the token and re=
turn an introspection response with the restricted scope and expiry time, an=
d return the htm/htu restrictions that the RS can then enforce.=20
> =20
> For clients this is transparent until they want to take advantage of it an=
d then they can just use an off-the-shelf macaroon library. For the RS it is=
 also completely transparent. All the (relatively small) complexity lives in=
 the AS, which just has to be able to produce and verify macaroons and take c=
aveats into account when performing token introspection - e.g. the returned s=
cope should be the intersection of the original token scope and any scope ca=
veats. But I don't think this would be too much effort.
> =20
> [1]: https://ai.google/research/pubs/pub41892
> =20
> -- Neil
>=20
>=20
>=20
> On 21 Nov 2019, at 06:23, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> Yeah, suggestions and/or an MTI about algorithm support would probably be w=
orthwhile. Perhaps also some defined means of signaling when an unsupported a=
lgorithm is used along with any other reason a DPoP is invalid or rejected.=20=

> =20
> There are a lot of tradeoffs in what claims are required and what protecti=
ons are provided etc. The aim of what was chosen was to do just enough to pr=
ovide some reasonable protections against reuse or use in a different contex=
t while being simple to implement and deploy.
> =20
> =20
> On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> Thanks for the reply, Brian.=20
> =20
> Collecting my thoughts up here rather than responding blow by blow.
> =20
> Public key signatures are simpler in some respects, more complex in others=
. There are currently 10 public key JWS signature schemes defined (ES256/384=
/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS potentially have to s=
upport them all? If not, how do they negotiate algorithm support with the cl=
ient?
> =20
> On the other hand, the ECDH scheme I proposed can be implemented by adapti=
ng an existing ECDH-ES encryption support in a JWT library. For example, I d=
iscovered while playing with this that our own internal library can implemen=
t the full flow I described entirely via the existing public API [1], so it'=
s not necessarily as complex as it first looks. I even knocked up a from-scr=
atch implementation in WebCrypto (JavaScript) without too much code [2].
> =20
> But I admit that using an existing JWT library to sign a JWT with an exist=
ing algorithm is even easier, and that counts for a lot. Perhaps we can make=
 concrete suggestions/requirements about algorithm support? e.g. "The RS MUS=
T support RS256 and SHOULD support EdDSA. Other algorithms MAY be supported.=
"=20
> =20
> With regards to replay protection, I think there are at least two reasonab=
le positions:
> =20
> 1. We assume that TLS is secure and don't try to defend against any compro=
mise at that level. (Clearly none of the TLS-based PoP mechanisms survive if=
 TLS is compromised, by definition). In this case the main attack to defend a=
gainst is a malicious RS replaying the access token elsewhere. Simply signin=
g the origin of the RS would be enough to prevent this attack, while letting=
 the client reuse the same JWT for many requests (and the RS to cache the JW=
T validation). None of "jti", "htu", or "htm" seem relevant to this model.
> =20
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) and t=
ry to provide some defense in depth against a MitM attacker replaying a toke=
n against the same RS. There is a graduated series of steps you can take her=
e, depending on how much you want to prevent this:
>    a. The DPoP token can be replayed for arbitrary requests to the same RS=
 but has a short time limit (e.g., exp claim or RS-enforced max lifetime fro=
m iat)
>    b. The DPoP token can be replayed for the same request (htu/htm claims)=

>    c. The DPoP token can't be replayed at all - either because of jti blac=
klisting on the RS or a challenge-response protocol on each request.
> =20
> (There are also variants such as including a hash of the request body/head=
ers, or encoding an ETag into the JWT).
> =20
> I think either are reasonable design goals, but aiming for 2 adds more val=
ue. I think aiming for 2a is a reasonable default baseline that allows the c=
lient to reuse a DPoP token for a few requests, reducing the cost of the sig=
nature (and the RS can cache the validated JWT). Support for 2b or 2c can th=
en be listed as optional additions.
> =20
> PS - 2a/2b can be achieved without PoP. I'll save that for another email i=
n the next few days though.
> =20
> [1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
> [2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7
> =20
> =20
> -- Neil
>=20
>=20
>=20
> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> =20
>=20
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> I can't attend Singapore either in person or remotely due to other commitm=
ents. I broadly support adoption of this draft, but I have some comments/sug=
gestions about it.
> =20
> Thanks Neil. And sorry to hear that you won't be in Singapore. This kind o=
f stuff is definitely more easily discussed in person (for me anyway). But I=
'll try and comment on your comments here as best I can. I also plan to also=
 mention them in the Wednesday and/or Thursday presentation.=20
> =20
> Section 2 lists the main objective as being to harden against compromised/=
malicious AS or RS, which may attempt to replay captured tokens elsewhere. W=
hile this is a good idea, a casual reader might wonder why a simple audience=
 claim in the access token/introspection response is not sufficient to preve=
nt this. Because interactions between the client and RS are supposed to be o=
ver TLS, is the intended threat model one in which these protections have br=
oken down? ("counterfeit" in the description suggests this). Or is the motiv=
ation that clients want to get a single broad-scoped access token (for usabi=
lity/performance reasons) and use it to access multiple resource servers wit=
hout giving each of them the ability to replay the token to the other server=
s? Or are we thinking of a phishing-type vulnerability were a general-purpos=
e client might accidentally visit a malicious site which prompts for an acce=
ss token that the client then blindly goes off and gets? (UMA?) It's not cle=
ar to me which of these scenarios is being considered, so it would be good t=
o tighten up this section.
> =20
> It is admittedly a bit loose and I agree it'd be good to tighten it up. Bu=
t part of why it's loose is that it tries to offer some protections for all t=
hose scenarios and more such as a general lost/stolen token. It's effectivel=
y trying to provide as many of the same types of protections/assurances that=
 you'd get with TLS based PoP mechanisms (like OAuth MTLS or Token binding) t=
o the extent that can be done at the HTTP application layer. Which can't rea=
listically be exactly the same but can maybe be kinda close while actually b=
eing accessible and implementable because it's all done at the application l=
ayer. There are trade-offs, of course, and the document writers have endeavo=
red to find a good balance in the trade-off decisions we've made. But that d=
oesn't mean they are necessarily the right decisions or are closed to discus=
sion. To the casual reader I would say that it turns out that getting an app=
ropriate simple audience claim into an access token isn't nearly as simple a=
s it might seem. And while it will prevent RS to RS replay (as long as both R=
Ss aren't legit audiences) it doesn't help with preventing the use of tokens=
 stolen or leaked by other means (including for refresh tokens issued to pub=
lic clients).=20
> =20
> Another potential motivation is for mobile apps. Some customers of ours wo=
uld like to tie access/refresh tokens to private key material generated on a=
 secure element in the device, that can only be accessed after local biometr=
ic authentication (e.g. TouchID/FaceID on iOS). I have suggested using mTLS c=
ert-bound tokens for this, but have heard some pushback due to the difficult=
y of configuring support for client certs across diverse infrastructure. A s=
imple JWT-based solution like DPoP could fill this need.
> =20
> It's maybe not stated in the draft but this kind of thing is among the obj=
ectives (in my mind anyway).=20
> =20
> =20
> My main concerns with the draft though are about efficiency and scalabilit=
y of the proposed approach:
> =20
> 1. The requirement to use public key signatures, along with the anti-repla=
y nonce, means that the RS is required to perform an expensive signature ver=
ification check on every request. That is not going to scale up well. While t=
here are more efficient schemes like Ed25519 now, these are still typically a=
n order of magnitude slower than HMAC and the latency and CPU overhead is li=
kely to be a non-starter for many APIs (especially when you're billed by CPU=
 usage). Public key signatures are also notoriously fragile (see e.g. the hi=
story of nonce reuse/leakage vulnerabilities in ECDSA or=20
> =20
> Yes, asymmetric is more processing intensive than symmetric. But if you ta=
ke away the distributed replay check (see next response), it will scale out j=
ust fine. I'm not so sure latency is a real issue here - while these operati=
ons are an order of magnitude slower we're still talking about times that ar=
e not perceptible to a human. CPU usage/cost is a part of a trade-off for th=
e simplicity afforded by public/private keys.  And it is significantly simpl=
er. The design you sketched out is admittedly quite clever but it's not even=
 in the same ballpark with respect to complexity. And, as you pointed out, t=
he other suggestion around symmetric keys has rather different security prop=
erties while still adding complexity. Adding symmetric key support isn't som=
ething that can just be added on easily.=20
> =20
> =20
> 2. The advice for the RS to store a set of previously used nonces to preve=
nt replay will also hamper scalability, especially in large deployments wher=
e such state would need to be replicated to all servers (or use sticky load b=
alancing, which comes with its own problems). This violates the statelessnes=
s of HTTP, and it also potentially breaks idempotency of operations: Think o=
f the case where the JWT validation and replay protection is done at an API g=
ateway but then the call to the backend API server fails for a transient rea=
son. The client (or a proxy/library) cannot simply replay the (idempotent) r=
equest in this case because it will be rejected by the gateway. It must inst=
ead recreate the DPoP JWT, incurring additional overheads.
> =20
> The actual value of replay checking on jti is somewhat questionable. The D=
PoP JWT only transits between client and server so a TLS MITM is likely need=
ed to steal a DPoP JWT. But we are assuming TLS works here. And an active MI=
TM could thwart this check by just being first to present DPoP JWT. I think t=
he jti check made its way into the draft mostly because it seemed like somet=
hing was needed to try and bring it closer to the TLS PoP models. Being awar=
e of the scalability concerns, I did endeavor to write the text in such a wa=
y so as to leave some wiggle room in implementations/deployments with text l=
ike '"jti" SHOULD be used by the server for replay detection and prevention`=
 and [ensure that] 'within a reasonable consideration of accuracy and resour=
ce utilization, a JWT with the same "jti" value has not been received previo=
usly'. The idea being that using something eventually consistent or even loc=
al only to the runtime instance would be permissible. Perhaps that allowance=
 and the rational could be made more clear? Or would you suggest to do away w=
ith the jti replay stuff al? Or something else?=20
> =20
> 3. Minor: The use of a custom header for communicating the DPoP proof will=
 require additional CORS configuration on top of that already done for the A=
uthorization header, and so adds a small amount of additional friction for a=
doption. Given that CORS configuration changes often require approval by a s=
ecurity team, this may make more of an impact than you'd expect.
> =20
> Feels really minor. I mean, we could try to roll everything up under one h=
eader. But it does seem unwarranted and would complicate things - at least i=
n the model we've got now where the proof is sent the same way ono all types=
 of requests.=20
> =20
> =20
> It's also not clear to me exactly what threat the anti-replay nonce is pro=
tecting against. It does nothing against the replay scenario discussed in se=
ction 2, as I understand it - which really seems to be more of a MitM scenar=
io. Given that the connection between the client and the RS is supposed to b=
e over TLS, and TLS is already protected against replay attacks, I think thi=
s part needs to be better motivated given the obvious costs of implementing i=
t.
> =20
> I have a tentative suggestion for an alternative design which avoids these=
 problems, but at a cost of potentially more complexity elsewhere. I'll summ=
arise it here for consideration:
> =20
> 1. The client obtains an access token in the normal way. When calling the t=
oken endpoint it provides an EC/okp public key as the confirmation key to be=
 associated with the access/refresh tokens.
> =20
> 2. The first time the client calls an RS it passes its access token in the=
 Authorization: Bearer header as normal. (If the RS doesn't support DPoP the=
n this would just succeed and no further action is required by the client - a=
llowing clients to opportunistically ask for DPoP without needing a priori k=
nowledge of RS capabilities).
> =20
> 3. The RS introspects the access token and learns the EC public key associ=
ated with the access token. As there is no DPoP proof with the access token,=
 the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as the c=
onfirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated with t=
his access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and base64u=
rl-encodes it. It uses this as a challenge to the client by sending back a 4=
01 response with WWW-Authenticate: DPoP <encoded-epk>
> =20
> 4. The client decodes the epk challenge and performs an ECDH key agreement=
 between its private key and the challenge epk as per the method described f=
or the existing JWA ECDH-ES encryption algorithm. Rather than deriving an AE=
S key however, it derives a HMAC key for HS256. The "apu" value is set to th=
e access token (string value as ASCII bytes) and the "apv" value is set to t=
he hostname of the RS (e.g. "api.example.com"). This ensures that the derive=
d key is cryptographically bound to the context in which it is used.
> =20
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the o=
ne in the current draft, but signed using the HS256 key. If a "kid" field wa=
s present in the challenge JWK sent by the RS then the same value MUST be us=
ed in the "kid" header of this discharge JWT. It retries its original reques=
t sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
> =20
> 6. The RS uses its stored ephemeral private key to derive the same HMAC ke=
y and verify the DPoP discharge JWT. If it validates and all fields are corr=
ect then the request is allowed.
> =20
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the challenge J=
WK, the RS can preemptively carry out the ECDH key agreement immediately and=
 generate the derived HMAC key. The RS can then encrypt this derived key usi=
ng a local authenticated encryption key (e.g. AES-GCM) and use that encrypte=
d value as the "kid" value in the challenge (perhaps along with some context=
 or an expiry time). That way the RS only needs to decrypt this kid value ra=
ther than performing the ECDH key agreement on every request. This also avoi=
ds the need for the RS to store any per-client state locally.
> =20
> The challenge-response nature of the scheme prevents traditional replay at=
tacks in the case where a DPoP discharge JWT is accidentally leaked through s=
erver logs or some other flaw, without needing to store nonces on the server=
. Using the RS's hostname in the key derivation process prevents mitm attack=
s in a similar way to how FIDO/WebAuthn prevents this. Most importantly, onc=
e a HS256 key has been derived between a client and RS they can reuse that k=
ey for multiple requests, reducing the overhead of the ECDH key agreement st=
ep. Either side can decide as a matter of policy how long to let this occur a=
nd when to trigger a fresh challenge-response.
> =20
> Because this fits within the standard HTTP authentication framework, it al=
so requires no additional CORS configuration and is relatively easy to plug i=
n to existing HTTP client libraries.
> =20
> The main downside of this approach to me is the fact that you can't simply=
 reuse an existing JWT library to implement it, and so it will take time for=
 client libs to develop. (Although I think this might be achievable now with=
 existing *COSE* libraries). This would increase the risk of people hand-rol=
ling solutions, rather than using well-tested libraries. On the other hand, i=
t uses fairly widely supported primitives so e.g. an implementation using We=
bCrypto is probably only a few dozen lines of code.
> =20
> -- Neil
> =20
>=20
>=20
>=20
> On 31 Oct 2019, at 19:20, Brian Campbell <bcampbell=3D40pingidentity.com@d=
marc.ietf.org> wrote:
> =20
> Hello WG,=20
> =20
> Just a quick note to let folks know that -03 of the DPoP draft was publish=
ed earlier today. The usual various document links are in the forwarded mess=
age below and the relevant snippet from the doc history with a summary of th=
e changes is included here for convenience.=20
> =20
> Hopefully folks will have time to read the (relativity) short document bef=
ore the meeting(s) in Singapore where (spoiler alert) I plan to ask that the=
 WG consider adoption of the draft.=20
> =20
> Thanks,
>=20
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
> =20
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <mbj@micr=
osoft.com>, John Bradley <ve7jtb@ve7jtb.com>, Brian Campbell <bcampbell@ping=
identity.com>, David Waite <david@alkaline-solutions.com>, Daniel Fett <mail=
@danielfett.de>
>=20
>=20
>=20
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>=20
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the Appl=
ication Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop=
-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpo=
p
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-=
03
>=20
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of submissi=
on
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited..  If you have rec=
eived this communication in error, please notify the sender immediately by e=
-mail and delete the message and any file attachments from your computer. Th=
ank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
> =20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--Apple-Mail-E6EF82FA-A98D-4D4C-8C41-2B542A4B6295
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto">&gt;&nbsp;<span style=3D"-webkit-text-size-=
adjust: auto; background-color: rgb(255, 255, 255);">I would argue TLS basic=
ally prevents leakage and not replay</span><div><span style=3D"-webkit-text-=
size-adjust: auto; background-color: rgb(255, 255, 255);"><br></span></div><=
div><span style=3D"-webkit-text-size-adjust: auto; background-color: rgb(255=
, 255, 255);">Doesn=E2=80=99t token binding, which is esentially a TLS exten=
sion, prevent some forms of token replay?</span></div><div><br><div dir=3D"l=
tr"><div>--</div><div>Jim Manico</div><div>@Manicode</div><div>Secure Coding=
 Education</div><div>+1 (808) 652-3805</div></div><div dir=3D"ltr"><br><bloc=
kquote type=3D"cite">On Nov 22, 2019, at 7:26 AM, Richard Backman, Annabelle=
 &lt;richanna=3D40amazon.com@dmarc.ietf.org&gt; wrote:<br><br></blockquote><=
/div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Helvetica Neue";
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:HelveticaNeue;
	panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle18
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style>


<div class=3D"WordSection1">
<p class=3D"MsoNormal">&gt; Yes of course. But this is the HMAC *tag* not th=
e original key.<o:p></o:p></p>
<p class=3D"MsoNormal">Sure. And if the client attenuates the macaroon, it i=
s used as a key that the client proves possession of by presenting the chain=
ed HMAC. Clients doing DPoP aren=E2=80=99t proving possession of the =E2=80=9C=
original key=E2=80=9D (i.e., a key used to generate the
 access token) either.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; Well, you don=E2=80=99t have to return a key fro=
m the token endpoint for a start.<o:p></o:p></p>
<p class=3D"MsoNormal">Yes, that=E2=80=99s what I meant by saying that it el=
iminates key negotiation. Though I suppose it=E2=80=99s more correct to say t=
hat it inlines it. The AS still provides a key, it just happens to be part o=
f the access token.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Macaroons are an interesting pattern, but not because=
 they=E2=80=99re not doing PoP. Proof of possession is pretty core to the wh=
ole idea of digital signatures and HMACs. What makes them interesting is the=
 way they inline key distribution. Whether
 or not they=E2=80=99re applicable to DPoP depends, ultimately, on the use c=
ases DPoP is targeting and the threats it is trying to mitigate.<o:p></o:p><=
/p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity<o:p></o=
:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">Neil Madden &lt;nei=
l.madden@forgerock.com&gt;<br>
<b>Date: </b>Friday, November 22, 2019 at 3:09 PM<br>
<b>To: </b>"Richard Backman, Annabelle" &lt;richanna@amazon.com&gt;<br>
<b>Cc: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;, oauth &lt;oaut=
h@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &=
lt;richanna@amazon.com&gt; wrote:<o:p></o:p></p>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</blockquote>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">Macaroons are built on proof of possession. In order t=
o add a caveat to a macaroon, the sender has to have the HMAC of the macaroo=
n without their caveat.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Yes of course. But this is the HMAC *tag* not the ori=
ginal key. They can=E2=80=99t change anything the AS originally signed.&nbsp=
;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">The distinctive property of macaroons as I see it is t=
hat they eliminate the need for key negotiation with the bearer. How much va=
lue this has over the AS just returning a symmetric key alongside the access=
 token in the token request, I=E2=80=99m
 not sure.<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Well, you don=E2=80=99t have to return a key from the=
 token endpoint for a start. The client doesn=E2=80=99t need to create and s=
end any additional token. The whole thing works with existing standards and t=
echnologies and can be incrementally adopted as
 required. If RSes do token introspection already then they need zero change=
s to support this.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">There are key distribution challenges with that if yo=
u are doing validation at the RS, but validation at the RS using either appr=
oach means you=E2=80=99ve lost protection against replay by the RS. This bri=
ngs us back to a core question: what threats
 are in scope for DPoP, and in what contexts?<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal">Agreed, but validation at the RS is premature optimis=
ation in many cases. And if you do need protection against that the client c=
an even append a confirmation key as a caveat and retrospectively upgrade a b=
earer token to a pop token. They
 can even do transfer of ownership by creating copies of the original token b=
ound to other certificates/public keys.&nbsp;
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;</spa=
n><o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity</span><=
o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">OAuth &lt;oauth-bou=
nces@ietf.org&gt; on behalf of Neil Madden &lt;neil.madden@forgerock.com&gt;=
<br>
<b>Date: </b>Friday, November 22, 2019 at 4:40 AM<br>
<b>To: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;<br>
<b>Cc: </b>oauth &lt;oauth@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">At the end of my previous email I mentioned that you c=
an achieve some of the same aims as DPoP without needing a PoP mechanism at a=
ll. This email is that follow-up.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">OAuth is agnostic about the format of access tokens a=
nd many vendors support either random string database tokens or JWTs. But th=
ere are other choices for access token format, some of which have more inter=
esting properties. In particular,
 Google proposed Macaroons a few years ago as a "better cookie" [1] and I th=
ink they systematically address many of these issues when used as an access t=
oken format.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For those who aren't familiar with them, Macaroons ar=
e a bit like a HS256 JWT. They have a location (a bit like the audience in a=
 JWT) and an identifier (an arbitrary string) and then are signed with HMAC-=
SHA256 using a secret key. (There's
 no claims set or headers - they are very minimal). In this case the secret k=
ey would be owned by the AS and used to sign macaroon-based access tokens. V=
alidating the token would be done via token introspection at the AS.<o:p></o=
:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The clever bit is that anybody at all can append "cav=
eats" to a macaroon at any time, but nobody can remove one once added. Cavea=
ts are restrictions on the use of a token - they only ever reduce the author=
ity granted by the token, never
 expand it. The AS can validate the token and all the caveats with its secre=
t key. So, for example, if an access token was a macaroon then the client co=
uld append a caveat to reduce the scope, or reduce the expiry time, or reduc=
e the audience, and so on.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The really clever bit is that the client can keep a c=
opy of the original token and create restricted versions to send to differen=
t resource servers. Because HMAC is very cheap, the client can even do this b=
efore each and every request.
 (This is what the original paper refers to as "contextual caveats"). This m=
eans that a client can be issued a single access token from the AS with broa=
d scope and applicable to many different RS and can then locally create rest=
ricted copies for each individual
 RS.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The relevance to DPoP is that the client could even a=
ppend caveats equivalent to "htm" and "htu" just before sending the access t=
oken to the RS, and maybe add an "exp" for 5 seconds in the future, reduce t=
he scope, and so on:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; newAccessToken =3D accessToken.withCaveats({<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; exp: now + 5seconds,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; scope: "a b",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; htm: "POST",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; ....<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; });<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; httpClient.post(data, Authorization: Bearer ne=
wAccessToken);<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Note that the client doesn't need anything extra here=
 - no keys, extra tokens etc. They just have the access token and a macaroon=
 library.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The RS will see an opaque access token, send it to th=
e AS for introspection. The AS however, will see and validate the new caveat=
s on the token and return an introspection response with the restricted scop=
e and expiry time, and return the
 htm/htu restrictions that the RS can then enforce.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For clients this is transparent until they want to ta=
ke advantage of it and then they can just use an off-the-shelf macaroon libr=
ary. For the RS it is also completely transparent. All the (relatively small=
) complexity lives in the AS, which
 just has to be able to produce and verify macaroons and take caveats into a=
ccount when performing token introspection - e.g. the returned scope should b=
e the intersection of the original token scope and any scope caveats. But I d=
on't think this would be too
 much effort.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://ai.google/research/pubs/=
pub41892">https://ai.google/research/pubs/pub41892</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 21 Nov 2019, at 06:23, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com">bcampbell@pingidentity.com</a>&gt; wrote=
:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal">Yeah, suggestions and/or an MTI about algorithm suppo=
rt would probably be worthwhile. Perhaps also some defined means of signalin=
g when an unsupported algorithm is used along with any other reason a DPoP i=
s invalid or rejected.&nbsp;
<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">There are a lot of tradeoffs in what claims are requi=
red and what protections are provided etc. The aim of what was chosen was to=
 do just enough to provide some reasonable protections against reuse or use i=
n a different context while being
 simple to implement and deploy.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On Wed, Nov 20, 2019 at 6:34 AM Neil Madden &lt;<a hr=
ef=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">neil.madden@forger=
ock.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal">Thanks for the reply, Brian.&nbsp; <o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Collecting my thoughts up here rather than responding=
 blow by blow.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">Public key signatures are simpler in some respects, m=
ore complex in others. There are currently 10 public key JWS signature schem=
es defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS=
 potentially have to support them
 all? If not, how do they negotiate algorithm support with the client?<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On the other hand, the ECDH scheme I proposed can be i=
mplemented by adapting an existing ECDH-ES encryption support in a JWT libra=
ry. For example, I discovered while playing with this that our own internal l=
ibrary can implement the full
 flow I described entirely via the existing public API [1], so it's not nece=
ssarily as complex as it first looks. I even knocked up a from-scratch imple=
mentation in WebCrypto (JavaScript) without too much code [2].<o:p></o:p></p=
>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">But I admit that using an existing JWT library to sig=
n a JWT with an existing algorithm is even easier, and that counts for a lot=
. Perhaps we can make concrete suggestions/requirements about algorithm supp=
ort? e.g. "The RS MUST support
 RS256 and SHOULD support EdDSA. Other algorithms MAY be supported."&nbsp;<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">With regards to replay protection, I think there are a=
t least two reasonable positions:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1. We assume that TLS is secure and don't try to defe=
nd against any compromise at that level. (Clearly none of the TLS-based PoP m=
echanisms survive if TLS is compromised, by definition). In this case the ma=
in attack to defend against is
 a malicious RS replaying the access token elsewhere. Simply signing the ori=
gin of the RS would be enough to prevent this attack, while letting the clie=
nt reuse the same JWT for many requests (and the RS to cache the JWT validat=
ion). None of "jti", "htu", or
 "htm" seem relevant to this model.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2. We don't assume that TLS is secure (or it's not fu=
lly end-to-end) and try to provide some defense in depth against a MitM atta=
cker replaying a token against the same RS. There is a graduated series of s=
teps you can take here, depending
 on how much you want to prevent this:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;a. The DPoP token can be replayed for ar=
bitrary requests to the same RS but has a short time limit (e.g., exp claim o=
r RS-enforced max lifetime from iat)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;b. The DPoP token can be replayed for th=
e same request (htu/htm claims)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;c. The DPoP token can't be replayed at a=
ll - either because of jti blacklisting on the RS or a challenge-response pr=
otocol on each request.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">(There are also variants such as including a hash of t=
he request body/headers, or encoding an ETag into the JWT).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I think either are reasonable design goals, but aimin=
g for 2 adds more value. I think aiming for 2a is a reasonable default basel=
ine that allows the client to reuse a DPoP token for a few requests, reducin=
g the cost of the signature (and
 the RS can cache the validated JWT). Support for 2b or 2c can then be liste=
d as optional additions.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">PS - 2a/2b can be achieved without PoP. I'll save tha=
t for another email in the next few days though.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://gist.github.com/NeilMadd=
en/685ea66fb79d37a50c2310f853bd9496" target=3D"_blank">https://gist.github.c=
om/NeilMadden/685ea66fb79d37a50c2310f853bd9496</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[2]: <a href=3D"https://gist.github.com/NeilMadden/70=
e1b232a3b273de02ed731eb36ec4a7" target=3D"_blank">
https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7</a><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com" target=3D"_blank">bcampbell@pingidentity=
.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On Thu, Nov 14, 2019 at 7:20 PM Neil Madden &lt;<a href=3D"mailto:neil=
.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; w=
rote:</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I can't attend Singapore either in person or remotely due to other com=
mitments. I broadly support adoption of this draft, but I have some comments=
/suggestions about it.</span><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks Neil. And sorry to hear that you won't be in Singapore. This ki=
nd of stuff is definitely more easily discussed in person (for me anyway). B=
ut I'll try and comment on your comments
 here as best I can. I also plan to also mention them in the Wednesday and/o=
r Thursday presentation.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Section 2 lists the main objective as being to harden against compromi=
sed/malicious AS or RS, which may attempt to replay captured tokens elsewher=
e. While this is a good idea, a casual
 reader might wonder why a simple audience claim in the access token/introsp=
ection response is not sufficient to prevent this. Because interactions betw=
een the client and RS are supposed to be over TLS, is the intended threat mo=
del one in which these protections
 have broken down? ("counterfeit" in the description suggests this). Or is t=
he motivation that clients want to get a single broad-scoped access token (f=
or usability/performance reasons) and use it to access multiple resource ser=
vers without giving each of them
 the ability to replay the token to the other servers? Or are we thinking of=
 a phishing-type vulnerability were a general-purpose client might accidenta=
lly visit a malicious site which prompts for an access token that the client=
 then blindly goes off and gets?
 (UMA?) It's not clear to me which of these scenarios is being considered, s=
o it would be good to tighten up this section.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It is admittedly a bit loose and I agree it'd be good to tighten it up=
. But part of why it's loose is that it tries to offer some protections for a=
ll those scenarios and more such
 as a general lost/stolen token. It's effectively trying to provide as many o=
f the same types of protections/assurances that you'd get with TLS based PoP=
 mechanisms (like OAuth MTLS or Token binding) to the extent that can be don=
e at the HTTP application layer.
 Which can't realistically be exactly the same but can maybe be kinda close w=
hile actually being accessible and implementable because it's all done at th=
e application layer. There are trade-offs, of course, and the document write=
rs have endeavored to find a
 good balance in the trade-off decisions we've made. But that doesn't mean t=
hey are necessarily the right decisions or are closed to discussion. To the c=
asual reader I would say that it turns out that getting an appropriate simpl=
e audience claim into an access
 token isn't nearly as simple as it might seem. And while it will prevent RS=
 to RS replay (as long as both RSs aren't legit audiences) it doesn't help w=
ith preventing the use of tokens stolen or leaked by other means (including f=
or refresh tokens issued to
 public clients).&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Another potential motivation is for mobile apps. Some customers of our=
s would like to tie access/refresh tokens to private key material generated o=
n a secure element in the device,
 that can only be accessed after local biometric authentication (e.g. TouchI=
D/FaceID on iOS). I have suggested using mTLS cert-bound tokens for this, bu=
t have heard some pushback due to the difficulty of configuring support for c=
lient certs across diverse infrastructure.
 A simple JWT-based solution like DPoP could fill this need.</span><o:p></o:=
p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's maybe not stated in the draft but this kind of thing is among the=
 objectives (in my mind anyway).&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">My main concerns with the draft though are about efficiency and scalab=
ility of the proposed approach:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The requirement to use public key signatures, along with the anti-r=
eplay nonce, means that the RS is required to perform an expensive signature=
 verification check on every request.
 That is not going to scale up well. While there are more efficient schemes l=
ike Ed25519 now, these are still typically an order of magnitude slower than=
 HMAC and the latency and CPU overhead is likely to be a non-starter for man=
y APIs (especially when you're
 billed by CPU usage). Public key signatures are also notoriously fragile (s=
ee e.g. the history of nonce reuse/leakage vulnerabilities in ECDSA or&nbsp;=
</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Yes, asymmetric is more processing intensive than symmetric. But if yo=
u take away the distributed replay check (see next response), it will scale o=
ut just fine. I'm not so sure latency
 is a real issue here - while these operations are an order of magnitude slo=
wer we're still talking about times that are not perceptible to a human. CPU=
 usage/cost is a part of a trade-off for the simplicity afforded by public/p=
rivate keys.&nbsp; And it is significantly
 simpler. The design you sketched out is admittedly quite clever but it's no=
t even in the same ballpark with respect to complexity. And, as you pointed o=
ut, the other suggestion around symmetric keys has rather different security=
 properties while still adding
 complexity. Adding symmetric key support isn't something that can just be a=
dded on easily.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The advice for the RS to store a set of previously used nonces to p=
revent replay will also hamper scalability, especially in large deployments w=
here such state would need to be
 replicated to all servers (or use sticky load balancing, which comes with i=
ts own problems). This violates the statelessness of HTTP, and it also poten=
tially breaks idempotency of operations: Think of the case where the JWT val=
idation and replay protection
 is done at an API gateway but then the call to the backend API server fails=
 for a transient reason. The client (or a proxy/library) cannot simply repla=
y the (idempotent) request in this case because it will be rejected by the g=
ateway. It must instead recreate
 the DPoP JWT, incurring additional overheads.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The actual value of replay checking on jti is somewhat questionable. T=
he DPoP JWT only transits between client and server so a TLS MITM is likely n=
eeded to steal a DPoP JWT. But we
 are assuming TLS works here. And an active MITM could thwart this check by j=
ust being first to present DPoP JWT. I think the jti check made its way into=
 the draft mostly because it seemed like something was needed to try and bri=
ng it closer to the TLS PoP
 models. Being aware of the scalability concerns, I did endeavor to write th=
e text in such a way so as to leave some wiggle room in implementations/depl=
oyments with text like '"jti" SHOULD be used by the server for replay detect=
ion and prevention` and [ensure
 that] 'within a reasonable consideration of accuracy and resource utilizati=
on, a JWT with the same "jti" value has not been received previously'. The i=
dea being that using something eventually consistent or even local only to t=
he runtime instance would be
 permissible. Perhaps that allowance and the rational could be made more cle=
ar? Or would you suggest to do away with the jti replay stuff al? Or somethi=
ng else?&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. Minor: The use of a custom header for communicating the DPoP proof w=
ill require additional CORS configuration on top of that already done for th=
e Authorization header, and so adds
 a small amount of additional friction for adoption. Given that CORS configu=
ration changes often require approval by a security team, this may make more=
 of an impact than you'd expect.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Feels really minor. I mean, we could try to roll everything up under o=
ne header. But it does seem unwarranted and would complicate things - at lea=
st in the model we've got now where
 the proof is sent the same way ono all types of requests.&nbsp;</span><o:p>=
</o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's also not clear to me exactly what threat the anti-replay nonce is=
 protecting against. It does nothing against the replay scenario discussed i=
n section 2, as I understand it -
 which really seems to be more of a MitM scenario. Given that the connection=
 between the client and the RS is supposed to be over TLS, and TLS is alread=
y protected against replay attacks, I think this part needs to be better mot=
ivated given the obvious costs
 of implementing it.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I have a tentative suggestion for an alternative design which avoids t=
hese problems, but at a cost of potentially more complexity elsewhere. I'll s=
ummarise it here for consideration:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The client obtains an access token in the normal way. When calling t=
he token endpoint it provides an EC/okp public key as the confirmation key t=
o be associated with the access/refresh
 tokens.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The first time the client calls an RS it passes its access token in=
 the Authorization: Bearer header as normal. (If the RS doesn't support DPoP=
 then this would just succeed and
 no further action is required by the client - allowing clients to opportuni=
stically ask for DPoP without needing a priori knowledge of RS capabilities)=
.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. The RS introspects the access token and learns the EC public key as=
sociated with the access token. As there is no DPoP proof with the access to=
ken, the RS will generate a challenge
 in the following way:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS generates an ephemeral EC key pair for the=
 same curve as the confirmation key (e.g. P-256 or X25519).</span><o:p></o:p=
></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS stores the ephemeral private key somewhere=
, associated with this access token (see below for a scalable implementation=
 choice)</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS encodes the ephemeral public key into a JW=
K (epk) and base64url-encodes it. It uses this as a challenge to the client b=
y sending back a 401 response with WWW-Authenticate:
 DPoP &lt;encoded-epk&gt;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">4. The client decodes the epk challenge and performs an ECDH key agree=
ment between its private key and the challenge epk as per the method describ=
ed for the existing JWA ECDH-ES encryption
 algorithm. Rather than deriving an AES key however, it derives a HMAC key f=
or HS256. The "apu" value is set to the access token (string value as ASCII b=
ytes) and the "apv" value is set to the hostname of the RS (e.g. "<a href=3D=
"http://api.example.com/" target=3D"_blank">api.example.com</a>").
 This ensures that the derived key is cryptographically bound to the context=
 in which it is used.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">5. The client uses the HMAC key to create a DPoP proof JWT much like t=
he one in the current draft, but signed using the HS256 key. If a "kid" fiel=
d was present in the challenge JWK
 sent by the RS then the same value MUST be used in the "kid" header of this=
 discharge JWT. It retries its original request sending Authorization: DPoP &=
lt;hmac-jwt&gt; at=3D&lt;access_token&gt;.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">6. The RS uses its stored ephemeral private key to derive the same HMA=
C key and verify the DPoP discharge JWT. If it validates and all fields are c=
orrect then the request is allowed.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Efficient implementation trick:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because the client is required to copy and "kid" value from the challe=
nge JWK, the RS can preemptively carry out the ECDH key agreement immediatel=
y and generate the derived HMAC key.
 The RS can then encrypt this derived key using a local authenticated encryp=
tion key (e.g. AES-GCM) and use that encrypted value as the "kid" value in t=
he challenge (perhaps along with some context or an expiry time). That way t=
he RS only needs to decrypt this
 kid value rather than performing the ECDH key agreement on every request. T=
his also avoids the need for the RS to store any per-client state locally.</=
span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The challenge-response nature of the scheme prevents traditional repla=
y attacks in the case where a DPoP discharge JWT is accidentally leaked thro=
ugh server logs or some other flaw,
 without needing to store nonces on the server. Using the RS's hostname in t=
he key derivation process prevents mitm attacks in a similar way to how FIDO=
/WebAuthn prevents this. Most importantly, once a HS256 key has been derived=
 between a client and RS they
 can reuse that key for multiple requests, reducing the overhead of the ECDH=
 key agreement step. Either side can decide as a matter of policy how long t=
o let this occur and when to trigger a fresh challenge-response.</span><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because this fits within the standard HTTP authentication framework, i=
t also requires no additional CORS configuration and is relatively easy to p=
lug in to existing HTTP client libraries.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The main downside of this approach to me is the fact that you can't si=
mply reuse an existing JWT library to implement it, and so it will take time=
 for client libs to develop. (Although
 I think this might be achievable now with existing *COSE* libraries). This w=
ould increase the risk of people hand-rolling solutions, rather than using w=
ell-tested libraries. On the other hand, it uses fairly widely supported pri=
mitives so e.g. an implementation
 using WebCrypto is probably only a few dozen lines of code.</span><o:p></o:=
p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">-- Neil</span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
<br>
<br>
</span><o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On 31 Oct 2019, at 19:20, Brian Campbell &lt;<a href=3D"mailto:bcampbe=
ll=3D40pingidentity.com@dmarc.ietf.org" target=3D"_blank">bcampbell=3D40ping=
identity.com@dmarc.ietf.org</a>&gt; wrote:</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hello WG,&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Just a quick note to let folks know that -03 of the DPoP draft was pub=
lished earlier today. The usual various document links are in the forwarded m=
essage below and the relevant snippet
 from the doc history with a summary of the changes is included here for con=
venience.&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hopefully folks will have time to read the (relativity) short document=
 before the meeting(s) in Singapore where (spoiler alert) I plan to ask that=
 the WG consider adoption of the
 draft.&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks,</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
&nbsp;-03<br>
&nbsp; &nbsp;o &nbsp;rework the text around uniqueness requirements on the j=
ti claim in<br>
&nbsp; &nbsp; &nbsp;&nbsp;the DPoP proof JWT<br>
&nbsp; &nbsp;o &nbsp;make tokens a bit smaller by using "htm", "htu", and "j=
kt" rather<br>
&nbsp; &nbsp; &nbsp;&nbsp;than "http_method", "http_uri", and "jkt#S256" res=
pectively<br>
&nbsp; &nbsp;o &nbsp;more explicit recommendation to use mTLS if that is ava=
ilable<br>
&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br>
&nbsp; &nbsp;o &nbsp;editorial updates</span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">---------- Forwarded message ---------<br>
From:&nbsp;&lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank"=
>internet-drafts@ietf.org</a>&gt;<br>
Date: Thu, Oct 31, 2019 at 11:53 AM<br>
Subject: New Version Notification for draft-fett-oauth-dpop-03.txt<br>
To: Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" targe=
t=3D"_blank">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a href=3D"m=
ailto:mbj@microsoft.com" target=3D"_blank">mbj@microsoft.com</a>&gt;, John B=
radley &lt;<a href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank">ve7jtb@ve=
7jtb.com</a>&gt;,
 Brian Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"=
_blank">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a href=3D"mailt=
o:david@alkaline-solutions.com" target=3D"_blank">david@alkaline-solutions.c=
om</a>&gt;, Daniel Fett &lt;<a href=3D"mailto:mail@danielfett.de" target=3D"=
_blank">mail@danielfett.de</a>&gt;</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue"><br>
<br>
<br>
A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
has been successfully submitted by Brian Campbell and posted to the<br>
IETF repository.<br>
<br>
Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br>
Revision:&nbsp; &nbsp; &nbsp; &nbsp;03<br>
Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; OAuth 2.0 Demonstration of Proof-of=
-Possession at the Application Layer (DPoP)<br>
Document date:&nbsp; 2019-10-30<br>
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br>
Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br>
URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<a href=3D"https://www.ie=
tf.org/internet-drafts/draft-fett-oauth-dpop-03.txt" target=3D"_blank">https=
://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>
Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf=
.org/doc/draft-fett-oauth-dpop/" target=3D"_blank">https://datatracker.ietf.=
org/doc/draft-fett-oauth-dpop/</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://tools.ietf.org/html/d=
raft-fett-oauth-dpop-03" target=3D"_blank">https://tools.ietf.org/html/draft=
-fett-oauth-dpop-03</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf.org/=
doc/html/draft-fett-oauth-dpop" target=3D"_blank">https://datatracker.ietf.o=
rg/doc/html/draft-fett-oauth-dpop</a><br>
Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://www.ietf.or=
g/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" target=3D"_blank">https://www.iet=
f.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a><br>
<br>
Abstract:<br>
&nbsp; &nbsp;This document describes a mechanism for sender-constraining OAu=
th 2.0<br>
&nbsp; &nbsp;tokens via a proof-of-possession mechanism on the application l=
evel.<br>
&nbsp; &nbsp;This mechanism allows for the detection of replay attacks with a=
ccess<br>
&nbsp; &nbsp;and refresh tokens.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission=
<br>
until the htmlized version and diff are available at&nbsp;<a href=3D"http://=
tools.ietf.org/" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d..&nbsp; If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</span></i></b><span style=3D"font-size:10.=
5pt;font-family:HelveticaNeue">_____________________________________________=
__<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/oauth</a></span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d.&nbsp; If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachment=
s from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><br>
<b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neue&quot;=
;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOT=
ICE: This email may contain confidential and privileged material for the sol=
e use of the intended recipient(s). Any review,
 use, distribution or disclosure by others is strictly prohibited.&nbsp; If y=
ou have received this communication in error, please notify the sender immed=
iately by e-mail and delete the message and any file attachments from your c=
omputer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>


<span>_______________________________________________</span><br><span>OAuth m=
ailing list</span><br><span>OAuth@ietf.org</span><br><span>https://www.ietf.=
org/mailman/listinfo/oauth</span><br></div></blockquote></div></body></html>=

--Apple-Mail-E6EF82FA-A98D-4D4C-8C41-2B542A4B6295--


From nobody Fri Nov 22 04:50:17 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58171120147 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:50:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 52zMJSJKKpQQ for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 04:50:06 -0800 (PST)
Received: from mail-wm1-x333.google.com (mail-wm1-x333.google.com [IPv6:2a00:1450:4864:20::333]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1ABA0120899 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:50:06 -0800 (PST)
Received: by mail-wm1-x333.google.com with SMTP id f129so6121239wmf.2 for <oauth@ietf.org>; Fri, 22 Nov 2019 04:50:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=sURTW2guBwLuBiqnSgghIZIbyzKIlw6Tez3CVxwaEMc=; b=KfSg7/NoCALuPeD3g6YYZXiMWfcYJC1CXTiGH86aCPSo0Rtjyuy3ynbokYwkjRVRyk vfdW3wcpt5eNukHonskGCAx42Kh5k9yMXpGI4dZ7Sl0dxg7cfahD7ikn/1VPu8F39p/d oMlY5YDJw+WqO5T1Ebrlh+a710mz1HdvIOVz0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=sURTW2guBwLuBiqnSgghIZIbyzKIlw6Tez3CVxwaEMc=; b=pHKK+9H7sMj8QJpxs8hUAVt8ZGyxAn1PJ6Jf5O1h73MQbxBNY7vwxwrA8QJm0cNPbL ph7MJFDqmrkkrkkyXLtovtQvDuOEJUBFh4Yxm0SFevYrxJzMZOgxuhzd8FcvCDDVDScT RSd29NUm5UShKeCWo35HEOH/YMBqLCB1Xw5DAy7Nv/MqcJy8ERUH5DKdp8izVhRa8ZkB sdYlC0lNzibB+sBz63UzP8xtjUgMgh0VA79T7EardegYyt4D/tgCmfZgJ+suPKPrcaPa cC14e6kFBmgArGdedaQqLAgM5I3r0uP6IpJaS/2Bp1U4KE/UMUGIyq602EVEQH0pQpla mdog==
X-Gm-Message-State: APjAAAVrHDJK5QUSYCxn+K/KlB4M+tMtBzFu7QC9KC/+UHq0edXAbUYJ PcKhS9QlfQ08wVogAJ2kMyvh/g==
X-Google-Smtp-Source: APXvYqxN9nZQWWNDRB/UTB62g3s1VTaJQ71mN3io3BgA1Mr2JT537yJIbvKfUH3eANpT+nKwvwO7Sw==
X-Received: by 2002:a1c:6144:: with SMTP id v65mr16735318wmb.53.1574427004552;  Fri, 22 Nov 2019 04:50:04 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id o1sm7842500wrs.50.2019.11.22.04.50.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 04:50:03 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <24B74FDA-99EA-4A5C-BEA5-9BC1A9DDD3D3@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E46BD393-7001-4533-9213-54372290FC8A"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 12:50:01 +0000
In-Reply-To: <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/m0-8rJSg4PcSnFbbwVHFe-owBgc>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 12:50:15 -0000

--Apple-Mail=_E46BD393-7001-4533-9213-54372290FC8A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Torsten,

On 22 Nov 2019, at 12:15, Torsten Lodderstedt <torsten@lodderstedt.net> =
wrote:
>=20
> Hi Neil,
>=20
>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>=20
>> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>=20
> I would argue TLS basically prevents leakage and not replay.

It also protects against replay. If you capture TLS-encrypted packets =
with Wireshark you not only cannot decipher them but also cannot replay =
them because they include specific anti-replay measures at the record =
level in the form of unique session keys and record sequence numbers =
included in the MAC calculations. This is essential to the security of =
TLS.

> The threats we try to cope with can be found in the Security BCP. =
There are multiple ways access tokens can leak, including referrer =
headers, mix-up, open redirection, browser history, and all sorts of =
access token leakage at the resource server
>=20
> Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4 =
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4=
>.
>=20
> =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 =
<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4=
.8> also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.

OK, good - these are threats beyond token replay (at least as I =
understand that term). It would be good to explicitly add them to the =
DPoP document motivation.

Note that most of these ways that an access token can leak also apply =
equally to leak of the DPoP JWT, so the protection afforded by DPoP =
boils down to how well the restrictions encoded into the JWT prevent it =
from being reused in this case - e.g., restricting the expiry time, =
audience, scope, linking it to a specific request (htm/htu) etc.=20

Every single one of those restrictions can be equally well encoded as =
caveats on a macaroon access token without any need for public key =
signatures or additional tokens and headers.

>> But if that's the case then there are much simpler defences than =
those proposed in the current draft:
>>=20
>> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
>=20
> How many deployments do you know that today are able to issue =
RS-specific access tokens?
> BTW: how would you identify the RS?
>=20
> I agree that would be an alternative and I=E2=80=99m a great fan of =
such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).

Many services already do this. For example, Google encodes the intended =
RS into the scopes on GCP =
(https://developers.google.com/identity/protocols/googlescopes =
<https://developers.google.com/identity/protocols/googlescopes>). A =
client can do a single authorization flow to authorize all the scopes it =
needs and then use repeated calls to the refresh token endpoint to =
obtain individual access tokens with subsets of the authorized scopes =
for each endpoint.

(I think Brian also mentioned this pattern at OSW, but it might have =
been somebody else).

>=20
>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin =
of the RS. This stops the token being reused elsewhere but the client =
can reuse it (replay it) for many requests.
>> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>=20
> Why is this needed if the access token is already audience restricted? =
Or do you propose this as alternative?=20

These are all alternatives. Any one of them prevents the specific attack =
of replay by the RS to another RS.

-- Neil=

--Apple-Mail=_E46BD393-7001-4533-9213-54372290FC8A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><div =
class=3D"">Hi Torsten,</div><div class=3D""><br class=3D""></div>On 22 =
Nov 2019, at 12:15, Torsten Lodderstedt &lt;<a =
href=3D"mailto:torsten@lodderstedt.net" =
class=3D"">torsten@lodderstedt.net</a>&gt; wrote:<br =
class=3D""><div><blockquote type=3D"cite" class=3D""><br =
class=3D"Apple-interchange-newline"><div class=3D""><span =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">Hi =
Neil,</span><br style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><br style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><blockquote type=3D"cite" style=3D"font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; orphans: auto; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">On =
22. Nov 2019, at 18:08, Neil Madden &lt;<a =
href=3D"mailto:neil.madden@forgerock.com" =
class=3D"">neil.madden@forgerock.com</a>&gt; wrote:<br class=3D""><br =
class=3D"">I think the phrase "token replay" is ambiguous. Traditionally =
it refers to an attacker being able to capture a token (or whole =
requests) in use and then replay it against the same RS. This is already =
protected against by the use of normal TLS on the connection between the =
client and the RS. I think instead you are referring to a =
malicious/compromised RS replaying the token to a different RS - which =
has more of the flavour of a man in the middle attack (of the phishing =
kind).<br class=3D""></blockquote><br style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; float: none; display: inline !important;" =
class=3D"">I would argue TLS basically prevents leakage and not replay. =
</span></div></blockquote><div><br class=3D""></div><div>It also =
protects against replay. If you capture TLS-encrypted packets with =
Wireshark you not only cannot decipher them but also cannot replay them =
because they include specific anti-replay measures at the record level =
in the form of unique session keys and record sequence numbers included =
in the MAC calculations. This is essential to the security of =
TLS.</div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D""><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">The threats =
we try to cope with can be found in the Security BCP. There are multiple =
ways access tokens can leak, including referrer headers, mix-up, open =
redirection, browser history, and all sorts of access token leakage at =
the resource server</span><br style=3D"caret-color: rgb(0, 0, 0); =
font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><br style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; float: none; display: inline !important;" =
class=3D"">Please have a look at<span =
class=3D"Apple-converted-space">&nbsp;</span></span><a =
href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#se=
ction-4" style=3D"font-family: HelveticaNeue; font-size: 14px; =
font-style: normal; font-variant-caps: normal; font-weight: normal; =
letter-spacing: normal; orphans: auto; text-align: start; text-indent: =
0px; text-transform: none; white-space: normal; widows: auto; =
word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px;" =
class=3D"">https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13=
#section-4</a><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">.</span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><br style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><a =
href=3D"https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#se=
ction-4.8" style=3D"font-family: HelveticaNeue; font-size: 14px; =
font-style: normal; font-variant-caps: normal; font-weight: normal; =
letter-spacing: normal; orphans: auto; text-align: start; text-indent: =
0px; text-transform: none; white-space: normal; widows: auto; =
word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px;" =
class=3D"">https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13=
#section-4.8</a><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D""><span =
class=3D"Apple-converted-space">&nbsp;</span>also has an extensive =
discussion of potential counter measures, including audience restricted =
access tokens and a conclusion to recommend sender constrained access =
tokens over other mechanisms.</span><br style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""></div></blockquote><div><br =
class=3D""></div><div>OK, good - these are threats beyond token replay =
(at least as I understand that term). It would be good to explicitly add =
them to the DPoP document motivation.</div><div><br =
class=3D""></div><div>Note that most of these ways that an access token =
can leak also apply equally to leak of the DPoP JWT, so the protection =
afforded by DPoP boils down to how well the restrictions encoded into =
the JWT prevent it from being reused in this case - e.g., restricting =
the expiry time, audience, scope, linking it to a specific request =
(htm/htu) etc.&nbsp;</div><div><br class=3D""></div><div>Every single =
one of those restrictions can be equally well encoded as caveats on a =
macaroon access token without any need for public key signatures or =
additional tokens and headers.</div><div><br class=3D""></div><blockquote =
type=3D"cite" class=3D""><div class=3D""><blockquote type=3D"cite" =
style=3D"font-family: HelveticaNeue; font-size: 14px; font-style: =
normal; font-variant-caps: normal; font-weight: normal; letter-spacing: =
normal; orphans: auto; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; widows: auto; word-spacing: =
0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D"">But if that's the case then there are =
much simpler defences than those proposed in the current draft:<br =
class=3D""><br class=3D"">1. Get separate access tokens for each RS with =
correct audience and scopes. The consensus appears to be that this is =
hard to do in some cases, hence the draft.<br class=3D""></blockquote><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">How many =
deployments do you know that today are able to issue RS-specific access =
tokens?</span><br style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">BTW: how =
would you identify the RS?</span><br style=3D"caret-color: rgb(0, 0, 0); =
font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><br style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none;" class=3D""><span style=3D"caret-color: rgb(0, 0, =
0); font-family: HelveticaNeue; font-size: 14px; font-style: normal; =
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
text-decoration: none; float: none; display: inline !important;" =
class=3D"">I agree that would be an alternative and I=E2=80=99m a great =
fan of such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).</span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""></div></blockquote><div><br class=3D""></div><div>Many =
services already do this. For example, Google encodes the intended RS =
into the scopes on GCP (<a =
href=3D"https://developers.google.com/identity/protocols/googlescopes" =
class=3D"">https://developers.google.com/identity/protocols/googlescopes</=
a>). A client can do a single authorization flow to authorize all the =
scopes it needs and then use repeated calls to the refresh token =
endpoint to obtain individual access tokens with subsets of the =
authorized scopes for each endpoint.</div><div><br =
class=3D""></div><div>(I think Brian also mentioned this pattern at OSW, =
but it might have been somebody else).</div><div><br =
class=3D""></div><blockquote type=3D"cite" class=3D""><div class=3D""><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><blockquote type=3D"cite" style=3D"font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; orphans: auto; =
text-align: start; text-indent: 0px; text-transform: none; white-space: =
normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; text-decoration: none;" class=3D"">2. =
Make the DPoP token be a simple JWT with an "iat" and the origin of the =
RS. This stops the token being reused elsewhere but the client can reuse =
it (replay it) for many requests.<br class=3D"">3. Issue a =
macaroon-based access token and the client can add a correct audience =
and scope restrictions at the point of use.<br class=3D""></blockquote><br=
 style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""><span style=3D"caret-color: rgb(0, 0, 0); font-family: =
HelveticaNeue; font-size: 14px; font-style: normal; font-variant-caps: =
normal; font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none; float: none; display: inline !important;" class=3D"">Why is this =
needed if the access token is already audience restricted? Or do you =
propose this as alternative?<span =
class=3D"Apple-converted-space">&nbsp;</span></span><br =
style=3D"caret-color: rgb(0, 0, 0); font-family: HelveticaNeue; =
font-size: 14px; font-style: normal; font-variant-caps: normal; =
font-weight: normal; letter-spacing: normal; text-align: start; =
text-indent: 0px; text-transform: none; white-space: normal; =
word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: =
none;" class=3D""></div></blockquote><div><br class=3D""></div><div>These =
are all alternatives. Any one of them prevents the specific attack of =
replay by the RS to another RS.</div></div><div><br =
class=3D""></div><div>-- Neil</div></body></html>=

--Apple-Mail=_E46BD393-7001-4533-9213-54372290FC8A--


From nobody Fri Nov 22 05:21:34 2019
Return-Path: <prvs=2222bf29d=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B9F8120876 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:21:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level: 
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w8CSKdA_k0wa for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:21:26 -0800 (PST)
Received: from smtp-fw-9101.amazon.com (smtp-fw-9101.amazon.com [207.171.184.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CDA71208FE for <oauth@ietf.org>; Fri, 22 Nov 2019 05:21:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574428887; x=1605964887; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=KQ8BhcECMNISjISC1pFNHzAMvHJp3AKoWoZ1JwC2duo=; b=G1Z+OvyBTkkV5B7J3Hu6ubUDVhOUTMLu/HrG2DaRaDMtVHA/ExM2uePI MhMDJJ3n5IDsihCcBXm/WcUm250q7LbbuARuKEVo2kDLxe1QQ1NtzN/SU ny2Gl8sxOe/O13WBOUi/GfOIVD4yh+NnJFLysv0ESPJXohkvj/8+xDSgw s=;
IronPort-SDR: PRZN/Lt6eoyxplOUoQ4tRF7gAbJ42SULXBqVf57ou7MCjlcUzGZcD15KhkSz9rmfl8kb5KW8jZ krqX3WQ+YFCw==
X-IronPort-AV: E=Sophos;i="5.69,229,1571702400";  d="scan'208";a="861440"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-2a-119b4f96.us-west-2.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9101.sea19.amazon.com with ESMTP; 22 Nov 2019 13:21:15 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan2.pdx.amazon.com [10.170.41.162]) by email-inbound-relay-2a-119b4f96.us-west-2.amazon.com (Postfix) with ESMTPS id E991C1A1D21; Fri, 22 Nov 2019 13:21:14 +0000 (UTC)
Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 13:21:14 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 13:21:14 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 22 Nov 2019 13:21:13 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, "Neil Madden" <neil.madden@forgerock.com>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAAAUqAgAADQoCAAAgdgIAAJayAgAAjj4CAAJhigA==
Date: Fri, 22 Nov 2019 13:21:13 +0000
Message-ID: <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net>
In-Reply-To: <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.162.54]
Content-Type: text/plain; charset="utf-8"
Content-ID: <7A7C999E958DB1498F0DD70FC44B206E@amazon.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/IznL6dIUIf9TYbPh7MCtUT22DIU>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 13:21:32 -0000
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From nobody Fri Nov 22 05:33:33 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9135312084E for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:33:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rOb7YQxyVhlO for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:33:29 -0800 (PST)
Received: from mail-pg1-x530.google.com (mail-pg1-x530.google.com [IPv6:2607:f8b0:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6533120143 for <oauth@ietf.org>; Fri, 22 Nov 2019 05:33:29 -0800 (PST)
Received: by mail-pg1-x530.google.com with SMTP id b137so1060917pga.6 for <oauth@ietf.org>; Fri, 22 Nov 2019 05:33:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=idcctkzAniDFdkKUPVfmt3LLNpLthR4TNAPlI0khgo0=; b=BfMVRPqiIpPysa2usftYXy94QuJdSOix0SOPSFvbViZIIg4rB5RL3oO7BoNTHWcOVl su/iHCM1dtEpgCyd+dfnfY8utdXRJyTEu9TOMEXxZkwkRxYhRod5p8j0l8UiBGkUAtkH fjt2ewmlqnubE14A6oQ3Ugx9WqFwUScoL5z0WzZj4742RgpKcFMPeAMy2byFAtrJd3Gl gicpoP5VwIyC3zWHAB7zhgJnqu8XE9SbRvfIpIXchJ7P/Xfb9r6LQg8w2oVq2SpuBaK5 /5foQosZ3TtoIFJ+gLTrwRflwiu405CzpQXbXh3BRoLmj7mDtOy+Z9Q6Y++yi6y8n/ar rXSg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=idcctkzAniDFdkKUPVfmt3LLNpLthR4TNAPlI0khgo0=; b=dW199wQKL/ntJToEVYtZPRpKKf50USYiIy/jAbYJOqcscjhPbKZPF1wcWxP6tSIYlz byuMD0PY/8BG3YVbI7DYEgvBOKa+JST35I8qNaA4CCLUsppDx2OUUIawq+XvgTe1k/J8 blstcdSYlnPWB+b30wJFXqceBsi8MV4EfmjW5Q0eG8qZpMQfDaLdET8sQ8l6K3DYRNur nMMrRViPvRjY9vVkdJ36bAx+jSLV/GrAdVCm+X45LA2/g0Obid+j9MwxH453DxJj6ohb jBKuiGWokItZFbJvYMywynHXXzGtSRD1YQrCXjGYSY/1S8VQBH2b8F3tsYrp0LWRociA rZVQ==
X-Gm-Message-State: APjAAAXdQ3gY8+O9Hy+d+NtFUOwk96vhFN9L+n3eWeo1N6F/86UWC1fS ABSCq0BXnFYTsaD1fgm1b5xHmw==
X-Google-Smtp-Source: APXvYqy3KriTsh69x7XcBCJO8Zby4wZXc/FHJZ/sKiBAuX7jykx+FU3eGycrpDN5y3xXpLBsS/Y6eA==
X-Received: by 2002:a63:cc56:: with SMTP id q22mr15999180pgi.439.1574429608961;  Fri, 22 Nov 2019 05:33:28 -0800 (PST)
Received: from [10.84.13.52] ([103.137.210.94]) by smtp.gmail.com with ESMTPSA id 71sm7711226pfx.107.2019.11.22.05.33.26 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 05:33:27 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <5C0676D0-B8AB-48DC-9265-3BB38B442815@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_2E0F5978-1D63-46A5-852B-64442296BE25"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 21:33:21 +0800
In-Reply-To: <24B74FDA-99EA-4A5C-BEA5-9BC1A9DDD3D3@forgerock.com>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
To: Neil Madden <neil.madden@forgerock.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <24B74FDA-99EA-4A5C-BEA5-9BC1A9DDD3D3@forgerock.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/d_rDSJ9GvPtLFff1qWKJFxsSH-8>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 13:33:33 -0000

--Apple-Mail=_2E0F5978-1D63-46A5-852B-64442296BE25
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Neil,

> On 22. Nov 2019, at 20:50, Neil Madden <neil.madden@forgerock.com> =
wrote:
>=20
> Hi Torsten,
>=20
> On 22 Nov 2019, at 12:15, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
>>=20
>> Hi Neil,
>>=20
>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>>=20
>>> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>>=20
>> I would argue TLS basically prevents leakage and not replay.
>=20
> It also protects against replay. If you capture TLS-encrypted packets =
with Wireshark you not only cannot decipher them but also cannot replay =
them because they include specific anti-replay measures at the record =
level in the form of unique session keys and record sequence numbers =
included in the MAC calculations. This is essential to the security of =
TLS.

I understand. I was looking onto TLS from an application perspective, =
that might explain differing perception.

>=20
>> The threats we try to cope with can be found in the Security BCP. =
There are multiple ways access tokens can leak, including referrer =
headers, mix-up, open redirection, browser history, and all sorts of =
access token leakage at the resource server
>>=20
>> Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=

>>=20
>> =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.
>=20
> OK, good - these are threats beyond token replay (at least as I =
understand that term). It would be good to explicitly add them to the =
DPoP document motivation.
>=20
> Note that most of these ways that an access token can leak also apply =
equally to leak of the DPoP JWT, so the protection afforded by DPoP =
boils down to how well the restrictions encoded into the JWT prevent it =
from being reused in this case - e.g., restricting the expiry time, =
audience, scope, linking it to a specific request (htm/htu) etc.=20
>=20
> Every single one of those restrictions can be equally well encoded as =
caveats on a macaroon access token without any need for public key =
signatures or additional tokens and headers.
>=20
>>> But if that's the case then there are much simpler defences than =
those proposed in the current draft:
>>>=20
>>> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
>>=20
>> How many deployments do you know that today are able to issue =
RS-specific access tokens?
>> BTW: how would you identify the RS?
>>=20
>> I agree that would be an alternative and I=E2=80=99m a great fan of =
such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).
>=20
> Many services already do this. For example, Google encodes the =
intended RS into the scopes on GCP =
(https://developers.google.com/identity/protocols/googlescopes). A =
client can do a single authorization flow to authorize all the scopes it =
needs and then use repeated calls to the refresh token endpoint to =
obtain individual access tokens with subsets of the authorized scopes =
for each endpoint.

And that works at google? How does the client indicate the RS it wants =
to use the first access token (that is obtains in the course of the code =
exchange)?

>=20
> (I think Brian also mentioned this pattern at OSW, but it might have =
been somebody else).

I know the pattern and we used this at Deutsche Telekom, but I don=E2=80=99=
t know any other deployment utilising this pattern. In my observation, =
most people treat access tokens as cookies and use them across RSs. =
Another reason might be that, before resource indicators, there was no =
interoperable way to ask for a token for a certain RS.

>=20
>>=20
>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin =
of the RS. This stops the token being reused elsewhere but the client =
can reuse it (replay it) for many requests.
>>> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>>=20
>> Why is this needed if the access token is already audience =
restricted? Or do you propose this as alternative?=20
>=20
> These are all alternatives. Any one of them prevents the specific =
attack of replay by the RS to another RS.

And which does for replay with the same RS?


best,
Torsten.=20
>=20
> -- Neil


--Apple-Mail=_2E0F5978-1D63-46A5-852B-64442296BE25
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_2E0F5978-1D63-46A5-852B-64442296BE25--


From nobody Fri Nov 22 05:37:28 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6690120856 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:37:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HrFU6xZ_2WLY for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 05:37:23 -0800 (PST)
Received: from mail-pl1-x629.google.com (mail-pl1-x629.google.com [IPv6:2607:f8b0:4864:20::629]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55802120859 for <oauth@ietf.org>; Fri, 22 Nov 2019 05:37:23 -0800 (PST)
Received: by mail-pl1-x629.google.com with SMTP id o9so3130694plk.6 for <oauth@ietf.org>; Fri, 22 Nov 2019 05:37:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=vaDFbrCnVDuIV37UHtX6PUGffrypYgzJbF4rGSnHe4o=; b=2RqrFPECJauTzMLRGESrBjuoqFhJa/R/HZFYNglrioKm3VpWmT6R4tmlreoKpgxRwL 8Ga3STYlRQqKEoI/ez31rZv3ZshHbo+Erjlxl0zTZ97Lk0tOXVSYGcN5pN3qgT9gv1or OJEd7RRf15WlUTCyheymC8T6PmRVubZRkbdEVDmKMun2F6/dM8h4VpMgPQ6jxowoPVSu Kg5M7ar0Iz+Io/2InLyqRMr7lT3vZopaE2F8qiPWDyoRYlUYQftiBQ7Q9/vDS4N+R5WS UrR1feoucU3GL9opyMDf1yYYGi5TnD8cfl9MBGDYzuqSvceqjE9t5GGNx12MvJJf4Bk3 XhiQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=vaDFbrCnVDuIV37UHtX6PUGffrypYgzJbF4rGSnHe4o=; b=l8nKKLZFJgq8pDILBz51/6H8jEoM1jGMSqH2WFCIcGWrbcB2/qYSKDlrfawtys7swX Aesb2kvunLbsEeZRU8n+aj02ruX1SxeT6SvIbstuk81XBmFkU+qHFCjhNS017sEFumrK xXAtQT4GBWP1qqIKrRJyBZEwgakiy0qeu23AJeU1iJTyG9pyPFFIAOq1lM1kmmzd899p YDEITsDpkQBuRXZ7fWqUcLrtXt5OQvQAb0hNm8eDVHjPdV5HPp6hmToKP6Bmusallpbc gEBJApp88/2Mj+nYXZj7v2M+iQJ4L4EGimMyB7qyWFwttkc+TPRN4q7h/D/qoTXro8Cs AB1g==
X-Gm-Message-State: APjAAAXreJrk93G/Mhh4C1iUAcD/jYu4E58o8uCWF0eyd4mdT9hDY9It u+g1ZQ+dS8f5uUlfR4JKCRkmt1fQmAJZ4p2K
X-Google-Smtp-Source: APXvYqwJoNYMCez85N8EWQkqPHvSDYNZMAG7mr0yWgOPJfhNKoxwRAtusmRvkD9y2ZQ6pMb4uRZYeQ==
X-Received: by 2002:a17:902:8c85:: with SMTP id t5mr14217804plo.290.1574429842584;  Fri, 22 Nov 2019 05:37:22 -0800 (PST)
Received: from [10.84.13.52] ([103.137.210.94]) by smtp.gmail.com with ESMTPSA id t8sm4892649pgr.38.2019.11.22.05.37.20 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 05:37:21 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_001DC751-70AF-4928-9F51-F160C325B7B4"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 21:37:15 +0800
In-Reply-To: <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com>
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
To: "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/f72PJiLgnj2hyM9oTSDgbjaTaU4>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 13:37:26 -0000

--Apple-Mail=_001DC751-70AF-4928-9F51-F160C325B7B4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 22. Nov 2019, at 21:21, Richard Backman, Annabelle =
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>=20
> The dichotomy of "TLS working" and "TLS failed" only applies to a =
single TLS connection. In non-end-to-end TLS environments, each TLS =
terminator between client and RS introduces additional token =
leakage/exfiltration risk, irrespective of the quality of the TLS =
connections themselves. Each terminator also introduces complexity for =
implementing mTLS, Token Binding, or any other TLS-based sender =
constraint solution, which means developers with non-end-to-end TLS use =
cases will be more likely to turn to DPoP.

The point is we are talking about different developers here. The client =
developer does not need to care about the connection between proxy and =
service. She relies on the service provider to get it right. So the =
developers (or DevOps or admins) of the service provider need to ensure =
end to end security. And if the path is secured once, it will work for =
all clients.=20

> If DPoP is intended to address "cases where neither mTLS nor OAuth =
Token Binding are available" [1], then it should address this risk of =
token leakage between client and RS. If on the other hand DPoP is only =
intended to support the SPA use case and assumes the use of end-to-end =
TLS, then the document should be updated to reflect that.

I agree.=20

>=20
> [1]: https://tools.ietf.org/html/draft-fett-oauth-dpop-03#section-1
>=20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
>=20
>=20
> =EF=BB=BFOn 11/22/19, 8:17 PM, "OAuth on behalf of Torsten =
Lodderstedt" <oauth-bounces@ietf.org on behalf of =
torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>=20
>    Hi Neil,
>=20
>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>=20
>> On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>>=20
>>>=20
>>>=20
>>>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>>>=20
>>>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question about =
the scope here. That was the one major thing that struck me during the =
DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to agree =
on what DPoP is for. Some (including the authors, it seems) see it as a =
quick point-solution to a specific use case. Others see it as a general =
PoP mechanism.=20
>>>>=20
>>>> If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
>>>=20
>>> as a co-author of the DPoP draft I state again what I said =
yesterday: DPoP is a mechanism for sender-constraining access tokens =
sent from SPAs only. The threat to be prevented is token replay.
>>=20
>> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>=20
>    I would argue TLS basically prevents leakage and not replay. The =
threats we try to cope with can be found in the Security BCP. There are =
multiple ways access tokens can leak, including referrer headers, =
mix-up, open redirection, browser history, and all sorts of access token =
leakage at the resource server
>=20
>    Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=

>=20
>    =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.
>=20
>>=20
>> But if that's the case then there are much simpler defences than =
those proposed in the current draft:
>>=20
>> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
>=20
>    How many deployments do you know that today are able to issue =
RS-specific access tokens?
>    BTW: how would you identify the RS?
>=20
>    I agree that would be an alternative and I=E2=80=99m a great fan of =
such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).
>=20
>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin =
of the RS. This stops the token being reused elsewhere but the client =
can reuse it (replay it) for many requests.
>> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>=20
>    Why is this needed if the access token is already audience =
restricted? Or do you propose this as alternative?=20
>=20
>>=20
>> Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.
>=20
>    I agree.=20
>=20
>    best regards,
>    Torsten.=20
>=20
>>=20
>> -- Neil
>=20
>=20
>=20


--Apple-Mail=_001DC751-70AF-4928-9F51-F160C325B7B4
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_001DC751-70AF-4928-9F51-F160C325B7B4--


From nobody Fri Nov 22 06:12:12 2019
Return-Path: <prvs=2222bf29d=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8EE1120116 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 06:12:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level: 
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hdH36RyRAK0e for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 06:12:05 -0800 (PST)
Received: from smtp-fw-2101.amazon.com (smtp-fw-2101.amazon.com [72.21.196.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADD9E120147 for <oauth@ietf.org>; Fri, 22 Nov 2019 06:12:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574431926; x=1605967926; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=U4cgeUPPt4p6XvxhNeoDMr3ynGK90HWvzSLkOBbxJts=; b=n0De4TaQCpHh28Z6/KeagngqU4nXcYs5gUwvA9AawE7nF9oIT/F0HFvh yl1LBVnbNnD2y8QlGrS69HX43DBW41W0RCAlDApfXJGpqRnjVWKG/IjGP 673rEvN1zos9TSx15P8MtX3ziY1yxASddYakWD7UxrTL/7LqmR7JON91n A=;
IronPort-SDR: 2Bz5cMHxf1QGAIOM++8VoQYopM3uy3K1KY/NV8sL/aljDOWADw6xNzu3eb2VamopiBXsBkmLLq iMsDQAb2Qfbw==
X-IronPort-AV: E=Sophos;i="5.69,229,1571702400";  d="scan'208";a="5388066"
Received: from iad6-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-1d-5dd976cd.us-east-1.amazon.com) ([10.124.125.2]) by smtp-border-fw-out-2101.iad2.amazon.com with ESMTP; 22 Nov 2019 14:12:03 +0000
Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-5dd976cd.us-east-1.amazon.com (Postfix) with ESMTPS id 47D73A1E2C; Fri, 22 Nov 2019 14:12:01 +0000 (UTC)
Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 14:12:01 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 14:12:01 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 22 Nov 2019 14:12:00 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Torsten Lodderstedt <torsten=40lodderstedt.net@dmarc.ietf.org>, "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAAAUqAgAADQoCAAAgdgIAAJayAgAAjj4CAAJhigP//fl+AgACP0QA=
Date: Fri, 22 Nov 2019 14:12:00 +0000
Message-ID: <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com> <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net>
In-Reply-To: <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.162.45]
Content-Type: text/plain; charset="utf-8"
Content-ID: <2B55CE5273FF294CBCB806F4819CE3ED@amazon.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/fbFTk5cJ2dDJqn5eMnZuIPVS5Dg>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 14:12:11 -0000
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From nobody Fri Nov 22 06:50:38 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8C7C120876 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 06:50:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1FsQUkY3Y_hU for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 06:50:34 -0800 (PST)
Received: from mail-pj1-x102f.google.com (mail-pj1-x102f.google.com [IPv6:2607:f8b0:4864:20::102f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 527FD120867 for <oauth@ietf.org>; Fri, 22 Nov 2019 06:50:34 -0800 (PST)
Received: by mail-pj1-x102f.google.com with SMTP id t103so3141859pjb.6 for <oauth@ietf.org>; Fri, 22 Nov 2019 06:50:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=npSACM59pmclpEz2Ieeu4DkkkNo8iKI7NvYlRsmd5lg=; b=TdKgRaYkwV0I4MVgc90BbXDNqZ52XHTIyNSJrzFbJlcEwjMoqePTO6cegufHT9ktVy eCsenovtoJH27HUrofpKt49InwQxqP/JSbmtxIXWUWb3MNDyqIdlhtUvK0a9lQLFvtQ9 lrGuYFPibnthEAh9apaniJ5Ysl8ijnX5mZ03Ebg/QBlmboyKz1aEbgk7Xql1/6fXyn3n WkMUMIXETp3Eu9A1jrev12Ypf8tnVVF1dpJo42fU/+Q1YBy2u4nfq3T/lgh/u+NIVl9q KII9XCY/xHNor+uNtR5lk7+Hj+5pFhXNJhbMa0BU2E3Pm0CmK0lmBvSLJaVoLdyH134c CnFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=npSACM59pmclpEz2Ieeu4DkkkNo8iKI7NvYlRsmd5lg=; b=LBTfHeEogRXwi+qZRdUW896kPM5JarWDbWQYzG+S7T2XuUs6gtecbmG9HoXbtYcZQO WlUV0JA/vqnXnySWRYhx773q0U2WAxgKTq0DMCpeiwyasdeyHk4BB2CxVi+CuV5iR8+I FoS9wXZB0hQTnqE9xVk+ICC/5IUN0a3Hs+oMy1ULrL7FiVvZ0DMwt78ak8OKXGwBuZsw 96N9icU7PXfUi9pg+9MPwNAK9b7zxWOir0uMCtQTIcsBhRf59jqrimQ+AHuzEz9GAR3C PrnXQgF2EztOzzX3LASOxYsQzhp3JKsU54yLKeUyxQgD9Bzr//QoY6NYe1wLqLLhH8xw Ef+Q==
X-Gm-Message-State: APjAAAVmy4NGHVZD4ni26YDVSkyk4utjLtbLu8mS3uq6K2+ls1x6KL83 ihOUvwP3ul4oTexakucKl8rOUfo07z5K8fvW
X-Google-Smtp-Source: APXvYqxCUG/DboavWVlp9ZquhZSenaPE4lktz4mCIs7hM+284lKWT6NLEizGX92mk9NVtUauNZ1eVw==
X-Received: by 2002:a17:902:5a4d:: with SMTP id f13mr1952892plm.250.1574434233482;  Fri, 22 Nov 2019 06:50:33 -0800 (PST)
Received: from [10.84.13.52] ([103.137.210.94]) by smtp.gmail.com with ESMTPSA id w69sm8138362pfc.164.2019.11.22.06.50.31 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 06:50:32 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <542F255E-FE31-4905-9253-7296FC7BEE87@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_9790B7A9-6C55-462E-A670-9A41F8350E91"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Fri, 22 Nov 2019 22:50:25 +0800
In-Reply-To: <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com>
Cc: Annabelle Backman <richanna@amazon.com>, oauth <oauth@ietf.org>
To: "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com> <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net> <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/N959qdlFgHBrmZX68mgvmYPaf9g>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 14:50:37 -0000

--Apple-Mail=_9790B7A9-6C55-462E-A670-9A41F8350E91
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 22. Nov 2019, at 22:12, Richard Backman, Annabelle =
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>=20
> The service provider doesn't own the entire connection. They have no =
control over corporate or government TLS gateways, or other terminators =
that might exist on the client's side. In larger organizations, or when =
cloud hosting is involved, the service team may not even own all the =
hops on their side.

how are cookies protected from leakage, replay, injection in a setup =
like this?

> While presumably they have some trust in them, protection against =
leaked bearer tokens is an attractive defense-in-depth measure.

That=E2=80=99s a totally valid point. But again, such a solution makes =
the life of client developers harder.=20

I personally think, we as a community need to understand the pros and =
cons of both approaches. I also think we have not even come close to =
this point, which, in my option, is the prerequisite for making informed =
decisions.

>=20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
>=20
>=20
> =EF=BB=BFOn 11/22/19, 9:37 PM, "OAuth on behalf of Torsten =
Lodderstedt" <oauth-bounces@ietf.org on behalf of =
torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>=20
>=20
>=20
>> On 22. Nov 2019, at 21:21, Richard Backman, Annabelle =
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>>=20
>> The dichotomy of "TLS working" and "TLS failed" only applies to a =
single TLS connection. In non-end-to-end TLS environments, each TLS =
terminator between client and RS introduces additional token =
leakage/exfiltration risk, irrespective of the quality of the TLS =
connections themselves. Each terminator also introduces complexity for =
implementing mTLS, Token Binding, or any other TLS-based sender =
constraint solution, which means developers with non-end-to-end TLS use =
cases will be more likely to turn to DPoP.
>=20
>    The point is we are talking about different developers here. The =
client developer does not need to care about the connection between =
proxy and service. She relies on the service provider to get it right. =
So the developers (or DevOps or admins) of the service provider need to =
ensure end to end security. And if the path is secured once, it will =
work for all clients.=20
>=20
>> If DPoP is intended to address "cases where neither mTLS nor OAuth =
Token Binding are available" [1], then it should address this risk of =
token leakage between client and RS. If on the other hand DPoP is only =
intended to support the SPA use case and assumes the use of end-to-end =
TLS, then the document should be updated to reflect that.
>=20
>    I agree.=20
>=20
>>=20
>> [1]: https://tools.ietf.org/html/draft-fett-oauth-dpop-03#section-1
>>=20
>> =E2=80=93=20
>> Annabelle Richard Backman
>> AWS Identity
>>=20
>>=20
>> On 11/22/19, 8:17 PM, "OAuth on behalf of Torsten Lodderstedt" =
<oauth-bounces@ietf.org on behalf of =
torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>=20
>>   Hi Neil,
>>=20
>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>>=20
>>> On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>>>=20
>>>>=20
>>>>=20
>>>>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>>>>=20
>>>>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question =
about the scope here. That was the one major thing that struck me during =
the DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to =
agree on what DPoP is for. Some (including the authors, it seems) see it =
as a quick point-solution to a specific use case. Others see it as a =
general PoP mechanism.=20
>>>>>=20
>>>>> If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
>>>>=20
>>>> as a co-author of the DPoP draft I state again what I said =
yesterday: DPoP is a mechanism for sender-constraining access tokens =
sent from SPAs only. The threat to be prevented is token replay.
>>>=20
>>> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>>=20
>>   I would argue TLS basically prevents leakage and not replay. The =
threats we try to cope with can be found in the Security BCP. There are =
multiple ways access tokens can leak, including referrer headers, =
mix-up, open redirection, browser history, and all sorts of access token =
leakage at the resource server
>>=20
>>   Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=

>>=20
>>   =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.
>>=20
>>>=20
>>> But if that's the case then there are much simpler defences than =
those proposed in the current draft:
>>>=20
>>> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
>>=20
>>   How many deployments do you know that today are able to issue =
RS-specific access tokens?
>>   BTW: how would you identify the RS?
>>=20
>>   I agree that would be an alternative and I=E2=80=99m a great fan of =
such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).
>>=20
>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin =
of the RS. This stops the token being reused elsewhere but the client =
can reuse it (replay it) for many requests.
>>> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>>=20
>>   Why is this needed if the access token is already audience =
restricted? Or do you propose this as alternative?=20
>>=20
>>>=20
>>> Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.
>>=20
>>   I agree.=20
>>=20
>>   best regards,
>>   Torsten.=20
>>=20
>>>=20
>>> -- Neil
>>=20
>>=20
>>=20
>=20
>=20
>=20


--Apple-Mail=_9790B7A9-6C55-462E-A670-9A41F8350E91
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_9790B7A9-6C55-462E-A670-9A41F8350E91--


From nobody Fri Nov 22 08:35:00 2019
Return-Path: <prvs=2222bf29d=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 799D3120A25 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 08:34:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.8
X-Spam-Level: 
X-Spam-Status: No, score=-11.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GdwoYdzgMp11 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 08:34:54 -0800 (PST)
Received: from smtp-fw-6001.amazon.com (smtp-fw-6001.amazon.com [52.95.48.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46A3F120A67 for <oauth@ietf.org>; Fri, 22 Nov 2019 08:34:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574440485; x=1605976485; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=BMEmajUCN/z9e2iJVeU1Ftx5eSk3eAPb+OHqrrjE1aQ=; b=kEYzKJhds2Uh5tQ6GQ8bv0YB287Aq61pl1BCnEK9f2imRJXtns9pcwkZ vH5EzNiTws8j+/ZlIV8JkfTULmXQta6tWxWoMK39iu/ut7l42tACIO1Ix nID2L/1SCPKD6jtyeZRxlEb3LVFybIXpQEWTS8Bco1oi/FW1njZnWVtQJ k=;
IronPort-SDR: mmnRauZCLV59Ki5/AXLzruBfI2h42+0/f9S8bU9uJaj40CKW84ECCIUdfzyFMqEIoPv/vQRsVI Qt5O1ONREbYQ==
X-IronPort-AV: E=Sophos;i="5.69,230,1571702400";  d="scan'208";a="5914405"
Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2c-2225282c.us-west-2.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6001.iad6.amazon.com with ESMTP; 22 Nov 2019 16:34:43 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan3.pdx.amazon.com [10.170.41.166]) by email-inbound-relay-2c-2225282c.us-west-2.amazon.com (Postfix) with ESMTPS id 6A5D1A1839; Fri, 22 Nov 2019 16:34:42 +0000 (UTC)
Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 16:34:42 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 22 Nov 2019 16:34:41 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 22 Nov 2019 16:34:41 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>, "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>
CC: oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAAAUqAgAADQoCAAAgdgIAAJayAgAAjj4CAAJhigP//fl+AgACP0QD//4SggAAUZ6MA
Date: Fri, 22 Nov 2019 16:34:41 +0000
Message-ID: <0DBB5D3D-025C-4226-856F-C06907E28A6E@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com> <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net> <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com> <542F255E-FE31-4905-9253-7296FC7BEE87@lodderstedt.net>
In-Reply-To: <542F255E-FE31-4905-9253-7296FC7BEE87@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1b.0.190715
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.161.243]
Content-Type: text/plain; charset="utf-8"
Content-ID: <8B19370CEB69844291C2240EEC8AD17E@amazon.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lxWSyML647-wPOHnWtDcHmSsyKA>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 16:34:59 -0000
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From nobody Fri Nov 22 09:01:07 2019
Return-Path: <g.schmitz@gtrs.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAEB91200EB for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 09:01:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 75J3iQYMDocl for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 09:01:03 -0800 (PST)
Received: from mail.gtrs.de (mail.gtrs.de [94.23.167.223]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC93712004C for <oauth@ietf.org>; Fri, 22 Nov 2019 09:01:02 -0800 (PST)
Received: from [129.69.182.104] (pool4-104.sec.uni-stuttgart.de [129.69.182.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.gtrs.de (Postfix) with ESMTPSA id D37011C0198 for <oauth@ietf.org>; Fri, 22 Nov 2019 16:45:30 +0000 (UTC)
To: "oauth@ietf.org" <oauth@ietf.org>
From: Guido Schmitz <g.schmitz@gtrs.de>
Openpgp: preference=signencrypt
Autocrypt: addr=g.schmitz@gtrs.de; prefer-encrypt=mutual; keydata= mQINBExwZ1UBEACrRLUyt0jbab7/nCjULVkApY3mu+pLUfekl+yfw9XfUHFrmFonu4zYAFu8 dduseM9m0AG5b50i7L/dyJjgMlOx/WqoDycdIh37l3u6rU7EY7UY1w88pywOcUt64NW9uQnz 5wQU/UMC/JuFfGKirVTmtVY9kedfrcry8pJ5IPxmKxxf/LA42Qos/DSOzZpJYkeUM4z9l73t GB8C+WrMjGEviyQfQhlx0Ad1MbDF9ZavTSAKnRtX599BCl2p33l4iIq5ebh7Gq19LHACd3c8 SGLNnt8TqRXUo1HPE8ug05hagzc+85eAW37tjesFpkKQB4miXv6IB7tW8We128H3gxbWXzZb kktAHocZkAxoDPIPuxW5h3X4kotDb7aQsDM/Rbnc/YhVHd0L9EHnHkFbL1MJa+LXP0eCwq5D Ud51rtE5Ktmzhc0AZ0AYEDQNSyD4KwiRM9idMjM2DmNRvjyTL7VJj3NdVX+HkeVRhwkI6eCI U7I65yNdAKPfxSEhK1RKjXDzhEr3IZwZMjzwaaTt77sjIZan5UclTKP3tEYu0VknbDAusClB 9omg4jq8qM94lqSrHDVpps4xmMTW3T+Hwl6kHTsvLbz2q/QROItletxdfeys0y0jeD1pJ7Uu bQmUS8YeJa10PLNgUWvho+6gng5lmYJppmjXLcO4oL0v8TQ2mQARAQABtCtHdWlkbyBUaW0g Um9tYW4gU2NobWl0eiA8Zy5zY2htaXR6QGd0cnMuZGU+iQI7BBMBAgAlAhsDBgsJCAcDAgYV CAIJCgsEFgIDAQIeAQIXgAUCTHBpZAIZAQAKCRAgw0pxFWieqbHXEACPKQS/0Cmq2kur8FLL g3YlehjORZDxcnF3XzC6qkD0iJu5xmwMxNgwGElD6ezRWRkNhc4C0G0YmG1IKB3qbpRLVMke ApjkNcoKkffvEACReUxNSzaNhRvzWdK8fBLs4DFqudV5iBC0kmm6DjzUccNXMjbFn7smYVbR MIsZ74hNUkpn44g6oB3myR5s8VdQdKiQJmP9qdwNtfDI81HBK1jU9dJSS11M2pxmhklYZ8us mjkNEFi9qy3Prx1vlyio/78TP0xwTkIRe48Kg6oMdXKWFjXq/K2iOm2d0rRzvpF8C3mE8MWP YsGD65XHlhtJ0bAJw+F5xVhvzFkRPOPwjmgZ2RKfChchTb/L5mD9+2kor0dWiFGNCs0Dxa5T j0PLd0ExYzZi6GRs+Yvz3moSiN92Rlvoasgebp6pUM1kfTsh9ln7IMWUZW7UeQDymT2HHYfx Gc/qiBU5u2kT7qzAfN6mJkDYQZthzirETcnHlElX6YZQRR2gqov8Px5miMaIGxW514vwCTvD 7Lh8jnTrxDYCCkwItscBMNxNeySYYMQoDnfPHeMGnEa0NoykRaZDAYXBrDduM4E6fJoRhlM/ RLi3XvxtkDNMejHXWq5Z3znULfFVy/OUPanoOC8Qd15YQMA4kVJ4u+Wr2h5dpwrIvB6O3zpE yhgES3bXkqo7KHHjTLkCDQRMcGdVARAAts2esuf7nLVY2PBKMw8J9eN5qo6u+5O4rq5v2vn0 iDRKvOO3pttLx3bCMCFBuWqiXN0LGssAfYa2UXQZx4UhGMVa/Bz2W0k+DkAZjBDTqEDmdBl8 pNVTWNeHf196natvO6xWKL5UQed9LfOsDnwRxlt47f/h+dbaw6AoVKeQ1UuQGH/xOHjdbjBv 15CzxQtHOj30DuqTLdVbM65u2bF+MwGAEC8NGexiQmYmns/UoKbkmXgZc5mm8w4M1O5xI7MI I5YT4HIPPRPzUFL347Mt5nRpuW3H8JIiBCv8YBlTMzTS1IslP0+yERsS8SBRM3U34hH3867Y WwQ2gfKq5Hmycmj3H1X/fBD/kosOKxRsMhEl9vEc1n2FYvb/tQc5vKULR/ZQW4aZWGRMKbni GP65lTF9FxWSyaddNZi/RqBZnYiWc6Z+M5Qr/KSrOl2h7IE9Hhz4ZAupVam49NGuptf8RBmv NyCWrGXvR09/sSbPw+unkR4xHMQDDNI9HlkuiiVf1i0s/16jGyHVbZG8bUlSWOsN2CTR3bXO Pa5a4osEb/DAhGZrgz88/6fNNv4oWPpAv1NoVfXiwtoFn2fIus8RxL7+TR2IhUOzUZ8HLPTl gZAHLIui8dTrF2PyawUNaaELujmMQP/X/sSiUHO7BqsUBFhSDmT3sDkqPYqDBmhMXL8AEQEA AYkCHwQYAQIACQUCTHBnVQIbDAAKCRAgw0pxFWieqSoLD/kBN3aIqikEdTR3p2newQ+Kzyvx xTt1PSrrDWWZ9+hdqNJSJSv85cq9nJOpJLSCsBpapZCR5OXOPbuvUtmfKpZo90zbeGPHVuvL 1i4qrV+YTvSsFR8ORkfzu6Jyh+MYSeWTKfSW53Re/TupJV/0PcNmOw5XufdHSsS1kdF+A53v cR1oXBXwBAlu4wdvPejjE3ON4l4Ge2GHyhoTXj6iOYOwcebHHJ0BMg2py5IWoII1HM0dfT9r hcOvlc2Wegy4I6+tFnWdiWXAzYpHcxiWdyRIy3ElQj+sQisQqEvJaIUYW8ul3I5pUuKhlKbQ qwA9DA5pYwMcwiRvHslc8dOWK1XUF03xRrNq4mA6Un+mFyteHlDDKfXE9695KcxgZsE93kNf 9ij+zU02/65xellirmk8s/GXoBxj7mhV/CJ9XRC8ZVg2ZzGP/UtyS+5mW6KmbJk5o/Lv/R3n S/fBQE5yevffwhFu5b/Zo8B/l1MQ7DMSLG4y423ciOZE2yYiwYmlddalhrnYVnQ7+9BFnDAl ORUf7ffJlp3YHDfi7+ytMiDjiWbqKzf7hFcybptYpVdm0WS+9mLVKrfYhLAuaK2M7xZSvzZP T4Fe4GGgZELOyx8qGiiBMDRVpLCV2uze4mW7ARr4VcSWN2HbB6pzGmgxF4qwJJUzxhc8wklS IEKDvXjlUw==
Message-ID: <a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de>
Date: Fri, 22 Nov 2019 18:00:55 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ypfU4wNkvtbQRO66Xos3f898cQQ>
Subject: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 17:01:06 -0000

Hi,

All of my comments on oauth-security-topics-13 are
remarks/questions/suggestions for clarification in the document, i.e., I
do not have any fundamental objections. Overall, the draft is, in my
opinion, in good shape to be published and as already discussed, open
points can be updated later. I think that it is important that the
document should become a BCP as soon as possible.

* Section 2, Attacker Model: While A1 and A2 are quite clear, A3-A5 seem
to be extensions for A1 and A2 respectively, e.g., we could have
attackers like (A1+A3) or (A2+A4+A5). A reader not fully familiar with
this concept might misunderstand this classification. A sentence to
clarify this would be good.

* Section 3.1, Second Paragraph: The reference [owasp] is quite coarse
as it points to the entry page of the OWASP organization. I suggest
pointing to the OWASP cheat sheet on open redirects at
https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html.

* Section 3.1, Third Paragraph, Section 4.7, and other places throughout
the document: (Please excuse that the following might be a bit
nitpicking.) The term CSRF might be misleading as we are not talking
about "classical" CSRF, where a party is tricked into (implicitly)
believing that a request was caused by its own origin (from a web
browser), but was actually sent cross-origin. Here, we are talking about
requests which (by protocol) are typically intended to be cross-origin.
The point here is not that the request is cross-origin, but that it
originates from an unintended (cross-)origin. Maybe you could mention
that we are talking about an advanced kind of CSRF in the
double-redirection context.

* Section 3.1.2: What about SPAs? Either they use authorization code
grant with the help of some server or use CORS to access the token
endpoint. The token endpoint, however, then needs to support CORS. The
obvious question is then, what is the CORS policy of the token endpoint?
It is probably fine to allow all origins (if this policy only applies to
the token ep itself and not other eps at the same origin) or do I miss
something?

* Section 4.1.3, "fix fragments": The source [fb_fragments] only says
that Facebook adds the fragment #_=_ to some URLs. There is no
explanation or reasoning in the source (as well as in this document) at
all that this technique strips the fragment from redirects. (Mike Jones
also commented on this.)

* Section 4.2.4, Bullet Point "referrer header": Adding the
rel="noreferrer" attribute to links does not protect against leakage via
third-party content. Referrer Policy is the only effective
countermeasure of the mentioned two as it can be used to completely
suppress the Referer header or at least strip it to the origin. Should
we give a concrete example for Referrer Policies? For example, the
header "Referrer-Policy: no-referrer" in the response completely
suppresses the Referer header in all requests originating from the
resulting document.  Also, this measure is easier to implement than
adding rel="noreferrer" to each link. (BTW, there is also an excess
quotation mark in this paragraph.)

* Section 4.3.2: You mention postmessage communication (I think Hans
also pointed to this). Afaik Google uses postmessage in their client
library. Is there any document describing this technique?

* Section 4.4.1: The attack description is based on a very concrete
example. Some details, however, are not relevant for the attack to
succeed. In Step 3, the exact response code could be amended with an "e.g."

* Section 4.5: Add pointers (A1) and (A2) to web or network attacker in
last sentence.

* Section 4.5.3, "Code-bound State": This requires that state is fresh
for each flow. You should mention or even emphasize this.

* Section 4.5.3, "Per-instance client id/secret": This essentially says
that native apps or anything that might be able to obtain and store
client id/secret (e.g., using dynamic registration) could do this. Web
SPAs could do this as well (e.g., using Web Storage). The last sentence
of this paragraph is somehow confusing.

* Section 4.5.3, Second Paragraph after bullet points, "Note on
pre-warmed secrets": What is the context of this note? Does the attacker
start a flow on some device, extract secrets, and then pass this device
to the victim who then completes the OAuth flow? (Mike Jones also
remarked that "pre-warmed secrets" is not explained)

* Section 4.8.1.1, metadata parameter "resource_servers": This is
supposed to be an extension to RFC8414, right? (Also mentioned by Mike
Jones)

* Section 4.8.1.1, return parameter "access_token_resource_server": This
is supposed to be an extension of the token endpoint (as defined in
RFC6749), right? I suggest adding a pointer to its definition.

-Guido


From nobody Fri Nov 22 22:46:23 2019
Return-Path: <kaduk@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15A4112002E for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 22:46:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vjjnGJoKyF5 for <oauth@ietfa.amsl.com>; Fri, 22 Nov 2019 22:46:21 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BC62120833 for <oauth@ietf.org>; Fri, 22 Nov 2019 22:46:20 -0800 (PST)
Received: from mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAN6kCgq032130 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 23 Nov 2019 01:46:15 -0500
Date: Fri, 22 Nov 2019 22:46:12 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
Cc: "oauth@ietf.org" <oauth@ietf.org>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>,  "'Andrey Labunets'" <isciurus@fb.com>
Message-ID: <20191123064612.GI32847@mit.edu>
References: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/aG17hNZi2oDO0eYuqpMptGpIKDs>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Nov 2019 06:46:22 -0000

On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:
> I did a complete read of draft-ietf-oauth-security-topics-13<https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13>.  My review comments follow, divided into substantive and editorial sections.
> 
> SUBSTANTIVE
> 
[...]
> 
> 4.8.1.1. Metadata - This section suggests the use of a "resource_servers" metadata value.  This isn't defined by RFC 8414 nor do I see it the IANA OAuth Authorization Server Metadata registry at https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#authorization-server-metadata.  Is this something that's been standardized elsewhere?  If so, please add a citation.  If not, please clearly say that this metadata value is not standardized, and is therefore unlikely to be interoperable.

I would go further and say that we should not document "best practices"
that involve non-standardized values.

> 4.8.1.1. Metadata - This section suggests the use a "access_token_resource_server" token response value.  Please likewise clearly say that this parameter isn't a standard.

(ditto)

[...]
> 4.8.1.3. Audience Restricted Access Tokens - Delete "basically".
> 
> Many locations - The draft often uses the word "which" when you mean "that"..  For instance, in 4.9.2, please change "which could" to "that could" and in 4.11 change "which are" to "that are".  There's lots of places to look up the difference in meaning, but a rule of thumb that's usually right is that if you don't have a comma before the "which", it should probably be "that".

The RFC Editor uses a "restrictive" vs. "non-restrictive" split for "that"
and "which" -- see https://www.rfc-editor.org/styleguide/tips/ .

-Ben (no hats)


From nobody Sat Nov 23 09:50:43 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F11E1201AA for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 09:50:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KcVvOu86OKs0 for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 09:50:37 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D4D31200E0 for <oauth@ietf.org>; Sat, 23 Nov 2019 09:50:37 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id t1so12471805wrv.4 for <oauth@ietf.org>; Sat, 23 Nov 2019 09:50:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=X+7+5zSlABc6C0a2w/X2uNnuLOxZG4DAAXtvYOAbw3s=; b=WJsAW/QTBrwzSKhkJjPNN0/Ns2yTdbhkyLUegYTneYSZ6HuLL6eH0MakPJvuWh1Lk2 nCn691ZaCdqAvcRq7n+P8+D5fdubcHT5znOc5ywPCzseF3VJwuGRR1sVRsbKQUivUTv2 erSfSs0+grTg0HvAfCKULaBp9j+ZdUh7eMwe/X+3bPzCT/fdCR49YP+V6fv8Ib0TFoVy hIhHfBvO1Kys6q6ToRtTaM0BAOTQFaQ1n7V3ctxD3+n7w4MAChiyU86I7I+e2omcZ4U7 EvvNvZEqQBLp9Sx5WUX5HcLtBtm1GVz/L8BM7RX1ebacj6i1aCu4WgcVO291ZiEktLf6 DZvA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=X+7+5zSlABc6C0a2w/X2uNnuLOxZG4DAAXtvYOAbw3s=; b=BPrG53IXUKKwgFruib3dvf7v93mqHlbOiva/zQvuctAfNEayepsJXvM1R3MMghbbpW 4PzELAaCU6vAJOI10A721NTuGJkPfb1aAbahpcZvv5WGNnGF8XrSbJRb9Hz3WqNVuAAh TLSuUwEGEQJsXzjLfJv02/WiHS9d2aE7TggfGb7AQTikO5HGCUY7eKspb5Wg+h3NS6gB hVWtRX8Ert/uQdwuUABPErFUlKJj8xiorJZfRbgWogh22bpNDvtsC7Khngyo3f+T3fgL 4BlHTLV1XuZGOeqh7HM59gLqZBsuDiHXC4ZMLrZhpCxRLUWGPfdmI4ijr5BAYGkhBPj3 3uTw==
X-Gm-Message-State: APjAAAX+6CmJRFeYYry2jMxTjbuWsHCYRn19nJ+JXUJWWT7BbQyR+W56 KqHpU1AxPBnKi+bH3g6I2sfscIvDDr3RNenP
X-Google-Smtp-Source: APXvYqzYzCrZs1kX8GjA6MzC79jInn/XUq37ac5Yz0QLejAJvLvFuUlPZZxC07nd59pbMwqxyxyfmQ==
X-Received: by 2002:adf:82cc:: with SMTP id 70mr22044637wrc.231.1574531435788;  Sat, 23 Nov 2019 09:50:35 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id m1sm2980507wrv.37.2019.11.23.09.50.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 23 Nov 2019 09:50:34 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <7C62B4D3-6708-442A-BFBC-87825D71CA57@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_09613664-D2DD-4654-AD8F-9FBBFD9FA062"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Sun, 24 Nov 2019 01:50:23 +0800
In-Reply-To: <0DBB5D3D-025C-4226-856F-C06907E28A6E@amazon.com>
Cc: "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>, oauth <oauth@ietf.org>
To: Annabelle Backman <richanna@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com> <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net> <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com> <542F255E-FE31-4905-9253-7296FC7BEE87@lodderstedt.net> <0DBB5D3D-025C-4226-856F-C06907E28A6E@amazon.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/MFt6K1QDKwCsDMiBAQrZiC71avo>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Nov 2019 17:50:41 -0000

--Apple-Mail=_09613664-D2DD-4654-AD8F-9FBBFD9FA062
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 23. Nov 2019, at 00:34, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>=20
>> how are cookies protected from leakage, replay, injection in a setup =
like this?
> They aren=E2=80=99t.

Thats very interesting when compared to what we are discussing with =
respect to API security.=20

It effectively means anyone able to capture a session cookie, e.g. =
between TLS termination point and application, by way of an HTML =
injection, or any other suitable attack is able to impersonate a =
legitimate user by injecting the cookie(s) in an arbitrary user agent. =
The impact of such an attack might be even worse than abusing an access =
token given the (typically) broad scope of a session.

TLS-based methods for sender constrained access tokens, in contrast, =
prevent this type of replay, even if the requests are protected between =
client and TLS terminating proxy, only. Ensuring the authenticity of the =
client certificate when forwarded from TLS terminating proxy to service, =
e.g. through another authenticated TLS connection, will even prevent =
injection within the data center/cloud environment.=20

I come to the conclusion that we already have the mechanism at hand to =
implement APIs with a considerable higher security level than what is =
accepted today for web applications. So what problem do we want to =
solve?

> But my primary concern here isn't web browser traffic, it's calls from =
services/apps running inside a corporate network to services outside a =
corporate network (e.g., service-to-service API calls that pass through =
a corporate TLS gateway).

Can you please describe the challenges arising in these settings? I =
assume those proxies won=E2=80=99t support CONNECT style pass through =
otherwise we wouldn=E2=80=99t talk about them.

>=20
>> That=E2=80=99s a totally valid point. But again, such a solution =
makes the life of client developers harder.=20
>> I personally think, we as a community need to understand the pros and =
cons of both approaches. I also think we have not even come close to =
this point, which, in my option, is the prerequisite for making informed =
decisions.
>=20
> Agreed. It's clear that there are a number of parties coming at this =
from a number of different directions, and that's coloring our =
perceptions. That's why I think we need to nail down the scope of what =
we're trying to solve with DPoP before we can have a productive =
conversation how it should work.

We will do so.

>=20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
>=20
>=20
> =EF=BB=BFOn 11/22/19, 10:51 PM, "Torsten Lodderstedt" =
<torsten@lodderstedt.net> wrote:
>=20
>=20
>=20
>> On 22. Nov 2019, at 22:12, Richard Backman, Annabelle =
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>>=20
>> The service provider doesn't own the entire connection. They have no =
control over corporate or government TLS gateways, or other terminators =
that might exist on the client's side. In larger organizations, or when =
cloud hosting is involved, the service team may not even own all the =
hops on their side.
>=20
>    how are cookies protected from leakage, replay, injection in a =
setup like this?
>=20
>> While presumably they have some trust in them, protection against =
leaked bearer tokens is an attractive defense-in-depth measure.
>=20
>    That=E2=80=99s a totally valid point. But again, such a solution =
makes the life of client developers harder.=20
>=20
>    I personally think, we as a community need to understand the pros =
and cons of both approaches. I also think we have not even come close to =
this point, which, in my option, is the prerequisite for making informed =
decisions.
>=20
>>=20
>> =E2=80=93=20
>> Annabelle Richard Backman
>> AWS Identity
>>=20
>>=20
>> =EF=BB=BFOn 11/22/19, 9:37 PM, "OAuth on behalf of Torsten =
Lodderstedt" <oauth-bounces@ietf.org on behalf of =
torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>=20
>>=20
>>=20
>>> On 22. Nov 2019, at 21:21, Richard Backman, Annabelle =
<richanna=3D40amazon.com@dmarc.ietf.org> wrote:
>>>=20
>>> The dichotomy of "TLS working" and "TLS failed" only applies to a =
single TLS connection. In non-end-to-end TLS environments, each TLS =
terminator between client and RS introduces additional token =
leakage/exfiltration risk, irrespective of the quality of the TLS =
connections themselves. Each terminator also introduces complexity for =
implementing mTLS, Token Binding, or any other TLS-based sender =
constraint solution, which means developers with non-end-to-end TLS use =
cases will be more likely to turn to DPoP.
>>=20
>>   The point is we are talking about different developers here. The =
client developer does not need to care about the connection between =
proxy and service. She relies on the service provider to get it right. =
So the developers (or DevOps or admins) of the service provider need to =
ensure end to end security. And if the path is secured once, it will =
work for all clients.=20
>>=20
>>> If DPoP is intended to address "cases where neither mTLS nor OAuth =
Token Binding are available" [1], then it should address this risk of =
token leakage between client and RS. If on the other hand DPoP is only =
intended to support the SPA use case and assumes the use of end-to-end =
TLS, then the document should be updated to reflect that.
>>=20
>>   I agree.=20
>>=20
>>>=20
>>> [1]: https://tools.ietf.org/html/draft-fett-oauth-dpop-03#section-1
>>>=20
>>> =E2=80=93=20
>>> Annabelle Richard Backman
>>> AWS Identity
>>>=20
>>>=20
>>> On 11/22/19, 8:17 PM, "OAuth on behalf of Torsten Lodderstedt" =
<oauth-bounces@ietf.org on behalf of =
torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>>=20
>>>  Hi Neil,
>>>=20
>>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>>>=20
>>>> On 22 Nov 2019, at 07:53, Torsten Lodderstedt =
<torsten=3D40lodderstedt.net@dmarc.ietf.org> wrote:
>>>>>=20
>>>>>=20
>>>>>=20
>>>>>> On 22. Nov 2019, at 15:24, Justin Richer <jricher@mit.edu> wrote:
>>>>>>=20
>>>>>> I=E2=80=99m going to +1 Dick and Annabelle=E2=80=99s question =
about the scope here. That was the one major thing that struck me during =
the DPoP discussions in Singapore yesterday: we don=E2=80=99t seem to =
agree on what DPoP is for. Some (including the authors, it seems) see it =
as a quick point-solution to a specific use case. Others see it as a =
general PoP mechanism.=20
>>>>>>=20
>>>>>> If it=E2=80=99s the former, then it should be explicitly tied to =
one specific set of things. If it=E2=80=99s the latter, then it needs to =
be expanded.=20
>>>>>=20
>>>>> as a co-author of the DPoP draft I state again what I said =
yesterday: DPoP is a mechanism for sender-constraining access tokens =
sent from SPAs only. The threat to be prevented is token replay.
>>>>=20
>>>> I think the phrase "token replay" is ambiguous. Traditionally it =
refers to an attacker being able to capture a token (or whole requests) =
in use and then replay it against the same RS. This is already protected =
against by the use of normal TLS on the connection between the client =
and the RS. I think instead you are referring to a malicious/compromised =
RS replaying the token to a different RS - which has more of the flavour =
of a man in the middle attack (of the phishing kind).
>>>=20
>>>  I would argue TLS basically prevents leakage and not replay. The =
threats we try to cope with can be found in the Security BCP. There are =
multiple ways access tokens can leak, including referrer headers, =
mix-up, open redirection, browser history, and all sorts of access token =
leakage at the resource server
>>>=20
>>>  Please have a look at =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=

>>>=20
>>>  =
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4.=
8 also has an extensive discussion of potential counter measures, =
including audience restricted access tokens and a conclusion to =
recommend sender constrained access tokens over other mechanisms.
>>>=20
>>>>=20
>>>> But if that's the case then there are much simpler defences than =
those proposed in the current draft:
>>>>=20
>>>> 1. Get separate access tokens for each RS with correct audience and =
scopes. The consensus appears to be that this is hard to do in some =
cases, hence the draft.
>>>=20
>>>  How many deployments do you know that today are able to issue =
RS-specific access tokens?
>>>  BTW: how would you identify the RS?
>>>=20
>>>  I agree that would be an alternative and I=E2=80=99m a great fan of =
such tokens (and used them a lot at Deutsche Telekom) but in my =
perception this pattern needs still to be established in the market. =
Moreover, they basically protect from a rough RS (if the URL is used as =
audience) replaying the token someplace else, but they do not protect =
from all other kinds of leakage/replay (e.g. log files).
>>>=20
>>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin =
of the RS. This stops the token being reused elsewhere but the client =
can reuse it (replay it) for many requests.
>>>> 3. Issue a macaroon-based access token and the client can add a =
correct audience and scope restrictions at the point of use.
>>>=20
>>>  Why is this needed if the access token is already audience =
restricted? Or do you propose this as alternative?=20
>>>=20
>>>>=20
>>>> Protecting against the first kind of replay attacks only becomes an =
issue if we assume the protections in TLS have failed. But if DPoP is =
only intended for cases where mTLS can't be used, it shouldn't have to =
protect against a stronger threat model in which we assume that TLS =
security has been lost.
>>>=20
>>>  I agree.=20
>>>=20
>>>  best regards,
>>>  Torsten.=20
>>>=20
>>>>=20
>>>> -- Neil
>>>=20
>>>=20
>>>=20
>>=20
>>=20
>>=20
>=20
>=20
>=20


--Apple-Mail=_09613664-D2DD-4654-AD8F-9FBBFD9FA062
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_09613664-D2DD-4654-AD8F-9FBBFD9FA062--


From nobody Sat Nov 23 23:41:01 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E2E8120121 for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 23:40:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aVEQEhD2zZkz for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 23:40:53 -0800 (PST)
Received: from mail-wm1-x32e.google.com (mail-wm1-x32e.google.com [IPv6:2a00:1450:4864:20::32e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BF5C1200B8 for <oauth@ietf.org>; Sat, 23 Nov 2019 23:40:53 -0800 (PST)
Received: by mail-wm1-x32e.google.com with SMTP id n5so2144962wmc.0 for <oauth@ietf.org>; Sat, 23 Nov 2019 23:40:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=upPrEufNSOeSG1OR0aNjUGS85O3ieqwc+zmC9Ezo5GU=; b=h0YHul2Fe3A6KGiXbQ+0wrsU+ZKKLHeQRTGQwhsUwA4fQFnzO2lzQ+iNdmOx+SFqxE UFf9kAkdBEmoK1W3pfe8Bttt4AsO8eAhhou3ANRyTUbPxecFvJrAYZzoCO2WwKCGtGOS TjmMzEYSs7Y08zxmoebl5yOEILNMx3BOeTZkc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=upPrEufNSOeSG1OR0aNjUGS85O3ieqwc+zmC9Ezo5GU=; b=aB7vmDLKK9UZ0qztVIQjV7WIVa5CGbm72VVwYqFBatIKUXH7iudAJI8NnPoTmcJtQt bN692IRcF8qtzARzS8LkZBLuras2pGWHHdtmJ2AjaNyrYkKdu5RH0In5NhNLJ8jBiWy8 BDRQdYHrw/RTH7PriqihJ5EEmHQY8S+qjUUNuq30tStONvK08gvg5jlJL346zx+Jqkw2 BFjm5xOLcRWapwTR3pKiyXdwoRGTvZGcKLW2nsJQVUME1FA3ps1kznIVc73JzBuJz0eM JBAuTL2U+XUhHSg3ihpuxIBDTRjoGzRKsURxkiqHJE8IeGh/Zi3GI9ihELlr+MHFxE70 pMoQ==
X-Gm-Message-State: APjAAAVCwl2f/WG1BF6GtNnQIjncEQn3grEKYx50eMZ8YVKgb5DDRt5M uGAVjONrxmFSYDiYGsDIFDj+jw==
X-Google-Smtp-Source: APXvYqzcv76lnXXt/K0whq1w+tjuaw55qhg06VvuCwnWV0Y6MGv+friuEcFdeQwubqMS3XPYFhDUTg==
X-Received: by 2002:a1c:41c2:: with SMTP id o185mr22488455wma.34.1574581251589;  Sat, 23 Nov 2019 23:40:51 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65? ([2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65]) by smtp.gmail.com with ESMTPSA id e19sm3900422wme.6.2019.11.23.23.40.50 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 23 Nov 2019 23:40:50 -0800 (PST)
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Sun, 24 Nov 2019 07:40:49 +0000
Message-Id: <4183FBCD-5511-49FF-BE59-25EE16A34CB7@forgerock.com>
References: <5C0676D0-B8AB-48DC-9265-3BB38B442815@lodderstedt.net>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
In-Reply-To: <5C0676D0-B8AB-48DC-9265-3BB38B442815@lodderstedt.net>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/nT-lii2E4_aKhmwrL2xd_RsvL-8>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Nov 2019 07:41:00 -0000

On 22 Nov 2019, at 13:33, Torsten Lodderstedt <torsten@lodderstedt.net> wrot=
e:
>=20
> =EF=BB=BFHi Neil,
>=20
>> On 22. Nov 2019, at 20:50, Neil Madden <neil.madden@forgerock.com> wrote:=

>>=20
>> Hi Torsten,
>>=20
>>> On 22 Nov 2019, at 12:15, Torsten Lodderstedt <torsten@lodderstedt.net> w=
rote:
>>>=20
>>> Hi Neil,
>>>=20
>>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> wrot=
e:
>>>>=20
>>>> I think the phrase "token replay" is ambiguous. Traditionally it refers=
 to an attacker being able to capture a token (or whole requests) in use and=
 then replay it against the same RS. This is already protected against by th=
e use of normal TLS on the connection between the client and the RS. I think=
 instead you are referring to a malicious/compromised RS replaying the token=
 to a different RS - which has more of the flavour of a man in the middle at=
tack (of the phishing kind).
>>>=20
>>> I would argue TLS basically prevents leakage and not replay.
>>=20
>> It also protects against replay. If you capture TLS-encrypted packets wit=
h Wireshark you not only cannot decipher them but also cannot replay them be=
cause they include specific anti-replay measures at the record level in the f=
orm of unique session keys and record sequence numbers included in the MAC c=
alculations. This is essential to the security of TLS.
>=20
> I understand. I was looking onto TLS from an application perspective, that=
 might explain differing perception.
>=20
>>=20
>>> The threats we try to cope with can be found in the Security BCP. There a=
re multiple ways access tokens can leak, including referrer headers, mix-up,=
 open redirection, browser history, and all sorts of access token leakage at=
 the resource server
>>>=20
>>> Please have a look at https://tools.ietf.org/html/draft-ietf-oauth-secur=
ity-topics-13#section-4.
>>>=20
>>> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-=
4.8 also has an extensive discussion of potential counter measures, includin=
g audience restricted access tokens and a conclusion to recommend sender con=
strained access tokens over other mechanisms.
>>=20
>> OK, good - these are threats beyond token replay (at least as I understan=
d that term). It would be good to explicitly add them to the DPoP document m=
otivation.
>>=20
>> Note that most of these ways that an access token can leak also apply equ=
ally to leak of the DPoP JWT, so the protection afforded by DPoP boils down t=
o how well the restrictions encoded into the JWT prevent it from being reuse=
d in this case - e.g., restricting the expiry time, audience, scope, linking=
 it to a specific request (htm/htu) etc.=20
>>=20
>> Every single one of those restrictions can be equally well encoded as cav=
eats on a macaroon access token without any need for public key signatures o=
r additional tokens and headers.
>>=20
>>>> But if that's the case then there are much simpler defences than those p=
roposed in the current draft:
>>>>=20
>>>> 1. Get separate access tokens for each RS with correct audience and sco=
pes. The consensus appears to be that this is hard to do in some cases, henc=
e the draft.
>>>=20
>>> How many deployments do you know that today are able to issue RS-specifi=
c access tokens?
>>> BTW: how would you identify the RS?
>>>=20
>>> I agree that would be an alternative and I=E2=80=99m a great fan of such=
 tokens (and used them a lot at Deutsche Telekom) but in my perception this p=
attern needs still to be established in the market. Moreover, they basically=
 protect from a rough RS (if the URL is used as audience) replaying the toke=
n someplace else, but they do not protect from all other kinds of leakage/re=
play (e.g. log files).
>>=20
>> Many services already do this. For example, Google encodes the intended R=
S into the scopes on GCP (https://developers.google.com/identity/protocols/g=
ooglescopes). A client can do a single authorization flow to authorize all t=
he scopes it needs and then use repeated calls to the refresh token endpoint=
 to obtain individual access tokens with subsets of the authorized scopes fo=
r each endpoint.
>=20
> And that works at google? How does the client indicate the RS it wants to u=
se the first access token (that is obtains in the course of the code exchang=
e)?

It doesn=E2=80=99t. The initial access token would be for all scopes and the=
 client simply discards that one (or revokes it if the AS supports revoking i=
ndividual tokens).=20

>> (I think Brian also mentioned this pattern at OSW, but it might have been=
 somebody else).
>=20
> I know the pattern and we used this at Deutsche Telekom, but I don=E2=80=99=
t know any other deployment utilising this pattern. In my observation, most p=
eople treat access tokens as cookies and use them across RSs. Another reason=
 might be that, before resource indicators, there was no interoperable way t=
o ask for a token for a certain RS.

I don=E2=80=99t know anybody using DPoP either. The point is that you can do=
 this kind of thing right now, so DPoP needs to have a stronger justificatio=
n for why this isn=E2=80=99t sufficient.

>>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of t=
he RS. This stops the token being reused elsewhere but the client can reuse i=
t (replay it) for many requests.
>>>> 3. Issue a macaroon-based access token and the client can add a correct=
 audience and scope restrictions at the point of use.
>>>=20
>>> Why is this needed if the access token is already audience restricted? O=
r do you propose this as alternative?=20
>>=20
>> These are all alternatives. Any one of them prevents the specific attack o=
f replay by the RS to another RS.
>=20
> And which does for replay with the same RS?

TLS.=20

=E2=80=94 Neil=


From nobody Sat Nov 23 23:59:34 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36369120033 for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 23:59:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I2Gf2HFQ8W-m for <oauth@ietfa.amsl.com>; Sat, 23 Nov 2019 23:59:30 -0800 (PST)
Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA3511200EC for <oauth@ietf.org>; Sat, 23 Nov 2019 23:59:29 -0800 (PST)
Received: by mail-wr1-x434.google.com with SMTP id z10so13567466wrs.12 for <oauth@ietf.org>; Sat, 23 Nov 2019 23:59:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=nz4FNhCNjsttbjBK93nSzocpZKjewgn5hUGyDmgWwuI=; b=NuuvQQmgAwYUjhYRg77ax7BdSm+6VM98kq8vf8ai4DhYa/SgzR95ZTOA1Rok5/ku9p T2UvPjSV1unEio3DIdKt3zXY6Az9slnQb9VifERXvlY8kf+Mn6AExUqhGFX04Q6Kbwbp b3p9QNoXUedHcODPe1VGZS3c6OluTWZR9A6p1HWp2Js+ngiqbqeKEFXZOctqz+sOtAZX ZwJxdh2xQkt5NE2o/VdAKQCCZJiUoe32q9op5FmuIHQWTfQLY+QExdipDZdvykmwW2ZV Bma1fMmNUP1HfjM1LP/9I6IgEjzfrD+amNStGl7mpVSA6ToxCc+Xl5p4xSqcvfETO0ln Mnnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=nz4FNhCNjsttbjBK93nSzocpZKjewgn5hUGyDmgWwuI=; b=T1lEjYPekQSBbD0hnnT3aFeCMMwRC/KI8nF1bBK6C0Da7dhgVRAs1FbHIOGXvVWr10 HwoXDIFG+1UoCg4tVf5Qki9JpquGISEp4raUyHAkPEm9/7MrIvhvOwrTzGUHQ4H+TSXb BkUk5kKGJtq7T0fhacQbv+UHONjtzBtOtJ7NdHkXYuwLmVHZCp+l1MRXgW0LE/od9AwM mRET4jkH2TE0oiMR4ige7Fvygh8mJm15WaGd8nL6FHDdw1kctWYBnG+dkP27EtWq10bT ykO+Ttzm1n8gnENNDDgT25NFSd6AHzFuJO0ifqeJeeQye+ZQGbu9i2ywCrO2X2KUBohG 9Vuw==
X-Gm-Message-State: APjAAAVA7D9jS0bte1EB5eJNXqxDF9EnepowjQSlBUfHnDKx7ToB1R6k 6sa8PP7PJaCsuXuy7Y5L0TYedzH/xqQtZOtr
X-Google-Smtp-Source: APXvYqx0mkJYgmXu1FjcLeYehrsQWol/n8IEBHX/xLGJDRLrOMTRWf6Ym8naM944H1vw76W7A9AqIQ==
X-Received: by 2002:adf:dc4b:: with SMTP id m11mr11317859wrj.344.1574582367837;  Sat, 23 Nov 2019 23:59:27 -0800 (PST)
Received: from [192.168.71.116] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id y11sm5261263wrq.12.2019.11.23.23.59.26 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 23 Nov 2019 23:59:27 -0800 (PST)
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Sun, 24 Nov 2019 08:59:26 +0100
Message-Id: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net>
References: <4183FBCD-5511-49FF-BE59-25EE16A34CB7@forgerock.com>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
In-Reply-To: <4183FBCD-5511-49FF-BE59-25EE16A34CB7@forgerock.com>
To: Neil Madden <neil.madden@forgerock.com>
X-Mailer: iPad Mail (17A860)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/yKZyEJHUJa1YTAmhCzGdB66114M>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Nov 2019 07:59:32 -0000

Hi Neil,

I would like to summarize what I believe to have understood is your opinion b=
efore commenting:
1) audience restricted access tokens is the way to cope with replay attempts=
 between RSs
2) TLS prevents replay at the same RS

re 1) that works as long as ASs support audience restrictions and the audien=
ce restriction is the actual resource server URL, otherwise a staged RS can o=
btain access tokens audience restricted for a different RS and replay it the=
re
re 2) it seems you look onto that threat from the inside of a TLS connection=
. Let=E2=80=99s assume the attacker obtains the access tokens at the applica=
tion layer, e.g. through a log file, referrer header, mix-up, browser histor=
y and then sends it through a new TLS connection to the same RS. How does TL=
S help to detect this replay?

best regards,
Torsten.

> Am 24.11.2019 um 08:40 schrieb Neil Madden <neil.madden@forgerock.com>:
>=20
> =EF=BB=BFOn 22 Nov 2019, at 13:33, Torsten Lodderstedt <torsten@loddersted=
t.net> wrote:
>>=20
>> =EF=BB=BFHi Neil,
>>=20
>>>> On 22. Nov 2019, at 20:50, Neil Madden <neil.madden@forgerock.com> wrot=
e:
>>>=20
>>> Hi Torsten,
>>>=20
>>>> On 22 Nov 2019, at 12:15, Torsten Lodderstedt <torsten@lodderstedt.net>=
 wrote:
>>>>=20
>>>> Hi Neil,
>>>>=20
>>>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> wro=
te:
>>>>>=20
>>>>> I think the phrase "token replay" is ambiguous. Traditionally it refer=
s to an attacker being able to capture a token (or whole requests) in use an=
d then replay it against the same RS. This is already protected against by t=
he use of normal TLS on the connection between the client and the RS. I thin=
k instead you are referring to a malicious/compromised RS replaying the toke=
n to a different RS - which has more of the flavour of a man in the middle a=
ttack (of the phishing kind).
>>>>=20
>>>> I would argue TLS basically prevents leakage and not replay.
>>>=20
>>> It also protects against replay. If you capture TLS-encrypted packets wi=
th Wireshark you not only cannot decipher them but also cannot replay them b=
ecause they include specific anti-replay measures at the record level in the=
 form of unique session keys and record sequence numbers included in the MAC=
 calculations. This is essential to the security of TLS.
>>=20
>> I understand. I was looking onto TLS from an application perspective, tha=
t might explain differing perception.
>>=20
>>>=20
>>>> The threats we try to cope with can be found in the Security BCP. There=
 are multiple ways access tokens can leak, including referrer headers, mix-u=
p, open redirection, browser history, and all sorts of access token leakage a=
t the resource server
>>>>=20
>>>> Please have a look at https://tools.ietf.org/html/draft-ietf-oauth-secu=
rity-topics-13#section-4.
>>>>=20
>>>> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section=
-4.8 also has an extensive discussion of potential counter measures, includi=
ng audience restricted access tokens and a conclusion to recommend sender co=
nstrained access tokens over other mechanisms.
>>>=20
>>> OK, good - these are threats beyond token replay (at least as I understa=
nd that term). It would be good to explicitly add them to the DPoP document m=
otivation.
>>>=20
>>> Note that most of these ways that an access token can leak also apply eq=
ually to leak of the DPoP JWT, so the protection afforded by DPoP boils down=
 to how well the restrictions encoded into the JWT prevent it from being reu=
sed in this case - e.g., restricting the expiry time, audience, scope, linki=
ng it to a specific request (htm/htu) etc.=20
>>>=20
>>> Every single one of those restrictions can be equally well encoded as ca=
veats on a macaroon access token without any need for public key signatures o=
r additional tokens and headers.
>>>=20
>>>>> But if that's the case then there are much simpler defences than those=
 proposed in the current draft:
>>>>>=20
>>>>> 1. Get separate access tokens for each RS with correct audience and sc=
opes. The consensus appears to be that this is hard to do in some cases, hen=
ce the draft.
>>>>=20
>>>> How many deployments do you know that today are able to issue RS-specif=
ic access tokens?
>>>> BTW: how would you identify the RS?
>>>>=20
>>>> I agree that would be an alternative and I=E2=80=99m a great fan of suc=
h tokens (and used them a lot at Deutsche Telekom) but in my perception this=
 pattern needs still to be established in the market. Moreover, they basical=
ly protect from a rough RS (if the URL is used as audience) replaying the to=
ken someplace else, but they do not protect from all other kinds of leakage/=
replay (e.g. log files).
>>>=20
>>> Many services already do this. For example, Google encodes the intended R=
S into the scopes on GCP (https://developers.google.com/identity/protocols/g=
ooglescopes). A client can do a single authorization flow to authorize all t=
he scopes it needs and then use repeated calls to the refresh token endpoint=
 to obtain individual access tokens with subsets of the authorized scopes fo=
r each endpoint.
>>=20
>> And that works at google? How does the client indicate the RS it wants to=
 use the first access token (that is obtains in the course of the code excha=
nge)?
>=20
> It doesn=E2=80=99t. The initial access token would be for all scopes and t=
he client simply discards that one (or revokes it if the AS supports revokin=
g individual tokens).=20
>=20
>>> (I think Brian also mentioned this pattern at OSW, but it might have bee=
n somebody else).
>>=20
>> I know the pattern and we used this at Deutsche Telekom, but I don=E2=80=99=
t know any other deployment utilising this pattern. In my observation, most p=
eople treat access tokens as cookies and use them across RSs. Another reason=
 might be that, before resource indicators, there was no interoperable way t=
o ask for a token for a certain RS.
>=20
> I don=E2=80=99t know anybody using DPoP either. The point is that you can d=
o this kind of thing right now, so DPoP needs to have a stronger justificati=
on for why this isn=E2=80=99t sufficient.
>=20
>>>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of=
 the RS. This stops the token being reused elsewhere but the client can reus=
e it (replay it) for many requests.
>>>>> 3. Issue a macaroon-based access token and the client can add a correc=
t audience and scope restrictions at the point of use.
>>>>=20
>>>> Why is this needed if the access token is already audience restricted? O=
r do you propose this as alternative?=20
>>>=20
>>> These are all alternatives. Any one of them prevents the specific attack=
 of replay by the RS to another RS.
>>=20
>> And which does for replay with the same RS?
>=20
> TLS.=20
>=20
> =E2=80=94 Neil


From nobody Sun Nov 24 00:55:52 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 769761200FF for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 00:55:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wxlKJfklKESe for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 00:55:45 -0800 (PST)
Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6F4B120020 for <oauth@ietf.org>; Sun, 24 Nov 2019 00:55:44 -0800 (PST)
Received: by mail-wm1-x332.google.com with SMTP id t26so9724852wmi.0 for <oauth@ietf.org>; Sun, 24 Nov 2019 00:55:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=S3Kz+cxivrd34fL6kWwAiP7n8Sm/XfvLn732J5wNU3g=; b=NeidcHVgu8zkjWNDvTI0u5FiGWPePNo6y9O5IP/uRAug2kiZwHvK2SlvxpvsJIGesm yPlRppbaDNuxR1MZRwEcKfsWyIrAkZesvx9DPoFDvxqh4L+teGlBTsmKfzJEYC/3zWsX K6ERRaxguKslHttF3FQt61LLGSfQMQZ8rU5l8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=S3Kz+cxivrd34fL6kWwAiP7n8Sm/XfvLn732J5wNU3g=; b=FwVsvJl+0hB7euVL1Ab7ijJeQ43wWKNJG9OB0Y9bJ5FGXJCr3NhSP6kczHgfYGFIzL LqgoXYzCTaS1Mt9rqKthisSGRKSsbWu8Y3eoAaih7EutC7NiSlpCqUyN1dN1+m5iI8Bj Ii7VGHclU9B65tQhIvfCpUrjE7C9qO/RP7lkl/K1G9Z/7SNVha9jbs4jZo44K7d2ylPh X4bSES7cTBJ1BAJi/TVQazBgh0hr6AN1T5wv8jaPPCKPII2EEwjZcFRBdsoGLBZyPM4n /ZR8tdOq+5EuOtFNgXcpVCz+G+C5mSehlK1HjmerWkrO9eVcqyoqNmvQaLFHmYoVDvjG EnHw==
X-Gm-Message-State: APjAAAV6mJUkV3j0kKRBBAS0Mwf0lZY/qh9pPCuMl27KIxKCDrID0yjF DmPEIvWVoRi5pekD5XhzZJqerQ==
X-Google-Smtp-Source: APXvYqzy5uRIKAyNHHvn7nxZuModVcA5N4p/OItO3SirXceqsCZWZ9tKbm8qYPg5/HCi5ZYCT592FA==
X-Received: by 2002:a7b:cf27:: with SMTP id m7mr24480893wmg.45.1574585742560;  Sun, 24 Nov 2019 00:55:42 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65? ([2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65]) by smtp.gmail.com with ESMTPSA id 5sm4319705wmk.48.2019.11.24.00.55.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 24 Nov 2019 00:55:41 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-B23B4E90-9542-4A59-90D4-44EE5DED739D
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Sun, 24 Nov 2019 08:55:40 +0000
Message-Id: <E5AB234B-92BE-4B78-A914-D88C959FD8C3@forgerock.com>
References: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com>
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
In-Reply-To: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Ieo-9vz76D5nhf_I05dVIn4TgUk>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Nov 2019 08:55:50 -0000

--Apple-Mail-B23B4E90-9542-4A59-90D4-44EE5DED739D
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 22 Nov 2019, at 12:26, Richard Backman, Annabelle <richanna@amazon.com> w=
rote:
> > Yes of course. But this is the HMAC *tag* not the original key.
>=20
> Sure. And if the client attenuates the macaroon, it is used as a key that t=
he client proves possession of by presenting the chained HMAC. Clients doing=
 DPoP aren=E2=80=99t proving possession of the =E2=80=9Coriginal key=E2=80=9D=
 (i.e., a key used to generate the access token) either.
>=20
A way to think of this is that macaroons bridge the gap between bearer token=
s and proof of possession tokens. A client can receive a macaroon and use it=
 like a pure bearer token if they want. On the other hand they can append co=
ntextual caveats that tightly constrain a token at the point of use, like a P=
oP token. You can even do a full challenge-response protocol where the RS se=
nds a challenge and the client appends it as a caveat.=20

> > Well, you don=E2=80=99t have to return a key from the token endpoint for=
 a start.
>=20
> Yes, that=E2=80=99s what I meant by saying that it eliminates key negotiat=
ion. Though I suppose it=E2=80=99s more correct to say that it inlines it. T=
he AS still provides a key, it just happens to be part of the access token.
>=20
Which helps a lot with backwards compat.=20
> Macaroons are an interesting pattern, but not because they=E2=80=99re not d=
oing PoP. Proof of possession is pretty core to the whole idea of digital si=
gnatures and HMACs.
>=20
I would argue that third party verifiability and non-repudiation are also co=
re to digital signatures, but aren=E2=80=99t required or used by DPoP (and a=
ctually cause problems).=20

I also don=E2=80=99t think PoP is core to HMAC. Many ASes issue HMAC-signed a=
ccess tokens already without the client doing any kind of proof of possessio=
n. They are a convenient way of minting bearer tokens.=20
> What makes them interesting is the way they inline key distribution. Wheth=
er or not they=E2=80=99re applicable to DPoP depends, ultimately, on the use=
 cases DPoP is targeting and the threats it is trying to mitigate.
>=20
There are many more interesting things than the key being inline for macaroo=
ns. For example:

- the attenuations (caveats) are attached directly to the access token and a=
re verified by the AS. Contrast this to DPoP where every RS has to correctly=
 validate the proof token - if any don=E2=80=99t then the security is signif=
icantly reduced. The AS is responsible for all security-critical checks with=
 macaroons.

- macaroon caveats can be layered. The initial client can add some restricti=
ons and then pass the token to an RS. That RS can then add its own restricti=
ons when passing the token to backend services. This is a big deal for micro=
service architectures.=20

- you can add caveats at a gateway or proxy and know these will be enforced w=
ithout having to inspect incoming traffic.=20

Even when used in combination with PoP, macaroons add unique capabilities. Fo=
r example, a client can retrieve a plain bearer token from the AS and then a=
fter-the-fact bind it to its TLS client certificate by appending a x5t#S256 c=
aveat and use that new access token for all API calls. But that client still=
 has the original access token so they can get the certificate for a differe=
nt client (eg another microservice) and create a new copy of the access toke=
n bound to that client=E2=80=99s certificate. It can then safely send this a=
ccess token to the other client, even over a completely insecure connection.=
 It can do this for every microservice it needs to talk to, effectively prov=
iding transfer of ownership for PoP tokens without needing to call a central=
 token exchange service.

All this and I haven=E2=80=99t even begun talking about 3rd party caveats.=20=


So the really interesting thing about macaroons is that they enable all kind=
s of new authorization patterns to be built without requiring a new spec for=
 each one.=20

Neil

> From: Neil Madden <neil.madden@forgerock.com>
> Date: Friday, November 22, 2019 at 3:09 PM
> To: "Richard Backman, Annabelle" <richanna@amazon.com>
> Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
>=20
> =20
>=20
> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
>=20
> =20
>=20
> Macaroons are built on proof of possession. In order to add a caveat to a m=
acaroon, the sender has to have the HMAC of the macaroon without their cavea=
t.
>=20
> =20
>=20
> Yes of course. But this is the HMAC *tag* not the original key. They can=E2=
=80=99t change anything the AS originally signed.=20
>=20
>=20
>=20
>=20
> The distinctive property of macaroons as I see it is that they eliminate t=
he need for key negotiation with the bearer. How much value this has over th=
e AS just returning a symmetric key alongside the access token in the token r=
equest, I=E2=80=99m not sure.
>=20
> =20
>=20
> Well, you don=E2=80=99t have to return a key from the token endpoint for a=
 start. The client doesn=E2=80=99t need to create and send any additional to=
ken. The whole thing works with existing standards and technologies and can b=
e incrementally adopted as required. If RSes do token introspection already t=
hen they need zero changes to support this.
>=20
>=20
>=20
>=20
> There are key distribution challenges with that if you are doing validatio=
n at the RS, but validation at the RS using either approach means you=E2=80=99=
ve lost protection against replay by the RS. This brings us back to a core q=
uestion: what threats are in scope for DPoP, and in what contexts?
>=20
> =20
>=20
> Agreed, but validation at the RS is premature optimisation in many cases. A=
nd if you do need protection against that the client can even append a confi=
rmation key as a caveat and retrospectively upgrade a bearer token to a pop t=
oken. They can even do transfer of ownership by creating copies of the origi=
nal token bound to other certificates/public keys.=20
>=20
> =20
>=20
> Neil
>=20
> =20
>=20
>=20
>=20
>=20
> =20
>=20
> =E2=80=93=20
>=20
> Annabelle Richard Backman
>=20
> AWS Identity
>=20
> =20
>=20
> =20
>=20
> From: OAuth <oauth-bounces@ietf.org> on behalf of Neil Madden <neil.madden=
@forgerock.com>
> Date: Friday, November 22, 2019 at 4:40 AM
> To: Brian Campbell <bcampbell@pingidentity.com>
> Cc: oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
>=20
> =20
>=20
> At the end of my previous email I mentioned that you can achieve some of t=
he same aims as DPoP without needing a PoP mechanism at all. This email is t=
hat follow-up.
>=20
> =20
>=20
> OAuth is agnostic about the format of access tokens and many vendors suppo=
rt either random string database tokens or JWTs. But there are other choices=
 for access token format, some of which have more interesting properties. In=
 particular, Google proposed Macaroons a few years ago as a "better cookie" [=
1] and I think they systematically address many of these issues when used as=
 an access token format.
>=20
> =20
>=20
> For those who aren't familiar with them, Macaroons are a bit like a HS256 J=
WT. They have a location (a bit like the audience in a JWT) and an identifie=
r (an arbitrary string) and then are signed with HMAC-SHA256 using a secret k=
ey. (There's no claims set or headers - they are very minimal). In this case=
 the secret key would be owned by the AS and used to sign macaroon-based acc=
ess tokens. Validating the token would be done via token introspection at th=
e AS.
>=20
> =20
>=20
> The clever bit is that anybody at all can append "caveats" to a macaroon a=
t any time, but nobody can remove one once added. Caveats are restrictions o=
n the use of a token - they only ever reduce the authority granted by the to=
ken, never expand it. The AS can validate the token and all the caveats with=
 its secret key. So, for example, if an access token was a macaroon then the=
 client could append a caveat to reduce the scope, or reduce the expiry time=
, or reduce the audience, and so on.
>=20
> =20
>=20
> The really clever bit is that the client can keep a copy of the original t=
oken and create restricted versions to send to different resource servers. B=
ecause HMAC is very cheap, the client can even do this before each and every=
 request. (This is what the original paper refers to as "contextual caveats"=
). This means that a client can be issued a single access token from the AS w=
ith broad scope and applicable to many different RS and can then locally cre=
ate restricted copies for each individual RS.
>=20
> =20
>=20
> The relevance to DPoP is that the client could even append caveats equival=
ent to "htm" and "htu" just before sending the access token to the RS, and m=
aybe add an "exp" for 5 seconds in the future, reduce the scope, and so on:
>=20
> =20
>=20
>   newAccessToken =3D accessToken.withCaveats({
>=20
>     exp: now + 5seconds,
>=20
>     scope: "a b",
>=20
>     htm: "POST",
>=20
>     ....
>=20
>   });
>=20
>   httpClient.post(data, Authorization: Bearer newAccessToken);
>=20
> =20
>=20
> Note that the client doesn't need anything extra here - no keys, extra tok=
ens etc. They just have the access token and a macaroon library.
>=20
> =20
>=20
> The RS will see an opaque access token, send it to the AS for introspectio=
n. The AS however, will see and validate the new caveats on the token and re=
turn an introspection response with the restricted scope and expiry time, an=
d return the htm/htu restrictions that the RS can then enforce.=20
>=20
> =20
>=20
> For clients this is transparent until they want to take advantage of it an=
d then they can just use an off-the-shelf macaroon library. For the RS it is=
 also completely transparent. All the (relatively small) complexity lives in=
 the AS, which just has to be able to produce and verify macaroons and take c=
aveats into account when performing token introspection - e.g. the returned s=
cope should be the intersection of the original token scope and any scope ca=
veats. But I don't think this would be too much effort.
>=20
> =20
>=20
> [1]: https://ai.google/research/pubs/pub41892
>=20
> =20
>=20
> -- Neil
>=20
>=20
>=20
>=20
>=20
> On 21 Nov 2019, at 06:23, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
>=20
> =20
>=20
> Yeah, suggestions and/or an MTI about algorithm support would probably be w=
orthwhile. Perhaps also some defined means of signaling when an unsupported a=
lgorithm is used along with any other reason a DPoP is invalid or rejected.=20=

>=20
> =20
>=20
> There are a lot of tradeoffs in what claims are required and what protecti=
ons are provided etc. The aim of what was chosen was to do just enough to pr=
ovide some reasonable protections against reuse or use in a different contex=
t while being simple to implement and deploy.
>=20
> =20
>=20
> =20
>=20
> On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com> wr=
ote:
>=20
> Thanks for the reply, Brian.=20
>=20
> =20
>=20
> Collecting my thoughts up here rather than responding blow by blow.
>=20
> =20
>=20
> Public key signatures are simpler in some respects, more complex in others=
. There are currently 10 public key JWS signature schemes defined (ES256/384=
/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS potentially have to s=
upport them all? If not, how do they negotiate algorithm support with the cl=
ient?
>=20
> =20
>=20
> On the other hand, the ECDH scheme I proposed can be implemented by adapti=
ng an existing ECDH-ES encryption support in a JWT library. For example, I d=
iscovered while playing with this that our own internal library can implemen=
t the full flow I described entirely via the existing public API [1], so it'=
s not necessarily as complex as it first looks. I even knocked up a from-scr=
atch implementation in WebCrypto (JavaScript) without too much code [2].
>=20
> =20
>=20
> But I admit that using an existing JWT library to sign a JWT with an exist=
ing algorithm is even easier, and that counts for a lot. Perhaps we can make=
 concrete suggestions/requirements about algorithm support? e.g. "The RS MUS=
T support RS256 and SHOULD support EdDSA. Other algorithms MAY be supported.=
"=20
>=20
> =20
>=20
> With regards to replay protection, I think there are at least two reasonab=
le positions:
>=20
> =20
>=20
> 1. We assume that TLS is secure and don't try to defend against any compro=
mise at that level. (Clearly none of the TLS-based PoP mechanisms survive if=
 TLS is compromised, by definition). In this case the main attack to defend a=
gainst is a malicious RS replaying the access token elsewhere. Simply signin=
g the origin of the RS would be enough to prevent this attack, while letting=
 the client reuse the same JWT for many requests (and the RS to cache the JW=
T validation). None of "jti", "htu", or "htm" seem relevant to this model.
>=20
> =20
>=20
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) and t=
ry to provide some defense in depth against a MitM attacker replaying a toke=
n against the same RS. There is a graduated series of steps you can take her=
e, depending on how much you want to prevent this:
>=20
>    a. The DPoP token can be replayed for arbitrary requests to the same RS=
 but has a short time limit (e.g., exp claim or RS-enforced max lifetime fro=
m iat)
>=20
>    b. The DPoP token can be replayed for the same request (htu/htm claims)=

>=20
>    c. The DPoP token can't be replayed at all - either because of jti blac=
klisting on the RS or a challenge-response protocol on each request.
>=20
> =20
>=20
> (There are also variants such as including a hash of the request body/head=
ers, or encoding an ETag into the JWT).
>=20
> =20
>=20
> I think either are reasonable design goals, but aiming for 2 adds more val=
ue. I think aiming for 2a is a reasonable default baseline that allows the c=
lient to reuse a DPoP token for a few requests, reducing the cost of the sig=
nature (and the RS can cache the validated JWT). Support for 2b or 2c can th=
en be listed as optional additions.
>=20
> =20
>=20
> PS - 2a/2b can be achieved without PoP. I'll save that for another email i=
n the next few days though.
>=20
> =20
>=20
> [1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
>=20
> [2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7
>=20
> =20
>=20
> =20
>=20
> -- Neil
>=20
>=20
>=20
>=20
>=20
> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
>=20
> =20
>=20
> =20
>=20
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com> wr=
ote:
>=20
> I can't attend Singapore either in person or remotely due to other commitm=
ents. I broadly support adoption of this draft, but I have some comments/sug=
gestions about it.
>=20
> =20
>=20
> Thanks Neil. And sorry to hear that you won't be in Singapore. This kind o=
f stuff is definitely more easily discussed in person (for me anyway). But I=
'll try and comment on your comments here as best I can. I also plan to also=
 mention them in the Wednesday and/or Thursday presentation.=20
>=20
> =20
>=20
> Section 2 lists the main objective as being to harden against compromised/=
malicious AS or RS, which may attempt to replay captured tokens elsewhere. W=
hile this is a good idea, a casual reader might wonder why a simple audience=
 claim in the access token/introspection response is not sufficient to preve=
nt this. Because interactions between the client and RS are supposed to be o=
ver TLS, is the intended threat model one in which these protections have br=
oken down? ("counterfeit" in the description suggests this). Or is the motiv=
ation that clients want to get a single broad-scoped access token (for usabi=
lity/performance reasons) and use it to access multiple resource servers wit=
hout giving each of them the ability to replay the token to the other server=
s? Or are we thinking of a phishing-type vulnerability were a general-purpos=
e client might accidentally visit a malicious site which prompts for an acce=
ss token that the client then blindly goes off and gets? (UMA?) It's not cle=
ar to me which of these scenarios is being considered, so it would be good t=
o tighten up this section.
>=20
> =20
>=20
> It is admittedly a bit loose and I agree it'd be good to tighten it up. Bu=
t part of why it's loose is that it tries to offer some protections for all t=
hose scenarios and more such as a general lost/stolen token. It's effectivel=
y trying to provide as many of the same types of protections/assurances that=
 you'd get with TLS based PoP mechanisms (like OAuth MTLS or Token binding) t=
o the extent that can be done at the HTTP application layer. Which can't rea=
listically be exactly the same but can maybe be kinda close while actually b=
eing accessible and implementable because it's all done at the application l=
ayer. There are trade-offs, of course, and the document writers have endeavo=
red to find a good balance in the trade-off decisions we've made. But that d=
oesn't mean they are necessarily the right decisions or are closed to discus=
sion. To the casual reader I would say that it turns out that getting an app=
ropriate simple audience claim into an access token isn't nearly as simple a=
s it might seem. And while it will prevent RS to RS replay (as long as both R=
Ss aren't legit audiences) it doesn't help with preventing the use of tokens=
 stolen or leaked by other means (including for refresh tokens issued to pub=
lic clients).=20
>=20
> =20
>=20
> Another potential motivation is for mobile apps. Some customers of ours wo=
uld like to tie access/refresh tokens to private key material generated on a=
 secure element in the device, that can only be accessed after local biometr=
ic authentication (e.g. TouchID/FaceID on iOS). I have suggested using mTLS c=
ert-bound tokens for this, but have heard some pushback due to the difficult=
y of configuring support for client certs across diverse infrastructure. A s=
imple JWT-based solution like DPoP could fill this need.
>=20
> =20
>=20
> It's maybe not stated in the draft but this kind of thing is among the obj=
ectives (in my mind anyway).=20
>=20
> =20
>=20
> =20
>=20
> My main concerns with the draft though are about efficiency and scalabilit=
y of the proposed approach:
>=20
> =20
>=20
> 1. The requirement to use public key signatures, along with the anti-repla=
y nonce, means that the RS is required to perform an expensive signature ver=
ification check on every request. That is not going to scale up well. While t=
here are more efficient schemes like Ed25519 now, these are still typically a=
n order of magnitude slower than HMAC and the latency and CPU overhead is li=
kely to be a non-starter for many APIs (especially when you're billed by CPU=
 usage). Public key signatures are also notoriously fragile (see e.g. the hi=
story of nonce reuse/leakage vulnerabilities in ECDSA or=20
>=20
> =20
>=20
> Yes, asymmetric is more processing intensive than symmetric. But if you ta=
ke away the distributed replay check (see next response), it will scale out j=
ust fine. I'm not so sure latency is a real issue here - while these operati=
ons are an order of magnitude slower we're still talking about times that ar=
e not perceptible to a human. CPU usage/cost is a part of a trade-off for th=
e simplicity afforded by public/private keys.  And it is significantly simpl=
er. The design you sketched out is admittedly quite clever but it's not even=
 in the same ballpark with respect to complexity. And, as you pointed out, t=
he other suggestion around symmetric keys has rather different security prop=
erties while still adding complexity. Adding symmetric key support isn't som=
ething that can just be added on easily.=20
>=20
> =20
>=20
> =20
>=20
> 2. The advice for the RS to store a set of previously used nonces to preve=
nt replay will also hamper scalability, especially in large deployments wher=
e such state would need to be replicated to all servers (or use sticky load b=
alancing, which comes with its own problems). This violates the statelessnes=
s of HTTP, and it also potentially breaks idempotency of operations: Think o=
f the case where the JWT validation and replay protection is done at an API g=
ateway but then the call to the backend API server fails for a transient rea=
son. The client (or a proxy/library) cannot simply replay the (idempotent) r=
equest in this case because it will be rejected by the gateway. It must inst=
ead recreate the DPoP JWT, incurring additional overheads.
>=20
> =20
>=20
> The actual value of replay checking on jti is somewhat questionable. The D=
PoP JWT only transits between client and server so a TLS MITM is likely need=
ed to steal a DPoP JWT. But we are assuming TLS works here. And an active MI=
TM could thwart this check by just being first to present DPoP JWT. I think t=
he jti check made its way into the draft mostly because it seemed like somet=
hing was needed to try and bring it closer to the TLS PoP models. Being awar=
e of the scalability concerns, I did endeavor to write the text in such a wa=
y so as to leave some wiggle room in implementations/deployments with text l=
ike '"jti" SHOULD be used by the server for replay detection and prevention`=
 and [ensure that] 'within a reasonable consideration of accuracy and resour=
ce utilization, a JWT with the same "jti" value has not been received previo=
usly'. The idea being that using something eventually consistent or even loc=
al only to the runtime instance would be permissible. Perhaps that allowance=
 and the rational could be made more clear? Or would you suggest to do away w=
ith the jti replay stuff al? Or something else?=20
>=20
> =20
>=20
> 3. Minor: The use of a custom header for communicating the DPoP proof will=
 require additional CORS configuration on top of that already done for the A=
uthorization header, and so adds a small amount of additional friction for a=
doption. Given that CORS configuration changes often require approval by a s=
ecurity team, this may make more of an impact than you'd expect.
>=20
> =20
>=20
> Feels really minor. I mean, we could try to roll everything up under one h=
eader. But it does seem unwarranted and would complicate things - at least i=
n the model we've got now where the proof is sent the same way ono all types=
 of requests.=20
>=20
> =20
>=20
> =20
>=20
> It's also not clear to me exactly what threat the anti-replay nonce is pro=
tecting against. It does nothing against the replay scenario discussed in se=
ction 2, as I understand it - which really seems to be more of a MitM scenar=
io. Given that the connection between the client and the RS is supposed to b=
e over TLS, and TLS is already protected against replay attacks, I think thi=
s part needs to be better motivated given the obvious costs of implementing i=
t.
>=20
> =20
>=20
> I have a tentative suggestion for an alternative design which avoids these=
 problems, but at a cost of potentially more complexity elsewhere. I'll summ=
arise it here for consideration:
>=20
> =20
>=20
> 1. The client obtains an access token in the normal way. When calling the t=
oken endpoint it provides an EC/okp public key as the confirmation key to be=
 associated with the access/refresh tokens.
>=20
> =20
>=20
> 2. The first time the client calls an RS it passes its access token in the=
 Authorization: Bearer header as normal. (If the RS doesn't support DPoP the=
n this would just succeed and no further action is required by the client - a=
llowing clients to opportunistically ask for DPoP without needing a priori k=
nowledge of RS capabilities).
>=20
> =20
>=20
> 3. The RS introspects the access token and learns the EC public key associ=
ated with the access token. As there is no DPoP proof with the access token,=
 the RS will generate a challenge in the following way:
>=20
>     o The RS generates an ephemeral EC key pair for the same curve as the c=
onfirmation key (e.g. P-256 or X25519).
>=20
>     o The RS stores the ephemeral private key somewhere, associated with t=
his access token (see below for a scalable implementation choice)
>=20
>     o The RS encodes the ephemeral public key into a JWK (epk) and base64u=
rl-encodes it. It uses this as a challenge to the client by sending back a 4=
01 response with WWW-Authenticate: DPoP <encoded-epk>
>=20
> =20
>=20
> 4. The client decodes the epk challenge and performs an ECDH key agreement=
 between its private key and the challenge epk as per the method described f=
or the existing JWA ECDH-ES encryption algorithm. Rather than deriving an AE=
S key however, it derives a HMAC key for HS256. The "apu" value is set to th=
e access token (string value as ASCII bytes) and the "apv" value is set to t=
he hostname of the RS (e.g. "api.example.com"). This ensures that the derive=
d key is cryptographically bound to the context in which it is used.
>=20
> =20
>=20
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the o=
ne in the current draft, but signed using the HS256 key. If a "kid" field wa=
s present in the challenge JWK sent by the RS then the same value MUST be us=
ed in the "kid" header of this discharge JWT. It retries its original reques=
t sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
>=20
> =20
>=20
> 6. The RS uses its stored ephemeral private key to derive the same HMAC ke=
y and verify the DPoP discharge JWT. If it validates and all fields are corr=
ect then the request is allowed.
>=20
> =20
>=20
> Efficient implementation trick:
>=20
> Because the client is required to copy and "kid" value from the challenge J=
WK, the RS can preemptively carry out the ECDH key agreement immediately and=
 generate the derived HMAC key. The RS can then encrypt this derived key usi=
ng a local authenticated encryption key (e.g. AES-GCM) and use that encrypte=
d value as the "kid" value in the challenge (perhaps along with some context=
 or an expiry time). That way the RS only needs to decrypt this kid value ra=
ther than performing the ECDH key agreement on every request. This also avoi=
ds the need for the RS to store any per-client state locally.
>=20
> =20
>=20
> The challenge-response nature of the scheme prevents traditional replay at=
tacks in the case where a DPoP discharge JWT is accidentally leaked through s=
erver logs or some other flaw, without needing to store nonces on the server=
. Using the RS's hostname in the key derivation process prevents mitm attack=
s in a similar way to how FIDO/WebAuthn prevents this. Most importantly, onc=
e a HS256 key has been derived between a client and RS they can reuse that k=
ey for multiple requests, reducing the overhead of the ECDH key agreement st=
ep. Either side can decide as a matter of policy how long to let this occur a=
nd when to trigger a fresh challenge-response.
>=20
> =20
>=20
> Because this fits within the standard HTTP authentication framework, it al=
so requires no additional CORS configuration and is relatively easy to plug i=
n to existing HTTP client libraries.
>=20
> =20
>=20
> The main downside of this approach to me is the fact that you can't simply=
 reuse an existing JWT library to implement it, and so it will take time for=
 client libs to develop. (Although I think this might be achievable now with=
 existing *COSE* libraries). This would increase the risk of people hand-rol=
ling solutions, rather than using well-tested libraries. On the other hand, i=
t uses fairly widely supported primitives so e.g. an implementation using We=
bCrypto is probably only a few dozen lines of code.
>=20
> =20
>=20
> -- Neil
>=20
> =20
>=20
>=20
>=20
>=20
>=20
> On 31 Oct 2019, at 19:20, Brian Campbell <bcampbell=3D40pingidentity.com@d=
marc.ietf.org> wrote:
>=20
> =20
>=20
> Hello WG,=20
>=20
> =20
>=20
> Just a quick note to let folks know that -03 of the DPoP draft was publish=
ed earlier today. The usual various document links are in the forwarded mess=
age below and the relevant snippet from the doc history with a summary of th=
e changes is included here for convenience.=20
>=20
> =20
>=20
> Hopefully folks will have time to read the (relativity) short document bef=
ore the meeting(s) in Singapore where (spoiler alert) I plan to ask that the=
 WG consider adoption of the draft.=20
>=20
> =20
>=20
> Thanks,
>=20
>=20
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
>=20
> =20
>=20
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <mbj@micr=
osoft.com>, John Bradley <ve7jtb@ve7jtb.com>, Brian Campbell <bcampbell@ping=
identity.com>, David Waite <david@alkaline-solutions.com>, Daniel Fett <mail=
@danielfett.de>
>=20
>=20
>=20
>=20
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>=20
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the Appl=
ication Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop=
-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpo=
p
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-=
03
>=20
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of submissi=
on
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited..  If you have rec=
eived this communication in error, please notify the sender immediately by e=
-mail and delete the message and any file attachments from your computer. Th=
ank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
> =20
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
>=20
> =20
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
>=20
> =20

--Apple-Mail-B23B4E90-9542-4A59-90D4-44EE5DED739D
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">On 22 Nov 2019, at 12:26, R=
ichard Backman, Annabelle &lt;richanna@amazon.com&gt; wrote:</div><blockquot=
e type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1">
<p class=3D"MsoNormal">&gt; Yes of course. But this is the HMAC *tag* not th=
e original key.<o:p></o:p></p>
<p class=3D"MsoNormal">Sure. And if the client attenuates the macaroon, it i=
s used as a key that the client proves possession of by presenting the chain=
ed HMAC. Clients doing DPoP aren=E2=80=99t proving possession of the =E2=80=9C=
original key=E2=80=9D (i.e., a key used to generate the
 access token) either.</p></div></div></blockquote><div>A way to think of th=
is is that macaroons bridge the gap between bearer tokens and proof of posse=
ssion tokens. A client can receive a macaroon and use it like a pure bearer t=
oken if they want. On the other hand they can append contextual caveats that=
 tightly constrain a token at the point of use, like a PoP token. You can ev=
en do a full challenge-response protocol where the RS sends a challenge and t=
he client appends it as a caveat.&nbsp;</div><div><br></div><blockquote type=
=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal=
"><o:p></o:p></p>

<p class=3D"MsoNormal">&gt; Well, you don=E2=80=99t have to return a key fro=
m the token endpoint for a start.<o:p></o:p></p>
<p class=3D"MsoNormal">Yes, that=E2=80=99s what I meant by saying that it el=
iminates key negotiation. Though I suppose it=E2=80=99s more correct to say t=
hat it inlines it. The AS still provides a key, it just happens to be part o=
f the access token.</p></div></div></blockquote><div>Which helps a lot with b=
ackwards compat.&nbsp;</div><blockquote type=3D"cite"><div dir=3D"ltr"><div c=
lass=3D"WordSection1">
<p class=3D"MsoNormal">Macaroons are an interesting pattern, but not because=
 they=E2=80=99re not doing PoP. Proof of possession is pretty core to the wh=
ole idea of digital signatures and HMACs.</p></div></div></blockquote><div>I=
 would argue that third party verifiability and non-repudiation are also cor=
e to digital signatures, but aren=E2=80=99t required or used by DPoP (and ac=
tually cause problems).&nbsp;</div><div><br></div><div>I also don=E2=80=99t t=
hink PoP is core to HMAC. Many ASes issue HMAC-signed access tokens already w=
ithout the client doing any kind of proof of possession. They are a convenie=
nt way of minting bearer tokens.&nbsp;</div><blockquote type=3D"cite"><div d=
ir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"> What makes th=
em interesting is the way they inline key distribution. Whether
 or not they=E2=80=99re applicable to DPoP depends, ultimately, on the use c=
ases DPoP is targeting and the threats it is trying to mitigate.</p></div></=
div></blockquote><div>There are many more interesting things than the key be=
ing inline for macaroons. For example:</div><div><br></div><div>- the attenu=
ations (caveats) are attached directly to the access token and are verified b=
y the AS. Contrast this to DPoP where every RS has to correctly validate the=
 proof token - if any don=E2=80=99t then the security is significantly reduc=
ed. The AS is responsible for all security-critical checks with macaroons.</=
div><div><br></div><div>- macaroon caveats can be layered. The initial clien=
t can add some restrictions and then pass the token to an RS. That RS can th=
en add its own restrictions when passing the token to backend services. This=
 is a big deal for microservice architectures.&nbsp;</div><div><br></div><di=
v>- you can add caveats at a gateway or proxy and know these will be enforce=
d without having to inspect incoming traffic.&nbsp;</div><div><br></div><div=
>Even when used in combination with PoP, macaroons add unique capabilities. =
For example, a client can retrieve a plain bearer token from the AS and then=
 after-the-fact bind it to its TLS client certificate by appending a x5t#S25=
6 caveat and use that new access token for all API calls. But that client st=
ill has the original access token so they can get the certificate for a diff=
erent client (eg another microservice) and create a new copy of the access t=
oken bound to that client=E2=80=99s certificate. It can then safely send thi=
s access token to the other client, even over a completely insecure connecti=
on. It can do this for every microservice it needs to talk to, effectively p=
roviding transfer of ownership for PoP tokens without needing to call a cent=
ral token exchange service.</div><div><br></div><div>All this and I haven=E2=
=80=99t even begun talking about 3rd party caveats.&nbsp;</div><div><br></di=
v><div>So the really interesting thing about macaroons is that they enable a=
ll kinds of new authorization patterns to be built without requiring a new s=
pec for each one.&nbsp;</div><div><br></div><div>Neil</div><br><blockquote t=
ype=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNor=
mal"><o:p></o:p></p>

<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">Neil Madden &lt;nei=
l.madden@forgerock.com&gt;<br>
<b>Date: </b>Friday, November 22, 2019 at 3:09 PM<br>
<b>To: </b>"Richard Backman, Annabelle" &lt;richanna@amazon.com&gt;<br>
<b>Cc: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;, oauth &lt;oaut=
h@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &=
lt;richanna@amazon.com&gt; wrote:<o:p></o:p></p>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</blockquote>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">Macaroons are built on proof of possession. In order t=
o add a caveat to a macaroon, the sender has to have the HMAC of the macaroo=
n without their caveat.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Yes of course. But this is the HMAC *tag* not the ori=
ginal key. They can=E2=80=99t change anything the AS originally signed.&nbsp=
;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">The distinctive property of macaroons as I see it is t=
hat they eliminate the need for key negotiation with the bearer. How much va=
lue this has over the AS just returning a symmetric key alongside the access=
 token in the token request, I=E2=80=99m
 not sure.<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Well, you don=E2=80=99t have to return a key from the=
 token endpoint for a start. The client doesn=E2=80=99t need to create and s=
end any additional token. The whole thing works with existing standards and t=
echnologies and can be incrementally adopted as
 required. If RSes do token introspection already then they need zero change=
s to support this.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">There are key distribution challenges with that if yo=
u are doing validation at the RS, but validation at the RS using either appr=
oach means you=E2=80=99ve lost protection against replay by the RS. This bri=
ngs us back to a core question: what threats
 are in scope for DPoP, and in what contexts?<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal">Agreed, but validation at the RS is premature optimis=
ation in many cases. And if you do need protection against that the client c=
an even append a confirmation key as a caveat and retrospectively upgrade a b=
earer token to a pop token. They
 can even do transfer of ownership by creating copies of the original token b=
ound to other certificates/public keys.&nbsp;
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;</spa=
n><o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity</span><=
o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">OAuth &lt;oauth-bou=
nces@ietf.org&gt; on behalf of Neil Madden &lt;neil.madden@forgerock.com&gt;=
<br>
<b>Date: </b>Friday, November 22, 2019 at 4:40 AM<br>
<b>To: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;<br>
<b>Cc: </b>oauth &lt;oauth@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">At the end of my previous email I mentioned that you c=
an achieve some of the same aims as DPoP without needing a PoP mechanism at a=
ll. This email is that follow-up.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">OAuth is agnostic about the format of access tokens a=
nd many vendors support either random string database tokens or JWTs. But th=
ere are other choices for access token format, some of which have more inter=
esting properties. In particular,
 Google proposed Macaroons a few years ago as a "better cookie" [1] and I th=
ink they systematically address many of these issues when used as an access t=
oken format.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For those who aren't familiar with them, Macaroons ar=
e a bit like a HS256 JWT. They have a location (a bit like the audience in a=
 JWT) and an identifier (an arbitrary string) and then are signed with HMAC-=
SHA256 using a secret key. (There's
 no claims set or headers - they are very minimal). In this case the secret k=
ey would be owned by the AS and used to sign macaroon-based access tokens. V=
alidating the token would be done via token introspection at the AS.<o:p></o=
:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The clever bit is that anybody at all can append "cav=
eats" to a macaroon at any time, but nobody can remove one once added. Cavea=
ts are restrictions on the use of a token - they only ever reduce the author=
ity granted by the token, never
 expand it. The AS can validate the token and all the caveats with its secre=
t key. So, for example, if an access token was a macaroon then the client co=
uld append a caveat to reduce the scope, or reduce the expiry time, or reduc=
e the audience, and so on.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The really clever bit is that the client can keep a c=
opy of the original token and create restricted versions to send to differen=
t resource servers. Because HMAC is very cheap, the client can even do this b=
efore each and every request.
 (This is what the original paper refers to as "contextual caveats"). This m=
eans that a client can be issued a single access token from the AS with broa=
d scope and applicable to many different RS and can then locally create rest=
ricted copies for each individual
 RS.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The relevance to DPoP is that the client could even a=
ppend caveats equivalent to "htm" and "htu" just before sending the access t=
oken to the RS, and maybe add an "exp" for 5 seconds in the future, reduce t=
he scope, and so on:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; newAccessToken =3D accessToken.withCaveats({<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; exp: now + 5seconds,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; scope: "a b",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; htm: "POST",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; ....<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; });<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; httpClient.post(data, Authorization: Bearer ne=
wAccessToken);<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Note that the client doesn't need anything extra here=
 - no keys, extra tokens etc. They just have the access token and a macaroon=
 library.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The RS will see an opaque access token, send it to th=
e AS for introspection. The AS however, will see and validate the new caveat=
s on the token and return an introspection response with the restricted scop=
e and expiry time, and return the
 htm/htu restrictions that the RS can then enforce.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For clients this is transparent until they want to ta=
ke advantage of it and then they can just use an off-the-shelf macaroon libr=
ary. For the RS it is also completely transparent. All the (relatively small=
) complexity lives in the AS, which
 just has to be able to produce and verify macaroons and take caveats into a=
ccount when performing token introspection - e.g. the returned scope should b=
e the intersection of the original token scope and any scope caveats. But I d=
on't think this would be too
 much effort.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://ai.google/research/pubs/=
pub41892">https://ai.google/research/pubs/pub41892</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 21 Nov 2019, at 06:23, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com">bcampbell@pingidentity.com</a>&gt; wrote=
:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal">Yeah, suggestions and/or an MTI about algorithm suppo=
rt would probably be worthwhile. Perhaps also some defined means of signalin=
g when an unsupported algorithm is used along with any other reason a DPoP i=
s invalid or rejected.&nbsp;
<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">There are a lot of tradeoffs in what claims are requi=
red and what protections are provided etc. The aim of what was chosen was to=
 do just enough to provide some reasonable protections against reuse or use i=
n a different context while being
 simple to implement and deploy.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal">On Wed, Nov 20, 2019 at 6:34 AM Neil Madden &lt;<a hr=
ef=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">neil.madden@forger=
ock.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal">Thanks for the reply, Brian.&nbsp; <o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Collecting my thoughts up here rather than responding=
 blow by blow.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">Public key signatures are simpler in some respects, m=
ore complex in others. There are currently 10 public key JWS signature schem=
es defined (ES256/384/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS=
 potentially have to support them
 all? If not, how do they negotiate algorithm support with the client?<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On the other hand, the ECDH scheme I proposed can be i=
mplemented by adapting an existing ECDH-ES encryption support in a JWT libra=
ry. For example, I discovered while playing with this that our own internal l=
ibrary can implement the full
 flow I described entirely via the existing public API [1], so it's not nece=
ssarily as complex as it first looks. I even knocked up a from-scratch imple=
mentation in WebCrypto (JavaScript) without too much code [2].<o:p></o:p></p=
>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">But I admit that using an existing JWT library to sig=
n a JWT with an existing algorithm is even easier, and that counts for a lot=
. Perhaps we can make concrete suggestions/requirements about algorithm supp=
ort? e.g. "The RS MUST support
 RS256 and SHOULD support EdDSA. Other algorithms MAY be supported."&nbsp;<o=
:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">With regards to replay protection, I think there are a=
t least two reasonable positions:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1. We assume that TLS is secure and don't try to defe=
nd against any compromise at that level. (Clearly none of the TLS-based PoP m=
echanisms survive if TLS is compromised, by definition). In this case the ma=
in attack to defend against is
 a malicious RS replaying the access token elsewhere. Simply signing the ori=
gin of the RS would be enough to prevent this attack, while letting the clie=
nt reuse the same JWT for many requests (and the RS to cache the JWT validat=
ion). None of "jti", "htu", or
 "htm" seem relevant to this model.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2. We don't assume that TLS is secure (or it's not fu=
lly end-to-end) and try to provide some defense in depth against a MitM atta=
cker replaying a token against the same RS. There is a graduated series of s=
teps you can take here, depending
 on how much you want to prevent this:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;a. The DPoP token can be replayed for ar=
bitrary requests to the same RS but has a short time limit (e.g., exp claim o=
r RS-enforced max lifetime from iat)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;b. The DPoP token can be replayed for th=
e same request (htu/htm claims)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp;c. The DPoP token can't be replayed at a=
ll - either because of jti blacklisting on the RS or a challenge-response pr=
otocol on each request.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">(There are also variants such as including a hash of t=
he request body/headers, or encoding an ETag into the JWT).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I think either are reasonable design goals, but aimin=
g for 2 adds more value. I think aiming for 2a is a reasonable default basel=
ine that allows the client to reuse a DPoP token for a few requests, reducin=
g the cost of the signature (and
 the RS can cache the validated JWT). Support for 2b or 2c can then be liste=
d as optional additions.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">PS - 2a/2b can be achieved without PoP. I'll save tha=
t for another email in the next few days though.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal">[1]:&nbsp;<a href=3D"https://gist.github.com/NeilMadd=
en/685ea66fb79d37a50c2310f853bd9496" target=3D"_blank">https://gist.github.c=
om/NeilMadden/685ea66fb79d37a50c2310f853bd9496</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[2]: <a href=3D"https://gist.github.com/NeilMadden/70=
e1b232a3b273de02ed731eb36ec4a7" target=3D"_blank">
https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7</a><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">-- Neil<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a href=3D=
"mailto:bcampbell@pingidentity.com" target=3D"_blank">bcampbell@pingidentity=
.com</a>&gt; wrote:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On Thu, Nov 14, 2019 at 7:20 PM Neil Madden &lt;<a href=3D"mailto:neil=
.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; w=
rote:</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I can't attend Singapore either in person or remotely due to other com=
mitments. I broadly support adoption of this draft, but I have some comments=
/suggestions about it.</span><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks Neil. And sorry to hear that you won't be in Singapore. This ki=
nd of stuff is definitely more easily discussed in person (for me anyway). B=
ut I'll try and comment on your comments
 here as best I can. I also plan to also mention them in the Wednesday and/o=
r Thursday presentation.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Section 2 lists the main objective as being to harden against compromi=
sed/malicious AS or RS, which may attempt to replay captured tokens elsewher=
e. While this is a good idea, a casual
 reader might wonder why a simple audience claim in the access token/introsp=
ection response is not sufficient to prevent this. Because interactions betw=
een the client and RS are supposed to be over TLS, is the intended threat mo=
del one in which these protections
 have broken down? ("counterfeit" in the description suggests this). Or is t=
he motivation that clients want to get a single broad-scoped access token (f=
or usability/performance reasons) and use it to access multiple resource ser=
vers without giving each of them
 the ability to replay the token to the other servers? Or are we thinking of=
 a phishing-type vulnerability were a general-purpose client might accidenta=
lly visit a malicious site which prompts for an access token that the client=
 then blindly goes off and gets?
 (UMA?) It's not clear to me which of these scenarios is being considered, s=
o it would be good to tighten up this section.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It is admittedly a bit loose and I agree it'd be good to tighten it up=
. But part of why it's loose is that it tries to offer some protections for a=
ll those scenarios and more such
 as a general lost/stolen token. It's effectively trying to provide as many o=
f the same types of protections/assurances that you'd get with TLS based PoP=
 mechanisms (like OAuth MTLS or Token binding) to the extent that can be don=
e at the HTTP application layer.
 Which can't realistically be exactly the same but can maybe be kinda close w=
hile actually being accessible and implementable because it's all done at th=
e application layer. There are trade-offs, of course, and the document write=
rs have endeavored to find a
 good balance in the trade-off decisions we've made. But that doesn't mean t=
hey are necessarily the right decisions or are closed to discussion. To the c=
asual reader I would say that it turns out that getting an appropriate simpl=
e audience claim into an access
 token isn't nearly as simple as it might seem. And while it will prevent RS=
 to RS replay (as long as both RSs aren't legit audiences) it doesn't help w=
ith preventing the use of tokens stolen or leaked by other means (including f=
or refresh tokens issued to
 public clients).&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Another potential motivation is for mobile apps. Some customers of our=
s would like to tie access/refresh tokens to private key material generated o=
n a secure element in the device,
 that can only be accessed after local biometric authentication (e.g. TouchI=
D/FaceID on iOS). I have suggested using mTLS cert-bound tokens for this, bu=
t have heard some pushback due to the difficulty of configuring support for c=
lient certs across diverse infrastructure.
 A simple JWT-based solution like DPoP could fill this need.</span><o:p></o:=
p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's maybe not stated in the draft but this kind of thing is among the=
 objectives (in my mind anyway).&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">My main concerns with the draft though are about efficiency and scalab=
ility of the proposed approach:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The requirement to use public key signatures, along with the anti-r=
eplay nonce, means that the RS is required to perform an expensive signature=
 verification check on every request.
 That is not going to scale up well. While there are more efficient schemes l=
ike Ed25519 now, these are still typically an order of magnitude slower than=
 HMAC and the latency and CPU overhead is likely to be a non-starter for man=
y APIs (especially when you're
 billed by CPU usage). Public key signatures are also notoriously fragile (s=
ee e.g. the history of nonce reuse/leakage vulnerabilities in ECDSA or&nbsp;=
</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Yes, asymmetric is more processing intensive than symmetric. But if yo=
u take away the distributed replay check (see next response), it will scale o=
ut just fine. I'm not so sure latency
 is a real issue here - while these operations are an order of magnitude slo=
wer we're still talking about times that are not perceptible to a human. CPU=
 usage/cost is a part of a trade-off for the simplicity afforded by public/p=
rivate keys.&nbsp; And it is significantly
 simpler. The design you sketched out is admittedly quite clever but it's no=
t even in the same ballpark with respect to complexity. And, as you pointed o=
ut, the other suggestion around symmetric keys has rather different security=
 properties while still adding
 complexity. Adding symmetric key support isn't something that can just be a=
dded on easily.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The advice for the RS to store a set of previously used nonces to p=
revent replay will also hamper scalability, especially in large deployments w=
here such state would need to be
 replicated to all servers (or use sticky load balancing, which comes with i=
ts own problems). This violates the statelessness of HTTP, and it also poten=
tially breaks idempotency of operations: Think of the case where the JWT val=
idation and replay protection
 is done at an API gateway but then the call to the backend API server fails=
 for a transient reason. The client (or a proxy/library) cannot simply repla=
y the (idempotent) request in this case because it will be rejected by the g=
ateway. It must instead recreate
 the DPoP JWT, incurring additional overheads.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The actual value of replay checking on jti is somewhat questionable. T=
he DPoP JWT only transits between client and server so a TLS MITM is likely n=
eeded to steal a DPoP JWT. But we
 are assuming TLS works here. And an active MITM could thwart this check by j=
ust being first to present DPoP JWT. I think the jti check made its way into=
 the draft mostly because it seemed like something was needed to try and bri=
ng it closer to the TLS PoP
 models. Being aware of the scalability concerns, I did endeavor to write th=
e text in such a way so as to leave some wiggle room in implementations/depl=
oyments with text like '"jti" SHOULD be used by the server for replay detect=
ion and prevention` and [ensure
 that] 'within a reasonable consideration of accuracy and resource utilizati=
on, a JWT with the same "jti" value has not been received previously'. The i=
dea being that using something eventually consistent or even local only to t=
he runtime instance would be
 permissible. Perhaps that allowance and the rational could be made more cle=
ar? Or would you suggest to do away with the jti replay stuff al? Or somethi=
ng else?&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. Minor: The use of a custom header for communicating the DPoP proof w=
ill require additional CORS configuration on top of that already done for th=
e Authorization header, and so adds
 a small amount of additional friction for adoption. Given that CORS configu=
ration changes often require approval by a security team, this may make more=
 of an impact than you'd expect.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Feels really minor. I mean, we could try to roll everything up under o=
ne header. But it does seem unwarranted and would complicate things - at lea=
st in the model we've got now where
 the proof is sent the same way ono all types of requests.&nbsp;</span><o:p>=
</o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">It's also not clear to me exactly what threat the anti-replay nonce is=
 protecting against. It does nothing against the replay scenario discussed i=
n section 2, as I understand it -
 which really seems to be more of a MitM scenario. Given that the connection=
 between the client and the RS is supposed to be over TLS, and TLS is alread=
y protected against replay attacks, I think this part needs to be better mot=
ivated given the obvious costs
 of implementing it.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">I have a tentative suggestion for an alternative design which avoids t=
hese problems, but at a cost of potentially more complexity elsewhere. I'll s=
ummarise it here for consideration:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">1. The client obtains an access token in the normal way. When calling t=
he token endpoint it provides an EC/okp public key as the confirmation key t=
o be associated with the access/refresh
 tokens.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">2. The first time the client calls an RS it passes its access token in=
 the Authorization: Bearer header as normal. (If the RS doesn't support DPoP=
 then this would just succeed and
 no further action is required by the client - allowing clients to opportuni=
stically ask for DPoP without needing a priori knowledge of RS capabilities)=
.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">3. The RS introspects the access token and learns the EC public key as=
sociated with the access token. As there is no DPoP proof with the access to=
ken, the RS will generate a challenge
 in the following way:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS generates an ephemeral EC key pair for the=
 same curve as the confirmation key (e.g. P-256 or X25519).</span><o:p></o:p=
></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS stores the ephemeral private key somewhere=
, associated with this access token (see below for a scalable implementation=
 choice)</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp; &nbsp;&nbsp;o The RS encodes the ephemeral public key into a JW=
K (epk) and base64url-encodes it. It uses this as a challenge to the client b=
y sending back a 401 response with WWW-Authenticate:
 DPoP &lt;encoded-epk&gt;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">4. The client decodes the epk challenge and performs an ECDH key agree=
ment between its private key and the challenge epk as per the method describ=
ed for the existing JWA ECDH-ES encryption
 algorithm. Rather than deriving an AES key however, it derives a HMAC key f=
or HS256. The "apu" value is set to the access token (string value as ASCII b=
ytes) and the "apv" value is set to the hostname of the RS (e.g. "<a href=3D=
"http://api.example.com/" target=3D"_blank">api.example.com</a>").
 This ensures that the derived key is cryptographically bound to the context=
 in which it is used.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">5. The client uses the HMAC key to create a DPoP proof JWT much like t=
he one in the current draft, but signed using the HS256 key. If a "kid" fiel=
d was present in the challenge JWK
 sent by the RS then the same value MUST be used in the "kid" header of this=
 discharge JWT. It retries its original request sending Authorization: DPoP &=
lt;hmac-jwt&gt; at=3D&lt;access_token&gt;.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">6. The RS uses its stored ephemeral private key to derive the same HMA=
C key and verify the DPoP discharge JWT. If it validates and all fields are c=
orrect then the request is allowed.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Efficient implementation trick:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because the client is required to copy and "kid" value from the challe=
nge JWK, the RS can preemptively carry out the ECDH key agreement immediatel=
y and generate the derived HMAC key.
 The RS can then encrypt this derived key using a local authenticated encryp=
tion key (e.g. AES-GCM) and use that encrypted value as the "kid" value in t=
he challenge (perhaps along with some context or an expiry time). That way t=
he RS only needs to decrypt this
 kid value rather than performing the ECDH key agreement on every request. T=
his also avoids the need for the RS to store any per-client state locally.</=
span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The challenge-response nature of the scheme prevents traditional repla=
y attacks in the case where a DPoP discharge JWT is accidentally leaked thro=
ugh server logs or some other flaw,
 without needing to store nonces on the server. Using the RS's hostname in t=
he key derivation process prevents mitm attacks in a similar way to how FIDO=
/WebAuthn prevents this. Most importantly, once a HS256 key has been derived=
 between a client and RS they
 can reuse that key for multiple requests, reducing the overhead of the ECDH=
 key agreement step. Either side can decide as a matter of policy how long t=
o let this occur and when to trigger a fresh challenge-response.</span><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Because this fits within the standard HTTP authentication framework, i=
t also requires no additional CORS configuration and is relatively easy to p=
lug in to existing HTTP client libraries.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">The main downside of this approach to me is the fact that you can't si=
mply reuse an existing JWT library to implement it, and so it will take time=
 for client libs to develop. (Although
 I think this might be achievable now with existing *COSE* libraries). This w=
ould increase the risk of people hand-rolling solutions, rather than using w=
ell-tested libraries. On the other hand, it uses fairly widely supported pri=
mitives so e.g. an implementation
 using WebCrypto is probably only a few dozen lines of code.</span><o:p></o:=
p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">-- Neil</span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
<br>
<br>
</span><o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">On 31 Oct 2019, at 19:20, Brian Campbell &lt;<a href=3D"mailto:bcampbe=
ll=3D40pingidentity.com@dmarc.ietf.org" target=3D"_blank">bcampbell=3D40ping=
identity.com@dmarc.ietf.org</a>&gt; wrote:</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hello WG,&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Just a quick note to let folks know that -03 of the DPoP draft was pub=
lished earlier today. The usual various document links are in the forwarded m=
essage below and the relevant snippet
 from the doc history with a summary of the changes is included here for con=
venience.&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Hopefully folks will have time to read the (relativity) short document=
 before the meeting(s) in Singapore where (spoiler alert) I plan to ask that=
 the WG consider adoption of the
 draft.&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">Thanks,</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
&nbsp;-03<br>
&nbsp; &nbsp;o &nbsp;rework the text around uniqueness requirements on the j=
ti claim in<br>
&nbsp; &nbsp; &nbsp;&nbsp;the DPoP proof JWT<br>
&nbsp; &nbsp;o &nbsp;make tokens a bit smaller by using "htm", "htu", and "j=
kt" rather<br>
&nbsp; &nbsp; &nbsp;&nbsp;than "http_method", "http_uri", and "jkt#S256" res=
pectively<br>
&nbsp; &nbsp;o &nbsp;more explicit recommendation to use mTLS if that is ava=
ilable<br>
&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br>
&nbsp; &nbsp;o &nbsp;editorial updates</span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">---------- Forwarded message ---------<br>
From:&nbsp;&lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank"=
>internet-drafts@ietf.org</a>&gt;<br>
Date: Thu, Oct 31, 2019 at 11:53 AM<br>
Subject: New Version Notification for draft-fett-oauth-dpop-03.txt<br>
To: Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" targe=
t=3D"_blank">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a href=3D"m=
ailto:mbj@microsoft.com" target=3D"_blank">mbj@microsoft.com</a>&gt;, John B=
radley &lt;<a href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank">ve7jtb@ve=
7jtb.com</a>&gt;,
 Brian Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"=
_blank">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a href=3D"mailt=
o:david@alkaline-solutions.com" target=3D"_blank">david@alkaline-solutions.c=
om</a>&gt;, Daniel Fett &lt;<a href=3D"mailto:mail@danielfett.de" target=3D"=
_blank">mail@danielfett.de</a>&gt;</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-si=
ze:10.5pt;font-family:HelveticaNeue"><br>
<br>
<br>
A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
has been successfully submitted by Brian Campbell and posted to the<br>
IETF repository.<br>
<br>
Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br>
Revision:&nbsp; &nbsp; &nbsp; &nbsp;03<br>
Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; OAuth 2.0 Demonstration of Proof-of=
-Possession at the Application Layer (DPoP)<br>
Document date:&nbsp; 2019-10-30<br>
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br>
Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br>
URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<a href=3D"https://www.ie=
tf.org/internet-drafts/draft-fett-oauth-dpop-03.txt" target=3D"_blank">https=
://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>
Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf=
.org/doc/draft-fett-oauth-dpop/" target=3D"_blank">https://datatracker.ietf.=
org/doc/draft-fett-oauth-dpop/</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://tools.ietf.org/html/d=
raft-fett-oauth-dpop-03" target=3D"_blank">https://tools.ietf.org/html/draft=
-fett-oauth-dpop-03</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf.org/=
doc/html/draft-fett-oauth-dpop" target=3D"_blank">https://datatracker.ietf.o=
rg/doc/html/draft-fett-oauth-dpop</a><br>
Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://www.ietf.or=
g/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" target=3D"_blank">https://www.iet=
f.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a><br>
<br>
Abstract:<br>
&nbsp; &nbsp;This document describes a mechanism for sender-constraining OAu=
th 2.0<br>
&nbsp; &nbsp;tokens via a proof-of-possession mechanism on the application l=
evel.<br>
&nbsp; &nbsp;This mechanism allows for the detection of replay attacks with a=
ccess<br>
&nbsp; &nbsp;and refresh tokens.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission=
<br>
until the htmlized version and diff are available at&nbsp;<a href=3D"http://=
tools.ietf.org/" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d..&nbsp; If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</span></i></b><span style=3D"font-size:10.=
5pt;font-family:HelveticaNeue">_____________________________________________=
__<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/oauth</a></span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue">&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;font-family:Helvetica=
Neue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d.&nbsp; If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachment=
s from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><br>
<b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neue&quot;=
;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOT=
ICE: This email may contain confidential and privileged material for the sol=
e use of the intended recipient(s). Any review,
 use, distribution or disclosure by others is strictly prohibited.&nbsp; If y=
ou have received this communication in error, please notify the sender immed=
iately by e-mail and delete the message and any file attachments from your c=
omputer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>


</div></blockquote></body></html>=

--Apple-Mail-B23B4E90-9542-4A59-90D4-44EE5DED739D--


From nobody Sun Nov 24 01:43:22 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00E71120108 for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 01:43:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pc6e-_HaTxR3 for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 01:43:17 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81237120105 for <oauth@ietf.org>; Sun, 24 Nov 2019 01:43:17 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id t2so13839120wrr.1 for <oauth@ietf.org>; Sun, 24 Nov 2019 01:43:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=vqgaYtE8KFvaEd8X/6cbhE0IdwE+Ylfl0tlq3rl0bZk=; b=N6TJEH85XlZVvBXCdbUfzuCG0v+0Fkveakg8Gr36NlDtLwwk7pMfk7Uloi9bMXXxH7 RsjAxgA7fBk3uOBwGsLAPNAK/ZSdRl10CcUieZSqvsVDGIXkYuoXokDiUE2oTM3Q58MX 11esqCI9m0AC1RFo+VdxU2Fwje4d6By7ylF/g=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=vqgaYtE8KFvaEd8X/6cbhE0IdwE+Ylfl0tlq3rl0bZk=; b=tzHxefW+GOCHyzrJGFvNPj0GTvCtjiWpyvIlxfwypwI7aQLevZ6Bwp92FSffrYxIQz aTigfvPgaMvUgEQFUpP1yfNbfwu+kJdIybuhMNFcdjFdxnjXkAfaKGFicRZj2LmUriqm QMfFjKmiuONo/6VmSZxvlf1b9HoRoc22wSp6Ff4UMqh4UuApYSrluaWbVE02GPT2hag1 MnVXRxmqEi6/86aqLCNGBIWjUDEr8c9mLP909/hcSTQnmY6VnWeAGj2GJCwlAjpeF8cW jlfYHL6rN19IQQv6TzGN003DXogKv44jvkDAkvNx1lKl1hoczsZ4vZ9zbiU6glGgrgA5 DYnw==
X-Gm-Message-State: APjAAAV14vKfwOZ/Fozh9JGFQDFAGw9rf/xR7JIQ2An0TApiEGidbf5h fUmVEz9xSGe3GODrXIJ7Vc9LJQ==
X-Google-Smtp-Source: APXvYqwtEMFcYeigil3enddOFidA8Get2z4r9+I3eL9QQ2/B4VPbM6mnb6nqZd1KHhLlLCks28gBJg==
X-Received: by 2002:adf:e74e:: with SMTP id c14mr25414785wrn.124.1574588595637;  Sun, 24 Nov 2019 01:43:15 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65? ([2a01:4c8:1e:a0cd:ec52:ae7:a130:6e65]) by smtp.gmail.com with ESMTPSA id w12sm4604327wmi.17.2019.11.24.01.43.14 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 24 Nov 2019 01:43:14 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-944A09A1-3A13-45F2-A1CC-949B6B75E95B
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Sun, 24 Nov 2019 09:43:13 +0000
Message-Id: <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com>
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net>
Cc: Justin Richer <jricher@mit.edu>, oauth <oauth@ietf.org>
In-Reply-To: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/meLg5wTPD9i_6AZmmspHdDyPf20>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Nov 2019 09:43:21 -0000

--Apple-Mail-944A09A1-3A13-45F2-A1CC-949B6B75E95B
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 24 Nov 2019, at 07:59, Torsten Lodderstedt <torsten@lodderstedt.net> wrot=
e:
>=20
> =EF=BB=BFHi Neil,
>=20
> I would like to summarize what I believe to have understood is your opinio=
n before commenting:
> 1) audience restricted access tokens is the way to cope with replay attemp=
ts between RSs

It=E2=80=99s one way, but yes that is sufficient.=20

> 2) TLS prevents replay at the same RS
>=20
> re 1) that works as long as ASs support audience restrictions and the audi=
ence restriction is the actual resource server URL, otherwise a staged RS ca=
n obtain access tokens audience restricted for a different RS and replay it t=
here

Yes, audience restrictions only work if the AS supports it. DPoP only works i=
f the AS, client, and *all* RSes all support it, right?

I=E2=80=99m not sure of your second point. Obviously an audience restriction=
 needs to be unambiguous if it is to have any effect.=20

> re 2) it seems you look onto that threat from the inside of a TLS connecti=
on. Let=E2=80=99s assume the attacker obtains the access tokens at the appli=
cation layer, e.g. through a log file, referrer header, mix-up, browser hist=
ory and then sends it through a new TLS connection to the same RS. How does T=
LS help to detect this replay?

These are token leakage/theft not replay - https://en.m.wikipedia.org/wiki/R=
eplay_attack

And TLS has done a lot to protect against even these threats. For example, l=
eaking credentials in logs was much more of a threat when you had to conside=
r all kinds of proxies and middleboxes along the route. TLS has completely e=
liminated that threat, leaving just the logs at the RS itself. And the other=
s are largely protected against by not putting access tokens in URLs, and th=
ings like Referrer-Policy/rel=3Dno-referrer.

Leaking an audience-restricted access token into the logs of the RS itself s=
eems a relatively minor threat to worry about. If you=E2=80=99re not managin=
g logs securely then you=E2=80=99re probably already leaking all kinds of PI=
I and other sensitive data that the access token grants access to.=20

If the client and RS can=E2=80=99t get these things right then I would quest=
ion whether public key signatures and associated key management is more like=
ly to be done right.=20

With macaroons the complexity is reduced and the AS performs all the checks.=
=20

With ECDH, although complex, the critical security checks are encoded into t=
he key derivation process - leading to the very desirable property that secu=
rity failures become interoperability failures and so are more likely to be f=
ound and fixed in testing. (See the work done on using implicit nonces in TL=
S for an example of this principle - https://blog.cloudflare.com/tls-nonce-n=
se/)

=E2=80=94 Neil

>=20
>>> Am 24.11.2019 um 08:40 schrieb Neil Madden <neil.madden@forgerock.com>:
>>>=20
>>> =EF=BB=BFOn 22 Nov 2019, at 13:33, Torsten Lodderstedt <torsten@lodderst=
edt.net> wrote:
>>>=20
>>> =EF=BB=BFHi Neil,
>>>=20
>>>>> On 22. Nov 2019, at 20:50, Neil Madden <neil.madden@forgerock.com> wro=
te:
>>>>=20
>>>> Hi Torsten,
>>>>=20
>>>>> On 22 Nov 2019, at 12:15, Torsten Lodderstedt <torsten@lodderstedt.net=
> wrote:
>>>>>=20
>>>>> Hi Neil,
>>>>>=20
>>>>>> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> wr=
ote:
>>>>>>=20
>>>>>> I think the phrase "token replay" is ambiguous. Traditionally it refe=
rs to an attacker being able to capture a token (or whole requests) in use a=
nd then replay it against the same RS. This is already protected against by t=
he use of normal TLS on the connection between the client and the RS. I thin=
k instead you are referring to a malicious/compromised RS replaying the toke=
n to a different RS - which has more of the flavour of a man in the middle a=
ttack (of the phishing kind).
>>>>>=20
>>>>> I would argue TLS basically prevents leakage and not replay.
>>>>=20
>>>> It also protects against replay. If you capture TLS-encrypted packets w=
ith Wireshark you not only cannot decipher them but also cannot replay them b=
ecause they include specific anti-replay measures at the record level in the=
 form of unique session keys and record sequence numbers included in the MAC=
 calculations. This is essential to the security of TLS.
>>>=20
>>> I understand. I was looking onto TLS from an application perspective, th=
at might explain differing perception.
>>>=20
>>>>=20
>>>>> The threats we try to cope with can be found in the Security BCP. Ther=
e are multiple ways access tokens can leak, including referrer headers, mix-=
up, open redirection, browser history, and all sorts of access token leakage=
 at the resource server
>>>>>=20
>>>>> Please have a look at https://tools.ietf.org/html/draft-ietf-oauth-sec=
urity-topics-13#section-4.
>>>>>=20
>>>>> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#sectio=
n-4.8 also has an extensive discussion of potential counter measures, includ=
ing audience restricted access tokens and a conclusion to recommend sender c=
onstrained access tokens over other mechanisms.
>>>>=20
>>>> OK, good - these are threats beyond token replay (at least as I underst=
and that term). It would be good to explicitly add them to the DPoP document=
 motivation.
>>>>=20
>>>> Note that most of these ways that an access token can leak also apply e=
qually to leak of the DPoP JWT, so the protection afforded by DPoP boils dow=
n to how well the restrictions encoded into the JWT prevent it from being re=
used in this case - e.g., restricting the expiry time, audience, scope, link=
ing it to a specific request (htm/htu) etc.=20
>>>>=20
>>>> Every single one of those restrictions can be equally well encoded as c=
aveats on a macaroon access token without any need for public key signatures=
 or additional tokens and headers.
>>>>=20
>>>>>> But if that's the case then there are much simpler defences than thos=
e proposed in the current draft:
>>>>>>=20
>>>>>> 1. Get separate access tokens for each RS with correct audience and s=
copes. The consensus appears to be that this is hard to do in some cases, he=
nce the draft.
>>>>>=20
>>>>> How many deployments do you know that today are able to issue RS-speci=
fic access tokens?
>>>>> BTW: how would you identify the RS?
>>>>>=20
>>>>> I agree that would be an alternative and I=E2=80=99m a great fan of su=
ch tokens (and used them a lot at Deutsche Telekom) but in my perception thi=
s pattern needs still to be established in the market. Moreover, they basica=
lly protect from a rough RS (if the URL is used as audience) replaying the t=
oken someplace else, but they do not protect from all other kinds of leakage=
/replay (e.g. log files).
>>>>=20
>>>> Many services already do this. For example, Google encodes the intended=
 RS into the scopes on GCP (https://developers.google.com/identity/protocols=
/googlescopes). A client can do a single authorization flow to authorize all=
 the scopes it needs and then use repeated calls to the refresh token endpoi=
nt to obtain individual access tokens with subsets of the authorized scopes f=
or each endpoint.
>>>=20
>>> And that works at google? How does the client indicate the RS it wants t=
o use the first access token (that is obtains in the course of the code exch=
ange)?
>>=20
>> It doesn=E2=80=99t. The initial access token would be for all scopes and t=
he client simply discards that one (or revokes it if the AS supports revokin=
g individual tokens).=20
>>=20
>>>> (I think Brian also mentioned this pattern at OSW, but it might have be=
en somebody else).
>>>=20
>>> I know the pattern and we used this at Deutsche Telekom, but I don=E2=80=
=99t know any other deployment utilising this pattern. In my observation, mo=
st people treat access tokens as cookies and use them across RSs. Another re=
ason might be that, before resource indicators, there was no interoperable w=
ay to ask for a token for a certain RS.
>>=20
>> I don=E2=80=99t know anybody using DPoP either. The point is that you can=
 do this kind of thing right now, so DPoP needs to have a stronger justifica=
tion for why this isn=E2=80=99t sufficient.
>>=20
>>>>>> 2. Make the DPoP token be a simple JWT with an "iat" and the origin o=
f the RS. This stops the token being reused elsewhere but the client can reu=
se it (replay it) for many requests.
>>>>>> 3. Issue a macaroon-based access token and the client can add a corre=
ct audience and scope restrictions at the point of use.
>>>>>=20
>>>>> Why is this needed if the access token is already audience restricted?=
 Or do you propose this as alternative?=20
>>>>=20
>>>> These are all alternatives. Any one of them prevents the specific attac=
k of replay by the RS to another RS.
>>>=20
>>> And which does for replay with the same RS?
>>=20
>> TLS.=20
>>=20
>> =E2=80=94 Neil

--Apple-Mail-944A09A1-3A13-45F2-A1CC-949B6B75E95B
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">On 24 Nov 2019, at 07:59, T=
orsten Lodderstedt &lt;torsten@lodderstedt.net&gt; wrote:</div><div dir=3D"l=
tr"><blockquote type=3D"cite"><br></blockquote></div><blockquote type=3D"cit=
e"><div dir=3D"ltr">=EF=BB=BF<span>Hi Neil,</span><br><span></span><br><span=
>I would like to summarize what I believe to have understood is your opinion=
 before commenting:</span><br><span>1) audience restricted access tokens is t=
he way to cope with replay attempts between RSs</span><br></div></blockquote=
><div><br></div><div>It=E2=80=99s one way, but yes that is sufficient.&nbsp;=
</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><span>2) TLS prevents r=
eplay at the same RS</span><br><span></span><br><span>re 1) that works as lo=
ng as ASs support audience restrictions and the audience restriction is the a=
ctual resource server URL, otherwise a staged RS can obtain access tokens au=
dience restricted for a different RS and replay it there</span><br></div></b=
lockquote><div><br></div><div>Yes, audience restrictions only work if the AS=
 supports it. DPoP only works if the AS, client, and *all* RSes all support i=
t, right?</div><div><br></div><div>I=E2=80=99m not sure of your second point=
. Obviously an audience restriction needs to be unambiguous if it is to have=
 any effect.&nbsp;</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><span=
>re 2) it seems you look onto that threat from the inside of a TLS connectio=
n. Let=E2=80=99s assume the attacker obtains the access tokens at the applic=
ation layer, e.g. through a log file, referrer header, mix-up, browser histo=
ry and then sends it through a new TLS connection to the same RS. How does T=
LS help to detect this replay?</span><br></div></blockquote><div><br></div><=
div>These are token leakage/theft not replay -&nbsp;<a href=3D"https://en.m.=
wikipedia.org/wiki/Replay_attack">https://en.m.wikipedia.org/wiki/Replay_att=
ack</a></div><div><br></div><div>And TLS has done a lot to protect against e=
ven these threats. For example, leaking credentials in logs was much more of=
 a threat when you had to consider all kinds of proxies and middleboxes alon=
g the route. TLS has completely eliminated that threat, leaving just the log=
s at the RS itself. And the others are largely protected against by not putt=
ing access tokens in URLs, and things like Referrer-Policy/rel=3Dno-referrer=
.</div><div><br></div><div>Leaking an audience-restricted access token into t=
he logs of the RS itself seems a relatively minor threat to worry about. If y=
ou=E2=80=99re not managing logs securely then you=E2=80=99re probably alread=
y leaking all kinds of PII and other sensitive data that the access token gr=
ants access to.&nbsp;</div><div><br></div><div>If the client and RS can=E2=80=
=99t get these things right then I would question whether public key signatu=
res and associated key management is more likely to be done right.&nbsp;</di=
v><div><br></div><div>With macaroons the complexity is reduced and the AS pe=
rforms all the checks.&nbsp;</div><div><br></div><div>With ECDH, although co=
mplex, the critical security checks are encoded into the key derivation proc=
ess - leading to the very desirable property that security failures become i=
nteroperability failures and so are more likely to be found and fixed in tes=
ting. (See the work done on using implicit nonces in TLS for an example of t=
his principle -&nbsp;<a href=3D"https://blog.cloudflare.com/tls-nonce-nse/">=
https://blog.cloudflare.com/tls-nonce-nse/</a>)</div><div><br></div><div>=E2=
=80=94 Neil</div><div><br></div><blockquote type=3D"cite"><div dir=3D"ltr"><=
br><blockquote type=3D"cite"><span>Am 24.11.2019 um 08:40 schrieb Neil Madde=
n &lt;neil.madden@forgerock.com&gt;:</span><br></blockquote><blockquote type=
=3D"cite"><span></span><br></blockquote><blockquote type=3D"cite"><span>=EF=BB=
=BFOn 22 Nov 2019, at 13:33, Torsten Lodderstedt &lt;torsten@lodderstedt.net=
&gt; wrote:</span><br></blockquote><blockquote type=3D"cite"><blockquote typ=
e=3D"cite"><span></span><br></blockquote></blockquote><blockquote type=3D"ci=
te"><blockquote type=3D"cite"><span>=EF=BB=BFHi Neil,</span><br></blockquote=
></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><span></sp=
an><br></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>On 22. Nov 2=
019, at 20:50, Neil Madden &lt;neil.madden@forgerock.com&gt; wrote:</span><b=
r></blockquote></blockquote></blockquote></blockquote><blockquote type=3D"ci=
te"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></b=
lockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><span>Hi Torsten,</span><br></blockquo=
te></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"c=
ite"><blockquote type=3D"cite"><span></span><br></blockquote></blockquote></=
blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><blockquote type=3D"cite"><span>On 22 Nov 2019, at 12:15, Torst=
en Lodderstedt &lt;torsten@lodderstedt.net&gt; wrote:</span><br></blockquote=
></blockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquot=
e type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></=
span><br></blockquote></blockquote></blockquote></blockquote><blockquote typ=
e=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span>Hi Neil,</span><br></blockquote></blockquote></blockquote=
></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquot=
e type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></bl=
ockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote typ=
e=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span>On 22. Nov 2019, at 18:08, Neil Madden &lt;neil.madden@fo=
rgerock.com&gt; wrote:</span><br></blockquote></blockquote></blockquote></bl=
ockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><b=
lockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite">=
<span></span><br></blockquote></blockquote></blockquote></blockquote></block=
quote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>I think the=
 phrase "token replay" is ambiguous. Traditionally it refers to an attacker b=
eing able to capture a token (or whole requests) in use and then replay it a=
gainst the same RS. This is already protected against by the use of normal T=
LS on the connection between the client and the RS. I think instead you are r=
eferring to a malicious/compromised RS replaying the token to a different RS=
 - which has more of the flavour of a man in the middle attack (of the phish=
ing kind).</span><br></blockquote></blockquote></blockquote></blockquote></b=
lockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></blockq=
uote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>I would arg=
ue TLS basically prevents leakage and not replay.</span><br></blockquote></b=
lockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></blockq=
uote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><block=
quote type=3D"cite"><span>It also protects against replay. If you capture TL=
S-encrypted packets with Wireshark you not only cannot decipher them but als=
o cannot replay them because they include specific anti-replay measures at t=
he record level in the form of unique session keys and record sequence numbe=
rs included in the MAC calculations. This is essential to the security of TL=
S.</span><br></blockquote></blockquote></blockquote><blockquote type=3D"cite=
"><blockquote type=3D"cite"><span></span><br></blockquote></blockquote><bloc=
kquote type=3D"cite"><blockquote type=3D"cite"><span>I understand. I was loo=
king onto TLS from an application perspective, that might explain differing p=
erception.</span><br></blockquote></blockquote><blockquote type=3D"cite"><bl=
ockquote type=3D"cite"><span></span><br></blockquote></blockquote><blockquot=
e type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></=
span><br></blockquote></blockquote></blockquote><blockquote type=3D"cite"><b=
lockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite">=
<span>The threats we try to cope with can be found in the Security BCP. Ther=
e are multiple ways access tokens can leak, including referrer headers, mix-=
up, open redirection, browser history, and all sorts of access token leakage=
 at the resource server</span><br></blockquote></blockquote></blockquote></b=
lockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></blockq=
uote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>Please have=
 a look at https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#s=
ection-4.</span><br></blockquote></blockquote></blockquote></blockquote><blo=
ckquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><b=
lockquote type=3D"cite"><span></span><br></blockquote></blockquote></blockqu=
ote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockq=
uote type=3D"cite"><blockquote type=3D"cite"><span>https://tools.ietf.org/ht=
ml/draft-ietf-oauth-security-topics-13#section-4.8 also has an extensive dis=
cussion of potential counter measures, including audience restricted access t=
okens and a conclusion to recommend sender constrained access tokens over ot=
her mechanisms.</span><br></blockquote></blockquote></blockquote></blockquot=
e><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"ci=
te"><span></span><br></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>OK, good=
 - these are threats beyond token replay (at least as I understand that term=
). It would be good to explicitly add them to the DPoP document motivation.<=
/span><br></blockquote></blockquote></blockquote><blockquote type=3D"cite"><=
blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockq=
uote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><span>Note that most of these ways that an a=
ccess token can leak also apply equally to leak of the DPoP JWT, so the prot=
ection afforded by DPoP boils down to how well the restrictions encoded into=
 the JWT prevent it from being reused in this case - e.g., restricting the e=
xpiry time, audience, scope, linking it to a specific request (htm/htu) etc.=
 </span><br></blockquote></blockquote></blockquote><blockquote type=3D"cite"=
><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></bloc=
kquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><span>Every single one of those restriction=
s can be equally well encoded as caveats on a macaroon access token without a=
ny need for public key signatures or additional tokens and headers.</span><b=
r></blockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquo=
te type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></b=
lockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><=
blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"=
><span>But if that's the case then there are much simpler defences than thos=
e proposed in the current draft:</span><br></blockquote></blockquote></block=
quote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><span></span><br></blockquote></blockquote></blockquote></blockquote>=
</blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote=
 type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>1. G=
et separate access tokens for each RS with correct audience and scopes. The c=
onsensus appears to be that this is hard to do in some cases, hence the draf=
t.</span><br></blockquote></blockquote></blockquote></blockquote></blockquot=
e><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"ci=
te"><blockquote type=3D"cite"><span></span><br></blockquote></blockquote></b=
lockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><=
blockquote type=3D"cite"><blockquote type=3D"cite"><span>How many deployment=
s do you know that today are able to issue RS-specific access tokens?</span>=
<br></blockquote></blockquote></blockquote></blockquote><blockquote type=3D"=
cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><span>BTW: how would you identify the RS?</span><br></blockquote></bl=
ockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote typ=
e=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span>=
<br></blockquote></blockquote></blockquote></blockquote><blockquote type=3D"=
cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><span>I agree that would be an alternative and I=E2=80=99m a great fa=
n of such tokens (and used them a lot at Deutsche Telekom) but in my percept=
ion this pattern needs still to be established in the market. Moreover, they=
 basically protect from a rough RS (if the URL is used as audience) replayin=
g the token someplace else, but they do not protect from all other kinds of l=
eakage/replay (e.g. log files).</span><br></blockquote></blockquote></blockq=
uote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><block=
quote type=3D"cite"><span></span><br></blockquote></blockquote></blockquote>=
<blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite=
"><span>Many services already do this. For example, Google encodes the inten=
ded RS into the scopes on GCP (https://developers.google.com/identity/protoc=
ols/googlescopes). A client can do a single authorization flow to authorize a=
ll the scopes it needs and then use repeated calls to the refresh token endp=
oint to obtain individual access tokens with subsets of the authorized scope=
s for each endpoint.</span><br></blockquote></blockquote></blockquote><block=
quote type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote>=
</blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><span>And t=
hat works at google? How does the client indicate the RS it wants to use the=
 first access token (that is obtains in the course of the code exchange)?</s=
pan><br></blockquote></blockquote><blockquote type=3D"cite"><span></span><br=
></blockquote><blockquote type=3D"cite"><span>It doesn=E2=80=99t. The initia=
l access token would be for all scopes and the client simply discards that o=
ne (or revokes it if the AS supports revoking individual tokens). </span><br=
></blockquote><blockquote type=3D"cite"><span></span><br></blockquote><block=
quote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><spa=
n>(I think Brian also mentioned this pattern at OSW, but it might have been s=
omebody else).</span><br></blockquote></blockquote></blockquote><blockquote t=
ype=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></block=
quote><blockquote type=3D"cite"><blockquote type=3D"cite"><span>I know the p=
attern and we used this at Deutsche Telekom, but I don=E2=80=99t know any ot=
her deployment utilising this pattern. In my observation, most people treat a=
ccess tokens as cookies and use them across RSs. Another reason might be tha=
t, before resource indicators, there was no interoperable way to ask for a t=
oken for a certain RS.</span><br></blockquote></blockquote><blockquote type=3D=
"cite"><span></span><br></blockquote><blockquote type=3D"cite"><span>I don=E2=
=80=99t know anybody using DPoP either. The point is that you can do this ki=
nd of thing right now, so DPoP needs to have a stronger justification for wh=
y this isn=E2=80=99t sufficient.</span><br></blockquote><blockquote type=3D"=
cite"><span></span><br></blockquote><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span>2. Make the DPoP token be a simple JWT with an "iat" and t=
he origin of the RS. This stops the token being reused elsewhere but the cli=
ent can reuse it (replay it) for many requests.</span><br></blockquote></blo=
ckquote></blockquote></blockquote></blockquote><blockquote type=3D"cite"><bl=
ockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><=
blockquote type=3D"cite"><span>3. Issue a macaroon-based access token and th=
e client can add a correct audience and scope restrictions at the point of u=
se.</span><br></blockquote></blockquote></blockquote></blockquote></blockquo=
te><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"c=
ite"><blockquote type=3D"cite"><span></span><br></blockquote></blockquote></=
blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite">=
<blockquote type=3D"cite"><blockquote type=3D"cite"><span>Why is this needed=
 if the access token is already audience restricted? Or do you propose this a=
s alternative? </span><br></blockquote></blockquote></blockquote></blockquot=
e><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"ci=
te"><span></span><br></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>These ar=
e all alternatives. Any one of them prevents the specific attack of replay b=
y the RS to another RS.</span><br></blockquote></blockquote></blockquote><bl=
ockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquo=
te></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><span>An=
d which does for replay with the same RS?</span><br></blockquote></blockquot=
e><blockquote type=3D"cite"><span></span><br></blockquote><blockquote type=3D=
"cite"><span>TLS. </span><br></blockquote><blockquote type=3D"cite"><span></=
span><br></blockquote><blockquote type=3D"cite"><span>=E2=80=94 Neil</span><=
br></blockquote></div></blockquote></body></html>=

--Apple-Mail-944A09A1-3A13-45F2-A1CC-949B6B75E95B--


From nobody Sun Nov 24 19:18:14 2019
Return-Path: <rkelly@mozilla.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A69C1201EF for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 19:18:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mozilla.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Itkn4d1rGPkr for <oauth@ietfa.amsl.com>; Sun, 24 Nov 2019 19:18:09 -0800 (PST)
Received: from mail-vk1-xa2f.google.com (mail-vk1-xa2f.google.com [IPv6:2607:f8b0:4864:20::a2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 157461201DE for <oauth@ietf.org>; Sun, 24 Nov 2019 19:18:08 -0800 (PST)
Received: by mail-vk1-xa2f.google.com with SMTP id j84so3080236vkj.6 for <oauth@ietf.org>; Sun, 24 Nov 2019 19:18:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla.com; s=google;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=eoCy9QaHj35kARpMajJXE2K6XtJPcahhN5h6CA0A5tw=; b=fXmPybRxBIWGmH3ywX4qlfiAqlOv8rrNEr0y5fmdiMwZi27CC3NNfsxYUkO4KI1tAJ EqID5bYvKpoZO3ceosavIhJDiDVPjbTInioipqJ/z7We7Q97A/vmjlVlYTYVr889AP0L f3dpiacLvsQw2WNkXrZSsOu0ba02770U0DP+Y=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=eoCy9QaHj35kARpMajJXE2K6XtJPcahhN5h6CA0A5tw=; b=rWKJEGa/dXlaVFIxHmYMYq9NKZfos+8Ln9cpqf/4afksewovwNcut2LcUjxDWv80Ga NAXnHLj42PWBuEz2RcDGm7UlO+GbseOcmlGCXTDlliJ4ZqxXqtNcAOmVqIDlO6TcWQrC Z+sq4wnt0BMrLj8GqRqy4gG77e8eMOLvqNC0UCuct8cRETctU2Q/QzjMuK+8EYl7vmAB J8KUzN6lgft1h7E+xCegyFk1sgy5Qrkp+JwKbnOv3KthAxCufMfopVWo4njWqa51+zYj 6f10Rh8sqxC/vebkALbkWfa5ZdkPMRczrpe2gR1bJrxvkK/dhQMpHW5FTFLcK1YqQQVk GMdA==
X-Gm-Message-State: APjAAAVIGtYr6TbSxE9oOOuidqNEErjq4lxnahG53idriN76ThxzKayC 2uvTbuO9jVEaKO5tKqg7RBx6NpOrlluNQA6jhRz8MMBbwj8=
X-Google-Smtp-Source: APXvYqwXQ9jZs5fPSgXsvSPJZ+FcHGDttFXjaHRT9/jKMs4Gvy0TKbQke1+ClmJCkOato4vWkRftBYlMWBFNaQbetjo=
X-Received: by 2002:a1f:3258:: with SMTP id y85mr16485255vky.7.1574651887893;  Sun, 24 Nov 2019 19:18:07 -0800 (PST)
MIME-Version: 1.0
References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com> <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net> <CAB3n-Ya+WMrNdtBMfciCOQipjHfounNo0MThJObGmS7_XfzJmA@mail.gmail.com> <0C42020B-C454-4427-BB99-45C8152D330A@lodderstedt.net>
In-Reply-To: <0C42020B-C454-4427-BB99-45C8152D330A@lodderstedt.net>
From: Ryan Kelly <rfkelly@mozilla.com>
Date: Mon, 25 Nov 2019 14:17:56 +1100
Message-ID: <CAB3n-YZZzprjk-XvogK5Z-_Kkxhtqp9VotoSWcJ=C3Fdg_dBjA@mail.gmail.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006c618c059823367f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Q6kvYCoX1APuDCWw2WMWdVVj2D0>
Subject: Re: [OAUTH-WG] New Version Notification for draft-lodderstedt-oauth-rar-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 03:18:13 -0000

--0000000000006c618c059823367f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 15 Nov 2019 at 04:41, Torsten Lodderstedt <torsten@lodderstedt.net>
wrote:

> > On 14. Nov 2019, at 08:31, Ryan Kelly <rfkelly@mozilla.com> wrote:
> >
> > In Paragraph 3, how should the AS deal with authorization details
> objects that do not have a "locations" element? Should they be included
> regardless of "resource=E2=80=9D?
>
> That=E2=80=99s a very good question. I see to options:
> - those elements are assigned to any access token
> - those elements are assigned to an access token in case there was no
> =E2=80=9Cresource=E2=80=9D parameter included in the token request.
>
> I=E2=80=99m leaning towards the latter approach.
>
> > What if the "resource" parameter refers to a value that was present in
> "locations" but not in "resource" during the initial authorization reques=
t?
>
> See above - since locations take precedence, those locations shall match.
>

Gotcha, thanks. I think this is the part I wasn't clear on regarding the
meaning of "take precedence" at the authorization endpoint, and I wonder if
it can be made more explicit in the earlier section.


> > The "matches as prefix of one of the URLs" part of Paragraph 3 seems a
> bit unclear as well, given that there is no requirement that the
> "locations" elements be well-formed URLs. Is this is simple string prefix
> match, or some sort of path matching based on the components of the URL?
>
> simple string match
>

Does the AS need to take any particular care about resource names that
might accidentally be prefixes of each other, such as "
https://example.com/payments" and "https://example.com/payme"?  That seems
really contrived, but perhaps I'm just not creative enough to think of a
more realistic example.


> > * Section 3: Using "authorization_details"
> >
> > Intuitively, I would expect to be able to use "authorization_details" i=
n
> a token request using grant_type=3Drefresh_token, in the same way that I =
can
> specify "scope". Section 3 doesn't seem to take a definitive stance on th=
is
> - IIUC Section 3.1 doesn't apply because this is not an authorization
> request, and Section 3.3 seems to discourage it in favour of using the
> "resource" parameter. Do you intend for this parameter to be allowed in
> conjunction with a refresh token?
>
> What would be the use case for passing an authorization details parameter
> to the token request with a refresh token? The client shouldn=E2=80=99t b=
e able to
> change the authorization details of the underlying grant, so using the
> =E2=80=9Cresource=E2=80=9D parameter to select another subset of the gran=
ted authorization
> details should be sufficient.
>

I was thinking of situations where there might be "high risk" and "low
risk" actions authorized for a single resource server, and the client may
want to make an access token that is scoped down to just the low-risk ones,
to minimize the impact of a potential compromise of that token. But perhaps
that's better dealt with by the work on sender-constrained tokens to reduce
the risk of the token being compromised in the first place.

  Cheers,

    Ryan

--0000000000006c618c059823367f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail=
_attr">On Fri, 15 Nov 2019 at 04:41, Torsten Lodderstedt &lt;<a href=3D"mai=
lto:torsten@lodderstedt.net">torsten@lodderstedt.net</a>&gt; wrote:<br></di=
v><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;borde=
r-left:1px solid rgb(204,204,204);padding-left:1ex">&gt; On 14. Nov 2019, a=
t 08:31, Ryan Kelly &lt;<a href=3D"mailto:rfkelly@mozilla.com" target=3D"_b=
lank">rfkelly@mozilla.com</a>&gt; wrote:<br>&gt; <br>
&gt; In Paragraph 3, how should the AS deal with authorization details obje=
cts that do not have a &quot;locations&quot; element? Should they be includ=
ed regardless of &quot;resource=E2=80=9D?<br>
<br>
That=E2=80=99s a very good question. I see to options: <br>
- those elements are assigned to any access token<br>
- those elements are assigned to an access token in case there was no =E2=
=80=9Cresource=E2=80=9D parameter included in the token request. <br>
<br>
I=E2=80=99m leaning towards the latter approach. <br>
<br>
&gt; What if the &quot;resource&quot; parameter refers to a value that was =
present in &quot;locations&quot; but not in &quot;resource&quot; during the=
 initial authorization request?<br>
<br>
See above - since locations take precedence, those locations shall match. <=
br></blockquote><div><br></div><div>Gotcha, thanks. I think this is the par=
t I wasn&#39;t clear on regarding the meaning of &quot;take precedence&quot=
; at the authorization endpoint, and I wonder if it can be made more explic=
it in the earlier section.<br></div><div>=C2=A0<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex">
&gt; The &quot;matches as prefix of one of the URLs&quot; part of Paragraph=
 3 seems a bit unclear as well, given that there is no requirement that the=
 &quot;locations&quot; elements be well-formed URLs. Is this is simple stri=
ng prefix match, or some sort of path matching based on the components of t=
he URL?<br>
<br>
simple string match<br></blockquote><div><br></div><div>Does the AS need to=
 take any particular care about resource names that might accidentally be p=
refixes of each other, such as &quot;<a href=3D"https://example.com/payment=
s">https://example.com/payments</a>&quot; and &quot;<a href=3D"https://exam=
ple.com/payme">https://example.com/payme</a>&quot;?=C2=A0 That seems really=
 contrived, but perhaps I&#39;m just not creative enough to think of a more=
 realistic example.<br></div><div>=C2=A0<br></div><blockquote class=3D"gmai=
l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);padding-left:1ex">
&gt; * Section 3: Using &quot;authorization_details&quot;<br>
&gt; <br>
&gt; Intuitively, I would expect to be able to use &quot;authorization_deta=
ils&quot; in a token request using grant_type=3Drefresh_token, in the same =
way that I can specify &quot;scope&quot;. Section 3 doesn&#39;t seem to tak=
e a definitive stance on this - IIUC Section 3.1 doesn&#39;t apply because =
this is not an authorization request, and Section 3.3 seems to discourage i=
t in favour of using the &quot;resource&quot; parameter. Do you intend for =
this parameter to be allowed in conjunction with a refresh token?<br>
<br>
What would be the use case for passing an authorization details parameter t=
o the token request with a refresh token? The client shouldn=E2=80=99t be a=
ble to change the authorization details of the underlying grant, so using t=
he =E2=80=9Cresource=E2=80=9D parameter to select another subset of the gra=
nted authorization details should be sufficient. <br></blockquote><br></div=
><div class=3D"gmail_quote">I was thinking of situations where there might =
be &quot;high risk&quot; and &quot;low risk&quot; actions authorized for a =
single resource server, and the client may want to make an access token tha=
t is scoped down to just the low-risk ones, to minimize the impact of a pot=
ential compromise of that token. But perhaps that&#39;s better dealt with b=
y the work on sender-constrained tokens to reduce the risk of the token bei=
ng compromised in the first place.</div><div class=3D"gmail_quote"></div><d=
iv class=3D"gmail_quote"><br></div><div class=3D"gmail_quote">=C2=A0 Cheers=
,</div><div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote">=C2=
=A0=C2=A0=C2=A0 Ryan<br></div></div>

--0000000000006c618c059823367f--


From nobody Mon Nov 25 00:28:30 2019
Return-Path: <dave.tonge@moneyhub.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8901012082A for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 00:28:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.74
X-Spam-Level: 
X-Spam-Status: No, score=-1.74 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=momentumft.co.uk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nikAfh8nCEld for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 00:28:25 -0800 (PST)
Received: from mail-oi1-x230.google.com (mail-oi1-x230.google.com [IPv6:2607:f8b0:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A69F5120074 for <oauth@ietf.org>; Mon, 25 Nov 2019 00:28:25 -0800 (PST)
Received: by mail-oi1-x230.google.com with SMTP id d22so12323193oic.7 for <oauth@ietf.org>; Mon, 25 Nov 2019 00:28:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=momentumft.co.uk; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=P6+i4iJkFDM+ABp2n2oNdswIp9NKuerWH1KNCiYU2i4=; b=SFieorhpaizAHcDghYhuEVGRJ0/Su/Po7ZErHZ/+trPFFf3DwpME6fNCSCMAfdK6pP /EFYRpMvnInU0iowVXmgxLSW6ogHXE7+HjWX/2uxTKHA4/vNKbYcaedE4vpY/iwGMAyG mqpXWOcEuMlG6VUlJaV5ioPuUfLzy8WiaLg0E=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=P6+i4iJkFDM+ABp2n2oNdswIp9NKuerWH1KNCiYU2i4=; b=L6deSXemYuTLgXDRpsojEsscrumO2ViGSTaVbHWY71qdLxXZ8DbAcgEfSlEwD0QJA8 C5wthyOHVxGzvB82GSwTrbTaEu3uL4urW/WIwXzUw2dgQ5auOlI0dPAhtq7zs8gbf3x6 sP7XOoNEj1Tfog9A9rO3lljjQEjcxmQ9ZHCqPI2dP1/JCFR8iVnigHQffemdp5O8GIUA X4KwG3jTM2SiZE3Np5VRWkQtPbMNmZ8mxo5JCJ5/OpkjxKbaR9PgxjRpQSmblLw2P02C niQvou+YDu3pc6WarbNLYEZQlHq1cWW9XKzzXkUt7bZSWNFk1CdPfW9uKlAqc72Pm/bY Pd/g==
X-Gm-Message-State: APjAAAUlL6uUT9dWioEj7UntQ4xYNeye6U3Etfnu7Hw7muZyt5f5WZ7L yiRCBilkvPJrJDki8uH4Ioj3EYTQ3UInbvprdQHX3g==
X-Google-Smtp-Source: APXvYqzkGM1CiarpUwyXJJiM15SAK5X2HdnYu8w+TLwiNr8kLxz8XdjZ3Md4Int52MYUaV0mxlWdm6kXdrtbosbQC94=
X-Received: by 2002:aca:56d6:: with SMTP id k205mr21372757oib.51.1574670504855;  Mon, 25 Nov 2019 00:28:24 -0800 (PST)
MIME-Version: 1.0
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com>
In-Reply-To: <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com>
From: Dave Tonge <dave.tonge@momentumft.co.uk>
Date: Mon, 25 Nov 2019 09:28:13 +0100
Message-ID: <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000014a3930598278c97"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/us-ETCPkoGY43nZgzFWxovc20O0>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 08:28:28 -0000

--00000000000014a3930598278c97
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Neil and Torsten

I agree that the risk is about token theft / leakage. My understanding is
that we should assume that at some point access tokens will be leaked,
e.g.Facebook:
https://auth0.com/blog/facebook-access-token-data-breach-early-look/

If access tokens were cryptographically sender-constrained, then
leaked/stolen access tokens would be useless.
I take your point that some of the ways in which an access token would
leak, would also leak the dPOP headers, this is why section 9.1 has the
recommendations around `iat` and `jti`. While this doesn't eliminate the
risk, it does reduce it.

So my perspective is that dPOP allows sender-constrained access tokens in
scenarios where mutual tls / token binding is not possible. This is a good
protection against token leakage / theft.

Dave


On Sun, 24 Nov 2019 at 10:43, Neil Madden <neil.madden@forgerock.com> wrote=
:

> On 24 Nov 2019, at 07:59, Torsten Lodderstedt <torsten@lodderstedt.net>
> wrote:
>
>
> =EF=BB=BFHi Neil,
>
> I would like to summarize what I believe to have understood is your
> opinion before commenting:
> 1) audience restricted access tokens is the way to cope with replay
> attempts between RSs
>
>
> It=E2=80=99s one way, but yes that is sufficient.
>
> 2) TLS prevents replay at the same RS
>
> re 1) that works as long as ASs support audience restrictions and the
> audience restriction is the actual resource server URL, otherwise a stage=
d
> RS can obtain access tokens audience restricted for a different RS and
> replay it there
>
>
> Yes, audience restrictions only work if the AS supports it. DPoP only
> works if the AS, client, and *all* RSes all support it, right?
>
> I=E2=80=99m not sure of your second point.. Obviously an audience restric=
tion
> needs to be unambiguous if it is to have any effect.
>
> re 2) it seems you look onto that threat from the inside of a TLS
> connection. Let=E2=80=99s assume the attacker obtains the access tokens a=
t the
> application layer, e.g. through a log file, referrer header, mix-up,
> browser history and then sends it through a new TLS connection to the sam=
e
> RS. How does TLS help to detect this replay?
>
>
> These are token leakage/theft not replay -
> https://en.m.wikipedia.org/wiki/Replay_attack
>
> And TLS has done a lot to protect against even these threats. For example=
,
> leaking credentials in logs was much more of a threat when you had to
> consider all kinds of proxies and middleboxes along the route. TLS has
> completely eliminated that threat, leaving just the logs at the RS itself=
.
> And the others are largely protected against by not putting access tokens
> in URLs, and things like Referrer-Policy/rel=3Dno-referrer..
>
> Leaking an audience-restricted access token into the logs of the RS itsel=
f
> seems a relatively minor threat to worry about. If you=E2=80=99re not man=
aging logs
> securely then you=E2=80=99re probably already leaking all kinds of PII an=
d other
> sensitive data that the access token grants access to.
>
> If the client and RS can=E2=80=99t get these things right then I would qu=
estion
> whether public key signatures and associated key management is more likel=
y
> to be done right.
>
> With macaroons the complexity is reduced and the AS performs all the
> checks.
>
> With ECDH, although complex, the critical security checks are encoded int=
o
> the key derivation process - leading to the very desirable property that
> security failures become interoperability failures and so are more likely
> to be found and fixed in testing. (See the work done on using implicit
> nonces in TLS for an example of this principle -
> https://blog.cloudflare.com/tls-nonce-nse/)
>
> =E2=80=94 Neil
>
>
> Am 24.11.2019 um 08:40 schrieb Neil Madden <neil.madden@forgerock.com>:
>
>
> =EF=BB=BFOn 22 Nov 2019, at 13:33, Torsten Lodderstedt <torsten@lodderste=
dt.net>
> wrote:
>
>
> =EF=BB=BFHi Neil,
>
>
> On 22. Nov 2019, at 20:50, Neil Madden <neil.madden@forgerock.com> wrote:
>
>
> Hi Torsten,
>
>
> On 22 Nov 2019, at 12:15, Torsten Lodderstedt <torsten@lodderstedt.net>
> wrote:
>
>
> Hi Neil,
>
>
> On 22. Nov 2019, at 18:08, Neil Madden <neil.madden@forgerock.com> wrote:
>
>
> I think the phrase "token replay" is ambiguous. Traditionally it refers t=
o
> an attacker being able to capture a token (or whole requests) in use and
> then replay it against the same RS. This is already protected against by
> the use of normal TLS on the connection between the client and the RS. I
> think instead you are referring to a malicious/compromised RS replaying t=
he
> token to a different RS - which has more of the flavour of a man in the
> middle attack (of the phishing kind).
>
>
> I would argue TLS basically prevents leakage and not replay.
>
>
> It also protects against replay. If you capture TLS-encrypted packets wit=
h
> Wireshark you not only cannot decipher them but also cannot replay them
> because they include specific anti-replay measures at the record level in
> the form of unique session keys and record sequence numbers included in t=
he
> MAC calculations. This is essential to the security of TLS.
>
>
> I understand. I was looking onto TLS from an application perspective, tha=
t
> might explain differing perception.
>
>
>
> The threats we try to cope with can be found in the Security BCP. There
> are multiple ways access tokens can leak, including referrer headers,
> mix-up, open redirection, browser history, and all sorts of access token
> leakage at the resource server
>
>
> Please have a look at
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4=
.
>
>
> https://tools.ietf.org/html/draft-ietf-oauth-security-topics-13#section-4=
.8
> also has an extensive discussion of potential counter measures, including
> audience restricted access tokens and a conclusion to recommend sender
> constrained access tokens over other mechanisms.
>
>
> OK, good - these are threats beyond token replay (at least as I understan=
d
> that term). It would be good to explicitly add them to the DPoP document
> motivation.
>
>
> Note that most of these ways that an access token can leak also apply
> equally to leak of the DPoP JWT, so the protection afforded by DPoP boils
> down to how well the restrictions encoded into the JWT prevent it from
> being reused in this case - e.g., restricting the expiry time, audience,
> scope, linking it to a specific request (htm/htu) etc.
>
>
> Every single one of those restrictions can be equally well encoded as
> caveats on a macaroon access token without any need for public key
> signatures or additional tokens and headers.
>
>
> But if that's the case then there are much simpler defences than those
> proposed in the current draft:
>
>
> 1. Get separate access tokens for each RS with correct audience and
> scopes. The consensus appears to be that this is hard to do in some cases=
,
> hence the draft.
>
>
> How many deployments do you know that today are able to issue RS-specific
> access tokens?
>
> BTW: how would you identify the RS?
>
>
> I agree that would be an alternative and I=E2=80=99m a great fan of such =
tokens
> (and used them a lot at Deutsche Telekom) but in my perception this patte=
rn
> needs still to be established in the market. Moreover, they basically
> protect from a rough RS (if the URL is used as audience) replaying the
> token someplace else, but they do not protect from all other kinds of
> leakage/replay (e.g. log files).
>
>
> Many services already do this. For example, Google encodes the intended R=
S
> into the scopes on GCP (
> https://developers.google.com/identity/protocols/googlescopes). A client
> can do a single authorization flow to authorize all the scopes it needs a=
nd
> then use repeated calls to the refresh token endpoint to obtain individua=
l
> access tokens with subsets of the authorized scopes for each endpoint.
>
>
> And that works at google? How does the client indicate the RS it wants to
> use the first access token (that is obtains in the course of the code
> exchange)?
>
>
> It doesn=E2=80=99t. The initial access token would be for all scopes and =
the
> client simply discards that one (or revokes it if the AS supports revokin=
g
> individual tokens).
>
>
> (I think Brian also mentioned this pattern at OSW, but it might have been
> somebody else).
>
>
> I know the pattern and we used this at Deutsche Telekom, but I don=E2=80=
=99t know
> any other deployment utilising this pattern. In my observation, most peop=
le
> treat access tokens as cookies and use them across RSs. Another reason
> might be that, before resource indicators, there was no interoperable way
> to ask for a token for a certain RS.
>
>
> I don=E2=80=99t know anybody using DPoP either. The point is that you can=
 do this
> kind of thing right now, so DPoP needs to have a stronger justification f=
or
> why this isn=E2=80=99t sufficient.
>
>
> 2. Make the DPoP token be a simple JWT with an "iat" and the origin of th=
e
> RS. This stops the token being reused elsewhere but the client can reuse =
it
> (replay it) for many requests.
>
> 3. Issue a macaroon-based access token and the client can add a correct
> audience and scope restrictions at the point of use.
>
>
> Why is this needed if the access token is already audience restricted? Or
> do you propose this as alternative?
>
>
> These are all alternatives. Any one of them prevents the specific attack
> of replay by the RS to another RS.
>
>
> And which does for replay with the same RS?
>
>
> TLS.
>
>
> =E2=80=94 Neil
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


--=20
Dave Tonge
CTO
[image: Moneyhub Enterprise]
<http://www.google.com/url?q=3Dhttp%3A%2F%2Fmoneyhubenterprise.com%2F&sa=3D=
D&sntz=3D1&usg=3DAFQjCNGUnR5opJv5S1uZOVg8aISwPKAv3A>
Moneyhub Financial Technology, 5th Floor, 10 Temple Back, Bristol, BS1 6FL
t: +44 (0)117 280 5120

Moneyhub Enterprise is a trading style of Moneyhub Financial Technology
Limited which is authorised and regulated by the Financial Conduct
Authority ("FCA"). Moneyhub Financial Technology is entered on the
Financial Services Register (FRN 809360) at fca.org.uk/register.
Moneyhub Financial
Technology is registered in England & Wales, company registration number
06909772 .
Moneyhub Financial Technology Limited 2018 =C2=A9

DISCLAIMER: This email (including any attachments) is subject to copyright,
and the information in it is confidential. Use of this email or of any
information in it other than by the addressee is unauthorised and unlawful.
Whilst reasonable efforts are made to ensure that any attachments are
virus-free, it is the recipient's sole responsibility to scan all
attachments for viruses. All calls and emails to and from this company may
be monitored and recorded for legitimate purposes relating to this
company's business. Any opinions expressed in this email (or in any
attachments) are those of the author and do not necessarily represent the
opinions of Moneyhub Financial Technology Limited or of any other group
company.

--00000000000014a3930598278c97
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:trebuche=
t ms,sans-serif">Hi Neil and Torsten</div><div class=3D"gmail_default" styl=
e=3D"font-family:trebuchet ms,sans-serif"><br></div><div class=3D"gmail_def=
ault" style=3D"font-family:trebuchet ms,sans-serif">I agree that the risk i=
s about token theft / leakage. My understanding is that we should assume th=
at at some point access tokens will be leaked, e.g.Facebook:=C2=A0<a href=
=3D"https://auth0.com/blog/facebook-access-token-data-breach-early-look/" s=
tyle=3D"font-family:Arial,Helvetica,sans-serif">https://auth0.com/blog/face=
book-access-token-data-breach-early-look/</a></div><div class=3D"gmail_defa=
ult" style=3D"font-family:trebuchet ms,sans-serif"><br></div><div class=3D"=
gmail_default" style=3D"font-family:trebuchet ms,sans-serif">If access toke=
ns were cryptographically sender-constrained, then leaked/stolen access tok=
ens would be useless.</div><div class=3D"gmail_default" style=3D"font-famil=
y:trebuchet ms,sans-serif">I take your point that some of the ways in which=
 an access token would leak, would also leak the dPOP headers, this is why =
section 9.1 has the recommendations around `iat` and `jti`. While this does=
n&#39;t eliminate the risk, it does reduce it.</div><div class=3D"gmail_def=
ault" style=3D"font-family:trebuchet ms,sans-serif"><br></div><div class=3D=
"gmail_default" style=3D"font-family:trebuchet ms,sans-serif">So my perspec=
tive is that dPOP allows sender-constrained access tokens in scenarios wher=
e mutual tls / token binding is not possible. This is a good protection aga=
inst token leakage / theft.</div><div class=3D"gmail_default" style=3D"font=
-family:trebuchet ms,sans-serif"><br></div><div class=3D"gmail_default" sty=
le=3D"font-family:trebuchet ms,sans-serif">Dave</div><div class=3D"gmail_de=
fault" style=3D"font-family:trebuchet ms,sans-serif"><br></div></div><br><d=
iv class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Sun, 24 N=
ov 2019 at 10:43, Neil Madden &lt;<a href=3D"mailto:neil.madden@forgerock.c=
om">neil.madden@forgerock.com</a>&gt; wrote:<br></div><blockquote class=3D"=
gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);padding-left:1ex"><div dir=3D"auto"><div dir=3D"ltr">On 24 Nov 2=
019, at 07:59, Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@loddersted=
t.net" target=3D"_blank">torsten@lodderstedt.net</a>&gt; wrote:</div><div d=
ir=3D"ltr"><blockquote type=3D"cite"><br></blockquote></div><blockquote typ=
e=3D"cite"><div dir=3D"ltr">=EF=BB=BF<span>Hi Neil,</span><br><span></span>=
<br><span>I would like to summarize what I believe to have understood is yo=
ur opinion before commenting:</span><br><span>1) audience restricted access=
 tokens is the way to cope with replay attempts between RSs</span><br></div=
></blockquote><div><br></div><div>It=E2=80=99s one way, but yes that is suf=
ficient.=C2=A0</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><span>2)=
 TLS prevents replay at the same RS</span><br><span></span><br><span>re 1) =
that works as long as ASs support audience restrictions and the audience re=
striction is the actual resource server URL, otherwise a staged RS can obta=
in access tokens audience restricted for a different RS and replay it there=
</span><br></div></blockquote><div><br></div><div>Yes, audience restriction=
s only work if the AS supports it. DPoP only works if the AS, client, and *=
all* RSes all support it, right?</div><div><br></div><div>I=E2=80=99m not s=
ure of your second point.. Obviously an audience restriction needs to be un=
ambiguous if it is to have any effect.=C2=A0</div><br><blockquote type=3D"c=
ite"><div dir=3D"ltr"><span>re 2) it seems you look onto that threat from t=
he inside of a TLS connection. Let=E2=80=99s assume the attacker obtains th=
e access tokens at the application layer, e.g. through a log file, referrer=
 header, mix-up, browser history and then sends it through a new TLS connec=
tion to the same RS. How does TLS help to detect this replay?</span><br></d=
iv></blockquote><div><br></div><div>These are token leakage/theft not repla=
y -=C2=A0<a href=3D"https://en.m.wikipedia.org/wiki/Replay_attack" target=
=3D"_blank">https://en.m.wikipedia.org/wiki/Replay_attack</a></div><div><br=
></div><div>And TLS has done a lot to protect against even these threats. F=
or example, leaking credentials in logs was much more of a threat when you =
had to consider all kinds of proxies and middleboxes along the route. TLS h=
as completely eliminated that threat, leaving just the logs at the RS itsel=
f. And the others are largely protected against by not putting access token=
s in URLs, and things like Referrer-Policy/rel=3Dno-referrer..</div><div><b=
r></div><div>Leaking an audience-restricted access token into the logs of t=
he RS itself seems a relatively minor threat to worry about. If you=E2=80=
=99re not managing logs securely then you=E2=80=99re probably already leaki=
ng all kinds of PII and other sensitive data that the access token grants a=
ccess to.=C2=A0</div><div><br></div><div>If the client and RS can=E2=80=99t=
 get these things right then I would question whether public key signatures=
 and associated key management is more likely to be done right.=C2=A0</div>=
<div><br></div><div>With macaroons the complexity is reduced and the AS per=
forms all the checks.=C2=A0</div><div><br></div><div>With ECDH, although co=
mplex, the critical security checks are encoded into the key derivation pro=
cess - leading to the very desirable property that security failures become=
 interoperability failures and so are more likely to be found and fixed in =
testing. (See the work done on using implicit nonces in TLS for an example =
of this principle -=C2=A0<a href=3D"https://blog.cloudflare.com/tls-nonce-n=
se/" target=3D"_blank">https://blog.cloudflare.com/tls-nonce-nse/</a>)</div=
><div><br></div><div>=E2=80=94 Neil</div><div><br></div><blockquote type=3D=
"cite"><div dir=3D"ltr"><br><blockquote type=3D"cite"><span>Am 24.11.2019 u=
m 08:40 schrieb Neil Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com=
" target=3D"_blank">neil.madden@forgerock.com</a>&gt;:</span><br></blockquo=
te><blockquote type=3D"cite"><span></span><br></blockquote><blockquote type=
=3D"cite"><span>=EF=BB=BFOn 22 Nov 2019, at 13:33, Torsten Lodderstedt &lt;=
<a href=3D"mailto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodder=
stedt.net</a>&gt; wrote:</span><br></blockquote><blockquote type=3D"cite"><=
blockquote type=3D"cite"><span></span><br></blockquote></blockquote><blockq=
uote type=3D"cite"><blockquote type=3D"cite"><span>=EF=BB=BFHi Neil,</span>=
<br></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><span></span><br></blockquote></blockquote><blockquote type=3D"cite"=
><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"ci=
te"><span>On 22. Nov 2019, at 20:50, Neil Madden &lt;<a href=3D"mailto:neil=
.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; =
wrote:</span><br></blockquote></blockquote></blockquote></blockquote><block=
quote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><sp=
an></span><br></blockquote></blockquote></blockquote><blockquote type=3D"ci=
te"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>Hi Torsten,</=
span><br></blockquote></blockquote></blockquote><blockquote type=3D"cite"><=
blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></block=
quote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>On 22 N=
ov 2019, at 12:15, Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodder=
stedt.net" target=3D"_blank">torsten@lodderstedt.net</a>&gt; wrote:</span><=
br></blockquote></blockquote></blockquote></blockquote><blockquote type=3D"=
cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><span></span><br></blockquote></blockquote></blockquote></blockqu=
ote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><span>Hi Neil,</span><br></blockquote></bl=
ockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></spa=
n><br></blockquote></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><blockquote type=3D"cite"><span>On 22. Nov 2019, at 18:08, Nei=
l Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank"=
>neil.madden@forgerock.com</a>&gt; wrote:</span><br></blockquote></blockquo=
te></blockquote></blockquote></blockquote><blockquote type=3D"cite"><blockq=
uote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blo=
ckquote type=3D"cite"><span></span><br></blockquote></blockquote></blockquo=
te></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"=
cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><span>I think the phrase &quot;token replay&quot; is ambiguous. T=
raditionally it refers to an attacker being able to capture a token (or who=
le requests) in use and then replay it against the same RS. This is already=
 protected against by the use of normal TLS on the connection between the c=
lient and the RS. I think instead you are referring to a malicious/compromi=
sed RS replaying the token to a different RS - which has more of the flavou=
r of a man in the middle attack (of the phishing kind).</span><br></blockqu=
ote></blockquote></blockquote></blockquote></blockquote><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><span></span><br></blockquote></blockquote></blockquote></blockqu=
ote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D=
"cite"><blockquote type=3D"cite"><span>I would argue TLS basically prevents=
 leakage and not replay.</span><br></blockquote></blockquote></blockquote><=
/blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote=
 type=3D"cite"><span></span><br></blockquote></blockquote></blockquote><blo=
ckquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><=
span>It also protects against replay. If you capture TLS-encrypted packets =
with Wireshark you not only cannot decipher them but also cannot replay the=
m because they include specific anti-replay measures at the record level in=
 the form of unique session keys and record sequence numbers included in th=
e MAC calculations. This is essential to the security of TLS.</span><br></b=
lockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span></span><br></blockquote></blockquote><blockquote type=3D=
"cite"><blockquote type=3D"cite"><span>I understand. I was looking onto TLS=
 from an application perspective, that might explain differing perception.<=
/span><br></blockquote></blockquote><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span></span><br></blockquote></blockquote><blockquote type=3D=
"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br=
></blockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquo=
te type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>=
The threats we try to cope with can be found in the Security BCP. There are=
 multiple ways access tokens can leak, including referrer headers, mix-up, =
open redirection, browser history, and all sorts of access token leakage at=
 the resource server</span><br></blockquote></blockquote></blockquote></blo=
ckquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote typ=
e=3D"cite"><blockquote type=3D"cite"><span></span><br></blockquote></blockq=
uote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>Please =
have a look at <a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-secu=
rity-topics-13#section-4" target=3D"_blank">https://tools.ietf.org/html/dra=
ft-ietf-oauth-security-topics-13#section-4</a>.</span><br></blockquote></bl=
ockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote ty=
pe=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></spa=
n><br></blockquote></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span><a href=3D"https://tools.ietf.org/html/draft-ietf-oauth-=
security-topics-13#section-4.8" target=3D"_blank">https://tools.ietf.org/ht=
ml/draft-ietf-oauth-security-topics-13#section-4.8</a> also has an extensiv=
e discussion of potential counter measures, including audience restricted a=
ccess tokens and a conclusion to recommend sender constrained access tokens=
 over other mechanisms.</span><br></blockquote></blockquote></blockquote></=
blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote =
type=3D"cite"><span></span><br></blockquote></blockquote></blockquote><bloc=
kquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><s=
pan>OK, good - these are threats beyond token replay (at least as I underst=
and that term). It would be good to explicitly add them to the DPoP documen=
t motivation.</span><br></blockquote></blockquote></blockquote><blockquote =
type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></s=
pan><br></blockquote></blockquote></blockquote><blockquote type=3D"cite"><b=
lockquote type=3D"cite"><blockquote type=3D"cite"><span>Note that most of t=
hese ways that an access token can leak also apply equally to leak of the D=
PoP JWT, so the protection afforded by DPoP boils down to how well the rest=
rictions encoded into the JWT prevent it from being reused in this case - e=
.g., restricting the expiry time, audience, scope, linking it to a specific=
 request (htm/htu) etc. </span><br></blockquote></blockquote></blockquote><=
blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite=
"><span></span><br></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><span>Every s=
ingle one of those restrictions can be equally well encoded as caveats on a=
 macaroon access token without any need for public key signatures or additi=
onal tokens and headers.</span><br></blockquote></blockquote></blockquote><=
blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite=
"><span></span><br></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><blockquote type=3D"cite"><span>But if that&#39;s the case the=
n there are much simpler defences than those proposed in the current draft:=
</span><br></blockquote></blockquote></blockquote></blockquote></blockquote=
><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"ci=
te"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></=
blockquote></blockquote></blockquote></blockquote></blockquote><blockquote =
type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquo=
te type=3D"cite"><blockquote type=3D"cite"><span>1. Get separate access tok=
ens for each RS with correct audience and scopes. The consensus appears to =
be that this is hard to do in some cases, hence the draft.</span><br></bloc=
kquote></blockquote></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span></span><br></blockquote></blockquote></blockquote></bloc=
kquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><blockquote type=3D"cite"><span>How many deployments do you know =
that today are able to issue RS-specific access tokens?</span><br></blockqu=
ote></blockquote></blockquote></blockquote><blockquote type=3D"cite"><block=
quote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><sp=
an>BTW: how would you identify the RS?</span><br></blockquote></blockquote>=
</blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cit=
e"><blockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></b=
lockquote></blockquote></blockquote></blockquote><blockquote type=3D"cite">=
<blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cit=
e"><span>I agree that would be an alternative and I=E2=80=99m a great fan o=
f such tokens (and used them a lot at Deutsche Telekom) but in my perceptio=
n this pattern needs still to be established in the market. Moreover, they =
basically protect from a rough RS (if the URL is used as audience) replayin=
g the token someplace else, but they do not protect from all other kinds of=
 leakage/replay (e.g. log files).</span><br></blockquote></blockquote></blo=
ckquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><b=
lockquote type=3D"cite"><span></span><br></blockquote></blockquote></blockq=
uote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><span>Many services already do this. For example, Google encodes =
the intended RS into the scopes on GCP (<a href=3D"https://developers.googl=
e.com/identity/protocols/googlescopes" target=3D"_blank">https://developers=
.google.com/identity/protocols/googlescopes</a>). A client can do a single =
authorization flow to authorize all the scopes it needs and then use repeat=
ed calls to the refresh token endpoint to obtain individual access tokens w=
ith subsets of the authorized scopes for each endpoint.</span><br></blockqu=
ote></blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D=
"cite"><span></span><br></blockquote></blockquote><blockquote type=3D"cite"=
><blockquote type=3D"cite"><span>And that works at google? How does the cli=
ent indicate the RS it wants to use the first access token (that is obtains=
 in the course of the code exchange)?</span><br></blockquote></blockquote><=
blockquote type=3D"cite"><span></span><br></blockquote><blockquote type=3D"=
cite"><span>It doesn=E2=80=99t. The initial access token would be for all s=
copes and the client simply discards that one (or revokes it if the AS supp=
orts revoking individual tokens). </span><br></blockquote><blockquote type=
=3D"cite"><span></span><br></blockquote><blockquote type=3D"cite"><blockquo=
te type=3D"cite"><blockquote type=3D"cite"><span>(I think Brian also mentio=
ned this pattern at OSW, but it might have been somebody else).</span><br><=
/blockquote></blockquote></blockquote><blockquote type=3D"cite"><blockquote=
 type=3D"cite"><span></span><br></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><span>I know the pattern and we used th=
is at Deutsche Telekom, but I don=E2=80=99t know any other deployment utili=
sing this pattern. In my observation, most people treat access tokens as co=
okies and use them across RSs. Another reason might be that, before resourc=
e indicators, there was no interoperable way to ask for a token for a certa=
in RS.</span><br></blockquote></blockquote><blockquote type=3D"cite"><span>=
</span><br></blockquote><blockquote type=3D"cite"><span>I don=E2=80=99t kno=
w anybody using DPoP either. The point is that you can do this kind of thin=
g right now, so DPoP needs to have a stronger justification for why this is=
n=E2=80=99t sufficient.</span><br></blockquote><blockquote type=3D"cite"><s=
pan></span><br></blockquote><blockquote type=3D"cite"><blockquote type=3D"c=
ite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote type=
=3D"cite"><span>2. Make the DPoP token be a simple JWT with an &quot;iat&qu=
ot; and the origin of the RS. This stops the token being reused elsewhere b=
ut the client can reuse it (replay it) for many requests.</span><br></block=
quote></blockquote></blockquote></blockquote></blockquote><blockquote type=
=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><blockquote type=3D"cite"><span>3. Issue a macaroon-based acce=
ss token and the client can add a correct audience and scope restrictions a=
t the point of use.</span><br></blockquote></blockquote></blockquote></bloc=
kquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><bl=
ockquote type=3D"cite"><blockquote type=3D"cite"><span></span><br></blockqu=
ote></blockquote></blockquote></blockquote><blockquote type=3D"cite"><block=
quote type=3D"cite"><blockquote type=3D"cite"><blockquote type=3D"cite"><sp=
an>Why is this needed if the access token is already audience restricted? O=
r do you propose this as alternative? </span><br></blockquote></blockquote>=
</blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cit=
e"><blockquote type=3D"cite"><span></span><br></blockquote></blockquote></b=
lockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><blockquote t=
ype=3D"cite"><span>These are all alternatives. Any one of them prevents the=
 specific attack of replay by the RS to another RS.</span><br></blockquote>=
</blockquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cit=
e"><span></span><br></blockquote></blockquote><blockquote type=3D"cite"><bl=
ockquote type=3D"cite"><span>And which does for replay with the same RS?</s=
pan><br></blockquote></blockquote><blockquote type=3D"cite"><span></span><b=
r></blockquote><blockquote type=3D"cite"><span>TLS. </span><br></blockquote=
><blockquote type=3D"cite"><span></span><br></blockquote><blockquote type=
=3D"cite"><span>=E2=80=94 Neil</span><br></blockquote></div></blockquote></=
div>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"=
 class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div dir=
=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div style=3D"f=
ont-size:1em;font-weight:bold;line-height:1.4"><div style=3D"color:rgb(97,9=
7,97);font-family:&quot;Open Sans&quot;;font-size:14px;font-weight:normal;l=
ine-height:21px"><div style=3D"font-family:Arial,Helvetica,sans-serif;font-=
size:0.925em;line-height:1.4;color:rgb(220,41,30);font-weight:bold"><div st=
yle=3D"font-size:14px;font-weight:normal;color:rgb(51,51,51);font-family:la=
to,&quot;open sans&quot;,arial,sans-serif;line-height:normal"><div style=3D=
"color:rgb(0,164,183);font-weight:bold;font-size:1em;line-height:1.4"><div =
style=3D"font-weight:400;color:rgb(51,51,51);line-height:normal"><div style=
=3D"color:rgb(0,164,183);font-weight:bold;font-size:1em;line-height:1.4">Da=
ve Tonge</div><div style=3D"font-size:0.8125em;line-height:1.4">CTO</div><d=
iv style=3D"font-size:0.8125em;line-height:1.4;margin:0px"><a href=3D"http:=
//www.google.com/url?q=3Dhttp%3A%2F%2Fmoneyhubenterprise.com%2F&amp;sa=3DD&=
amp;sntz=3D1&amp;usg=3DAFQjCNGUnR5opJv5S1uZOVg8aISwPKAv3A" style=3D"color:r=
gb(131,94,165)" target=3D"_blank"><img alt=3D"Moneyhub Enterprise" height=
=3D"50" src=3D"http://content.moneyhub.co.uk/images/teal_Moneyhub-Ent_logo_=
200x50.png" title=3D"Moneyhub Enterprise" width=3D"200" style=3D"border: no=
ne; padding: 0px; border-radius: 2px; margin: 7px;"></a></div><div style=3D=
"padding:8px 0px"><div style=3D"padding:8px 0px"><div style=3D"letter-spaci=
ng:normal;line-height:normal"><div style=3D"padding:8px 0px"><span style=3D=
"color:rgb(0,164,183);font-size:11px">Moneyhub Financial Technology, 5th Fl=
oor, 10 Temple Back, Bristol, BS1 6FL</span></div><span style=3D"font-size:=
11px;line-height:15.925px;color:rgb(0,164,183);font-weight:bold">t:=C2=A0</=
span><span style=3D"font-size:11px;line-height:15.925px">+44 (0)117 280 512=
0</span><br style=3D"color:rgb(0,164,183);font-size:11px;line-height:15.925=
px"></div><div style=3D"letter-spacing:normal;line-height:normal"><span sty=
le=3D"font-size:11px;line-height:15.925px"><br></span></div><div style=3D"c=
olor:rgb(97,97,97);font-family:&quot;Open Sans&quot;;letter-spacing:normal"=
><div style=3D"line-height:1.4"><span style=3D"color:rgb(51,51,51);font-fam=
ily:lato,&quot;open sans&quot;,arial,sans-serif;font-size:0.75em">Moneyhub =
Enterprise is a trading style of Moneyhub Financial Technology Limited whic=
h is authorised and regulated by the Financial Conduct Authority (&quot;FCA=
&quot;).=C2=A0Moneyhub Financial Technology is entered on the Financial Ser=
vices Register=C2=A0</span><span style=3D"color:rgb(51,51,51);font-family:l=
ato,&quot;open sans&quot;,arial,sans-serif;font-size:0.75em;background-colo=
r:transparent">(FRN=C2=A0</span><span style=3D"color:rgb(0,164,183);font-fa=
mily:lato,&quot;open sans&quot;,arial,sans-serif;font-size:10.5px;font-weig=
ht:700">809360</span><span style=3D"color:rgb(51,51,51);font-family:lato,&q=
uot;open sans&quot;,arial,sans-serif;background-color:transparent;font-size=
:0.75em">) at <a href=3D"http://fca.org.uk/register" target=3D"_blank">fca.=
org.uk/register</a>. M</span><span style=3D"color:rgb(51,51,51);font-family=
:lato,&quot;open sans&quot;,arial,sans-serif;background-color:transparent;f=
ont-size:10.5px">oneyhub</span><span style=3D"color:rgb(51,51,51);font-fami=
ly:lato,&quot;open sans&quot;,arial,sans-serif;background-color:transparent=
;font-size:0.75em">=C2=A0Financial Technology is registered in England &amp=
; Wales, company registration number=C2=A0</span><span style=3D"color:rgb(5=
1,51,51);font-family:lato,&quot;open sans&quot;,arial,sans-serif;background=
-color:transparent;font-size:0.75em">=C2=A0</span><span style=3D"font-weigh=
t:bold;color:rgb(0,164,183);font-family:lato,&quot;open sans&quot;,arial,sa=
ns-serif;background-color:transparent;font-size:0.75em">06909772</span><spa=
n style=3D"background-color:transparent"><font color=3D"#333333" face=3D"la=
to, open sans, arial, sans-serif"><span style=3D"font-size:0.75em">=C2=A0.<=
/span></font></span></div><div style=3D"font-family:lato,&quot;open sans&qu=
ot;,arial,sans-serif;color:rgb(51,51,51);line-height:1.4"><span style=3D"ba=
ckground-color:transparent;font-size:10.5px">Moneyhub</span><span style=3D"=
background-color:transparent;font-size:0.75em">=C2=A0Financial Technology L=
imited 2018=C2=A0</span><span style=3D"background-color:transparent;color:r=
gb(34,34,34);font-family:arial,sans-serif;font-size:x-small">=C2=A9</span><=
/div><div style=3D"font-family:lato,&quot;open sans&quot;,arial,sans-serif;=
color:rgb(51,51,51);line-height:1.4"><span style=3D"background-color:transp=
arent;font-size:0.75em"><br></span></div><div style=3D"font-family:lato,&qu=
ot;open sans&quot;,arial,sans-serif;color:rgb(51,51,51);line-height:1.4"><s=
pan style=3D"background-color:transparent;font-size:0.75em;color:rgb(136,13=
6,136)">DISCLAIMER: This email (including any attachments) is subject to co=
pyright, and the information in it is confidential. Use of this email or of=
 any information in it other than by the addressee is unauthorised and unla=
wful. Whilst reasonable efforts are made to ensure that any attachments are=
 virus-free, it is the recipient&#39;s sole responsibility to scan all atta=
chments for viruses. All calls and emails to and from this company may be m=
onitored and recorded for legitimate purposes relating to this company&#39;=
s business. Any opinions expressed in this email (or in any attachments) ar=
e those of the author and do not necessarily represent the opinions of Mone=
yhub Financial Technology Limited or of any other group company.</span></di=
v></div></div></div></div></div></div></div></div></div></div></div></div><=
/div></div></div></div></div>

--00000000000014a3930598278c97--


From nobody Mon Nov 25 03:38:36 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC52F120916 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 03:38:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CNfbDG54NRQq for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 03:38:31 -0800 (PST)
Received: from mail-wr1-x435.google.com (mail-wr1-x435.google.com [IPv6:2a00:1450:4864:20::435]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A9AC12090F for <oauth@ietf.org>; Mon, 25 Nov 2019 03:38:31 -0800 (PST)
Received: by mail-wr1-x435.google.com with SMTP id 4so14299854wro.7 for <oauth@ietf.org>; Mon, 25 Nov 2019 03:38:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=/v0LaG61G/emenflRv6agSFi7zx4b4sboqf3fqcrxdI=; b=Baw46aZphZSbP9ShIuyl3ADxAb/j8P4Dv6AgYOI9UHUVPSO1Kh2n0fdhlTFkWpCa/k Ws+9zKRqMJFHx5o3pN1ogCYRgfNSR9z6a4IG+adCN4tDizv/0iW1M6fAVVYQhIN2mkJL +1UcESsSfuBSyCw8myHCUJiOJap3NuRaNt/xQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=/v0LaG61G/emenflRv6agSFi7zx4b4sboqf3fqcrxdI=; b=n7k284nhnD54prwuQO3MoeSfRz2Lwo01EEd4g1LA7i0GtNA80sOB+dM58UrH7TaW1x oVWtQSM9Ge+RYsOIHzr+cHbKDMaslGsIEAnSYvDg0MMe44+jSgUwwM1+kFTfXPM8WjN6 oc1H/Mk9UVYgub3FKq4eP43HIiVZ5VcXXYkZt1Fmkz59AW2wCZLd83+9FoB3Cu/L7sxF palgjVAa45XNCkxa2DfH77gLDXZ+UiixbULBedvWRz8fPJ7kc7OQRZXQIf/oBHm4qT8E CW/JQRgW00w10c+JMlVtjYWbvnarndXulDnFp1dcpJdguSDYY4QXGwT6w5vUXCLVJ+1L ru/A==
X-Gm-Message-State: APjAAAWTTzhpGVC5ouLtl+rYK8PxjeN3mgvPka7P0vGjMATbSlaB4JU5 l7qqwa4ctz+gpFe9ObLp63ST/jY+DkE=
X-Google-Smtp-Source: APXvYqxz14HdeFwldRBI1Gf6LSCgHirGU5jXI28nBq8xro4TEzygRTBycnW+GyVcbF0RcYe/MIGqkw==
X-Received: by 2002:adf:ce05:: with SMTP id p5mr31690456wrn.48.1574681909711;  Mon, 25 Nov 2019 03:38:29 -0800 (PST)
Received: from [192.168.2.128] (77-44-110-214.xdsl.murphx.net. [77.44.110.214]) by smtp.gmail.com with ESMTPSA id f67sm8504323wme.16.2019.11.25.03.38.28 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Nov 2019 03:38:28 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_02E67FDA-3A98-49C5-ACBC-AB2191732265"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Mon, 25 Nov 2019 11:38:27 +0000
In-Reply-To: <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, oauth <oauth@ietf.org>
To: Dave Tonge <dave.tonge@momentumft.co.uk>
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/p6gB82KeqKIIAHk6UaMcAci7mvo>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 11:38:35 -0000

--Apple-Mail=_02E67FDA-3A98-49C5-ACBC-AB2191732265
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi Dave,

> On 25 Nov 2019, at 08:28, Dave Tonge <dave.tonge@momentumft.co.uk> =
wrote:
>=20
> Hi Neil and Torsten
>=20
> I agree that the risk is about token theft / leakage. My understanding =
is that we should assume that at some point access tokens will be =
leaked, e.g.Facebook: =
https://auth0.com/blog/facebook-access-token-data-breach-early-look/ =
<https://auth0.com/blog/facebook-access-token-data-breach-early-look/>
I think this example is interesting because DPoP (or mTLS) wouldn't have =
prevented it. The access tokens in this case were deliberately issued by =
Facebook to the wrong user to implement the "View As" feature, so PoP =
wouldn't prevent this as the tokens weren't stolen/leaked they were =
mis-issued and incorrectly scoped. (As I understand it the incorrect =
access token "had the permissions of the mobile app" - i.e. incorrect =
scope. It wasn't actually a token issued to the mobile app).

> If access tokens were cryptographically sender-constrained, then =
leaked/stolen access tokens would be useless.
> I take your point that some of the ways in which an access token would =
leak, would also leak the dPOP headers, this is why section 9.1 has the =
recommendations around `iat` and `jti`. While this doesn't eliminate the =
risk, it does reduce it.
>=20
> So my perspective is that dPOP allows sender-constrained access tokens =
in scenarios where mutual tls / token binding is not possible. This is a =
good protection against token leakage / theft.

My perspective is that it's the claims that are doing the heavy lifting =
here. The signature is, by definition, valid for all RSes. Given that =
the claims (restrictions really) are the important bit there are simpler =
ways to achieve this - macaroons being my preference.

Some broader points about the uses and costs of PoP tokens:

In a backend microservice architecture, service to service calls are =
often authorized by service account tokens. These tokens often have =
significantly higher privileges compared to normal users because the =
same token is used for every request. So PoP-binding these tokens makes =
a lot of sense because compromise of one of these tokens has a large =
blast radius. It's also much easier to achieve PoP-bound tokens in a =
closed ecosystem - e.g., just spin up a service mesh with automatic mTLS =
between all service instances and bind your access tokens to those =
certs.

For some deployment models like IoT that have much riskier threat =
profiles, it can also make sense to do PoP because tokens might pass =
through various protocol-translating proxies and over riskier =
communication channels. In this case you're probably willing to accept a =
bit of extra complexity because you accept that as part of the cost of =
operating securely in these environments. (Or you don't and your =
internet-enabled lightbulbs become a botnet). But you almost certainly =
have power and resource budgets that you need to keep within, so =
amortizing the cost of any public key crypto over many requests is =
crucial.

But for web-based SPAs and so on, I'm not sure the cost/benefit trade =
off is really that good. The biggest threat for tokens being =
stolen/misused is still XSS, and DPoP does nothing to protect against =
that. It also doesn't protect against many other ways that tokens leak =
in browsers - e.g. if a token leaks in your browser history then the =
threat is that the attacker is physically using your device, in which =
case they also have access to your DPoP keys. In the cases like the =
Facebook breach, where highly automated mass compromise was achieved, I =
think we're lacking evidence that PoP would help there either.

The single most important thing we can do to protect web-based apps is =
to encourage the principle of least privilege. Every access token should =
be as tightly constrained as possible - in scope, in audience, and in =
expiry time. Ideally at the point of being issued - which is why I think =
any next-gen OAuth must support issuing multiple fine-grained access =
tokens. Where tokens can't be constrained at the point of issue, then =
the client should be able to constrain them afterwards at the point of =
use. They could do this via DPoP, but for all the reasons I've mentioned =
before I think macaroons make more sense here.

For mobile apps however, where the situation is much better than for =
SPAs, DPoP may have real value. A mobile app can realistically generate =
keys within a secure enclave that requires local user authentication to =
access (enforced by the hardware), and there's typically no risk of XSS. =
Mobile phones are at risk of attacks by physically present attackers =
(e.g., being left unlocked while you go for a bathroom break), so DPoP =
could add real value here by making it much harder to use those apps =
without the user's consent - against even quite determined and =
sophisticated attackers.

If there is support in the WG to move the draft forward, then I'm happy =
that I've made the points I wanted to make. I would still like to see a =
much expanded rationale section with a precise description of the =
threats intended to be protected against and the limitations of the =
approach. I'd also like to see consideration for allowing reuse of a =
DPoP proof token for several requests, to amortize the cost. And I'd =
like to see the ability for DPoP tokens to be scope-constrained and =
expiry-constrained (i.e., timeout set by the client) as additional =
optional ways to lock it down.

-- Neil=

--Apple-Mail=_02E67FDA-3A98-49C5-ACBC-AB2191732265
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hi =
Dave,<br class=3D"">
<div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">On 25 Nov 2019, at 08:28, Dave Tonge &lt;<a =
href=3D"mailto:dave.tonge@momentumft.co.uk" =
class=3D"">dave.tonge@momentumft.co.uk</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"gmail_default" style=3D"font-family:trebuchet =
ms,sans-serif">Hi Neil and Torsten</div><div class=3D"gmail_default" =
style=3D"font-family:trebuchet ms,sans-serif"><br class=3D""></div><div =
class=3D"gmail_default" style=3D"font-family:trebuchet ms,sans-serif">I =
agree that the risk is about token theft / leakage. My understanding is =
that we should assume that at some point access tokens will be leaked, =
e.g.Facebook:&nbsp;<a =
href=3D"https://auth0.com/blog/facebook-access-token-data-breach-early-loo=
k/" style=3D"font-family:Arial,Helvetica,sans-serif" =
class=3D"">https://auth0.com/blog/facebook-access-token-data-breach-early-=
look/</a></div></div></div></blockquote><div><br class=3D""></div><div>I =
think this example is interesting because DPoP (or mTLS) wouldn't have =
prevented it. The access tokens in this case were deliberately issued by =
Facebook to the wrong user to implement the "View As" feature, so PoP =
wouldn't prevent this as the tokens weren't stolen/leaked they were =
mis-issued and incorrectly scoped. (As I understand it the incorrect =
access token "had the permissions of the mobile app" - i.e. incorrect =
scope. It wasn't actually a token issued to the mobile =
app).</div><div><br class=3D""></div><blockquote type=3D"cite" =
class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><div =
class=3D"gmail_default" style=3D"font-family:trebuchet ms,sans-serif">If =
access tokens were cryptographically sender-constrained, then =
leaked/stolen access tokens would be useless.</div><div =
class=3D"gmail_default" style=3D"font-family:trebuchet ms,sans-serif">I =
take your point that some of the ways in which an access token would =
leak, would also leak the dPOP headers, this is why section 9.1 has the =
recommendations around `iat` and `jti`. While this doesn't eliminate the =
risk, it does reduce it.</div></div></div></blockquote><blockquote =
type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><div =
class=3D"gmail_default" style=3D"font-family:trebuchet =
ms,sans-serif"><br class=3D""></div><div class=3D"gmail_default" =
style=3D"font-family:trebuchet ms,sans-serif">So my perspective is that =
dPOP allows sender-constrained access tokens in scenarios where mutual =
tls / token binding is not possible. This is a good protection against =
token leakage / theft.</div></div></div></blockquote><div><br =
class=3D""></div><div>My perspective is that it's the claims that are =
doing the heavy lifting here. The signature is, by definition, valid for =
all RSes. Given that the claims (restrictions really) are the important =
bit there are simpler ways to achieve this - macaroons being my =
preference.</div><div><br class=3D""></div><div>Some broader points =
about the uses and costs of PoP tokens:</div><div><br =
class=3D""></div><div>In a backend microservice architecture, service to =
service calls are often authorized by service account tokens. These =
tokens often have significantly higher privileges compared to normal =
users because the same token is used for every request. So PoP-binding =
these tokens makes a lot of sense because compromise of one of these =
tokens has a large blast radius. It's also much easier to achieve =
PoP-bound tokens in a closed ecosystem - e.g., just spin up a service =
mesh with automatic mTLS between all service instances and bind your =
access tokens to those certs.</div><div><br class=3D""></div><div>For =
some deployment models like IoT that have much riskier threat profiles, =
it can also make sense to do PoP because tokens might pass through =
various protocol-translating proxies and over riskier communication =
channels. In this case you're probably willing to accept a bit of extra =
complexity because you accept that as part of the cost of operating =
securely in these environments. (Or you don't and your internet-enabled =
lightbulbs become a botnet). But you almost certainly have power and =
resource budgets that you need to keep within, so amortizing the cost of =
any public key crypto over many requests is crucial.</div><div><br =
class=3D""></div><div>But for web-based SPAs and so on, I'm not sure the =
cost/benefit trade off is really that good. The biggest threat for =
tokens being stolen/misused is still XSS, and DPoP does nothing to =
protect against that. It also doesn't protect against many other ways =
that tokens leak in browsers - e.g. if a token leaks in your browser =
history then the threat is that the attacker is physically using your =
device, in which case they also have access to your DPoP keys. In the =
cases like the Facebook breach, where highly automated mass compromise =
was achieved, I think we're lacking evidence that PoP would help there =
either.</div><div><br class=3D""></div><div>The single most important =
thing we can do to protect web-based apps is to encourage the principle =
of least privilege. Every access token should be as tightly constrained =
as possible - in scope, in audience, and in expiry time. Ideally at the =
point of being issued - which is why I think any next-gen OAuth must =
support issuing multiple fine-grained access tokens. Where tokens can't =
be constrained at the point of issue, then the client should be able to =
constrain them afterwards at the point of use. They could do this via =
DPoP, but for all the reasons I've mentioned before I think macaroons =
make more sense here.</div><div><br class=3D""></div><div>For mobile =
apps however, where the situation is much better than for SPAs, DPoP may =
have real value. A mobile app can realistically generate keys within a =
secure enclave that requires local user authentication to access =
(enforced by the hardware), and there's typically no risk of XSS. Mobile =
phones are at risk of attacks by physically present attackers (e.g., =
being left unlocked while you go for a bathroom break), so DPoP could =
add real value here by making it much harder to use those apps without =
the user's consent - against even quite determined and sophisticated =
attackers.</div><div><br class=3D""></div><div>If there is support in =
the WG to move the draft forward, then I'm happy that I've made the =
points I wanted to make. I would still like to see a much expanded =
rationale section with a precise description of the threats intended to =
be protected against and the limitations of the approach. I'd also like =
to see consideration for allowing reuse of a DPoP proof token for =
several requests, to amortize the cost. And I'd like to see the ability =
for DPoP tokens to be scope-constrained and expiry-constrained (i.e., =
timeout set by the client) as additional optional ways to lock it =
down.</div><div><br class=3D""></div><div>-- =
Neil</div></div></body></html>=

--Apple-Mail=_02E67FDA-3A98-49C5-ACBC-AB2191732265--


From nobody Mon Nov 25 04:10:17 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB7D7120170 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 04:10:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D4_Z-d-U9TXV for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 04:10:13 -0800 (PST)
Received: from mail-wm1-x32b.google.com (mail-wm1-x32b.google.com [IPv6:2a00:1450:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCF1C12001A for <oauth@ietf.org>; Mon, 25 Nov 2019 04:10:12 -0800 (PST)
Received: by mail-wm1-x32b.google.com with SMTP id n188so13722805wme.1 for <oauth@ietf.org>; Mon, 25 Nov 2019 04:10:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=qNFjdclGZvtO78/Xw5YchnDqEs51cPU7fL8tsh6ot3A=; b=J5MlN6uwLmmtv3oX+PIG6gfVYIuf39Ql+6FmCF4gtwoit+m6Oo0TG/SeffhaZ1CaCQ tCK8fuFinqpY91kgpugvsqg74tJIpit/X7yno4a519qHYT99kqnCjUhjchSwnVp/t9xR 6amdB9w12U/MUr8cVxNsaqcjoL04sCGUhBbKbouPyyODMCM8fiT6AVP3tTXHugGAFJAR bSboeyscvINvf0J3BVvthh82ERUaZXxR+bGVPKGLyrDs+VMBvL5C8352UwHU8ghd+p5P uhoTJ/VbkxEeMqwlpusbUuvROiclvSHKVJxbisAuJs7cyTqGnrJv21G57m3JyEcP5L/Q EoUg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=qNFjdclGZvtO78/Xw5YchnDqEs51cPU7fL8tsh6ot3A=; b=RNCwm3Gda75BCAJbbsr6QGRgOdi2iRf4fdmUKOK+oxPOYeC7PWoKMk/9UBOxhondOL WKUpT2cv/rEhDpqlIcAvbQXxoGhT5D0gnm5W5vougo3QLzOzqdMsJq7Rbf6AIsmW7wKk O5NyniKr6X3MNfso2nIJvPHlQZE5p3R+oSP/FmIZZQVn86xZ9AyGeW3ihgSGn9RdEeZ5 RRdkZZu9ZJ6hJUvPbIRjdMaYftTjtsjcnjmCZ1us8MVeEx8Ka2+0o80yoraNhMVnJjw9 ETeTja0SDyzBcAK5v/uPR+3sHqVh29m9vD6HYieXWdLMgnd0WWfJsXAl/+Rp+8kCbncc CeBQ==
X-Gm-Message-State: APjAAAWAtEhuCTND+oytvrzIT8TciA/p0jiEp0C/EKD5aDrWCLeCK75n 77Szm43Ey6dAzzMyEmZCXXl0vg==
X-Google-Smtp-Source: APXvYqwTRut8UFKll/gi4DWtuiQWKbqZyh283xCOHswX++m5e97gRCx1sYSkFSvO20wNRgniYpB6XA==
X-Received: by 2002:a1c:6386:: with SMTP id x128mr28250666wmb.41.1574683810941;  Mon, 25 Nov 2019 04:10:10 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id z6sm10765242wro.18.2019.11.25.04.10.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Nov 2019 04:10:10 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_2D47ECE2-632A-4784-9660-4B9538F43AE5"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Mon, 25 Nov 2019 13:09:58 +0100
In-Reply-To: <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com>
Cc: Dave Tonge <dave.tonge@momentumft.co.uk>, oauth <oauth@ietf.org>
To: Neil Madden <neil.madden@forgerock.com>
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com> <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/T7xn3_60RBdmIwAiYJd6E87F_-I>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 12:10:16 -0000

--Apple-Mail=_2D47ECE2-632A-4784-9660-4B9538F43AE5
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi Neil,=20

> On 25. Nov 2019, at 12:38, Neil Madden <neil.madden@forgerock.com> =
wrote:
>=20
> But for web-based SPAs and so on, I'm not sure the cost/benefit trade =
off is really that good. The biggest threat for tokens being =
stolen/misused is still XSS, and DPoP does nothing to protect against =
that. It also doesn't protect against many other ways that tokens leak =
in browsers - e.g. if a token leaks in your browser history then the =
threat is that the attacker is physically using your device, in which =
case they also have access to your DPoP keys. In the cases like the =
Facebook breach, where highly automated mass compromise was achieved, I =
think we're lacking evidence that PoP would help there either.
>=20
> The single most important thing we can do to protect web-based apps is =
to encourage the principle of least privilege. Every access token should =
be as tightly constrained as possible - in scope, in audience, and in =
expiry time. Ideally at the point of being issued ...

I tend to agree with your assessment. The simplest way with current =
OAuth is use of code+pkce+refresh tokens, narrowly scoped access tokens, =
and resource indicators to mint RS-specific, privilege restricted, short =
lived access tokens.=20

Do you think we should spell this out in the SPA BCP?

best regards,
Torsten.=20=

--Apple-Mail=_2D47ECE2-632A-4784-9660-4B9538F43AE5
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_2D47ECE2-632A-4784-9660-4B9538F43AE5--


From nobody Mon Nov 25 06:08:36 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F00F120960 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 06:08:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JJS2U4XDWtmj for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 06:08:33 -0800 (PST)
Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50C57120880 for <oauth@ietf.org>; Mon, 25 Nov 2019 06:08:33 -0800 (PST)
Received: by mail-wm1-x32a.google.com with SMTP id y5so16097950wmi.5 for <oauth@ietf.org>; Mon, 25 Nov 2019 06:08:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Zys937mfqlR0moVtUxzJDpcY+1GEivjbLCFotagOT5Q=; b=GjWkPjTQ109Os/YeLQS5uFby/CuTLT11/9Nl0Ek+12VONKKFJJ4P/Sgt0FBglt/Dss 4B0YOsoEja9O2sixz7qkIzNziD+ZUu2LpxEujWX7JT8DbOToTIZilBIrtc15EoXgKZoV FRjJd+hecmssg1oLaVBp9JVFzgcxjG7MRjO1w=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Zys937mfqlR0moVtUxzJDpcY+1GEivjbLCFotagOT5Q=; b=hB00CJze5+lCEc6cIFE06SHkO4jTal+cFRDy+c/YHZYwimSc7M7jxJijRErIWG2iE4 3FuFn17j7BVDEFZmSzwLmo+BOceu45E8THdmX5K3dVlbOjIVp5lgsbtpfOsOt46EysLc lMaDkNPcjDb2SQzUwhiyKO3UVBwkCVTJ+N2d53qlD5u9N8As1Po6ezn8D8DynBkeSzBz 61O8Thk1H3Chg+88sfV4RRd+7JcudT6MLe9Zm2MisF9j9Ge7k3bIqy0DeglRf9xsFUlg VC+QejOGRVHtXe+3fH4AYIUSuZkPPJYAd3Vp6j7fi+p141k0FFya9ZGvO+7q7BLkb/7Q TBiQ==
X-Gm-Message-State: APjAAAVRchbtmU9GeMZ+ftqAwPv4VmxTT9zm729VTf00jEku533r/yTG epBZ9bCg8pkQCxCLOz56oRYyng==
X-Google-Smtp-Source: APXvYqyxyPLQVwZqkMpXmjFQKz0GypdXmqH3HHVVGeRo8vCWmRb2J3z2RAsavhu/gOTeLO8YT7Z74Q==
X-Received: by 2002:a05:600c:219a:: with SMTP id e26mr14505873wme.62.1574690911430;  Mon, 25 Nov 2019 06:08:31 -0800 (PST)
Received: from [192.168.2.128] (77-44-110-214.xdsl.murphx.net. [77.44.110.214]) by smtp.gmail.com with ESMTPSA id t187sm8368211wma.16.2019.11.25.06.08.30 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Nov 2019 06:08:30 -0800 (PST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
From: Neil Madden <neil.madden@forgerock.com>
In-Reply-To: <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net>
Date: Mon, 25 Nov 2019 14:08:29 +0000
Cc: Dave Tonge <dave.tonge@momentumft.co.uk>, oauth <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com>
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com> <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com> <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/tTQmhcuEbu031SrWl5v1Lu6hyxY>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 14:08:35 -0000

On 25 Nov 2019, at 12:09, Torsten Lodderstedt <torsten@lodderstedt.net> =
wrote:
>=20
> Hi Neil,=20
>=20
>> On 25. Nov 2019, at 12:38, Neil Madden <neil.madden@forgerock.com> =
wrote:
>>=20
>> But for web-based SPAs and so on, I'm not sure the cost/benefit trade =
off is really that good. The biggest threat for tokens being =
stolen/misused is still XSS, and DPoP does nothing to protect against =
that. It also doesn't protect against many other ways that tokens leak =
in browsers - e.g. if a token leaks in your browser history then the =
threat is that the attacker is physically using your device, in which =
case they also have access to your DPoP keys. In the cases like the =
Facebook breach, where highly automated mass compromise was achieved, I =
think we're lacking evidence that PoP would help there either.
>>=20
>> The single most important thing we can do to protect web-based apps =
is to encourage the principle of least privilege. Every access token =
should be as tightly constrained as possible - in scope, in audience, =
and in expiry time. Ideally at the point of being issued ...
>=20
> I tend to agree with your assessment. The simplest way with current =
OAuth is use of code+pkce+refresh tokens, narrowly scoped access tokens, =
and resource indicators to mint RS-specific, privilege restricted, short =
lived access tokens.=20
>=20
> Do you think we should spell this out in the SPA BCP?

I think that would certainly be a great start.

-- Neil=


From nobody Mon Nov 25 06:48:42 2019
Return-Path: <jaredljennings@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBE90120976 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 06:48:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0R3BqK8pbI2X for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 06:48:40 -0800 (PST)
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D138A120972 for <oauth@ietf.org>; Mon, 25 Nov 2019 06:48:39 -0800 (PST)
Received: by mail-ed1-x52a.google.com with SMTP id f7so12950330edq.3 for <oauth@ietf.org>; Mon, 25 Nov 2019 06:48:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to;  bh=lJAHPqDmeUceMFlBxnml2tj9/qZ1P2XbXHcEj3jrKoM=; b=J4kYYLw7MruWywLjij6BSAe42GHoZLenVVfrBhRIbMsfjE/iYsYWZo2Q8w0A+nMA2y DVE6/49nAokrBEQVIs65yVt6lja3QCuyxc94m5DyPvz10jgc/Q8tI9PrSUC8K0vikJ2s 4qK/x6IzrpXyFq3/RMtMeLnDQbyTW5DfybyFgB3nUkqfqH/cI4bntgqhsh3IMOkwJcWo GaJHS18VeykwgfGVlLVphEilnT6g6gyOt+TH5sdnmpfKkRW91zSu5NBYkHsa0W0c0RFv i2M2N7R6fO9mmxhdTJCwJPqoYDjFWsNoAoRFft0rL1RShzsl/L2ZjmwjAsLF1XXGZxSd aExg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=lJAHPqDmeUceMFlBxnml2tj9/qZ1P2XbXHcEj3jrKoM=; b=afNK11eEOuJYN/Ccv6BZIkmkQZD+F+YZtKVhEDSbAHQAU8k+HFsCQKi30Zo+9pBKE9 mdVImMoBnmU8OB8cJQ6vYStpq96rrpbRHsF8z8/pi4JclJq3IcwBZHVFNsgeS11ca6Wy uo3tw/OVSnX66oXfQtoyOjmh8XTzP27Mvkr+jqO/N9OR7c5xgsclVkQrb2sXFNP53eLX Rx9SDlJVfmZ3D0zSmiV5YdQ9mP2FfNDY1Xb7n5S36brBgBOqdajVtfpjYf30j/MXU2My y1uAn7w7j+tqbwg19BplnZwWAVnaw+rV8dUkg7D1r5P4SZbELfo85EpBmsAHp+cviCge aCoA==
X-Gm-Message-State: APjAAAVdH40oUGy/T7Wu9q8/oGFTR12J2u9mRoLkp6ULpdrm9EFavH5q P1txjP7CxZM6FcGIQvdb6bloXcE3WzrO6YCZyEFea5nF
X-Google-Smtp-Source: APXvYqxC0awC5VTi0LNKlJyvAoa97iGCXl5b3Rm0ciyN8bk4vhDsrVHUl0dmLvZOf+vGFT9r0Argg4142VtBTqZcAh4=
X-Received: by 2002:a05:6402:1850:: with SMTP id v16mr18795260edy.301.1574693317875;  Mon, 25 Nov 2019 06:48:37 -0800 (PST)
MIME-Version: 1.0
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com> <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com> <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net> <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com>
In-Reply-To: <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com>
From: Jared Jennings <jaredljennings@gmail.com>
Date: Mon, 25 Nov 2019 08:48:26 -0600
Message-ID: <CAMVRk+LxLa5tL2_jayzB6Gp=w4soG+y7uJqnooHDBS4bktzCBA@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d79dce05982cdbdf"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/rkI4lXBwDUcTJvfRnHGAMbQUurI>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 14:48:42 -0000

--000000000000d79dce05982cdbdf
Content-Type: text/plain; charset="UTF-8"

+1

-Jared
Skype:jaredljennings
Signal:+1 816.730.9540
WhatsApp: +1 816.678.4152


On Mon, Nov 25, 2019 at 8:08 AM Neil Madden <neil.madden@forgerock.com>
wrote:

> On 25 Nov 2019, at 12:09, Torsten Lodderstedt <torsten@lodderstedt.net>
> wrote:
> >
> > Hi Neil,
> >
> >> On 25. Nov 2019, at 12:38, Neil Madden <neil.madden@forgerock.com>
> wrote:
> >>
> > Do you think we should spell this out in the SPA BCP?
>
> I think that would certainly be a great start.
>
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000d79dce05982cdbdf
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">+1</div><div dir=3D"ltr"><br clear=3D"all=
"><div><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_s=
ignature"><div dir=3D"ltr"><div>-Jared</div><div><div>Skype:jaredljennings<=
/div><div>Signal:+1 816.730.9540</div><div>WhatsApp:=C2=A0+1 816.678.4152</=
div></div></div></div></div><br></div><br><div class=3D"gmail_quote"><div d=
ir=3D"ltr" class=3D"gmail_attr">On Mon, Nov 25, 2019 at 8:08 AM Neil Madden=
 &lt;<a href=3D"mailto:neil.madden@forgerock.com">neil.madden@forgerock.com=
</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">=
On 25 Nov 2019, at 12:09, Torsten Lodderstedt &lt;<a href=3D"mailto:torsten=
@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a>&gt; wrote:<=
br>
&gt; <br>
&gt; Hi Neil, <br>
&gt; <br>
&gt;&gt; On 25. Nov 2019, at 12:38, Neil Madden &lt;<a href=3D"mailto:neil.=
madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; w=
rote:<br>
&gt;&gt; <br>
&gt; Do you think we should spell this out in the SPA BCP?<br>
<br>
I think that would certainly be a great start.<br>
<br>
-- Neil<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>

--000000000000d79dce05982cdbdf--


From nobody Mon Nov 25 07:12:21 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9DAB120978 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 07:12:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WEk95efXauKv for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 07:12:17 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 070BE120137 for <oauth@ietf.org>; Mon, 25 Nov 2019 07:12:17 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id C1D9F1B1C for <oauth@ietf.org>; Mon, 25 Nov 2019 15:12:14 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574694734; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=4W1lxipKbSYAL2e+ekl5Ypciq5bOHIZrk/P4eEBNhDk=; b=ouamWRwSyIpy0y45ZOF77yJe0/vOdZfBjq8b639GHqt+4/NgmWuWw2fWfzA7a2lupu/s57 fz69N2eJtmnXUJd8hnKxuBtly3BlpnLKkY9o8LIDgIC/lGnCUilFKKdfR12Fzqu2C1LqKB yoYQ8iscpAQHIoiFjrtVZeqT2hFh58Q=
To: oauth@ietf.org
References: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com> <97C1CF0C-451E-430F-8B35-AF8B5A4D2E2D@lodderstedt.net> <CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <2e928a72-e058-5744-f604-ccc55625164e@danielfett.de>
Date: Mon, 25 Nov 2019 16:12:14 +0100
MIME-Version: 1.0
In-Reply-To: <CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------E44F3A1F05232C3F94BA3E56"
Content-Language: de-AT-frami
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574694734; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=4W1lxipKbSYAL2e+ekl5Ypciq5bOHIZrk/P4eEBNhDk=; b=cWzhGr7lRzRKl6ZB/Ua387jnFWkWhNeGQI3fDf4iRv9cLEIs4tEG35DKogYAJCpwYPLn16 uS2e9nj7NHKZRC3WmbWBQSG+VwVCKUyr+pt91Vbo/328UDIZCOJl16CU62XL6qzIP+AKIn kGryOFZF/R/4+dXdu7VO6e3Nsf0LVBc=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574694734; a=rsa-sha256; cv=none; b=cMVVR6Kp9ZwXKCXU7Z6VnqQ2H5S9U1Ye827VsBODu5kH7H5DYoAfclkibJsSGAhcUY1UNaZarEVpxUSdSIxY9fdgAny6Np4cY9jGgc8rqencRVgjDAWKL4yREMMU9egs9gq5b3QVffiaCllZjBTDe2qOXO7YU+WRynOj3mfqwEQ=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/w1CCqmvy9OIB8bC0Sayl2i_IUMc>
Subject: Re: [OAUTH-WG] authorization code injection - draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 15:12:20 -0000

This is a multi-part message in MIME format.
--------------E44F3A1F05232C3F94BA3E56
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Am 16.11.19 um 14:28 schrieb Aaron Parecki:
> Thanks for the reply. You're right, PKCE requires maintaining
> application state as well, and does solve the main worry I have.
>
> However I think there is still something more. I guess my concern is
> around the specific wording:
>
>> in this case, 'state' may be used again for its original purpose...
> My concern is if people see this recommendation, (even though it's
> clarified that it only applies if the authorization server supports
> PKCE), they may revert back to static "state" values *regardless* of
> whether the server supports PKCE, opening up a security hole again.
> This is especially problematic because of the way PKCE works where
> clients have no indication as to whether the server supports PKCE if
> the whole flow is successful.
>
> I guess I just would rather not mention the possibility of using
> static state values again.
I would like to keep this note. We could change the wording, however.
How about this:


"If PKCE [RFC7636] is used by the client and the client *has ensured*
that the authorization server supports PKCE, the client MAY opt to not
use "state" for CSRF protection".

-Daniel

--------------E44F3A1F05232C3F94BA3E56
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Am 16.11.19 um 14:28 schrieb Aaron
      Parecki:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com">
      <pre class="moz-quote-pre" wrap="">Thanks for the reply. You're right, PKCE requires maintaining
application state as well, and does solve the main worry I have.

However I think there is still something more. I guess my concern is
around the specific wording:

</pre>
      <blockquote type="cite">
        <pre class="moz-quote-pre" wrap="">in this case, 'state' may be used again for its original purpose...
</pre>
      </blockquote>
      <pre class="moz-quote-pre" wrap="">
My concern is if people see this recommendation, (even though it's
clarified that it only applies if the authorization server supports
PKCE), they may revert back to static "state" values *regardless* of
whether the server supports PKCE, opening up a security hole again.
This is especially problematic because of the way PKCE works where
clients have no indication as to whether the server supports PKCE if
the whole flow is successful.

I guess I just would rather not mention the possibility of using
static state values again.</pre>
    </blockquote>
    I would like to keep this note. We could change the wording,
    however. How about this:<br>
    <p> <br>
      "If PKCE [RFC7636] is used by the client and the client <b>has
        ensured</b> that the authorization server supports PKCE, the
      client MAY opt to not use "state" for CSRF protection".<br>
    </p>
    -Daniel
  </body>
</html>

--------------E44F3A1F05232C3F94BA3E56--


From nobody Mon Nov 25 07:22:15 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58C3312004D for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 07:22:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mXIOcNZVWiy1 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 07:22:11 -0800 (PST)
Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A5ED120989 for <oauth@ietf.org>; Mon, 25 Nov 2019 07:22:11 -0800 (PST)
Received: by mail-io1-xd2e.google.com with SMTP id k13so16614517ioa.9 for <oauth@ietf.org>; Mon, 25 Nov 2019 07:22:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KuW1n7FpnPJvS4RlC3lPFogpR0C7ax/nFr2SO1pEtHs=; b=gDmrS9AAExGcjOc6Wnhd58udV3pH51CcE0AEUdTh4UVysf5Ql1dpuxyMd/Bwhyirbt 0Zx0sXuWBvh2u9Wvd94ITkn1ngI5ZGO08rjAVYFFL3Y2gvD323V7kt7bGkvG6nUqLilx C+DVSbqLV7qiia/yefWArjhStDsOtf/RtVV7+zzgIngsVSaaAOD5MzUh4d8vLpIM83/W 48cnwekjMksX+pmg+ZsClvjVvU+N/G9tEimwk/l0BHk/K9nLM55/6buSWSpBLXbpDmIH TAzR443fSAsrSdL9e3XKdZI9/iBnTKRhgxSL02hSsoDCzNKXinSmq5sK2K86jlBrdLeh paTQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KuW1n7FpnPJvS4RlC3lPFogpR0C7ax/nFr2SO1pEtHs=; b=kJum/rykyYrIS7EDaSdYzJUS5AU6of/WDClHWEsx9DS2IULwCKfHt72XwD9XpsUZjp w/Z8X8klCVx7EZzaUeUsAelenRc+MyIYE/A4CU2tSIMGKzaoaXqicrEN9Ai5+oqfBGmp MjH3zjhZA4v1DAvDaCOcWOS7CE5Xylvdo6afc0cKtDXmhHQdXqukiJFCixsApQ2KlDYb dnsyS9E7MipvNilZ/AznlRsnlHAHuLyOiJEduOL607fyCOMjaCsV40mODADHlwpZNBGR WNIJGerDHS4YreFQBuoxtZ2Qla1pohVFjNN7pXFPG5N2rdFRT2EUn8fI97VGhU4qWGKb TMTg==
X-Gm-Message-State: APjAAAUzbHomc3MSbN80oEwqod8SK+ND7/ObRGVpWErD61XW1shqHsTJ mIw9CE+imo1682aL4fHanLQQ5MBJP5o=
X-Google-Smtp-Source: APXvYqzwjKJBzbD7iGmm1naxq7SYj+N7GcgufVhf+uW/hFOfJCjMXxlspGgx2fNWk66SwycDynqjzA==
X-Received: by 2002:a6b:fc09:: with SMTP id r9mr27628080ioh.176.1574695330148;  Mon, 25 Nov 2019 07:22:10 -0800 (PST)
Received: from mail-io1-f51.google.com (mail-io1-f51.google.com. [209.85.166.51]) by smtp.gmail.com with ESMTPSA id k18sm1943780ios.31.2019.11.25.07.22.08 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Nov 2019 07:22:09 -0800 (PST)
Received: by mail-io1-f51.google.com with SMTP id u24so14921584iob.5 for <oauth@ietf.org>; Mon, 25 Nov 2019 07:22:08 -0800 (PST)
X-Received: by 2002:a02:a995:: with SMTP id q21mr29162655jam.27.1574695328726;  Mon, 25 Nov 2019 07:22:08 -0800 (PST)
MIME-Version: 1.0
References: <CAGBSGjqpXjXDMH-YMap5kEeWg4qA0R447nNK9zjLUP+mJ=XT2w@mail.gmail.com> <97C1CF0C-451E-430F-8B35-AF8B5A4D2E2D@lodderstedt.net> <CAGBSGjpOoTKEqHEgpGP3zn4B1tzQ6Ez2e2VMANn1wn1x6bxv5w@mail.gmail.com> <2e928a72-e058-5744-f604-ccc55625164e@danielfett.de>
In-Reply-To: <2e928a72-e058-5744-f604-ccc55625164e@danielfett.de>
From: Aaron Parecki <aaron@parecki.com>
Date: Mon, 25 Nov 2019 07:21:57 -0800
X-Gmail-Original-Message-ID: <CAGBSGjqPNiyKy-X15jP+xi4=uCMnKc_KeC8CpvPrM42_mpK51Q@mail.gmail.com>
Message-ID: <CAGBSGjqPNiyKy-X15jP+xi4=uCMnKc_KeC8CpvPrM42_mpK51Q@mail.gmail.com>
To: Daniel Fett <fett@danielfett.de>
Cc: oauth@ietf.org
Content-Type: multipart/alternative; boundary="000000000000b2c3c405982d533b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/bcKjVbCoUOcbr0raxFtXQGfdR80>
Subject: Re: [OAUTH-WG] authorization code injection - draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 15:22:13 -0000

--000000000000b2c3c405982d533b
Content-Type: text/plain; charset="UTF-8"

Works for me, sounds like that clears up the confusion I am worried about.

Aaron


On Mon, Nov 25, 2019 at 7:12 AM Daniel Fett <fett@danielfett.de> wrote:

> Am 16.11.19 um 14:28 schrieb Aaron Parecki:
>
> Thanks for the reply. You're right, PKCE requires maintaining
> application state as well, and does solve the main worry I have.
>
> However I think there is still something more. I guess my concern is
> around the specific wording:
>
>
> in this case, 'state' may be used again for its original purpose...
>
> My concern is if people see this recommendation, (even though it's
> clarified that it only applies if the authorization server supports
> PKCE), they may revert back to static "state" values *regardless* of
> whether the server supports PKCE, opening up a security hole again.
> This is especially problematic because of the way PKCE works where
> clients have no indication as to whether the server supports PKCE if
> the whole flow is successful.
>
> I guess I just would rather not mention the possibility of using
> static state values again.
>
> I would like to keep this note. We could change the wording, however. How
> about this:
>
>
> "If PKCE [RFC7636] is used by the client and the client *has ensured*
> that the authorization server supports PKCE, the client MAY opt to not use
> "state" for CSRF protection".
>
>
> -Daniel
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
-- 
----
Aaron Parecki
aaronparecki.com
@aaronpk <http://twitter.com/aaronpk>

--000000000000b2c3c405982d533b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div dir=3D"auto">Works for me, sounds like that clears up the confusi=
on I am worried about.</div></div><div dir=3D"auto"><br></div><div dir=3D"a=
uto">Aaron</div><div dir=3D"auto"><br></div><div><br><div class=3D"gmail_qu=
ote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Nov 25, 2019 at 7:12 AM =
Daniel Fett &lt;<a href=3D"mailto:fett@danielfett.de">fett@danielfett.de</a=
>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
 =20
   =20
 =20
  <div bgcolor=3D"#FFFFFF" text=3D"#000000">
    <div>Am 16.11.19 um 14:28 schrieb Aaron
      Parecki:<br>
    </div>
    <blockquote type=3D"cite">
      <pre>Thanks for the reply. You&#39;re right, PKCE requires maintainin=
g
application state as well, and does solve the main worry I have.

However I think there is still something more. I guess my concern is
around the specific wording:

</pre>
      <blockquote type=3D"cite">
        <pre>in this case, &#39;state&#39; may be used again for its origin=
al purpose...
</pre>
      </blockquote>
      <pre>My concern is if people see this recommendation, (even though it=
&#39;s
clarified that it only applies if the authorization server supports
PKCE), they may revert back to static &quot;state&quot; values *regardless*=
 of
whether the server supports PKCE, opening up a security hole again.
This is especially problematic because of the way PKCE works where
clients have no indication as to whether the server supports PKCE if
the whole flow is successful.

I guess I just would rather not mention the possibility of using
static state values again.</pre>
    </blockquote>
    I would like to keep this note. We could change the wording,
    however. How about this:<br>
    <p> <br>
      &quot;If PKCE [RFC7636] is used by the client and the client <b>has
        ensured</b> that the authorization server supports PKCE, the
      client MAY opt to not use &quot;state&quot; for CSRF protection&quot;=
.</p></div><div bgcolor=3D"#FFFFFF" text=3D"#000000"><p><br>
    </p>
    -Daniel
  </div>

_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature"><div>----</div><div>Aaron Parecki</div><=
div><a href=3D"http://aaronparecki.com" target=3D"_blank">aaronparecki.com<=
/a></div><div><a href=3D"http://twitter.com/aaronpk" target=3D"_blank">@aar=
onpk</a></div><div><br></div></div>

--000000000000b2c3c405982d533b--


From nobody Mon Nov 25 08:07:01 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AF4B1208B0 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:06:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FP7iCIsB6s8A for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:06:57 -0800 (PST)
Received: from mail-io1-xd32.google.com (mail-io1-xd32.google.com [IPv6:2607:f8b0:4864:20::d32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 295E212013D for <oauth@ietf.org>; Mon, 25 Nov 2019 08:06:57 -0800 (PST)
Received: by mail-io1-xd32.google.com with SMTP id j13so16882068ioe.0 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:06:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ME3xTuEVM+7uyDBYkEZepThBmDKNyBBDaD1tMsPhk4s=; b=mA93SyVwDYVeYmHYJHUU3IHFo4N7MsY1oyKgviqBrVmy0cVhZRsuA/jB9H51IZ/pjq eojtyENbxvhQ8KdAkiWwxoVeGhWncDGceMzi61JOWsxUg2fQ2G01em5LDzj3BwUr6SXL Nf/X0L/fP2HP7qYRtloE41EHaV2yI2FwA6/+IuJcN32H2aWXShNHDXKEc2KB6FkuEH7o j9t/jRm94t2lS+TUPQ21mAeaGdP2jadubR/04jfz6gSDmhYPYdZQkd6nOmc8c0UH8xP9 vTO8uKjV+0n5OKdUokh9ej8h2FRUdEtzwIf4w/8lpoPrSspC8uoqrykb6ntcWOMFHPJa ytZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ME3xTuEVM+7uyDBYkEZepThBmDKNyBBDaD1tMsPhk4s=; b=ogb/FaO5RtaUWFlOOzqLNoSJWk9pudK9WbyRYDjRPlq3l8pj6nPa8/OQfpx59JIR3h esDxCuhJOSLH5LkbBqLJB+EtQNjCnwDth0ItmEEe88KDdw4rAm8K2WPo2m7H6o+2o37+ 0wno/T7tjUIoguiO3IaXGoUK9mloSzsZ8M8XNSXgOiC2UIm6Y9fmKbXsdtuS/eU0toJ9 5SbMSmm/wnjrK3Isz5ld8y91SM09ykRTCFT16wJX8CXge0pdfAMibarQFSzNOWByLAbb fIIhG4/0FD+3rGqnO8biqk0iyLVAG/MXYsZkOKss+vL747B4oj90WUOEfhX5fHv84qXP pyCQ==
X-Gm-Message-State: APjAAAWc4ZV/3Cbiz63TphLvxwo/EhbDGb3tuYsfsLOrrirt3MZVlOQQ bD2cjKfFPC9kFjcY1ssAIeCjTEA9uP0=
X-Google-Smtp-Source: APXvYqznv8z7lONW95pklmMXbgbY6l/gKum9rx+XCyxhfjPDfONLqAbhNYwajsDrt8S/jt8NDbHn9A==
X-Received: by 2002:a02:aa14:: with SMTP id r20mr27768632jam.19.1574698016158;  Mon, 25 Nov 2019 08:06:56 -0800 (PST)
Received: from mail-io1-f51.google.com (mail-io1-f51.google.com. [209.85.166.51]) by smtp.gmail.com with ESMTPSA id m4sm2314345ilf.18.2019.11.25.08.06.54 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Nov 2019 08:06:54 -0800 (PST)
Received: by mail-io1-f51.google.com with SMTP id j13so16881964ioe.0 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:06:54 -0800 (PST)
X-Received: by 2002:a02:a995:: with SMTP id q21mr29353283jam.27.1574698014594;  Mon, 25 Nov 2019 08:06:54 -0800 (PST)
MIME-Version: 1.0
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com> <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com> <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net> <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com>
In-Reply-To: <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com>
From: Aaron Parecki <aaron@parecki.com>
Date: Mon, 25 Nov 2019 08:06:42 -0800
X-Gmail-Original-Message-ID: <CAGBSGjroZ0WXC3vthFwzzAdU4anLyySsXvP5cVjoyi4yrb1AXQ@mail.gmail.com>
Message-ID: <CAGBSGjroZ0WXC3vthFwzzAdU4anLyySsXvP5cVjoyi4yrb1AXQ@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000c9dd6b05982df30e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/XsPuzXbPKHnh9qOIfTaIX0E391E>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 16:06:59 -0000

--000000000000c9dd6b05982df30e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I agree, the Facebook issue had nothing to do with extracting access tokens
via a hack, it was entirely facebook=E2=80=99s fault for issuing access tok=
ens
improperly in the first place. They posted some amazing details on what
happened on their website.

https://about.fb.com/news/2018/09/security-update/

If they couldn=E2=80=99t even get this right, it=E2=80=99s unlikely a sende=
r constrained
token would have helped here, and may have been bypassed just like the
other three issues that led to the breach.

> I tend to agree with your assessment. The simplest way with current OAuth
is use of code+pkce+refresh tokens, narrowly scoped access tokens, and
resource indicators to mint RS-specific, privilege restricted, short lived
access tokens.
>
> Do you think we should spell this out in the SPA BCP?

I agree that this is probably the best advice we can give. Ultimately
people will still make mistakes like the ones that led to the Facebook
issue, so all we can do is point people in the right direction.

Aaron



On Mon, Nov 25, 2019 at 6:08 AM Neil Madden <neil.madden@forgerock.com>
wrote:

> On 25 Nov 2019, at 12:09, Torsten Lodderstedt <torsten@lodderstedt.net>
> wrote:
> >
> > Hi Neil,
> >
> >> On 25. Nov 2019, at 12:38, Neil Madden <neil.madden@forgerock.com>
> wrote:
> >>
> >> But for web-based SPAs and so on, I'm not sure the cost/benefit trade
> off is really that good. The biggest threat for tokens being stolen/misus=
ed
> is still XSS, and DPoP does nothing to protect against that. It also
> doesn't protect against many other ways that tokens leak in browsers - e.=
g.
> if a token leaks in your browser history then the threat is that the
> attacker is physically using your device, in which case they also have
> access to your DPoP keys. In the cases like the Facebook breach, where
> highly automated mass compromise was achieved, I think we're lacking
> evidence that PoP would help there either.
> >>
> >> The single most important thing we can do to protect web-based apps is
> to encourage the principle of least privilege. Every access token should =
be
> as tightly constrained as possible - in scope, in audience, and in expiry
> time. Ideally at the point of being issued ...
> >
> > I tend to agree with your assessment. The simplest way with current
> OAuth is use of code+pkce+refresh tokens, narrowly scoped access tokens,
> and resource indicators to mint RS-specific, privilege restricted, short
> lived access tokens.
> >
> > Do you think we should spell this out in the SPA BCP?
>
> I think that would certainly be a great start.
>
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
--=20
----
Aaron Parecki
aaronparecki.com
@aaronpk <http://twitter.com/aaronpk>

--000000000000c9dd6b05982df30e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div dir=3D"auto">I agree, the Facebook issue had nothing to do with e=
xtracting access tokens via a hack, it was entirely facebook=E2=80=99s faul=
t for issuing access tokens improperly in the first place. They posted some=
 amazing details on what happened on their website.</div></div><div dir=3D"=
auto"><br></div><div dir=3D"auto"><div><a href=3D"https://about.fb.com/news=
/2018/09/security-update/">https://about.fb.com/news/2018/09/security-updat=
e/</a></div><br></div><div dir=3D"auto">If they couldn=E2=80=99t even get t=
his right, it=E2=80=99s unlikely a sender constrained token would have help=
ed here, and may have been bypassed just like the other three issues that l=
ed to the breach.</div><div dir=3D"auto"><br></div><div dir=3D"auto">&gt; I=
 tend to agree with your assessment. The simplest way with current OAuth is=
 use of code+pkce+refresh tokens, narrowly scoped access tokens, and resour=
ce indicators to mint RS-specific, privilege restricted, short lived access=
 tokens.=C2=A0<br>&gt;=C2=A0<br>&gt; Do you think we should spell this out =
in the SPA BCP?<br></div><div dir=3D"auto"><br></div><div dir=3D"auto">I ag=
ree that this is probably the best advice we can give. Ultimately people wi=
ll still make mistakes like the ones that led to the Facebook issue, so all=
 we can do is point people in the right direction.</div><div dir=3D"auto"><=
br></div><div dir=3D"auto">Aaron</div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><br></div><div><br><div class=3D"gmail_quote"><div dir=3D"ltr" cl=
ass=3D"gmail_attr">On Mon, Nov 25, 2019 at 6:08 AM Neil Madden &lt;<a href=
=3D"mailto:neil.madden@forgerock.com">neil.madden@forgerock.com</a>&gt; wro=
te:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex">On 25 Nov 2019, at 12:09, Torst=
en Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" target=3D"_bl=
ank">torsten@lodderstedt.net</a>&gt; wrote:<br>
&gt; <br>
&gt; Hi Neil, <br>
&gt; <br>
&gt;&gt; On 25. Nov 2019, at 12:38, Neil Madden &lt;<a href=3D"mailto:neil.=
madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt; w=
rote:<br>
&gt;&gt; <br>
&gt;&gt; But for web-based SPAs and so on, I&#39;m not sure the cost/benefi=
t trade off is really that good. The biggest threat for tokens being stolen=
/misused is still XSS, and DPoP does nothing to protect against that. It al=
so doesn&#39;t protect against many other ways that tokens leak in browsers=
 - e.g. if a token leaks in your browser history then the threat is that th=
e attacker is physically using your device, in which case they also have ac=
cess to your DPoP keys. In the cases like the Facebook breach, where highly=
 automated mass compromise was achieved, I think we&#39;re lacking evidence=
 that PoP would help there either.<br>
&gt;&gt; <br>
&gt;&gt; The single most important thing we can do to protect web-based app=
s is to encourage the principle of least privilege. Every access token shou=
ld be as tightly constrained as possible - in scope, in audience, and in ex=
piry time. Ideally at the point of being issued ...<br>
&gt; <br>
&gt; I tend to agree with your assessment. The simplest way with current OA=
uth is use of code+pkce+refresh tokens, narrowly scoped access tokens, and =
resource indicators to mint RS-specific, privilege restricted, short lived =
access tokens. <br>
&gt; <br>
&gt; Do you think we should spell this out in the SPA BCP?<br>
<br>
I think that would certainly be a great start.<br>
<br>
-- Neil<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature"><div>----</div><div>Aaron Parecki</div><=
div><a href=3D"http://aaronparecki.com" target=3D"_blank">aaronparecki.com<=
/a></div><div><a href=3D"http://twitter.com/aaronpk" target=3D"_blank">@aar=
onpk</a></div><div><br></div></div>

--000000000000c9dd6b05982df30e--


From nobody Mon Nov 25 08:07:50 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B22E12098F for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:07:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rITXKYkYYw_C for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:07:47 -0800 (PST)
Received: from mail-il1-x12f.google.com (mail-il1-x12f.google.com [IPv6:2607:f8b0:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B740F1208B0 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:07:47 -0800 (PST)
Received: by mail-il1-x12f.google.com with SMTP id s75so14704167ilc.3 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:07:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=wr1C03J0wqRBkqav6PpnxCr2DViqhV3tdy9eWdCo/ko=; b=m/lDckRXvIgm17oRHMwXqz8Lu5JbTavw1jcKOgCiQoIStN2JVCETVneGUDfLdjpXqC 7j81MGvj0/OtOI0htYNBTdGvlu40PlhUKN2BG3cFS1ac9cGA2Y1jF70Nx5RMGlD5svR8 RxHsa3E4O2APTbXq9Bz/u8DlJKNRd7NiDgnr/rWjzM+Cd+rolgKUu/iNfsbeQFOa6F8e 5Wc3fEY71jo4occ+C4sYIixZCQ0XS3c5/Zvmb5ple5c9ZnkYNyfMfuRxYuH/QVsH/sV5 OT5+j25Lm21yV0Ar5PGptbgv2Jizrz/0X3oQbbS9fBo07194mfJr9tTVcU9Ov/AbSxGj pAvg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=wr1C03J0wqRBkqav6PpnxCr2DViqhV3tdy9eWdCo/ko=; b=TLJwYaU9tgsCI2f/GzoqHH6IV6Ern1oxr1/faZ+qfTr+SKjMNrkjKxj09SY00kty+n DNs/yIlan5U70UUTeVLvTv8eWzdvsYjlq2CGoeZCIc1vsj/6RdFo9OVhk1w60YO3tgPN L+mHT7qSWAD74/BsW2rV1umhsKIhz2PhaZzxxPp0R42r4AIErtylUbHn3q/UnZuD4bH5 p9ZG5zaaRpqCs3xqHpOZJwf9cKYv256bZ/S5n5crxgK3ntmivuwqBNKQzA3LqAeqDn10 +rzGJ6GwrFtu0/lr6Kkla7xPuX8OAPHysZvor8BbOtk4oUWovfw+y/gKDuw6QgXRsSDL T1yg==
X-Gm-Message-State: APjAAAUYHvx59oyd22qqxJJSz1oNKivzqUN63lspwK94DNaHEyg6gSPa RMrGPoQCnh4Rdbg/pIopYPtOaOyJNME=
X-Google-Smtp-Source: APXvYqzQ1Tb3MPjSGwSkoaBCtLcx+6Yai4K01QcQ4UixUteYjF4TR/TvYRPQbsXvkXRUxjO+ovUMrA==
X-Received: by 2002:a92:aa48:: with SMTP id j69mr34523258ili.162.1574698066854;  Mon, 25 Nov 2019 08:07:46 -0800 (PST)
Received: from mail-io1-f42.google.com (mail-io1-f42.google.com. [209.85.166.42]) by smtp.gmail.com with ESMTPSA id u21sm2304864ila.41.2019.11.25.08.07.46 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Nov 2019 08:07:46 -0800 (PST)
Received: by mail-io1-f42.google.com with SMTP id k1so16833877ioj.6 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:07:46 -0800 (PST)
X-Received: by 2002:a6b:6d0a:: with SMTP id a10mr11113103iod.214.1574698066107;  Mon, 25 Nov 2019 08:07:46 -0800 (PST)
MIME-Version: 1.0
From: Aaron Parecki <aaron@parecki.com>
Date: Mon, 25 Nov 2019 08:07:35 -0800
X-Gmail-Original-Message-ID: <CAGBSGjo13sHFFTRp7D-b-70OH8qDN8xtprPSPzuz50P-6Xoopg@mail.gmail.com>
Message-ID: <CAGBSGjo13sHFFTRp7D-b-70OH8qDN8xtprPSPzuz50P-6Xoopg@mail.gmail.com>
To: OAuth WG <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000dbe3f505982df61a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/qPGLvTO7s8Vsj7gchPIx7OoGMaA>
Subject: [OAUTH-WG] Meeting minutes from IETF106
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 16:07:49 -0000

--000000000000dbe3f505982df61a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Are the meeting minutes posted anywhere? I haven=E2=80=99t been able to fin=
d a link
to them yet. Thanks!

Aaron
--=20
----
Aaron Parecki
aaronparecki.com
@aaronpk <http://twitter.com/aaronpk>

--000000000000dbe3f505982df61a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Are the meeting minutes posted anywhere? I haven=E2=80=99=
t been able to find a link to them yet. Thanks!</div><div dir=3D"auto"><br>=
</div><div dir=3D"auto">Aaron</div>-- <br><div dir=3D"ltr" class=3D"gmail_s=
ignature" data-smartmail=3D"gmail_signature"><div>----</div><div>Aaron Pare=
cki</div><div><a href=3D"http://aaronparecki.com" target=3D"_blank">aaronpa=
recki.com</a></div><div><a href=3D"http://twitter.com/aaronpk" target=3D"_b=
lank">@aaronpk</a></div><div><br></div></div>

--000000000000dbe3f505982df61a--


From nobody Mon Nov 25 08:15:04 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB74012098F for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:15:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1rMNa_U3iCE for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:15:00 -0800 (PST)
Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 529E41208B0 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:15:00 -0800 (PST)
Received: by mail-wr1-x429.google.com with SMTP id s5so18805813wrw.2 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:15:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=m5kQ7QhGLICSXgTctSTK5zwlV8B3U6dBxi7f2ft8HMM=; b=YOMA5CYTJX2xDMkt1fbD6obqA0K1OIMa36ETaqyn0ojHl1ev3Wz2DxBfolmlviVOW3 2+ausiIMs8uREwftmg1BTdx5WSPuVeWWOBu/m+0YJRII+3rFYS4EfAsoq4cczlKzrbMg 0CBaWbQJtBFIqNmc7QDKo8mtdKWKOQErw7qwlanQ6/XmKRtJ/waxWVdACDlUJZ51Ts5h eRLnFQrpfykW4OUsZ1qySXOz9zH7dZNOpY63sU+HfjyLJDigA4Wtj4HlBobIMtqU3rqT H/YKBGCIYDAmCKJRqQ+7IRj7+6hh3n7mYtn9a9UnhqOpI7gF1B/LXvcd3z2LzNNpufne DWoQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=m5kQ7QhGLICSXgTctSTK5zwlV8B3U6dBxi7f2ft8HMM=; b=fjqzowPmlUWQwKWJQlBGswuBp9PtQtVHmK/fkhw0AMoJWrqYYqI3apXw8U3jxN4/PA J9Yh9c1fmc9t3Wj+N/KmmmLpXyaK9ZnnvVCSwq59MJrzhuxsvOLbTF6qinNUHY9NEXGV DhUI2j6g3DdV8rZUgIp8hFj7Frrp2jfo68tAXGhzs4I3IvnrOQo+YRr0wKLGI0S+Y70g kg9RFZpXJXTFzM9xTRled23Yw8YIjJzMg2VTI7DzSIisLDYhTOTUW1olqiF1dPzg0otd /W97gBF27yBzcDwrweiDgv3+IPrdFLHqmmOC76H60P5uFtW0Yy9GnDUJldXWrpQhPwrN 93aA==
X-Gm-Message-State: APjAAAU9VEVnfsC145eM7NG5GRJTCYp/ybcrmxFg8E9babQ9BLYeioNz sEgFryfUFRATMsqgj0PLKDe+YA==
X-Google-Smtp-Source: APXvYqxXljDZw7eAEIJ/UwAXjLYq6MhDhoKK83jr63Z7BslamyMLk6gc8Rk+ghtNwBglrnLggZBNPw==
X-Received: by 2002:adf:f688:: with SMTP id v8mr15688685wrp.147.1574698498124;  Mon, 25 Nov 2019 08:14:58 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id a206sm9176448wmf.15.2019.11.25.08.14.56 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Nov 2019 08:14:57 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <D9321DA1-74F3-470F-B62B-DB27D5CAC1BC@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_95C4D7A4-E52F-4794-AE3D-48608A9EC6A6"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Mon, 25 Nov 2019 17:14:45 +0100
In-Reply-To: <CAGBSGjroZ0WXC3vthFwzzAdU4anLyySsXvP5cVjoyi4yrb1AXQ@mail.gmail.com>
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
To: Aaron Parecki <aaron@parecki.com>
References: <1561F036-BE65-45B7-B206-5702774B3DBF@lodderstedt.net> <E192E3A8-55BB-48AC-BCC3-F40EA9B04ABF@forgerock.com> <CAP-T6TR3xqZ+u_MRboz6XG5wxGAv3R8nUsgv4vXhzNVAr+=sqA@mail.gmail.com> <D3DF992C-88BB-428E-A539-140F7481F2EA@forgerock.com> <73A2D736-93F3-4DF2-975A-072729F0166F@lodderstedt.net> <C9F896F4-29A0-484B-BCFF-C569F74955BA@forgerock.com> <CAGBSGjroZ0WXC3vthFwzzAdU4anLyySsXvP5cVjoyi4yrb1AXQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/kXFQxR8wuFrQsfEm4F9juzms--Y>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 16:15:03 -0000

--Apple-Mail=_95C4D7A4-E52F-4794-AE3D-48608A9EC6A6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 25. Nov 2019, at 17:06, Aaron Parecki <aaron@parecki.com> wrote:
>=20
> I agree, the Facebook issue had nothing to do with extracting access =
tokens via a hack, it was entirely facebook=E2=80=99s fault for issuing =
access tokens improperly in the first place. They posted some amazing =
details on what happened on their website.
>=20
> https://about.fb.com/news/2018/09/security-update/
>=20
> If they couldn=E2=80=99t even get this right, it=E2=80=99s unlikely a =
sender constrained token would have helped here, and may have been =
bypassed just like the other three issues that led to the breach.
>=20
> > I tend to agree with your assessment. The simplest way with current =
OAuth is use of code+pkce+refresh tokens, narrowly scoped access tokens, =
and resource indicators to mint RS-specific, privilege restricted, short =
lived access tokens.=20
> >=20
> > Do you think we should spell this out in the SPA BCP?
>=20
> I agree that this is probably the best advice we can give. Ultimately =
people will still make mistakes like the ones that led to the Facebook =
issue, so all we can do is point people in the right direction.

It=E2=80=99s also softens the requirements since to would not require =
SPAs to have a PoP mechanism.=20

I think that=E2=80=99s ok, since SPAs with all APIs and token handling =
in the browser will anyway not be the security critical ones. SPAs =
serving as frontend for security sensitive applications can cover API =
interactions in the backend (where we have practical measures available =
for sender constrained access tokens.=20

>=20
> Aaron
>=20
>=20
>=20
> On Mon, Nov 25, 2019 at 6:08 AM Neil Madden =
<neil.madden@forgerock.com> wrote:
> On 25 Nov 2019, at 12:09, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
> >=20
> > Hi Neil,=20
> >=20
> >> On 25. Nov 2019, at 12:38, Neil Madden <neil.madden@forgerock.com> =
wrote:
> >>=20
> >> But for web-based SPAs and so on, I'm not sure the cost/benefit =
trade off is really that good. The biggest threat for tokens being =
stolen/misused is still XSS, and DPoP does nothing to protect against =
that. It also doesn't protect against many other ways that tokens leak =
in browsers - e.g. if a token leaks in your browser history then the =
threat is that the attacker is physically using your device, in which =
case they also have access to your DPoP keys. In the cases like the =
Facebook breach, where highly automated mass compromise was achieved, I =
think we're lacking evidence that PoP would help there either.
> >>=20
> >> The single most important thing we can do to protect web-based apps =
is to encourage the principle of least privilege. Every access token =
should be as tightly constrained as possible - in scope, in audience, =
and in expiry time. Ideally at the point of being issued ...
> >=20
> > I tend to agree with your assessment. The simplest way with current =
OAuth is use of code+pkce+refresh tokens, narrowly scoped access tokens, =
and resource indicators to mint RS-specific, privilege restricted, short =
lived access tokens.=20
> >=20
> > Do you think we should spell this out in the SPA BCP?
>=20
> I think that would certainly be a great start.
>=20
> -- Neil
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> --=20
> ----
> Aaron Parecki
> aaronparecki.com
> @aaronpk
>=20


--Apple-Mail=_95C4D7A4-E52F-4794-AE3D-48608A9EC6A6
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_95C4D7A4-E52F-4794-AE3D-48608A9EC6A6--


From nobody Mon Nov 25 08:19:03 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3193B120997 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:19:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1l1mDYCFHrJF for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 08:18:59 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B75D3120991 for <oauth@ietf.org>; Mon, 25 Nov 2019 08:18:58 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id 6DBC41B29 for <oauth@ietf.org>; Mon, 25 Nov 2019 16:18:57 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574698737; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2DZGbYThenzhjTisZzbqmQuzjqDQGm1lknkNYF3BoRo=; b=qR0AsNlPu6myoTIYzPWwmcB6CahG9wO49xq4GQELa+ZOK+1Me+jb7qqR01NtwibfkVn2cy Ro4MVRa/l8uixnP7qdvlQMWGeXFVYachwrvXdXFuFjsgD+8PjybMVsq8eAikejNzgWn1KT 4O0FCUCpKTW6ZQD335RUW2B6ZabiwbU=
To: oauth@ietf.org
References: <a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <9da85307-c21b-01d6-bfd7-db2638a545b3@danielfett.de>
Date: Mon, 25 Nov 2019 17:18:25 +0100
MIME-Version: 1.0
In-Reply-To: <a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de>
Content-Type: multipart/alternative; boundary="------------B2A1001EF432A137DECC4A2A"
Content-Language: de-AT-frami
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574698737; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2DZGbYThenzhjTisZzbqmQuzjqDQGm1lknkNYF3BoRo=; b=TY6gt/hBphH+ter8x6m1qmjxhojUfb0CFlihxulug4akdRfN2nqh+bgjxgM/wzbiu7txrF WzSXUvJ274KgW9HteHGfdsx4UpqQXzyRTuDD7TOfR4s4I4h+tlERp8tR3GoQzkg+8VdyKo dYvskmZ74dZN6uCtTcQw2MG8eQp2T14=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574698737; a=rsa-sha256; cv=none; b=bQa9XOUGP5Z7kWI8TVJ2Ooem8dejfKzZZ6p8t/impzCxiPAGZDJvwL4UnwW8aPUbfr0uSg85Cm0+Z2ga3EXb0mY+/ukI+oomDv529zYQbm8u6uFstBANw0/kXcRKhUP0RMpCDbUFTxiit9hPuy1LXVolnda5QUIuX2reA5HD7fU=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/80zNKDASvi4Or-8I-vvcjtZ5tbE>
Subject: Re: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 16:19:01 -0000

This is a multi-part message in MIME format.
--------------B2A1001EF432A137DECC4A2A
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hi Guido,

thanks for the feedback! I incorporated most of it into the next version.

Some comments:


Am 22.11.19 um 18:00 schrieb Guido Schmitz:
> * Section 3.1, Third Paragraph, Section 4.7, and other places throughout
> the document: (Please excuse that the following might be a bit
> nitpicking.) The term CSRF might be misleading as we are not talking
> about "classical" CSRF, where a party is tricked into (implicitly)
> believing that a request was caused by its own origin (from a web
> browser), but was actually sent cross-origin. Here, we are talking about
> requests which (by protocol) are typically intended to be cross-origin.
> The point here is not that the request is cross-origin, but that it
> originates from an unintended (cross-)origin. Maybe you could mention
> that we are talking about an advanced kind of CSRF in the
> double-redirection context.
Good catch, I added a reference to RFC6819, where this kind of CSRF is
explained in more detail.
>
> * Section 3.1.2: What about SPAs? Either they use authorization code
> grant with the help of some server or use CORS to access the token
> endpoint. The token endpoint, however, then needs to support CORS. The
> obvious question is then, what is the CORS policy of the token endpoint?
> It is probably fine to allow all origins (if this policy only applies to
> the token ep itself and not other eps at the same origin) or do I miss
> something?
This policy should be fine. But this is a topic for the SPA BCP.
> * Section 4.1.3, "fix fragments": The source [fb_fragments] only says
> that Facebook adds the fragment #_=_ to some URLs. There is no
> explanation or reasoning in the source (as well as in this document) at
> all that this technique strips the fragment from redirects. (Mike Jones
> also commented on this.)
Thanks, I removed the reference completely and added some explanation
instead.
> * Section 4.2.4, Bullet Point "referrer header": Adding the
> rel="noreferrer" attribute to links does not protect against leakage via
> third-party content. Referrer Policy is the only effective
> countermeasure of the mentioned two as it can be used to completely
> suppress the Referer header or at least strip it to the origin. Should
> we give a concrete example for Referrer Policies? For example, the
> header "Referrer-Policy: no-referrer" in the response completely
> suppresses the Referer header in all requests originating from the
> resulting document.  Also, this measure is easier to implement than
> adding rel="noreferrer" to each link. (BTW, there is also an excess
> quotation mark in this paragraph.)
You're right, Referrer Policies are the way to go. I added your example.
> * Section 4.5.3, "Code-bound State": This requires that state is fresh
> for each flow. You should mention or even emphasize this.
>
> * Section 4.5.3, "Per-instance client id/secret": This essentially says
> that native apps or anything that might be able to obtain and store
> client id/secret (e.g., using dynamic registration) could do this. Web
> SPAs could do this as well (e.g., using Web Storage). The last sentence
> of this paragraph is somehow confusing.
I propose to remove these two points from the bullet point list
completely. They are more of an academic discussion for a problem that
is already solved by PKCE at this point. Any objections?
> * Section 4.5.3, Second Paragraph after bullet points, "Note on
> pre-warmed secrets": What is the context of this note? Does the attacker
> start a flow on some device, extract secrets, and then pass this device
> to the victim who then completes the OAuth flow? (Mike Jones also
> remarked that "pre-warmed secrets" is not explained)

That is essentially a pointer in the general direction of the PKCE
Chosen Challenge attack. I agree that it needs a better wording.

-Daniel


--------------B2A1001EF432A137DECC4A2A
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hi Guido, <br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">thanks for the feedback! I incorporated
      most of it into the next version.</div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Some comments:<br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Am 22.11.19 um 18:00 schrieb Guido
      Schmitz:<br>
    </div>
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">* Section 3.1, Third Paragraph, Section 4.7, and other places throughout
the document: (Please excuse that the following might be a bit
nitpicking.) The term CSRF might be misleading as we are not talking
about "classical" CSRF, where a party is tricked into (implicitly)
believing that a request was caused by its own origin (from a web
browser), but was actually sent cross-origin. Here, we are talking about
requests which (by protocol) are typically intended to be cross-origin.
The point here is not that the request is cross-origin, but that it
originates from an unintended (cross-)origin. Maybe you could mention
that we are talking about an advanced kind of CSRF in the
double-redirection context.</pre>
    </blockquote>
    Good catch, I added a reference to RFC6819, where this kind of CSRF
    is explained in more detail.<br>
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">

* Section 3.1.2: What about SPAs? Either they use authorization code
grant with the help of some server or use CORS to access the token
endpoint. The token endpoint, however, then needs to support CORS. The
obvious question is then, what is the CORS policy of the token endpoint?
It is probably fine to allow all origins (if this policy only applies to
the token ep itself and not other eps at the same origin) or do I miss
something?</pre>
    </blockquote>
    This policy should be fine. But this is a topic for the SPA BCP.<br>
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">* Section 4.1.3, "fix fragments": The source [fb_fragments] only says
that Facebook adds the fragment #_=_ to some URLs. There is no
explanation or reasoning in the source (as well as in this document) at
all that this technique strips the fragment from redirects. (Mike Jones
also commented on this.)</pre>
    </blockquote>
    Thanks, I removed the reference completely and added some
    explanation instead.<br>
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">* Section 4.2.4, Bullet Point "referrer header": Adding the
rel="noreferrer" attribute to links does not protect against leakage via
third-party content. Referrer Policy is the only effective
countermeasure of the mentioned two as it can be used to completely
suppress the Referer header or at least strip it to the origin. Should
we give a concrete example for Referrer Policies? For example, the
header "Referrer-Policy: no-referrer" in the response completely
suppresses the Referer header in all requests originating from the
resulting document.  Also, this measure is easier to implement than
adding rel="noreferrer" to each link. (BTW, there is also an excess
quotation mark in this paragraph.)</pre>
    </blockquote>
    You're right, Referrer Policies are the way to go. I added your
    example.<br>
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">* Section 4.5.3, "Code-bound State": This requires that state is fresh
for each flow. You should mention or even emphasize this.

* Section 4.5.3, "Per-instance client id/secret": This essentially says
that native apps or anything that might be able to obtain and store
client id/secret (e.g., using dynamic registration) could do this. Web
SPAs could do this as well (e.g., using Web Storage). The last sentence
of this paragraph is somehow confusing.</pre>
    </blockquote>
    I propose to remove these two points from the bullet point list
    completely. They are more of an academic discussion for a problem
    that is already solved by PKCE at this point. Any objections?
    <blockquote type="cite"
      cite="mid:a017889e-f50a-3e34-f8e5-477a56518051@gtrs.de">
      <pre class="moz-quote-pre" wrap="">* Section 4.5.3, Second Paragraph after bullet points, "Note on
pre-warmed secrets": What is the context of this note? Does the attacker
start a flow on some device, extract secrets, and then pass this device
to the victim who then completes the OAuth flow? (Mike Jones also
remarked that "pre-warmed secrets" is not explained)</pre>
    </blockquote>
    <p>That is essentially a pointer in the general direction of the
      PKCE Chosen Challenge attack. I agree that it needs a better
      wording.</p>
    <p>-Daniel<br>
    </p>
  </body>
</html>

--------------B2A1001EF432A137DECC4A2A--


From nobody Mon Nov 25 11:42:18 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAA37120018 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 11:42:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4o_dO9vOdn4o for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 11:42:15 -0800 (PST)
Received: from mail-lf1-x131.google.com (mail-lf1-x131.google.com [IPv6:2a00:1450:4864:20::131]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4726120E1E for <oauth@ietf.org>; Mon, 25 Nov 2019 11:42:13 -0800 (PST)
Received: by mail-lf1-x131.google.com with SMTP id m30so10144569lfp.8 for <oauth@ietf.org>; Mon, 25 Nov 2019 11:42:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=JL9qXttewfOuM8zlrzzplmrOBPqXUGYf+EAkjq0qSrM=; b=bi5ktGe2YMAzQ81R80mcAVlEHlKNoplsqgYNEc8Xr72RkORDE8LOTCP/ZosrovKE4k Fa6iPzAc41NTTiSKUvDG6FzYaQC+qcKjPJqYmGYJwWEQRa5hDnIYOTCKvLBMGys9FBkI hkbZXY+tDgff1lYkCB41e6XXiFsBjsayrpRxe8STIWF1jd/THmKEi/926aRIt3qTvdUu 77snOwjPmADfeJNmUGzc4Sl3ZuRS4VmlE/vkDVxXJ+pIcTac9wsXaZJnZf7wsL7QtxiO fVykv9xoexKpFR0Q7h066v/5RWyEE3sCWxUc/OjCuzlaf/RHJ8RRRRTyWUHyfkkIbQDS uziQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JL9qXttewfOuM8zlrzzplmrOBPqXUGYf+EAkjq0qSrM=; b=k8jZeVJ/MDxoxd6mkyBDnE8lesATo7s7d0OCRX8Yes53Kgol48e3J6kBDGjxrTkfhu JEeV8lHeo9UQlvdRvSbbkwmPmnmLBQQ1reo065hkLVN8laarBKyr4E2/H4GU/U0bAa6E jSHy23wo+PbQXaw6GZlwqn7MCtKjTORUeLZBn4DWzpkcSsXOQIM93c33FVnYKWAxyw3d CEXORIFdQEpIiXZDK7dLxj7Mm4Dy3jPaBMy6gsrW+Qw54gDo3Y8aZz5dddY+IdWZ9GdE YG10UHp+B8+x059/531n1o1o7fW82R3s8tHRif2Vv6P+/spsFqQKRVnF+cJKTkU+Ht4K lyKw==
X-Gm-Message-State: APjAAAW45AQKceGLXNfZc5UFKZ5LnZRJkw6+G10b6foypjXLuYI+TX/s 66bMXwOKMVC9ONdb/lezPuGA7iebNOtQeXuxQkW+CKLmH8KuiqgxeLTdakG9eFZLWXHS10A7u9M Z+FRFafkcCDR+/A==
X-Google-Smtp-Source: APXvYqwhzHxrwn96i2Ny0j8vjU1GB2+DCDXCSYgwClzKAbeDJStJ+Fivf9Z/K4TM6MTCQgSOJkv8BfjSvPgMsCra49Q=
X-Received: by 2002:ac2:5388:: with SMTP id g8mr11315944lfh.43.1574710931912;  Mon, 25 Nov 2019 11:42:11 -0800 (PST)
MIME-Version: 1.0
References: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com> <20191123064612.GI32847@mit.edu>
In-Reply-To: <20191123064612.GI32847@mit.edu>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 25 Nov 2019 12:41:45 -0700
Message-ID: <CA+k3eCS1iZ2J_owo627WFuBY=0pYUuQpjRUzq4hpTEHkJPsAQA@mail.gmail.com>
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>,  "ve7jtb@gmail.com" <ve7jtb@gmail.com>, "oauth@ietf.org" <oauth@ietf.org>, Andrey Labunets <isciurus@fb.com>
Content-Type: multipart/alternative; boundary="000000000000b899c4059830f5db"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/X5qWEuJpdycOWa-QGcwmeFjutMI>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 19:42:17 -0000

--000000000000b899c4059830f5db
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 22, 2019 at 11:46 PM Benjamin Kaduk <kaduk@mit.edu> wrote:

> On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:
> > SUBSTANTIVE
> >
> [...]
> >
> > 4.8.1.1. Metadata - This section suggests the use of a
> "resource_servers" metadata value.  This isn't defined by RFC 8414 nor do=
 I
> see it the IANA OAuth Authorization Server Metadata registry at
> https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#=
authorization-server-metadata.
> Is this something that's been standardized elsewhere?  If so, please add =
a
> citation.  If not, please clearly say that this metadata value is not
> standardized, and is therefore unlikely to be interoperable.
>
> I would go further and say that we should not document "best practices"
> that involve non-standardized values.
>
> > 4.8.1.1. Metadata - This section suggests the use a
> "access_token_resource_server" token response value.  Please likewise
> clearly say that this parameter isn't a standard.
>
> (ditto)
>

The document has a number of occurrences similar to these where a
particular solution is discussed even though it's not been standardized
and/or isn't actually a recommendation of the document. Such discussions
can instructive and have valuable information. But I wonder if it might be
more appropriate to omit them from the BCP? When the document is read and
understood in its full context, I do think the scope and intent of such
discussions are made reasonably clear. However, they could be pretty easily
misunderstood by someone just reading individual subsections or from citing
parts of the document text without the larger context. I guess I'm
thinking/suggesting that it'd be better if the BCP only focused on the
actionable recommendations it is making. And omit background type
discussion of alternative approaches that didn't get used for whatever
reason. Or, if they do stay in the document, de-emphasize them even further
like maybe moving them into an appendix rather than the main body of the
doc.

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000b899c4059830f5db
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 22, 2019 at 11:46 PM Benj=
amin Kaduk &lt;<a href=3D"mailto:kaduk@mit.edu" target=3D"_blank">kaduk@mit=
.edu</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1=
ex">On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:<br>
&gt; SUBSTANTIVE<br>
&gt; <br>
[...]<br>
&gt; <br>
&gt; 4.8.1.1. Metadata - This section suggests the use of a &quot;resource_=
servers&quot; metadata value.=C2=A0 This isn&#39;t defined by RFC 8414 nor =
do I see it the IANA OAuth Authorization Server Metadata registry at <a hre=
f=3D"https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xht=
ml#authorization-server-metadata" rel=3D"noreferrer" target=3D"_blank">http=
s://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#author=
ization-server-metadata</a>.=C2=A0 Is this something that&#39;s been standa=
rdized elsewhere?=C2=A0 If so, please add a citation.=C2=A0 If not, please =
clearly say that this metadata value is not standardized, and is therefore =
unlikely to be interoperable.<br>
<br>
I would go further and say that we should not document &quot;best practices=
&quot;<br>
that involve non-standardized values.<br>
<br>
&gt; 4.8.1.1. Metadata - This section suggests the use a &quot;access_token=
_resource_server&quot; token response value.=C2=A0 Please likewise clearly =
say that this parameter isn&#39;t a standard.<br>
<br>
(ditto)<br></blockquote><div><br></div><div>The document has a number of  o=
ccurrences similar to these where a particular solution is discussed even t=
hough it&#39;s not been standardized and/or isn&#39;t actually a recommenda=
tion of the document. Such discussions can instructive and have valuable in=
formation. But I wonder if it might be more appropriate to omit them from t=
he BCP? When the document is read and understood in its full context, I do =
think the scope and intent of such discussions are made reasonably clear. H=
owever, they could be pretty easily misunderstood by someone just reading i=
ndividual subsections or from citing parts of the document text without the=
 larger context. I guess I&#39;m thinking/suggesting that it&#39;d be bette=
r if the BCP only focused on the actionable recommendations it is making. A=
nd omit background type discussion of alternative approaches that didn&#39;=
t get used for whatever reason. Or, if they do stay in the document, de-emp=
hasize them even further like maybe moving them into an appendix rather tha=
n the main body of the doc. <br></div><div>=C2=A0</div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000b899c4059830f5db--


From nobody Mon Nov 25 12:42:26 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD05D120F6B for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:42:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A9XPDJ07vkVm for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:42:23 -0800 (PST)
Received: from mail-lj1-x232.google.com (mail-lj1-x232.google.com [IPv6:2a00:1450:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC8CC120965 for <oauth@ietf.org>; Mon, 25 Nov 2019 12:42:21 -0800 (PST)
Received: by mail-lj1-x232.google.com with SMTP id n21so17476886ljg.12 for <oauth@ietf.org>; Mon, 25 Nov 2019 12:42:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=MeDNx50PjdSjjc0QxS971EvpUvYDALZObcC+lhZokgY=; b=OEU3xmBtkt733lmPAkvI+g0MWkOS3754mAGOUkKxYYTm2xfAOvkTGAGtj8X3XBs0/K 013R5BjgxumXm3NfMf3ul2WlKPUmrV+X1TVmVhUF2LQNjEs+EXUQHmZ2VcMLUPrFLVUv DW3qXTjpEXcQKr7+MzaMVGt6AdRmmQLmqcdPxZk/l1Fmj3M0Nw29I7mPfPtq35KHIbga yaFXYsC7FuDZMenIczORLRUZwgTqbM4EoG8XECkXPB9vds+j5Ev8796pEOpnNpQdnE7K kvGKqEk/JgZ6YclQiaDqq6mukdkRE+waLSOh9C0jmPruxrbwo6n7xt2oI7IJ1JVIiahe L+zA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=MeDNx50PjdSjjc0QxS971EvpUvYDALZObcC+lhZokgY=; b=NyFswHMiEdSlThSTVXsFgqE7TPdQ/c3PPnztFYwwQwW9DWplAKw8vLuqrhScMX8tlC aYPCA95nGfMa/VOQQ91hywRR7qzZvNxBMZItQ/kIrQ04GMsf0E09ZWxC/JuQWrpirH9H bdZbudOMbt/3c+El48qQVN2Q4oYLWsOqdmmPA1hJHjGvOZWmm2gzLIzRUWGiDsqg8kBZ ++9u+7hBQDrKv/sdEedVtzFPgov9GTCK2T3tVb96kHMmYf0a7obnyg6BrOBqnKsPGUxH fJS91hfBOfXOZT7PY0zav306rpN96KF0iQtLvIA48KAXE3uIkdG8dNbxs+uP7GcCR0iI EyvQ==
X-Gm-Message-State: APjAAAXB9i+w67SNzC0qdvuCiAg0hp/RhG9kSrGQWkeS3FSSWZSZ9EnL 8uLf69m3nF2Z1mxCm20fq8TGorTZ1DF1J2+kfMEv1CxQgTKgJqsetOdUzOecG6vkF8zxiQeYWWE HMmOZSjM/sfHDsaTPtrM=
X-Google-Smtp-Source: APXvYqzhi6nqMyQDh4zZrLtJZUeWi6nO02hGFWNvxe5tibRo8wXMSosSMjIPkaSLovKgF3xOqqLn0osZcHQXd0tDiE4=
X-Received: by 2002:a2e:b5d4:: with SMTP id g20mr18974259ljn.140.1574714539951;  Mon, 25 Nov 2019 12:42:19 -0800 (PST)
MIME-Version: 1.0
References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com> <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net> <CAB3n-Ya+WMrNdtBMfciCOQipjHfounNo0MThJObGmS7_XfzJmA@mail.gmail.com> <0C42020B-C454-4427-BB99-45C8152D330A@lodderstedt.net> <CAB3n-YZZzprjk-XvogK5Z-_Kkxhtqp9VotoSWcJ=C3Fdg_dBjA@mail.gmail.com>
In-Reply-To: <CAB3n-YZZzprjk-XvogK5Z-_Kkxhtqp9VotoSWcJ=C3Fdg_dBjA@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 25 Nov 2019 13:41:53 -0700
Message-ID: <CA+k3eCQxCfhMyDrtCjcyU1a6-ZEP8xMVx+QTwFQz7gBF4awS6g@mail.gmail.com>
To: Ryan Kelly <rfkelly@mozilla.com>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000c6e188059831cc84"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/AIAuJsKc-SVfXzxTgOqEbX2epCs>
Subject: Re: [OAUTH-WG] New Version Notification for draft-lodderstedt-oauth-rar-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 20:42:25 -0000

--000000000000c6e188059831cc84
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sun, Nov 24, 2019 at 8:18 PM Ryan Kelly <rfkelly@mozilla.com> wrote:

>
> > The "matches as prefix of one of the URLs" part of Paragraph 3 seems a
>> bit unclear as well, given that there is no requirement that the
>> "locations" elements be well-formed URLs. Is this is simple string prefi=
x
>> match, or some sort of path matching based on the components of the URL?
>>
>> simple string match
>>
>
> Does the AS need to take any particular care about resource names that
> might accidentally be prefixes of each other, such as "
> https://example.com/payments" and "https://example.com/payme"?  That
> seems really contrived, but perhaps I'm just not creative enough to think
> of a more realistic example.
>


That particular example is maybe somewhat contrived but that kind of thing
will undoubtedly occur at some point. I do think that some sort of path
matching would be more appropriate for this.

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--000000000000c6e188059831cc84
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Sun, Nov 24, 2019 at 8:18 PM Ryan =
Kelly &lt;<span class=3D"" style=3D"" id=3D":148.1" tabindex=3D"-1">rfkelly=
</span>@<span class=3D"" style=3D"" id=3D":148.2" tabindex=3D"-1">mozilla</=
span>.com&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:=
1ex"><div dir=3D"ltr"><div class=3D"gmail_quote"><br><blockquote class=3D"g=
mail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204=
,204,204);padding-left:1ex">
&gt; The &quot;matches as prefix of one of the URLs&quot; part of Paragraph=
 3 seems a bit unclear as well, given that there is no requirement that the=
 &quot;locations&quot; elements be well-formed URLs. Is this is simple stri=
ng prefix match, or some sort of path matching based on the components of t=
he URL?<br>
<br>
simple string match<br></blockquote><div><br></div><div>Does the AS need to=
 take any particular care about resource names that might accidentally be p=
refixes of each other, such as &quot;<a href=3D"https://example.com/payment=
s" target=3D"_blank">https://example.com/payments</a>&quot; and &quot;<a hr=
ef=3D"https://example.com/payme" target=3D"_blank">https://example.com/paym=
e</a>&quot;?=C2=A0 That seems really contrived, but perhaps I&#39;m just no=
t creative enough to think of a more realistic example.<br></div></div></di=
v></blockquote><div><br></div><div><br></div><div>That particular example i=
s maybe somewhat contrived but that kind of thing will undoubtedly occur at=
 some point. I do think that some sort of path matching would be more appro=
priate for this. <br></div><div><br></div><div>=C2=A0</div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--000000000000c6e188059831cc84--


From nobody Mon Nov 25 12:50:02 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DB9E120F71 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:50:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvZh9i4y34Xf for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:49:58 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29E33120F6C for <oauth@ietf.org>; Mon, 25 Nov 2019 12:49:57 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id DA7E41B46; Mon, 25 Nov 2019 20:49:54 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574714995; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9jKoc77Co40pdEWvwS6sZtoTPAwKOrLGVL7G0NTjEbE=; b=nniH6S8rDGjzHXD/K4ZkF2BPIcMj4LD3Eaj63ALBhyoxk41gARVzeiKVXn5cGpjwjnVij/ HF/UN6ip9H5KMJzjWbpP5hd1cZc9cUyLQQ9YB5AcN7hczQvm6wbvkYMW/WOBImFrPuKjYZ 9zB/BEF49KL7Y3Gycv1EPXNYamU0C1A=
Date: Mon, 25 Nov 2019 21:49:55 +0100
In-Reply-To: <CA+k3eCS1iZ2J_owo627WFuBY=0pYUuQpjRUzq4hpTEHkJPsAQA@mail.gmail.com>
References: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com> <20191123064612.GI32847@mit.edu> <CA+k3eCS1iZ2J_owo627WFuBY=0pYUuQpjRUzq4hpTEHkJPsAQA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----BLSOMZZL69UCJO7XBD2LE8HXYHI0PX"
Content-Transfer-Encoding: 7bit
To: oauth@ietf.org, Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, Benjamin Kaduk <kaduk@mit.edu>
CC: Andrey Labunets <isciurus@fb.com>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>,  Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>, "oauth@ietf.org" <oauth@ietf.org>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <206E3AEC-7152-465F-B78E-7BF91B6E3D59@danielfett.de>
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574714995; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9jKoc77Co40pdEWvwS6sZtoTPAwKOrLGVL7G0NTjEbE=; b=gz0mYjqqIAlwU3tG/YDdjmUCD3MwSVbQo+feWlUxptbauuf6xClxaZlb8YRNwc8vg68t8+ XpfTfPSRJOUq0LV1sijZrbflCiWxCXfcXqvM7++wmBplyQPO4GhRXoFlxzq0opLvWWCs/n BneljQi0Yo5uiA3KcBrpW9cOFPW1DJk=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574714995; a=rsa-sha256; cv=none; b=a0SJQ74c55wJeluNMLgvoH6Xgh/n90WCLaO+zCrYV4/ARhPcySq97VWXQ1BDuijHqNAnO3Q6rsi31r+7L471yQZ9s8WAtXu5Jg41zjuUSyTQO1X4NVdcUAJ9g09Lyvprd8YYsskEj+yqVEhxZJdIwkz/uNhM6gAqWlpzc+9Ye0w=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/XVAf5J4AFU08-eMwLv9Ngd0tfYM>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 20:50:00 -0000

------BLSOMZZL69UCJO7XBD2LE8HXYHI0PX
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

+1=2E We should only discuss solutions if we would be okay with people actu=
ally implementing them=2E (See also my feedback to Guido's review=2E)

-Daniel

Am 25=2E November 2019 20:41:45 MEZ schrieb Brian Campbell <bcampbell=3D40=
pingidentity=2Ecom@dmarc=2Eietf=2Eorg>:
>On Fri, Nov 22, 2019 at 11:46 PM Benjamin Kaduk <kaduk@mit=2Eedu> wrote:
>
>> On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:
>> > SUBSTANTIVE
>> >
>> [=2E=2E=2E]
>> >
>> > 4=2E8=2E1=2E1=2E Metadata - This section suggests the use of a
>> "resource_servers" metadata value=2E  This isn't defined by RFC 8414
>nor do I
>> see it the IANA OAuth Authorization Server Metadata registry at
>>
>https://www=2Eiana=2Eorg/assignments/oauth-parameters/oauth-parameters=2E=
xhtml#authorization-server-metadata=2E
>> Is this something that's been standardized elsewhere?  If so, please
>add a
>> citation=2E  If not, please clearly say that this metadata value is not
>> standardized, and is therefore unlikely to be interoperable=2E
>>
>> I would go further and say that we should not document "best
>practices"
>> that involve non-standardized values=2E
>>
>> > 4=2E8=2E1=2E1=2E Metadata - This section suggests the use a
>> "access_token_resource_server" token response value=2E  Please likewise
>> clearly say that this parameter isn't a standard=2E
>>
>> (ditto)
>>
>
>The document has a number of occurrences similar to these where a
>particular solution is discussed even though it's not been standardized
>and/or isn't actually a recommendation of the document=2E Such
>discussions
>can instructive and have valuable information=2E But I wonder if it might
>be
>more appropriate to omit them from the BCP? When the document is read
>and
>understood in its full context, I do think the scope and intent of such
>discussions are made reasonably clear=2E However, they could be pretty
>easily
>misunderstood by someone just reading individual subsections or from
>citing
>parts of the document text without the larger context=2E I guess I'm
>thinking/suggesting that it'd be better if the BCP only focused on the
>actionable recommendations it is making=2E And omit background type
>discussion of alternative approaches that didn't get used for whatever
>reason=2E Or, if they do stay in the document, de-emphasize them even
>further
>like maybe moving them into an appendix rather than the main body of
>the
>doc=2E
>
>--=20
>_CONFIDENTIALITY NOTICE: This email may contain confidential and
>privileged=20
>material for the sole use of the intended recipient(s)=2E Any review,
>use,=20
>distribution or disclosure by others is strictly prohibited=2E=C2=A0 If y=
ou
>have=20
>received this communication in error, please notify the sender
>immediately=20
>by e-mail and delete the message and any file attachments from your=20
>computer=2E Thank you=2E_

--=20
Diese Nachricht wurde von meinem Android-Ger=C3=A4t mit K-9 Mail gesendet=
=2E
------BLSOMZZL69UCJO7XBD2LE8HXYHI0PX
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body>+1=2E We should only discuss solutions if we would=
 be okay with people actually implementing them=2E (See also my feedback to=
 Guido's review=2E)<br><br>-Daniel<br><br><div class=3D"gmail_quote">Am 25=
=2E November 2019 20:41:45 MEZ schrieb Brian Campbell &lt;bcampbell=3D40pin=
gidentity=2Ecom@dmarc=2Eietf=2Eorg&gt;:<blockquote class=3D"gmail_quote" st=
yle=3D"margin: 0pt 0pt 0pt 0=2E8ex; border-left: 1px solid rgb(204, 204, 20=
4); padding-left: 1ex;">
<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote"=
><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 22, 2019 at 11:46 PM Ben=
jamin Kaduk &lt;<a href=3D"mailto:kaduk@mit=2Eedu" target=3D"_blank">kaduk@=
mit=2E=2Eedu</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0=2E8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex">On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:<b=
r>
&gt; SUBSTANTIVE<br>
&gt; <br>
[=2E=2E=2E]<br>
&gt; <br>
&gt; 4=2E8=2E1=2E1=2E Metadata - This section suggests the use of a "resou=
rce_servers" metadata value=2E&nbsp; This isn't defined by RFC 8414 nor do =
I see it the IANA OAuth Authorization Server Metadata registry at <a href=
=3D"https://www=2Eiana=2Eorg/assignments/oauth-parameters/oauth-parameters=
=2Exhtml#authorization-server-metadata" rel=3D"noreferrer" target=3D"_blank=
">https://www=2Eiana=2Eorg/assignments/oauth-parameters/oauth-parameters=2E=
xhtml#authorization-server-metadata</a>=2E&nbsp; Is this something that's b=
een standardized elsewhere?&nbsp; If so, please add a citation=2E&nbsp; If =
not, please clearly say that this metadata value is not standardized, and i=
s therefore unlikely to be interoperable=2E<br>
<br>
I would go further and say that we should not document "best practices"<br=
>
that involve non-standardized values=2E<br>
<br>
&gt; 4=2E8=2E1=2E1=2E Metadata - This section suggests the use a "access_t=
oken_resource_server" token response value=2E&nbsp; Please likewise clearly=
 say that this parameter isn't a standard=2E<br>
<br>
(ditto)<br></blockquote><div><br></div><div>The document has a number of  =
occurrences similar to these where a particular solution is discussed even =
though it's not been standardized and/or isn't actually a recommendation of=
 the document=2E Such discussions can instructive and have valuable informa=
tion=2E But I wonder if it might be more appropriate to omit them from the =
BCP? When the document is read and understood in its full context, I do thi=
nk the scope and intent of such discussions are made reasonably clear=2E Ho=
wever, they could be pretty easily misunderstood by someone just reading in=
dividual subsections or from citing parts of the document text without the =
larger context=2E I guess I'm thinking/suggesting that it'd be better if th=
e BCP only focused on the actionable recommendations it is making=2E And om=
it background type discussion of alternative approaches that didn't get use=
d for whatever reason=2E Or, if they do stay in the document, de-emphasize =
them even further like maybe moving them into an appendix rather than the m=
ain body of the doc=2E <br></div><div>&nbsp;</div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:b=
aseline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system=
-ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,=
Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)">=
<span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align=
:baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui=
,-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,U=
buntu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600=
"><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confident=
ial and privileged material for the sole use of the intended recipient(s)=
=2E Any review, use, distribution or disclosure by others is strictly prohi=
bited=2E=2E&nbsp; If you have received this communication in error, please =
notify the sender immediately by e-mail and delete the message and any file=
 attachments from your computer=2E Thank you=2E</font></span></i></blockquo=
te></div><br>-- <br>Diese Nachricht wurde von meinem Android-Ger=C3=A4t mit=
 K-9 Mail gesendet=2E</body></html>
------BLSOMZZL69UCJO7XBD2LE8HXYHI0PX--


From nobody Mon Nov 25 12:55:25 2019
Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F9E51200DF for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:55:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=parecki-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VfpSbGz78sym for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 12:55:21 -0800 (PST)
Received: from mail-il1-x12f.google.com (mail-il1-x12f.google.com [IPv6:2607:f8b0:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAF25120F73 for <oauth@ietf.org>; Mon, 25 Nov 2019 12:55:21 -0800 (PST)
Received: by mail-il1-x12f.google.com with SMTP id q15so15509994ils.8 for <oauth@ietf.org>; Mon, 25 Nov 2019 12:55:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=PRWZ1NubKMotDzG1swltIqpAq3/IFqQWWovxoIUh65E=; b=rSVZhJrkhFNZzZrVkYP8hdISqFF9BeczfSu8d8nULsTIa7AAdLnwA/QpPPEGyv+hdw MYucNncdv8RAnEb3dDzOh3+XRfW4oQ+kdtOQTGhDwpMfrrXZPP6OyWi49SmmYll2pH+9 eHWG8Wg51IlgIjI2XBK3j8tjHxQBCwr5yju/R+4J8yS4dcHzSoE+svwwdVGVJ6QaPSGh l5h23ux+8Y6Vyw0hEhHWLthRh+IynXpw9+9T+VG5aAk+CzoyWBGaBMQj79ZzulOn9qRp jb8UHXBuER07d+JjkWidE8vRBROWcKv4FNLRpZE0920Jlm8HqF2ZurRelPwUeXK0j2Je M1CQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=PRWZ1NubKMotDzG1swltIqpAq3/IFqQWWovxoIUh65E=; b=XkCnXSJHrGqELOKSyvFQTHfKul15HWz7kRml+t7aV0B1G62LdwdB7JVw7qHw51yJyT /xcT2ZW0kUCAGbFf6xq9xGDIZfXEbkMaovFZDhnF2QfotSZruWGwDRSzao/fEwbNbJz6 UJ9qBf3l7y80sVElt0lLpB7iwgPdWbhYKZXM6B/vGHYMdhcbpA1BygR5h0TS56+6bgpU SPqwIcoOKPdj33G0ONw23ZJnea4QUiGwAXcJmF958lgAn0dAAPViDCrK2E42rFx/XTyq WOmP0EZcG4GASuSoTeY1cmylZinKQbUyukaFF3hRfY7anId4JAuZMzoaBXSfj8RAwWxc IjZA==
X-Gm-Message-State: APjAAAVUYYRZlz+Pg78qel/4iRoM5iNdcr7Bm6PcWmJpm9MKL6NK75BV R4tvNRpHW9tkpI4GW3YRPog5TyINZowoQA==
X-Google-Smtp-Source: APXvYqxg1oNe/EdMjLV4s4SASPyKjkZtyCPcmTNF4QlViIftWsegM+UC5qs/fG5vXmHFgGacny1QJg==
X-Received: by 2002:a05:6e02:8e4:: with SMTP id n4mr21136903ilt.210.1574715320785;  Mon, 25 Nov 2019 12:55:20 -0800 (PST)
Received: from mail-il1-f181.google.com (mail-il1-f181.google.com. [209.85.166.181]) by smtp.gmail.com with ESMTPSA id c73sm2504494ila.9.2019.11.25.12.55.19 for <oauth@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Nov 2019 12:55:19 -0800 (PST)
Received: by mail-il1-f181.google.com with SMTP id v17so11652046ilg.7 for <oauth@ietf.org>; Mon, 25 Nov 2019 12:55:19 -0800 (PST)
X-Received: by 2002:a05:6e02:8e2:: with SMTP id n2mr14161613ilt.167.1574715319430;  Mon, 25 Nov 2019 12:55:19 -0800 (PST)
MIME-Version: 1.0
References: <BN8PR00MB056369C04536770FF5B90512F54F0@BN8PR00MB0563.namprd00.prod.outlook.com> <20191123064612.GI32847@mit.edu> <CA+k3eCS1iZ2J_owo627WFuBY=0pYUuQpjRUzq4hpTEHkJPsAQA@mail.gmail.com> <206E3AEC-7152-465F-B78E-7BF91B6E3D59@danielfett.de>
In-Reply-To: <206E3AEC-7152-465F-B78E-7BF91B6E3D59@danielfett.de>
From: Aaron Parecki <aaron@parecki.com>
Date: Mon, 25 Nov 2019 12:55:08 -0800
X-Gmail-Original-Message-ID: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com>
Message-ID: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com>
To: Daniel Fett <fett@danielfett.de>
Cc: Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>,  Benjamin Kaduk <kaduk@mit.edu>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, "oauth@ietf.org" <oauth@ietf.org>, Andrey Labunets <isciurus@fb.com>, Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/qWf7iFALV3XlNakj-s0txSKCZO4>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 20:55:25 -0000

+1, I'm only comfortable making recommendations in this BCP if they
are in fact, the best current practice. In my mind that means nothing
aspirational, only things that are well established and that people
can act on today.

----
Aaron Parecki
aaronparecki.com


On Mon, Nov 25, 2019 at 12:50 PM Daniel Fett <fett@danielfett.de> wrote:
>
> +1. We should only discuss solutions if we would be okay with people actu=
ally implementing them. (See also my feedback to Guido's review.)
>
> -Daniel
>
> Am 25. November 2019 20:41:45 MEZ schrieb Brian Campbell <bcampbell=3D40p=
ingidentity.com@dmarc.ietf.org>:
>>
>>
>>
>> On Fri, Nov 22, 2019 at 11:46 PM Benjamin Kaduk <kaduk@mit..edu> wrote:
>>>
>>> On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:
>>> > SUBSTANTIVE
>>> >
>>> [...]
>>> >
>>> > 4.8.1.1. Metadata - This section suggests the use of a "resource_serv=
ers" metadata value.  This isn't defined by RFC 8414 nor do I see it the IA=
NA OAuth Authorization Server Metadata registry at https://www.iana.org/ass=
ignments/oauth-parameters/oauth-parameters.xhtml#authorization-server-metad=
ata.  Is this something that's been standardized elsewhere?  If so, please =
add a citation.  If not, please clearly say that this metadata value is not=
 standardized, and is therefore unlikely to be interoperable.
>>>
>>> I would go further and say that we should not document "best practices"
>>> that involve non-standardized values.
>>>
>>> > 4.8.1.1. Metadata - This section suggests the use a "access_token_res=
ource_server" token response value.  Please likewise clearly say that this =
parameter isn't a standard.
>>>
>>> (ditto)
>>
>>
>> The document has a number of occurrences similar to these where a partic=
ular solution is discussed even though it's not been standardized and/or is=
n't actually a recommendation of the document. Such discussions can instruc=
tive and have valuable information. But I wonder if it might be more approp=
riate to omit them from the BCP? When the document is read and understood i=
n its full context, I do think the scope and intent of such discussions are=
 made reasonably clear. However, they could be pretty easily misunderstood =
by someone just reading individual subsections or from citing parts of the =
document text without the larger context. I guess I'm thinking/suggesting t=
hat it'd be better if the BCP only focused on the actionable recommendation=
s it is making. And omit background type discussion of alternative approach=
es that didn't get used for whatever reason. Or, if they do stay in the doc=
ument, de-emphasize them even further like maybe moving them into an append=
ix rather than the main body of the doc.
>>
>>
>> CONFIDENTIALITY NOTICE: This email may contain confidential and privileg=
ed material for the sole use of the intended recipient(s). Any review, use,=
 distribution or disclosure by others is strictly prohibited..  If you have=
 received this communication in error, please notify the sender immediately=
 by e-mail and delete the message and any file attachments from your comput=
er. Thank you.
>
>
> --
> Diese Nachricht wurde von meinem Android-Ger=C3=A4t mit K-9 Mail gesendet=
.
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From nobody Mon Nov 25 14:02:45 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28071120F97 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 14:02:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2_hYcstY38f for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 14:02:39 -0800 (PST)
Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68FE0120FAC for <oauth@ietf.org>; Mon, 25 Nov 2019 14:02:36 -0800 (PST)
Received: by mail-wr1-x42e.google.com with SMTP id 4so16769988wro.7 for <oauth@ietf.org>; Mon, 25 Nov 2019 14:02:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=AGjo+TvW/dqJChac3ZmjA1jomtrnWDKEFBn5wirXTe8=; b=ZqJ6Yn2lU6ldtyz05nIQSOhtlUAe9Rl9YQ0TWyCG3KlbItZAn1dZ1S9Mv0fnikcYBM TcVMS9oDXrjEUimjAKIW3w8q7g80HxHXZ+lOHo0CvTsLm47qJ82c3Tqh+DkfImMD8cAC Lf0Nywv9NW4eiZqHgogWdl+RgH3xsXl3WLtYGYz0hTRIHJAFQQE8Knjt4EexF3daGfwc PzrvTx6uq+88GQJ5LTdjJKwQHkt9wZ81/70C6fmJUIhC9RPjHKXP5kISaQIAhtd1i3Ie vyFaCeTM0MO/0P+XuXM2DX2NADtpkjE1Ws8ms4GRVrSTpP6xDwu+eSM5JFogxKwVsuUE HKTA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=AGjo+TvW/dqJChac3ZmjA1jomtrnWDKEFBn5wirXTe8=; b=AEfyRLZHMosOhag3imcZxaPgyiq8WUJg24AGrjTm5e3+X/c/yDuPQuzHFWQX4pERRX +mfL2qB8Xs4/4QQvE9mF53ez4ReIDsXvKN5DDFsnQe6SNBGFtfzxmLT6fay/4sjkyAww FDBY9qWU9RvCjqxNhH9oEUSw/v6LtypCEjZQwyLiPzG7DVAYJnaSUac3Ui3Ri6XH+nuZ MigXxM3T+zoCjGhxen3titJAsVxQ4kOgGmAqsyOfuw7YuLEE+3UDfROMtuR/x34I8pWz ApM6aJwsCwQixEJRj4Uct6JXDIxsWVZ211dhBg6mbJi4FCWMoOzMiZ2lr9mcFYtoPvoj kIzg==
X-Gm-Message-State: APjAAAUIIDsOMVGWfQfuETjMZDfrS3wlRF9Zw55dOi+IPUswtBjC81IO puY9/mTQsTTH7Y8qO2iCDSd5uc4FYocODA==
X-Google-Smtp-Source: APXvYqyUt+MphbJPeqzC0Be7S8y71YB/jVNeknoAF7elBgdG/cbWja3nuFFO9vv6xLn4xG06RDHxCw==
X-Received: by 2002:adf:ea4e:: with SMTP id j14mr11949324wrn.101.1574719354720;  Mon, 25 Nov 2019 14:02:34 -0800 (PST)
Received: from [192.168.71.102] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id e19sm780176wme.6.2019.11.25.14.02.33 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Nov 2019 14:02:33 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-FD216799-DDBF-4C2C-BA91-CDCA1508DFFD; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Mon, 25 Nov 2019 23:02:31 +0100
Message-Id: <A11964CB-DD11-47A0-BA23-19731CB2C2FA@lodderstedt.net>
References: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com>
Cc: Daniel Fett <fett@danielfett.de>, Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, Andrey Labunets <isciurus@fb.com>, Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>, "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com>
To: Aaron Parecki <aaron@parecki.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/B64XED-2FHuJgcqyU0dVwxK9AUg>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2019 22:02:42 -0000

--Apple-Mail-FD216799-DDBF-4C2C-BA91-CDCA1508DFFD
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Parts of the text in section 4 capture discussions of potential solutions an=
d reasons why we decided in favor of a certain solution. I think this will b=
e useful in the future and it has already proven useful for me, e.g. in the r=
ecent discussions around PoP vs audience restriction.

> Am 25.11.2019 um 21:55 schrieb Aaron Parecki <aaron@parecki.com>:
>=20
> =EF=BB=BF+1, I'm only comfortable making recommendations in this BCP if th=
ey
> are in fact, the best current practice. In my mind that means nothing
> aspirational, only things that are well established and that people
> can act on today.
>=20
> ----
> Aaron Parecki
> aaronparecki.com
>=20
>=20
>> On Mon, Nov 25, 2019 at 12:50 PM Daniel Fett <fett@danielfett.de> wrote:
>>=20
>> +1. We should only discuss solutions if we would be okay with people actu=
ally implementing them. (See also my feedback to Guido's review.)
>>=20
>> -Daniel
>>=20
>> Am 25. November 2019 20:41:45 MEZ schrieb Brian Campbell <bcampbell=3D40p=
ingidentity.com@dmarc.ietf.org>:
>>>=20
>>>=20
>>>=20
>>> On Fri, Nov 22, 2019 at 11:46 PM Benjamin Kaduk <kaduk@mit..edu> wrote:
>>>>=20
>>>> On Wed, Nov 20, 2019 at 03:40:34AM +0000, Mike Jones wrote:
>>>>> SUBSTANTIVE
>>>>>=20
>>>> [...]
>>>>>=20
>>>>> 4.8.1.1. Metadata - This section suggests the use of a "resource_serve=
rs" metadata value.  This isn't defined by RFC 8414 nor do I see it the IANA=
 OAuth Authorization Server Metadata registry at https://www.iana.org/assign=
ments/oauth-parameters/oauth-parameters.xhtml#authorization-server-metadata.=
  Is this something that's been standardized elsewhere?  If so, please add a=
 citation.  If not, please clearly say that this metadata value is not stand=
ardized, and is therefore unlikely to be interoperable.
>>>>=20
>>>> I would go further and say that we should not document "best practices"=

>>>> that involve non-standardized values.
>>>>=20
>>>>> 4.8.1.1. Metadata - This section suggests the use a "access_token_reso=
urce_server" token response value.  Please likewise clearly say that this pa=
rameter isn't a standard.
>>>>=20
>>>> (ditto)
>>>=20
>>>=20
>>> The document has a number of occurrences similar to these where a partic=
ular solution is discussed even though it's not been standardized and/or isn=
't actually a recommendation of the document. Such discussions can instructi=
ve and have valuable information. But I wonder if it might be more appropria=
te to omit them from the BCP? When the document is read and understood in it=
s full context, I do think the scope and intent of such discussions are made=
 reasonably clear. However, they could be pretty easily misunderstood by som=
eone just reading individual subsections or from citing parts of the documen=
t text without the larger context. I guess I'm thinking/suggesting that it'd=
 be better if the BCP only focused on the actionable recommendations it is m=
aking. And omit background type discussion of alternative approaches that di=
dn't get used for whatever reason. Or, if they do stay in the document, de-e=
mphasize them even further like maybe moving them into an appendix rather th=
an the main body of the doc.
>>>=20
>>>=20
>>> CONFIDENTIALITY NOTICE: This email may contain confidential and privileg=
ed material for the sole use of the intended recipient(s). Any review, use, d=
istribution or disclosure by others is strictly prohibited..  If you have re=
ceived this communication in error, please notify the sender immediately by e=
-mail and delete the message and any file attachments from your computer. Th=
ank you.
>>=20
>>=20
>> --
>> Diese Nachricht wurde von meinem Android-Ger=C3=A4t mit K-9 Mail gesendet=
.
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--Apple-Mail-FD216799-DDBF-4C2C-BA91-CDCA1508DFFD
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCBTYw
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDGCA8cwggPDAgEBMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkG
A1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0
aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBh
bmQgU2VjdXJlIEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjANBglghkgBZQMEAgEFAKCCAesw
GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTI1MjIwMjMxWjAv
BgkqhkiG9w0BCQQxIgQg/n80ba4jOgAI3RucgUWw5fjnYXOVkN5ZyCwlLV+gT9Ywgb0GCSsGAQQB
gjcQBDGBrzCBrDCBljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQ
MA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0
aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAId3I3cH
21UuPcbaTCkHebYwgb8GCyqGSIb3DQEJEAILMYGvoIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UE
CBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdv
IExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg
U2VjdXJlIEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQEFAASCAQCOWnjI
Dp/hEXdLKBguIromGoEJIjBlkZ3z/DglIdzNVIfzZUIbSyekzDy5lDrLFIVZg5I7lPg9M13KVFUX
btUZslMOIL61aQWzMmmIjIV4hs+pRCUoY+CRrBlpvWYmn+AhiYI2bvrASe83REQ/Y5ftdsrJyQaC
WjskMJlbv3CjLuNnNb7aiTDGJeFh9rqyhcs3aROSHZGddde42j5LUlf+AQlHdKoQSR63PKnzc7gV
hPP/PIE62h+HRQ11sI54itRe+2uIdbHa0M6mFCQmlJgohqtgUHWtsqWlbM16Ask4IfQhiyIODg+D
+g2+d/Bh1yxlJDtjwWvk7cTIioyotO/9AAAAAAAA
--Apple-Mail-FD216799-DDBF-4C2C-BA91-CDCA1508DFFD--


From nobody Mon Nov 25 16:10:37 2019
Return-Path: <prvs=2267fa540=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 508531208C0 for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 16:10:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.499
X-Spam-Level: 
X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HHx8GMQ0z50w for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 16:10:30 -0800 (PST)
Received: from smtp-fw-9101.amazon.com (smtp-fw-9101.amazon.com [207.171.184.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 078BE1200FA for <oauth@ietf.org>; Mon, 25 Nov 2019 16:10:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574727030; x=1606263030; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=IQVmaOLKpNwr9jVNvGuf/IXixSb2EowBDNOozfBOzac=; b=ORtCmETkkw4AMWis9f5SZwpvtl2R/0/pWk6H3sR5qiOaiPMf/khwJ2Ng BFFlBrObyjSJnLfUZLqfu0POke79J+LXwuyA8jI0PI24THyRAo5JS9EqN AV9IcIcU99d7DhoZzIIQ72F9UEBgMkpBxRWYBA5O+2TEhFdoeBCm3zPCS M=;
IronPort-SDR: QaJKXpS+TApBB1+riA6NWGmsWjac9DczlIePa8QcSHEld75ipBvQ9jmOebbYa9m0P7KrmCqxR1 21j0DFUMhsGA==
X-IronPort-AV: E=Sophos;i="5.69,243,1571702400"; d="scan'208,217";a="1435460"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1e-17c49630.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9101.sea19.amazon.com with ESMTP; 26 Nov 2019 00:10:18 +0000
Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1e-17c49630.us-east-1.amazon.com (Postfix) with ESMTPS id 541E3A254B; Tue, 26 Nov 2019 00:10:16 +0000 (UTC)
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Tue, 26 Nov 2019 00:10:15 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Tue, 26 Nov 2019 00:10:14 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Tue, 26 Nov 2019 00:10:14 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAA3uqAgAJjuACAAgu/AA==
Date: Tue, 26 Nov 2019 00:10:14 +0000
Message-ID: <7C33E17D-0E0B-49EC-8756-C4353D70EF27@amazon.com>
References: <C7041D13-5F55-48AF-8E8E-92A030E2796A@amazon.com> <E5AB234B-92BE-4B78-A914-D88C959FD8C3@forgerock.com>
In-Reply-To: <E5AB234B-92BE-4B78-A914-D88C959FD8C3@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.161.7]
Content-Type: multipart/alternative; boundary="_000_7C33E17D0E0B49EC8756C4353D70EF27amazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/qEp3I0-4472q5ozeQAKITu6Rpqw>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 00:10:35 -0000

--_000_7C33E17D0E0B49EC8756C4353D70EF27amazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_7C33E17D0E0B49EC8756C4353D70EF27amazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <E3AD3A9CC3EB0E4F9D3464038B4AA48B@amazon.com>
Content-Transfer-Encoding: base64
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--_000_7C33E17D0E0B49EC8756C4353D70EF27amazoncom_--


From nobody Mon Nov 25 23:18:30 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5DD31207FF for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 23:18:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B-nZz4tWC-sw for <oauth@ietfa.amsl.com>; Mon, 25 Nov 2019 23:18:27 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7322312026E for <oauth@ietf.org>; Mon, 25 Nov 2019 23:18:26 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id A38011B4A; Tue, 26 Nov 2019 07:18:23 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574752704; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=g3r/ZaO18IOncuJBozJsgGvXlLR48NYl/O3gPG6SpEM=; b=GIs2yU4eD+UhJza4z2fWU00XSncWOAq6GJkhYRuhgPG8wlMD2wvb07K73Tig4dfKAKqX8L R/98ZZ6EVluuyuFZOQrV0X7iE7J1Ti5wFnLYSyR4vgyKPKE7mREFJBwZX/XTlflDJxvLQF eJNGTtgvL9SxSwPsAlhEwcEUH5EslZU=
To: "oauth@ietf.org" <oauth@ietf.org>
Cc: Torsten Lodderstedt <torsten@lodderstedt.net>, Aaron Parecki <aaron@parecki.com>, Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, Andrey Labunets <isciurus@fb.com>, Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
References: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com> <A11964CB-DD11-47A0-BA23-19731CB2C2FA@lodderstedt.net>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <0911bbfb-c80b-16c2-80a6-b0d0ed35ec55@danielfett.de>
Date: Tue, 26 Nov 2019 08:17:51 +0100
MIME-Version: 1.0
In-Reply-To: <A11964CB-DD11-47A0-BA23-19731CB2C2FA@lodderstedt.net>
Content-Type: multipart/alternative; boundary="------------BE442FB99F20E2402A848E89"
Content-Language: de-AT-frami
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574752704; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=g3r/ZaO18IOncuJBozJsgGvXlLR48NYl/O3gPG6SpEM=; b=F2+zWR7fa7oBQNX0ZMVUeZu+NOzmpm7M8vDVTltr7C+PidXriYdPexQLGxPXyYTQ7IxQ9n z8C+nOR1bWPaiCzHwv19i5OmbGPsblw9edU8u2jx+lKkikxccqVCa1xOihgHFyoUzOm2Pw UJ9pqg5Y4RHGfRpN2xg2G790QnRYtQg=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574752704; a=rsa-sha256; cv=none; b=J5lmzhNVsbSlMOo9YQBgM5zlO1NuXaJAyEoI3+P2iFICh76wffw3jUjNykzXmFW5X+8bQSfOB4KuJhz5YoJEACP2xZdvHHsiyo7Z1CtnPJeHy/JgXIqM9qlcfljNLBn54dhpd3t2pguUWFUiN++iGAte2ZS9uEAUai5sKVEbu4s=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: ----
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lGEDwRNm8kfO7hDSH1okUsVotMc>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 07:18:29 -0000

This is a multi-part message in MIME format.
--------------BE442FB99F20E2402A848E89
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Am 25.11.19 um 23:02 schrieb Torsten Lodderstedt:
> Parts of the text in section 4 capture discussions of potential solutions and reasons why we decided in favor of a certain solution. I think this will be useful in the future and it has already proven useful for me, e.g. in the recent discussions around PoP vs audience restriction.

Then let's move these discussions to an appendix or a separate document.
I have the feeling that some sections have too many "could"s, "might"s
and "should"s for a normative document. Another point is that the
alternative solutions that we are discussing often have not been
analyzed as thoroughly as the recommended solutions (see, e.g., PKCE vs.
Code-bound State vs. Token binding for Code).

-Daniel



--------------BE442FB99F20E2402A848E89
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Am 25.11.19 um 23:02 schrieb Torsten
      Lodderstedt:<br>
    </div>
    <blockquote type="cite"
      cite="mid:A11964CB-DD11-47A0-BA23-19731CB2C2FA@lodderstedt.net">
      <pre class="moz-quote-pre" wrap="">Parts of the text in section 4 capture discussions of potential solutions and reasons why we decided in favor of a certain solution. I think this will be useful in the future and it has already proven useful for me, e.g. in the recent discussions around PoP vs audience restriction.</pre>
    </blockquote>
    <p><tt>Then let's move these discussions to an appendix or a
        separate document. I have the feeling that some sections have
        too many "could"s, "might"s and "should"s for a normative
        document. Another point is that the alternative solutions that
        we are discussing often have not been analyzed as thoroughly as
        the recommended solutions (see, e.g., PKCE vs. Code-bound State
        vs. Token binding for Code).</tt></p>
    <p><tt>-Daniel</tt></p>
    <br>
  </body>
</html>

--------------BE442FB99F20E2402A848E89--


From nobody Tue Nov 26 00:02:10 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBFC6120851 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 00:02:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vs3qrbCVqZdw for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 00:02:01 -0800 (PST)
Received: from mail-wm1-x333.google.com (mail-wm1-x333.google.com [IPv6:2a00:1450:4864:20::333]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B624120804 for <oauth@ietf.org>; Tue, 26 Nov 2019 00:01:54 -0800 (PST)
Received: by mail-wm1-x333.google.com with SMTP id b11so2056925wmj.4 for <oauth@ietf.org>; Tue, 26 Nov 2019 00:01:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:date:message-id:subject :references:in-reply-to:to:cc; bh=1gWNvF5xDvEBx4uc/OZ58uvg7uj40wlg8R65uTg13Fw=; b=VeILAtIpa9PjOBQBNWuPA5i4syW+XUKfyj82+vpIR51hxY/n0hTT4KLZvs5w98CF/R i69sdD96rQMw/suPF0pqoRR967s1cWxBRdHhMm6tPLMPlnAn+vQlYREwCtVw1Orag6P6 aRZbJ1NZt6ifsTtk/lDZj9iVg+wrmHASBZ0ds=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :message-id:subject:references:in-reply-to:to:cc; bh=1gWNvF5xDvEBx4uc/OZ58uvg7uj40wlg8R65uTg13Fw=; b=I0d/LVPOaDsTryry6SWzrTAvRBXqys5tFPowNm9z2ZjVVZ3mo2YBHzOhrQ0Jb4xA6S a5qZxA1f+LPnqKd0S56A2Dwg8xEBi27jIqoZkdngnaDeId9dFEdOEOk9R3G/hyaBEthn 1d67dMT62+Rm5TPHCnR1zQC08XFxgl47IRVTEnjeWrDbsSS6FofKlYABNeslW7rg77Sp bUT81Z9UCnHPhaJNx1V07Uu0ec6cohnxztzGojj9SAx9OUUj+QMJkreRiK6TYVIEUOZ9 zcbxH15BnhNvLwFAkuyOK/Hot/xTwstMnxN5QuPzzvIsWLNsOJPHpv3TKu06gtTe1Tz9 hqbQ==
X-Gm-Message-State: APjAAAUEmeiZjzR+wz/fg09pgxB69IF884lRmP+TPFL4wt7iABQCuaO1 zOsB26xEbqYjWHyKjpPa3sBTnw==
X-Google-Smtp-Source: APXvYqzyWrtkU8y4wtRlSHTx/JHdZfq2Prxv+BdCZkye2asscSuf7kmTZypLGEuWptl5z6vab3PzlA==
X-Received: by 2002:a05:600c:23ce:: with SMTP id p14mr2883740wmb.176.1574755311861;  Tue, 26 Nov 2019 00:01:51 -0800 (PST)
Received: from [192.168.1.65] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id s9sm2078237wmj.22.2019.11.26.00.01.50 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 26 Nov 2019 00:01:50 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-38AA6948-58E0-49B0-B92C-CAD0EDFE541F
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Tue, 26 Nov 2019 08:01:49 +0000
Message-Id: <B147B292-925E-4B04-83E6-C66433D54F49@forgerock.com>
References: <7C33E17D-0E0B-49EC-8756-C4353D70EF27@amazon.com>
In-Reply-To: <7C33E17D-0E0B-49EC-8756-C4353D70EF27@amazon.com>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/zEbAYomV1XdLakx9uxP5Sja1pnM>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 08:02:08 -0000

--Apple-Mail-38AA6948-58E0-49B0-B92C-CAD0EDFE541F
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

> On 26 Nov 2019, at 00:10, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> =EF=BB=BF
> > A client can receive a macaroon and use it like a pure bearer token if t=
hey want.
> In which case it=E2=80=99s not sender constrained, and no different than a=
ny other symmetrically encrypted or HMAC=E2=80=99d bearer token.

Yes, that=E2=80=99s what I said. But if they want to they can attach context=
ual caveats. For example, they can attach htu/htm/jti claims just like in DP=
oP. Or they can attach a caveat that is a hash of the message and headers an=
d get something equivalent (almost identical) to AWS HMAC signatures.=20

In your previous message you argued that macaroons were just PoP tokens wher=
e the key is inlined.

My position is that they can be either.=20

> =20
> > Many ASes issue HMAC-signed access tokens already without the client doi=
ng any kind of proof of possession.
> And how does the AS validate those tokens? By checking that the HMAC was g=
enerated using a key that the AS possesses and trusts.

That=E2=80=99s not proof of possession, that=E2=80=99s just verifying a MAC.=
 PoP requires the other party (client) to provide a fresh proof that they co=
ntrol a key. The client isn=E2=80=99t using any key in this case.=20

> In the case of macaroons, the AS checks that the chained HMAC was generate=
d from a key that the AS issued to the client (in the form of the HMAC on th=
e original macaroon).

Yes. You see the difference there, right?

> =20
> > the attenuations (caveats) are attached directly to the access token and=
 are verified by the AS.
> This is not unique to macaroons. An RS could just as easily send the acces=
s token + DPoP proof to the AS for verification.

That=E2=80=99s not directly attached to the access token. This means that ev=
ery RS has to know about DPoP.=20

> =20
> > macaroon caveats can be layered.
> All your other examples are just examples of this, which is not at all uni=
que to macaroons. Sign(Key, Token + Something) is not a new concept. Macaroo=
ns are a nice pattern for doing this provided you can live with the dependen=
cy on HMAC, but they=E2=80=99re not the only way.

Please explain how to achieve the examples I gave of layered attenuation wit=
hout using macaroons.

You elided those examples, so here they are again:

1. The client adds caveats (eg exp =3D now+5s) to an access token and sends i=
t to the RS. The RS creates four copies of the token with different scope co=
nstraints and sends them to four individual microservices.=20

2. A gateway adds additional caveats to access tokens issued to external cli=
ents (eg limiting the expiry time or scope). These caveats are enforced even=
 if the clients don=E2=80=99t go via the gateway when talking to RSes.=20

3. The mTLS/PoP transfer of ownership pattern I described.=20

Bonus points for demonstrating those things without token exchange and witho=
ut the RS being able to make arbitrary token forgeries.=20

> =20
> I=E2=80=99m not trying to knock macaroons here. I legitimately think they=E2=
=80=99re a neat pattern. But they are incompatible with a stated requirement=
 by the DPoP authors (use an asymmetric digital signature algorithm),

That=E2=80=99s not a requirement, it=E2=80=99s a technology choice.=20

> require validation at the AS or distribution of symmetric keys to RSes (no=
t necessarily a problem if you=E2=80=99re issuing RS-specific tokens)

Validation at the AS is an advantage in most cases. The AS is more likely to=
 get it right and this is often more scalable - an RS can typically send man=
y more token introspection requests in parallel than they can validate publi=
c key signatures because the latter require hot CPU time. A network roundtri=
p within the same datacentre also typically takes less time than validating a=
 public key sig. Validating at the AS is also the easiest way to ensure time=
ly token revocation.=20

But you don=E2=80=99t *need* to use purely symmetric keys with macaroons. If=
 the AS knows the RS(es) then it can encrypt a fresh symmetric key using a p=
ublic key registered for that RS and add it to the token identifier.=20

There=E2=80=99s even a variant of macaroons using public key signatures (see=
 ref in original macaroon paper).=20

> , require additional non-trivial work to use (since they=E2=80=99re a patt=
ern, not a format), and require developers to learn a new token format.

As I argued, this is incremental. The AS can start issuing macaroons without=
 either clients or RS being aware (so long as the RSes are doing token intro=
spection already). When the client wants to start taking advantage of macaro=
ons they just use one of the many existing macaroon libraries (libmacaroons,=
 jmacaroons, etc) to append caveats. The RS still doesn=E2=80=99t need to do=
 anything.=20

> If you want DPoP to use macaroons, you need to make the argument that:
> The asymmetric digital signature algorithm requirement is unnecessary.

I=E2=80=99ve argued that multiple times in this thread.=20

> DPoP should only address use cases where centralized validation at the AS i=
s viable, or where RSes can be trusted with symmetric keys.

See above.=20

> The value provided by macaroons (e.g., sender-constrained tokens without c=
lient key negotiation/registration/distribution) is worth the cost of defini=
ng the format of a DPoP macaroon, specification of algorithms used, etc., an=
d the cognitive load on developers who now have to learn a new token format (=
instead of JWT, which they might already work with).

There are plenty of existing interoperable macaroon libraries - see links fr=
om http://macaroons.io . HMAC-SHA256 is very widely implemented (and usually=
 securely). That=E2=80=99s all you need.=20

And as I said before, one of the key advantages is that clients and RSes onl=
y need to care about the format when they want to take advantage of it. They=
 can happily treat them as pure bearer tokens until then.=20

Contrast with DPoP where the RS needs to potentially support 10 different pu=
blic key JWS algorithms, or otherwise have some way of negotiating algorithm=
 support with the client and/or AS. (In which case they can negotiate a key)=
. And the client, AS, and *every* RS needs to be simultaneously upgraded to s=
upport it. (Otherwise a rogue RS can replay the access token at an RS that h=
asn=E2=80=99t been upgraded yet. Not possible with macaroons).=20

Neil


> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: Neil Madden <neil.madden@forgerock.com>
> Date: Sunday, November 24, 2019 at 12:56 AM
> To: "Richard Backman, Annabelle" <richanna@amazon.com>
> Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> On 22 Nov 2019, at 12:26, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> > Yes of course. But this is the HMAC *tag* not the original key.
> Sure. And if the client attenuates the macaroon, it is used as a key that t=
he client proves possession of by presenting the chained HMAC. Clients doing=
 DPoP aren=E2=80=99t proving possession of the =E2=80=9Coriginal key=E2=80=9D=
 (i.e., a key used to generate the access token) either.
> A way to think of this is that macaroons bridge the gap between bearer tok=
ens and proof of possession tokens. A client can receive a macaroon and use i=
t like a pure bearer token if they want. On the other hand they can append c=
ontextual caveats that tightly constrain a token at the point of use, like a=
 PoP token. You can even do a full challenge-response protocol where the RS s=
ends a challenge and the client appends it as a caveat.=20
> =20
> > Well, you don=E2=80=99t have to return a key from the token endpoint for=
 a start.
> Yes, that=E2=80=99s what I meant by saying that it eliminates key negotiat=
ion. Though I suppose it=E2=80=99s more correct to say that it inlines it. T=
he AS still provides a key, it just happens to be part of the access token.
> Which helps a lot with backwards compat.=20
> Macaroons are an interesting pattern, but not because they=E2=80=99re not d=
oing PoP. Proof of possession is pretty core to the whole idea of digital si=
gnatures and HMACs.
> I would argue that third party verifiability and non-repudiation are also c=
ore to digital signatures, but aren=E2=80=99t required or used by DPoP (and a=
ctually cause problems).=20
> =20
> I also don=E2=80=99t think PoP is core to HMAC. Many ASes issue HMAC-signe=
d access tokens already without the client doing any kind of proof of posses=
sion. They are a convenient way of minting bearer tokens.=20
> What makes them interesting is the way they inline key distribution. Wheth=
er or not they=E2=80=99re applicable to DPoP depends, ultimately, on the use=
 cases DPoP is targeting and the threats it is trying to mitigate.
> There are many more interesting things than the key being inline for macar=
oons. For example:
> =20
> - the attenuations (caveats) are attached directly to the access token and=
 are verified by the AS. Contrast this to DPoP where every RS has to correct=
ly validate the proof token - if any don=E2=80=99t then the security is sign=
ificantly reduced. The AS is responsible for all security-critical checks wi=
th macaroons.
> =20
> - macaroon caveats can be layered. The initial client can add some restric=
tions and then pass the token to an RS. That RS can then add its own restric=
tions when passing the token to backend services. This is a big deal for mic=
roservice architectures.=20
> =20
> - you can add caveats at a gateway or proxy and know these will be enforce=
d without having to inspect incoming traffic.=20
> =20
> Even when used in combination with PoP, macaroons add unique capabilities.=
 For example, a client can retrieve a plain bearer token from the AS and the=
n after-the-fact bind it to its TLS client certificate by appending a x5t#S2=
56 caveat and use that new access token for all API calls. But that client s=
till has the original access token so they can get the certificate for a dif=
ferent client (eg another microservice) and create a new copy of the access t=
oken bound to that client=E2=80=99s certificate. It can then safely send thi=
s access token to the other client, even over a completely insecure connecti=
on. It can do this for every microservice it needs to talk to, effectively p=
roviding transfer of ownership for PoP tokens without needing to call a cent=
ral token exchange service.
> =20
> All this and I haven=E2=80=99t even begun talking about 3rd party caveats.=
=20
> =20
> So the really interesting thing about macaroons is that they enable all ki=
nds of new authorization patterns to be built without requiring a new spec f=
or each one.=20
> =20
> Neil
>=20
>=20
> From: Neil Madden <neil.madden@forgerock.com>
> Date: Friday, November 22, 2019 at 3:09 PM
> To: "Richard Backman, Annabelle" <richanna@amazon.com>
> Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> On 22 Nov 2019, at 01:42, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> =20
> Macaroons are built on proof of possession. In order to add a caveat to a m=
acaroon, the sender has to have the HMAC of the macaroon without their cavea=
t.
> =20
> Yes of course. But this is the HMAC *tag* not the original key. They can=E2=
=80=99t change anything the AS originally signed.=20
>=20
>=20
>=20
> The distinctive property of macaroons as I see it is that they eliminate t=
he need for key negotiation with the bearer. How much value this has over th=
e AS just returning a symmetric key alongside the access token in the token r=
equest, I=E2=80=99m not sure.
> =20
> Well, you don=E2=80=99t have to return a key from the token endpoint for a=
 start. The client doesn=E2=80=99t need to create and send any additional to=
ken. The whole thing works with existing standards and technologies and can b=
e incrementally adopted as required. If RSes do token introspection already t=
hen they need zero changes to support this.
>=20
>=20
>=20
> There are key distribution challenges with that if you are doing validatio=
n at the RS, but validation at the RS using either approach means you=E2=80=99=
ve lost protection against replay by the RS. This brings us back to a core q=
uestion: what threats are in scope for DPoP, and in what contexts?
> =20
> Agreed, but validation at the RS is premature optimisation in many cases. A=
nd if you do need protection against that the client can even append a confi=
rmation key as a caveat and retrospectively upgrade a bearer token to a pop t=
oken. They can even do transfer of ownership by creating copies of the origi=
nal token bound to other certificates/public keys.=20
> =20
> Neil
> =20
>=20
>=20
>=20
> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: OAuth <oauth-bounces@ietf.org> on behalf of Neil Madden <neil.madden=
@forgerock.com>
> Date: Friday, November 22, 2019 at 4:40 AM
> To: Brian Campbell <bcampbell@pingidentity.com>
> Cc: oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> At the end of my previous email I mentioned that you can achieve some of t=
he same aims as DPoP without needing a PoP mechanism at all. This email is t=
hat follow-up.
> =20
> OAuth is agnostic about the format of access tokens and many vendors suppo=
rt either random string database tokens or JWTs. But there are other choices=
 for access token format, some of which have more interesting properties. In=
 particular, Google proposed Macaroons a few years ago as a "better cookie" [=
1] and I think they systematically address many of these issues when used as=
 an access token format.
> =20
> For those who aren't familiar with them, Macaroons are a bit like a HS256 J=
WT. They have a location (a bit like the audience in a JWT) and an identifie=
r (an arbitrary string) and then are signed with HMAC-SHA256 using a secret k=
ey. (There's no claims set or headers - they are very minimal). In this case=
 the secret key would be owned by the AS and used to sign macaroon-based acc=
ess tokens. Validating the token would be done via token introspection at th=
e AS.
> =20
> The clever bit is that anybody at all can append "caveats" to a macaroon a=
t any time, but nobody can remove one once added. Caveats are restrictions o=
n the use of a token - they only ever reduce the authority granted by the to=
ken, never expand it. The AS can validate the token and all the caveats with=
 its secret key. So, for example, if an access token was a macaroon then the=
 client could append a caveat to reduce the scope, or reduce the expiry time=
, or reduce the audience, and so on.
> =20
> The really clever bit is that the client can keep a copy of the original t=
oken and create restricted versions to send to different resource servers. B=
ecause HMAC is very cheap, the client can even do this before each and every=
 request. (This is what the original paper refers to as "contextual caveats"=
). This means that a client can be issued a single access token from the AS w=
ith broad scope and applicable to many different RS and can then locally cre=
ate restricted copies for each individual RS.
> =20
> The relevance to DPoP is that the client could even append caveats equival=
ent to "htm" and "htu" just before sending the access token to the RS, and m=
aybe add an "exp" for 5 seconds in the future, reduce the scope, and so on:
> =20
>   newAccessToken =3D accessToken.withCaveats({
>     exp: now + 5seconds,
>     scope: "a b",
>     htm: "POST",
>     ....
>   });
>   httpClient.post(data, Authorization: Bearer newAccessToken);
> =20
> Note that the client doesn't need anything extra here - no keys, extra tok=
ens etc. They just have the access token and a macaroon library.
> =20
> The RS will see an opaque access token, send it to the AS for introspectio=
n. The AS however, will see and validate the new caveats on the token and re=
turn an introspection response with the restricted scope and expiry time, an=
d return the htm/htu restrictions that the RS can then enforce.=20
> =20
> For clients this is transparent until they want to take advantage of it an=
d then they can just use an off-the-shelf macaroon library. For the RS it is=
 also completely transparent. All the (relatively small) complexity lives in=
 the AS, which just has to be able to produce and verify macaroons and take c=
aveats into account when performing token introspection - e.g. the returned s=
cope should be the intersection of the original token scope and any scope ca=
veats. But I don't think this would be too much effort.
> =20
> [1]: https://ai.google/research/pubs/pub41892
> =20
> -- Neil
>=20
>=20
>=20
>=20
> On 21 Nov 2019, at 06:23, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> Yeah, suggestions and/or an MTI about algorithm support would probably be w=
orthwhile. Perhaps also some defined means of signaling when an unsupported a=
lgorithm is used along with any other reason a DPoP is invalid or rejected.=20=

> =20
> There are a lot of tradeoffs in what claims are required and what protecti=
ons are provided etc. The aim of what was chosen was to do just enough to pr=
ovide some reasonable protections against reuse or use in a different contex=
t while being simple to implement and deploy.
> =20
> =20
> On Wed, Nov 20, 2019 at 6:34 AM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> Thanks for the reply, Brian.=20
> =20
> Collecting my thoughts up here rather than responding blow by blow.
> =20
> Public key signatures are simpler in some respects, more complex in others=
. There are currently 10 public key JWS signature schemes defined (ES256/384=
/512, RS256/384/512, PS256/384/512, EdDSA) - does an RS potentially have to s=
upport them all? If not, how do they negotiate algorithm support with the cl=
ient?
> =20
> On the other hand, the ECDH scheme I proposed can be implemented by adapti=
ng an existing ECDH-ES encryption support in a JWT library. For example, I d=
iscovered while playing with this that our own internal library can implemen=
t the full flow I described entirely via the existing public API [1], so it'=
s not necessarily as complex as it first looks. I even knocked up a from-scr=
atch implementation in WebCrypto (JavaScript) without too much code [2].
> =20
> But I admit that using an existing JWT library to sign a JWT with an exist=
ing algorithm is even easier, and that counts for a lot. Perhaps we can make=
 concrete suggestions/requirements about algorithm support? e.g. "The RS MUS=
T support RS256 and SHOULD support EdDSA. Other algorithms MAY be supported.=
"=20
> =20
> With regards to replay protection, I think there are at least two reasonab=
le positions:
> =20
> 1. We assume that TLS is secure and don't try to defend against any compro=
mise at that level. (Clearly none of the TLS-based PoP mechanisms survive if=
 TLS is compromised, by definition). In this case the main attack to defend a=
gainst is a malicious RS replaying the access token elsewhere. Simply signin=
g the origin of the RS would be enough to prevent this attack, while letting=
 the client reuse the same JWT for many requests (and the RS to cache the JW=
T validation). None of "jti", "htu", or "htm" seem relevant to this model.
> =20
> 2. We don't assume that TLS is secure (or it's not fully end-to-end) and t=
ry to provide some defense in depth against a MitM attacker replaying a toke=
n against the same RS. There is a graduated series of steps you can take her=
e, depending on how much you want to prevent this:
>    a. The DPoP token can be replayed for arbitrary requests to the same RS=
 but has a short time limit (e.g., exp claim or RS-enforced max lifetime fro=
m iat)
>    b. The DPoP token can be replayed for the same request (htu/htm claims)=

>    c. The DPoP token can't be replayed at all - either because of jti blac=
klisting on the RS or a challenge-response protocol on each request.
> =20
> (There are also variants such as including a hash of the request body/head=
ers, or encoding an ETag into the JWT).
> =20
> I think either are reasonable design goals, but aiming for 2 adds more val=
ue. I think aiming for 2a is a reasonable default baseline that allows the c=
lient to reuse a DPoP token for a few requests, reducing the cost of the sig=
nature (and the RS can cache the validated JWT). Support for 2b or 2c can th=
en be listed as optional additions.
> =20
> PS - 2a/2b can be achieved without PoP. I'll save that for another email i=
n the next few days though.
> =20
> [1]: https://gist.github.com/NeilMadden/685ea66fb79d37a50c2310f853bd9496
> [2]: https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7
> =20
> =20
> -- Neil
>=20
>=20
>=20
>=20
> On 19 Nov 2019, at 07:43, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
> =20
> =20
>=20
> On Thu, Nov 14, 2019 at 7:20 PM Neil Madden <neil.madden@forgerock.com> wr=
ote:
> I can't attend Singapore either in person or remotely due to other commitm=
ents. I broadly support adoption of this draft, but I have some comments/sug=
gestions about it.
> =20
> Thanks Neil. And sorry to hear that you won't be in Singapore. This kind o=
f stuff is definitely more easily discussed in person (for me anyway). But I=
'll try and comment on your comments here as best I can. I also plan to also=
 mention them in the Wednesday and/or Thursday presentation.=20
> =20
> Section 2 lists the main objective as being to harden against compromised/=
malicious AS or RS, which may attempt to replay captured tokens elsewhere. W=
hile this is a good idea, a casual reader might wonder why a simple audience=
 claim in the access token/introspection response is not sufficient to preve=
nt this. Because interactions between the client and RS are supposed to be o=
ver TLS, is the intended threat model one in which these protections have br=
oken down? ("counterfeit" in the description suggests this). Or is the motiv=
ation that clients want to get a single broad-scoped access token (for usabi=
lity/performance reasons) and use it to access multiple resource servers wit=
hout giving each of them the ability to replay the token to the other server=
s? Or are we thinking of a phishing-type vulnerability were a general-purpos=
e client might accidentally visit a malicious site which prompts for an acce=
ss token that the client then blindly goes off and gets? (UMA?) It's not cle=
ar to me which of these scenarios is being considered, so it would be good t=
o tighten up this section.
> =20
> It is admittedly a bit loose and I agree it'd be good to tighten it up. Bu=
t part of why it's loose is that it tries to offer some protections for all t=
hose scenarios and more such as a general lost/stolen token. It's effectivel=
y trying to provide as many of the same types of protections/assurances that=
 you'd get with TLS based PoP mechanisms (like OAuth MTLS or Token binding) t=
o the extent that can be done at the HTTP application layer. Which can't rea=
listically be exactly the same but can maybe be kinda close while actually b=
eing accessible and implementable because it's all done at the application l=
ayer. There are trade-offs, of course, and the document writers have endeavo=
red to find a good balance in the trade-off decisions we've made. But that d=
oesn't mean they are necessarily the right decisions or are closed to discus=
sion. To the casual reader I would say that it turns out that getting an app=
ropriate simple audience claim into an access token isn't nearly as simple a=
s it might seem. And while it will prevent RS to RS replay (as long as both R=
Ss aren't legit audiences) it doesn't help with preventing the use of tokens=
 stolen or leaked by other means (including for refresh tokens issued to pub=
lic clients).=20
> =20
> Another potential motivation is for mobile apps. Some customers of ours wo=
uld like to tie access/refresh tokens to private key material generated on a=
 secure element in the device, that can only be accessed after local biometr=
ic authentication (e.g. TouchID/FaceID on iOS). I have suggested using mTLS c=
ert-bound tokens for this, but have heard some pushback due to the difficult=
y of configuring support for client certs across diverse infrastructure. A s=
imple JWT-based solution like DPoP could fill this need.
> =20
> It's maybe not stated in the draft but this kind of thing is among the obj=
ectives (in my mind anyway).=20
> =20
> =20
> My main concerns with the draft though are about efficiency and scalabilit=
y of the proposed approach:
> =20
> 1. The requirement to use public key signatures, along with the anti-repla=
y nonce, means that the RS is required to perform an expensive signature ver=
ification check on every request. That is not going to scale up well. While t=
here are more efficient schemes like Ed25519 now, these are still typically a=
n order of magnitude slower than HMAC and the latency and CPU overhead is li=
kely to be a non-starter for many APIs (especially when you're billed by CPU=
 usage). Public key signatures are also notoriously fragile (see e.g. the hi=
story of nonce reuse/leakage vulnerabilities in ECDSA or=20
> =20
> Yes, asymmetric is more processing intensive than symmetric. But if you ta=
ke away the distributed replay check (see next response), it will scale out j=
ust fine. I'm not so sure latency is a real issue here - while these operati=
ons are an order of magnitude slower we're still talking about times that ar=
e not perceptible to a human. CPU usage/cost is a part of a trade-off for th=
e simplicity afforded by public/private keys.  And it is significantly simpl=
er. The design you sketched out is admittedly quite clever but it's not even=
 in the same ballpark with respect to complexity. And, as you pointed out, t=
he other suggestion around symmetric keys has rather different security prop=
erties while still adding complexity. Adding symmetric key support isn't som=
ething that can just be added on easily.=20
> =20
> =20
> 2. The advice for the RS to store a set of previously used nonces to preve=
nt replay will also hamper scalability, especially in large deployments wher=
e such state would need to be replicated to all servers (or use sticky load b=
alancing, which comes with its own problems). This violates the statelessnes=
s of HTTP, and it also potentially breaks idempotency of operations: Think o=
f the case where the JWT validation and replay protection is done at an API g=
ateway but then the call to the backend API server fails for a transient rea=
son. The client (or a proxy/library) cannot simply replay the (idempotent) r=
equest in this case because it will be rejected by the gateway. It must inst=
ead recreate the DPoP JWT, incurring additional overheads.
> =20
> The actual value of replay checking on jti is somewhat questionable. The D=
PoP JWT only transits between client and server so a TLS MITM is likely need=
ed to steal a DPoP JWT. But we are assuming TLS works here. And an active MI=
TM could thwart this check by just being first to present DPoP JWT. I think t=
he jti check made its way into the draft mostly because it seemed like somet=
hing was needed to try and bring it closer to the TLS PoP models. Being awar=
e of the scalability concerns, I did endeavor to write the text in such a wa=
y so as to leave some wiggle room in implementations/deployments with text l=
ike '"jti" SHOULD be used by the server for replay detection and prevention`=
 and [ensure that] 'within a reasonable consideration of accuracy and resour=
ce utilization, a JWT with the same "jti" value has not been received previo=
usly'. The idea being that using something eventually consistent or even loc=
al only to the runtime instance would be permissible. Perhaps that allowance=
 and the rational could be made more clear? Or would you suggest to do away w=
ith the jti replay stuff al? Or something else?=20
> =20
> 3. Minor: The use of a custom header for communicating the DPoP proof will=
 require additional CORS configuration on top of that already done for the A=
uthorization header, and so adds a small amount of additional friction for a=
doption. Given that CORS configuration changes often require approval by a s=
ecurity team, this may make more of an impact than you'd expect.
> =20
> Feels really minor. I mean, we could try to roll everything up under one h=
eader. But it does seem unwarranted and would complicate things - at least i=
n the model we've got now where the proof is sent the same way ono all types=
 of requests.=20
> =20
> =20
> It's also not clear to me exactly what threat the anti-replay nonce is pro=
tecting against. It does nothing against the replay scenario discussed in se=
ction 2, as I understand it - which really seems to be more of a MitM scenar=
io. Given that the connection between the client and the RS is supposed to b=
e over TLS, and TLS is already protected against replay attacks, I think thi=
s part needs to be better motivated given the obvious costs of implementing i=
t.
> =20
> I have a tentative suggestion for an alternative design which avoids these=
 problems, but at a cost of potentially more complexity elsewhere. I'll summ=
arise it here for consideration:
> =20
> 1. The client obtains an access token in the normal way. When calling the t=
oken endpoint it provides an EC/okp public key as the confirmation key to be=
 associated with the access/refresh tokens.
> =20
> 2. The first time the client calls an RS it passes its access token in the=
 Authorization: Bearer header as normal. (If the RS doesn't support DPoP the=
n this would just succeed and no further action is required by the client - a=
llowing clients to opportunistically ask for DPoP without needing a priori k=
nowledge of RS capabilities).
> =20
> 3. The RS introspects the access token and learns the EC public key associ=
ated with the access token. As there is no DPoP proof with the access token,=
 the RS will generate a challenge in the following way:
>     o The RS generates an ephemeral EC key pair for the same curve as the c=
onfirmation key (e.g. P-256 or X25519).
>     o The RS stores the ephemeral private key somewhere, associated with t=
his access token (see below for a scalable implementation choice)
>     o The RS encodes the ephemeral public key into a JWK (epk) and base64u=
rl-encodes it. It uses this as a challenge to the client by sending back a 4=
01 response with WWW-Authenticate: DPoP <encoded-epk>
> =20
> 4. The client decodes the epk challenge and performs an ECDH key agreement=
 between its private key and the challenge epk as per the method described f=
or the existing JWA ECDH-ES encryption algorithm. Rather than deriving an AE=
S key however, it derives a HMAC key for HS256. The "apu" value is set to th=
e access token (string value as ASCII bytes) and the "apv" value is set to t=
he hostname of the RS (e.g. "api.example.com"). This ensures that the derive=
d key is cryptographically bound to the context in which it is used.
> =20
> 5. The client uses the HMAC key to create a DPoP proof JWT much like the o=
ne in the current draft, but signed using the HS256 key. If a "kid" field wa=
s present in the challenge JWK sent by the RS then the same value MUST be us=
ed in the "kid" header of this discharge JWT. It retries its original reques=
t sending Authorization: DPoP <hmac-jwt> at=3D<access_token>.
> =20
> 6. The RS uses its stored ephemeral private key to derive the same HMAC ke=
y and verify the DPoP discharge JWT. If it validates and all fields are corr=
ect then the request is allowed.
> =20
> Efficient implementation trick:
> Because the client is required to copy and "kid" value from the challenge J=
WK, the RS can preemptively carry out the ECDH key agreement immediately and=
 generate the derived HMAC key. The RS can then encrypt this derived key usi=
ng a local authenticated encryption key (e.g. AES-GCM) and use that encrypte=
d value as the "kid" value in the challenge (perhaps along with some context=
 or an expiry time). That way the RS only needs to decrypt this kid value ra=
ther than performing the ECDH key agreement on every request. This also avoi=
ds the need for the RS to store any per-client state locally.
> =20
> The challenge-response nature of the scheme prevents traditional replay at=
tacks in the case where a DPoP discharge JWT is accidentally leaked through s=
erver logs or some other flaw, without needing to store nonces on the server=
. Using the RS's hostname in the key derivation process prevents mitm attack=
s in a similar way to how FIDO/WebAuthn prevents this. Most importantly, onc=
e a HS256 key has been derived between a client and RS they can reuse that k=
ey for multiple requests, reducing the overhead of the ECDH key agreement st=
ep. Either side can decide as a matter of policy how long to let this occur a=
nd when to trigger a fresh challenge-response.
> =20
> Because this fits within the standard HTTP authentication framework, it al=
so requires no additional CORS configuration and is relatively easy to plug i=
n to existing HTTP client libraries.
> =20
> The main downside of this approach to me is the fact that you can't simply=
 reuse an existing JWT library to implement it, and so it will take time for=
 client libs to develop. (Although I think this might be achievable now with=
 existing *COSE* libraries). This would increase the risk of people hand-rol=
ling solutions, rather than using well-tested libraries. On the other hand, i=
t uses fairly widely supported primitives so e.g. an implementation using We=
bCrypto is probably only a few dozen lines of code.
> =20
> -- Neil
> =20
>=20
>=20
>=20
>=20
> On 31 Oct 2019, at 19:20, Brian Campbell <bcampbell=3D40pingidentity.com@d=
marc.ietf.org> wrote:
> =20
> Hello WG,=20
> =20
> Just a quick note to let folks know that -03 of the DPoP draft was publish=
ed earlier today. The usual various document links are in the forwarded mess=
age below and the relevant snippet from the doc history with a summary of th=
e changes is included here for convenience.=20
> =20
> Hopefully folks will have time to read the (relativity) short document bef=
ore the meeting(s) in Singapore where (spoiler alert) I plan to ask that the=
 WG consider adoption of the draft.=20
> =20
> Thanks,
>=20
>  -03
>    o  rework the text around uniqueness requirements on the jti claim in
>       the DPoP proof JWT
>    o  make tokens a bit smaller by using "htm", "htu", and "jkt" rather
>       than "http_method", "http_uri", and "jkt#S256" respectively
>    o  more explicit recommendation to use mTLS if that is available
>    o  added David Waite as co-author
>    o  editorial updates
> =20
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Thu, Oct 31, 2019 at 11:53 AM
> Subject: New Version Notification for draft-fett-oauth-dpop-03.txt
> To: Torsten Lodderstedt <torsten@lodderstedt.net>, Michael Jones <mbj@micr=
osoft.com>, John Bradley <ve7jtb@ve7jtb.com>, Brian Campbell <bcampbell@ping=
identity.com>, David Waite <david@alkaline-solutions.com>, Daniel Fett <mail=
@danielfett.de>
>=20
>=20
>=20
> A new version of I-D, draft-fett-oauth-dpop-03.txt
> has been successfully submitted by Brian Campbell and posted to the
> IETF repository.
>=20
> Name:           draft-fett-oauth-dpop
> Revision:       03
> Title:          OAuth 2.0 Demonstration of Proof-of-Possession at the Appl=
ication Layer (DPoP)
> Document date:  2019-10-30
> Group:          Individual Submission
> Pages:          15
> URL:            https://www.ietf.org/internet-drafts/draft-fett-oauth-dpop=
-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-fett-oauth-dpop/
> Htmlized:       https://tools.ietf.org/html/draft-fett-oauth-dpop-03
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fett-oauth-dpo=
p
> Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-=
03
>=20
> Abstract:
>    This document describes a mechanism for sender-constraining OAuth 2.0
>    tokens via a proof-of-possession mechanism on the application level.
>    This mechanism allows for the detection of replay attacks with access
>    and refresh tokens.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of submissi=
on
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited..  If you have rec=
eived this communication in error, please notify the sender immediately by e=
-mail and delete the message and any file attachments from your computer. Th=
ank you._______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.
> =20
>=20
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
 material for the sole use of the intended recipient(s). Any review, use, di=
stribution or disclosure by others is strictly prohibited.  If you have rece=
ived this communication in error, please notify the sender immediately by e-=
mail and delete the message and any file attachments from your computer. Tha=
nk you.

--Apple-Mail-38AA6948-58E0-49B0-B92C-CAD0EDFE541F
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr"><meta http-equiv=3D"conten=
t-type" content=3D"text/html; charset=3Dutf-8"><div dir=3D"ltr"><meta http-e=
quiv=3D"content-type" content=3D"text/html; charset=3Dutf-8"><div dir=3D"ltr=
">On 26 Nov 2019, at 00:10, Richard Backman, Annabelle &lt;richanna@amazon.c=
om&gt; wrote:</div><div dir=3D"ltr"><blockquote type=3D"cite"><br></blockquo=
te></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:HelveticaNeue;
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:"Helvetica Neue";
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:424955658;
	mso-list-type:hybrid;
	mso-list-template-ids:-811544656 67698703 67698713 67698715 6769870=
3 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1
	{mso-list-id:1220482155;
	mso-list-type:hybrid;
	mso-list-template-ids:422858190 511342952 67698713 67698715 6769870=
3 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Calibri",sans-serif;
	mso-fareast-font-family:"Times New Roman";}
@list l1:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style>


<div class=3D"WordSection1">
<p class=3D"MsoNormal">&gt; A client can receive a macaroon and use it like a=
 pure bearer token if they want.<o:p></o:p></p>
<p class=3D"MsoNormal">In which case it=E2=80=99s not sender constrained, an=
d no different than any other symmetrically encrypted or HMAC=E2=80=99d bear=
er token.</p></div></div></blockquote><div><br></div><div>Yes, that=E2=80=99=
s what I said. But if they want to they can attach contextual caveats. For e=
xample, they can attach htu/htm/jti claims just like in DPoP. Or they can at=
tach a caveat that is a hash of the message and headers and get something eq=
uivalent (almost identical) to AWS HMAC signatures.&nbsp;</div><div><br></di=
v><div>In your previous message you argued that macaroons were just PoP toke=
ns where the key is inlined.</div><div><br></div><div>My position is that th=
ey can be either.&nbsp;</div><br><blockquote type=3D"cite"><div dir=3D"ltr">=
<div class=3D"WordSection1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; Many ASes issue HMAC-signed access tokens alread=
y without the client doing any kind of proof of possession.<o:p></o:p></p>
<p class=3D"MsoNormal">And how does the AS validate those tokens? By checkin=
g that the HMAC was generated using a key that the AS possesses and trusts.<=
/p></div></div></blockquote><div><br></div><div>That=E2=80=99s not proof of p=
ossession, that=E2=80=99s just verifying a MAC. PoP requires the other party=
 (client) to provide a fresh proof that they control a key. The client isn=E2=
=80=99t using any key in this case.&nbsp;</div><br><blockquote type=3D"cite"=
><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"> In the=
 case of macaroons, the AS checks that the chained HMAC was generated from a=
 key that the AS issued to
 the client (in the form of the HMAC on the original macaroon).</p></div></d=
iv></blockquote><div><br></div><div>Yes. You see the difference there, right=
?</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSect=
ion1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; the attenuations (caveats) are attached directly=
 to the access token and are verified by the AS.<o:p></o:p></p>
<p class=3D"MsoNormal">This is not unique to macaroons. An RS could just as e=
asily send the access token + DPoP proof to the AS for verification.</p></di=
v></div></blockquote><div><br></div><div>That=E2=80=99s not directly attache=
d to the access token. This means that every RS has to know about DPoP.&nbsp=
;</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSect=
ion1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; macaroon caveats can be layered.<o:p></o:p></p>
<p class=3D"MsoNormal">All your other examples are just examples of this, wh=
ich is not at all unique to macaroons.
<i>Sign(Key, Token + Something)</i> is not a new concept. Macaroons are a ni=
ce pattern for doing this provided you can live with the dependency on HMAC,=
 but they=E2=80=99re not the only way.</p></div></div></blockquote><div><br>=
</div><div>Please explain how to achieve the examples I gave of layered atte=
nuation without using macaroons.</div><div><br></div><div>You elided those e=
xamples, so here they are again:</div><div><br></div><div>1. The client adds=
 caveats (eg exp =3D now+5s) to an access token and sends it to the RS. The R=
S creates four copies of the token with different scope constraints and send=
s them to four individual microservices.&nbsp;</div><div><br></div><div>2. A=
 gateway adds additional caveats to access tokens issued to external clients=
 (eg limiting the expiry time or scope). These caveats are enforced even if t=
he clients don=E2=80=99t go via the gateway when talking to RSes.&nbsp;</div=
><div><br></div><div>3. The mTLS/PoP transfer of ownership pattern I describ=
ed.&nbsp;</div><div><br></div><div>Bonus points for demonstrating those thin=
gs without token exchange and without the RS being able to make arbitrary to=
ken forgeries.&nbsp;</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><di=
v class=3D"WordSection1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">I=E2=80=99m not trying to knock macaroons here. I leg=
itimately think they=E2=80=99re a neat pattern. But they are incompatible wi=
th
<a href=3D"https://tools.ietf.org/html/draft-fett-oauth-dpop-03#section-4.2"=
>a stated requirement</a> by the DPoP authors (use an asymmetric digital sig=
nature algorithm),</p></div></div></blockquote><div><br></div><div>That=E2=80=
=99s not a requirement, it=E2=80=99s a technology choice.&nbsp;</div><br><bl=
ockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=
=3D"MsoNormal"> require validation at the AS or distribution of symmetric ke=
ys to RSes (not necessarily
 a problem if you=E2=80=99re issuing RS-specific tokens)</p></div></div></bl=
ockquote><div dir=3D"ltr"><br></div><div dir=3D"ltr">Validation at the AS is=
 an advantage in most cases. The AS is more likely to get it right and this i=
s often more scalable - an RS can typically send many more token introspecti=
on requests in parallel than they can validate public key signatures because=
 the latter require hot CPU time. A network roundtrip within the same datace=
ntre also typically takes less time than validating a public key sig. Valida=
ting at the AS is also the easiest way to ensure timely token revocation.&nb=
sp;</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">But you don=E2=80=99t *=
need* to use purely symmetric keys with macaroons. If the AS knows the RS(es=
) then it can encrypt a fresh symmetric key using a public key registered fo=
r that RS and add it to the token identifier.&nbsp;</div><div dir=3D"ltr"><b=
r></div><div dir=3D"ltr">There=E2=80=99s even a variant of macaroons using p=
ublic key signatures (see ref in original macaroon paper).&nbsp;</div><br><b=
lockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p clas=
s=3D"MsoNormal">, require additional non-trivial work to use (since they=E2=80=
=99re a pattern, not a format), and require developers to learn a new token f=
ormat.</p></div></div></blockquote><div dir=3D"ltr"><br></div><div dir=3D"lt=
r">As I argued, this is incremental. The AS can start issuing macaroons with=
out either clients or RS being aware (so long as the RSes are doing token in=
trospection already). When the client wants to start taking advantage of mac=
aroons they just use one of the many existing macaroon libraries (libmacaroo=
ns, jmacaroons, etc) to append caveats. The RS still doesn=E2=80=99t need to=
 do anything.&nbsp;</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div=
 class=3D"WordSection1"><p class=3D"MsoNormal"> If you want DPoP to use maca=
roons, you need to make the argument that:<o:p></o:p></p>
<ol style=3D"margin-top:0in" start=3D"1" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 l=
fo2">The asymmetric digital signature algorithm requirement is unnecessary.<=
/li></ol></div></div></blockquote><div dir=3D"ltr"><br></div><div dir=3D"ltr=
">I=E2=80=99ve argued that multiple times in this thread.&nbsp;</div><br><bl=
ockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><ol styl=
e=3D"margin-top:0in" start=3D"1" type=3D"1"><li class=3D"MsoListParagraph" s=
tyle=3D"margin-left:0in;mso-list:l0 level1 lfo2"><o:p></o:p></li><li class=3D=
"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 lfo2">DPoP sh=
ould only address use cases where centralized validation at the AS is viable=
, or where RSes can be trusted with symmetric keys.</li></ol></div></div></b=
lockquote><div dir=3D"ltr"><br></div><div dir=3D"ltr">See above.&nbsp;</div>=
<br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><=
ol style=3D"margin-top:0in" start=3D"2" type=3D"1"><li class=3D"MsoListParag=
raph" style=3D"margin-left:0in;mso-list:l0 level1 lfo2"><o:p></o:p></li><li c=
lass=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 lfo2">=
The value provided by macaroons (e.g., sender-constrained tokens without cli=
ent key negotiation/registration/distribution) is worth the cost of defining=
 the format of a DPoP macaroon,
 specification of algorithms used, etc., and the cognitive load on developer=
s who now have to learn a new token format (instead of JWT, which they
<i>might</i> already work with).</li></ol></div></div></blockquote><div dir=3D=
"ltr"><br></div><div dir=3D"ltr">There are plenty of existing interoperable m=
acaroon libraries - see links from http://macaroons.io . HMAC-SHA256 is very=
 widely implemented (and usually securely). That=E2=80=99s all you need.&nbs=
p;</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">And as I said before, on=
e of the key advantages is that clients and RSes only need to care about the=
 format when they want to take advantage of it. They can happily treat them a=
s pure bearer tokens until then.&nbsp;</div><div dir=3D"ltr"><br></div><div d=
ir=3D"ltr">Contrast with DPoP where the RS needs to potentially support 10 d=
ifferent public key JWS algorithms, or otherwise have some way of negotiatin=
g algorithm support with the client and/or AS. (In which case they can negot=
iate a key). And the client, AS, and *every* RS needs to be simultaneously u=
pgraded to support it. (Otherwise a rogue RS can replay the access token at a=
n RS that hasn=E2=80=99t been upgraded yet. Not possible with macaroons).&nb=
sp;</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">Neil</div><div dir=3D"l=
tr"><br></div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"W=
ordSection1"><p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity<o:p></o=
:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">Neil Madden &lt;nei=
l.madden@forgerock.com&gt;<br>
<b>Date: </b>Sunday, November 24, 2019 at 12:56 AM<br>
<b>To: </b>"Richard Backman, Annabelle" &lt;richanna@amazon.com&gt;<br>
<b>Cc: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;, oauth &lt;oaut=
h@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">On 22 Nov 2019, at 12:26, Richard Backman, Annabelle &=
lt;richanna@amazon.com&gt; wrote:<o:p></o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&gt; Yes of course. But this is the HMAC *tag* not the original key.=
<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Sure. And if the client attenuates the macaroon, it is used as a key=
 that the client proves possession of by presenting the chained HMAC. Client=
s doing DPoP aren=E2=80=99t proving possession
 of the =E2=80=9Coriginal key=E2=80=9D (i.e., a key used to generate the acc=
ess token) either.<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal">A way to think of this is that macaroons bridge the g=
ap between bearer tokens and proof of possession tokens. A client can receiv=
e a macaroon and use it like a pure bearer token if they want. On the other h=
and they can append contextual
 caveats that tightly constrain a token at the point of use, like a PoP toke=
n. You can even do a full challenge-response protocol where the RS sends a c=
hallenge and the client appends it as a caveat.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&gt; Well, you don=E2=80=99t have to return a key from the token end=
point for a start.<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Yes, that=E2=80=99s what I meant by saying that it eliminates key ne=
gotiation. Though I suppose it=E2=80=99s more correct to say that it inlines=
 it. The AS still provides a key, it just happens
 to be part of the access token.<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal">Which helps a lot with backwards compat.&nbsp;<o:p></=
o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Macaroons are an interesting pattern, but not because they=E2=80=99r=
e not doing PoP. Proof of possession is pretty core to the whole idea of dig=
ital signatures and HMACs.<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal">I would argue that third party verifiability and non-=
repudiation are also core to digital signatures, but aren=E2=80=99t required=
 or used by DPoP (and actually cause problems).&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I also don=E2=80=99t think PoP is core to HMAC. Many A=
Ses issue HMAC-signed access tokens already without the client doing any kin=
d of proof of possession. They are a convenient way of minting bearer tokens=
.&nbsp;<o:p></o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">What makes them interesting is the way they inline key distribution.=
 Whether or not they=E2=80=99re applicable to DPoP depends, ultimately, on t=
he use cases DPoP is targeting and the threats
 it is trying to mitigate.<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal">There are many more interesting things than the key b=
eing inline for macaroons. For example:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">- the attenuations (caveats) are attached directly to=
 the access token and are verified by the AS. Contrast this to DPoP where ev=
ery RS has to correctly validate the proof token - if any don=E2=80=99t then=
 the security is significantly reduced.
 The AS is responsible for all security-critical checks with macaroons.<o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">- macaroon caveats can be layered. The initial client=
 can add some restrictions and then pass the token to an RS. That RS can the=
n add its own restrictions when passing the token to backend services. This i=
s a big deal for microservice
 architectures.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">- you can add caveats at a gateway or proxy and know t=
hese will be enforced without having to inspect incoming traffic.&nbsp;<o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Even when used in combination with PoP, macaroons add=
 unique capabilities. For example, a client can retrieve a plain bearer toke=
n from the AS and then after-the-fact bind it to its TLS client certificate b=
y appending a x5t#S256 caveat
 and use that new access token for all API calls. But that client still has t=
he original access token so they can get the certificate for a different cli=
ent (eg another microservice) and create a new copy of the access token boun=
d to that client=E2=80=99s certificate.
 It can then safely send this access token to the other client, even over a c=
ompletely insecure connection. It can do this for every microservice it need=
s to talk to, effectively providing transfer of ownership for PoP tokens wit=
hout needing to call a central
 token exchange service.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">All this and I haven=E2=80=99t even begun talking abo=
ut 3rd party caveats.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">So the really interesting thing about macaroons is th=
at they enable all kinds of new authorization patterns to be built without r=
equiring a new spec for each one.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Neil<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><b><span style=3D"font-size:12.0pt;color:black">From:
</span></b><span style=3D"font-size:12.0pt;color:black">Neil Madden &lt;neil=
.madden@forgerock.com&gt;<br>
<b>Date: </b>Friday, November 22, 2019 at 3:09 PM<br>
<b>To: </b>"Richard Backman, Annabelle" &lt;richanna@amazon.com&gt;<br>
<b>Cc: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;, oauth &lt;oaut=
h@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">On 22 Nov 2019, at 01:42, Richard Backman, Annabelle &lt;richanna@am=
azon.com&gt; wrote:<o:p></o:p></p>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</blockquote>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Macaroons are built on proof of possession. In order to add a caveat=
 to a macaroon, the sender has to have the HMAC of the macaroon without thei=
r caveat.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Yes of course. But this is the HMAC *tag* not the original key. They=
 can=E2=80=99t change anything the AS originally signed.&nbsp;<o:p></o:p></p=
>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">The distinctive property of macaroons as I see it is that they elimi=
nate the need for key negotiation with the bearer. How much value this has o=
ver the AS just returning a symmetric
 key alongside the access token in the token request, I=E2=80=99m not sure.<=
o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Well, you don=E2=80=99t have to return a key from the token endpoint=
 for a start. The client doesn=E2=80=99t need to create and send any additio=
nal token. The whole thing works with existing standards
 and technologies and can be incrementally adopted as required. If RSes do t=
oken introspection already then they need zero changes to support this.<o:p>=
</o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">There are key distribution challenges with that if you are doing val=
idation at the RS, but validation at the RS using either approach means you=E2=
=80=99ve lost protection against replay
 by the RS. This brings us back to a core question: what threats are in scop=
e for DPoP, and in what contexts?<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Agreed, but validation at the RS is premature optimisation in many c=
ases. And if you do need protection against that the client can even append a=
 confirmation key as a caveat and
 retrospectively upgrade a bearer token to a pop token. They can even do tra=
nsfer of ownership by creating copies of the original token bound to other c=
ertificates/public keys.&nbsp;
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;</span><o:p></o:p></=
p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:12.0pt">Annabelle Richard Backman</span><o:=
p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:12.0pt">AWS Identity</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><b><span style=3D"font-size:12.0pt;color:black">From:
</span></b><span style=3D"font-size:12.0pt;color:black">OAuth &lt;oauth-boun=
ces@ietf.org&gt; on behalf of Neil Madden &lt;neil.madden@forgerock.com&gt;<=
br>
<b>Date: </b>Friday, November 22, 2019 at 4:40 AM<br>
<b>To: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;<br>
<b>Cc: </b>oauth &lt;oauth@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">At the end of my previous email I mentioned that you can achieve som=
e of the same aims as DPoP without needing a PoP mechanism at all. This emai=
l is that follow-up.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">OAuth is agnostic about the format of access tokens and many vendors=
 support either random string database tokens or JWTs. But there are other c=
hoices for access token format, some
 of which have more interesting properties. In particular, Google proposed M=
acaroons a few years ago as a "better cookie" [1] and I think they systemati=
cally address many of these issues when used as an access token format.<o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">For those who aren't familiar with them, Macaroons are a bit like a H=
S256 JWT. They have a location (a bit like the audience in a JWT) and an ide=
ntifier (an arbitrary string) and
 then are signed with HMAC-SHA256 using a secret key. (There's no claims set=
 or headers - they are very minimal). In this case the secret key would be o=
wned by the AS and used to sign macaroon-based access tokens. Validating the=
 token would be done via token
 introspection at the AS.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">The clever bit is that anybody at all can append "caveats" to a maca=
roon at any time, but nobody can remove one once added. Caveats are restrict=
ions on the use of a token - they
 only ever reduce the authority granted by the token, never expand it. The A=
S can validate the token and all the caveats with its secret key. So, for ex=
ample, if an access token was a macaroon then the client could append a cave=
at to reduce the scope, or reduce
 the expiry time, or reduce the audience, and so on.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">The really clever bit is that the client can keep a copy of the orig=
inal token and create restricted versions to send to different resource serv=
ers. Because HMAC is very cheap,
 the client can even do this before each and every request. (This is what th=
e original paper refers to as "contextual caveats"). This means that a clien=
t can be issued a single access token from the AS with broad scope and appli=
cable to many different RS and
 can then locally create restricted copies for each individual RS.<o:p></o:p=
></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">The relevance to DPoP is that the client could even append caveats e=
quivalent to "htm" and "htu" just before sending the access token to the RS,=
 and maybe add an "exp" for 5 seconds
 in the future, reduce the scope, and so on:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; newAccessToken =3D accessToken.withCaveats({<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp; exp: now + 5seconds,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp; scope: "a b",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp; htm: "POST",<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp; ....<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; });<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; httpClient.post(data, Authorization: Bearer newAccessToken);<=
o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Note that the client doesn't need anything extra here - no keys, ext=
ra tokens etc. They just have the access token and a macaroon library.<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">The RS will see an opaque access token, send it to the AS for intros=
pection. The AS however, will see and validate the new caveats on the token a=
nd return an introspection response
 with the restricted scope and expiry time, and return the htm/htu restricti=
ons that the RS can then enforce.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">For clients this is transparent until they want to take advantage of=
 it and then they can just use an off-the-shelf macaroon library. For the RS=
 it is also completely transparent.
 All the (relatively small) complexity lives in the AS, which just has to be=
 able to produce and verify macaroons and take caveats into account when per=
forming token introspection - e.g. the returned scope should be the intersec=
tion of the original token scope
 and any scope caveats. But I don't think this would be too much effort.<o:p=
></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">[1]:&nbsp;<a href=3D"https://ai.google/research/pubs/pub41892">https=
://ai.google/research/pubs/pub41892</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">-- Neil<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">On 21 Nov 2019, at 06:23, Brian Campbell &lt;<a href=3D"mailto:bcamp=
bell@pingidentity.com">bcampbell@pingidentity.com</a>&gt; wrote:<o:p></o:p><=
/p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Yeah, suggestions and/or an MTI about algorithm support would probab=
ly be worthwhile. Perhaps also some defined means of signaling when an unsup=
ported algorithm is used along with
 any other reason a DPoP is invalid or rejected.&nbsp; <o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">There are a lot of tradeoffs in what claims are required and what pr=
otections are provided etc. The aim of what was chosen was to do just enough=
 to provide some reasonable protections
 against reuse or use in a different context while being simple to implement=
 and deploy.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">On Wed, Nov 20, 2019 at 6:34 AM Neil Madden &lt;<a href=3D"mailto:ne=
il.madden@forgerock.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt;=
 wrote:<o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Thanks for the reply, Brian.&nbsp;
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Collecting my thoughts up here rather than responding blow by blow.
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">Public key signatures are simpler in some respects, more complex in o=
thers. There are currently 10 public key JWS signature schemes defined (ES25=
6/384/512, RS256/384/512, PS256/384/512,
 EdDSA) - does an RS potentially have to support them all? If not, how do th=
ey negotiate algorithm support with the client?<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">On the other hand, the ECDH scheme I proposed can be implemented by a=
dapting an existing ECDH-ES encryption support in a JWT library. For example=
, I discovered while playing with
 this that our own internal library can implement the full flow I described e=
ntirely via the existing public API [1], so it's not necessarily as complex a=
s it first looks. I even knocked up a from-scratch implementation in WebCryp=
to (JavaScript) without too
 much code [2].<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">But I admit that using an existing JWT library to sign a JWT with an=
 existing algorithm is even easier, and that counts for a lot. Perhaps we ca=
n make concrete suggestions/requirements
 about algorithm support? e.g. "The RS MUST support RS256 and SHOULD support=
 EdDSA. Other algorithms MAY be supported."&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">With regards to replay protection, I think there are at least two re=
asonable positions:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">1. We assume that TLS is secure and don't try to defend against any c=
ompromise at that level. (Clearly none of the TLS-based PoP mechanisms survi=
ve if TLS is compromised, by definition).
 In this case the main attack to defend against is a malicious RS replaying t=
he access token elsewhere. Simply signing the origin of the RS would be enou=
gh to prevent this attack, while letting the client reuse the same JWT for m=
any requests (and the RS to
 cache the JWT validation). None of "jti", "htu", or "htm" seem relevant to t=
his model.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">2. We don't assume that TLS is secure (or it's not fully end-to-end)=
 and try to provide some defense in depth against a MitM attacker replaying a=
 token against the same RS. There
 is a graduated series of steps you can take here, depending on how much you=
 want to prevent this:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp;a. The DPoP token can be replayed for arbitrary request=
s to the same RS but has a short time limit (e.g., exp claim or RS-enforced m=
ax lifetime from iat)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp;b. The DPoP token can be replayed for the same request (=
htu/htm claims)<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp; &nbsp;c. The DPoP token can't be replayed at all - either bec=
ause of jti blacklisting on the RS or a challenge-response protocol on each r=
equest.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">(There are also variants such as including a hash of the request bod=
y/headers, or encoding an ETag into the JWT).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">I think either are reasonable design goals, but aiming for 2 adds mo=
re value. I think aiming for 2a is a reasonable default baseline that allows=
 the client to reuse a DPoP token
 for a few requests, reducing the cost of the signature (and the RS can cach=
e the validated JWT). Support for 2b or 2c can then be listed as optional ad=
ditions.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">PS - 2a/2b can be achieved without PoP. I'll save that for another e=
mail in the next few days though.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">[1]:&nbsp;<a href=3D"https://gist.github.com/NeilMadden/685ea66fb79d=
37a50c2310f853bd9496" target=3D"_blank">https://gist.github.com/NeilMadden/6=
85ea66fb79d37a50c2310f853bd9496</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">[2]:
<a href=3D"https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4=
a7" target=3D"_blank">
https://gist.github.com/NeilMadden/70e1b232a3b273de02ed731eb36ec4a7</a><o:p>=
</o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">-- Neil<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<br>
<br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">On 19 Nov 2019, at 07:43, Brian Campbell &lt;<a href=3D"mailto:bcamp=
bell@pingidentity.com" target=3D"_blank">bcampbell@pingidentity.com</a>&gt; w=
rote:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;margin-bottom:12.0pt=
"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</span><o=
:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">On Thu, N=
ov 14, 2019 at 7:20 PM Neil Madden &lt;<a href=3D"mailto:neil.madden@forgero=
ck.com" target=3D"_blank">neil.madden@forgerock.com</a>&gt;
 wrote:</span><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">I can't a=
ttend Singapore either in person or remotely due to other commitments. I bro=
adly support adoption of this draft,
 but I have some comments/suggestions about it.</span><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Thanks Ne=
il. And sorry to hear that you won't be in Singapore. This kind of stuff is d=
efinitely more easily discussed in
 person (for me anyway). But I'll try and comment on your comments here as b=
est I can. I also plan to also mention them in the Wednesday and/or Thursday=
 presentation.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Section 2=
 lists the main objective as being to harden against compromised/malicious A=
S or RS, which may attempt to replay
 captured tokens elsewhere. While this is a good idea, a casual reader might=
 wonder why a simple audience claim in the access token/introspection respon=
se is not sufficient to prevent this. Because interactions between the clien=
t and RS are supposed to be over
 TLS, is the intended threat model one in which these protections have broke=
n down? ("counterfeit" in the description suggests this). Or is the motivati=
on that clients want to get a single broad-scoped access token (for usabilit=
y/performance reasons) and use
 it to access multiple resource servers without giving each of them the abil=
ity to replay the token to the other servers? Or are we thinking of a phishi=
ng-type vulnerability were a general-purpose client might accidentally visit=
 a malicious site which prompts
 for an access token that the client then blindly goes off and gets? (UMA?) I=
t's not clear to me which of these scenarios is being considered, so it woul=
d be good to tighten up this section.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">It is adm=
ittedly a bit loose and I agree it'd be good to tighten it up. But part of w=
hy it's loose is that it tries to offer
 some protections for all those scenarios and more such as a general lost/st=
olen token. It's effectively trying to provide as many of the same types of p=
rotections/assurances that you'd get with TLS based PoP mechanisms (like OAu=
th MTLS or Token binding) to
 the extent that can be done at the HTTP application layer. Which can't real=
istically be exactly the same but can maybe be kinda close while actually be=
ing accessible and implementable because it's all done at the application la=
yer. There are trade-offs, of
 course, and the document writers have endeavored to find a good balance in t=
he trade-off decisions we've made. But that doesn't mean they are necessaril=
y the right decisions or are closed to discussion. To the casual reader I wo=
uld say that it turns out that
 getting an appropriate simple audience claim into an access token isn't nea=
rly as simple as it might seem. And while it will prevent RS to RS replay (a=
s long as both RSs aren't legit audiences) it doesn't help with preventing t=
he use of tokens stolen or leaked
 by other means (including for refresh tokens issued to public clients).&nbs=
p;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Another p=
otential motivation is for mobile apps. Some customers of ours would like to=
 tie access/refresh tokens to private
 key material generated on a secure element in the device, that can only be a=
ccessed after local biometric authentication (e.g. TouchID/FaceID on iOS). I=
 have suggested using mTLS cert-bound tokens for this, but have heard some p=
ushback due to the difficulty
 of configuring support for client certs across diverse infrastructure. A si=
mple JWT-based solution like DPoP could fill this need.</span><o:p></o:p></p=
>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">It's mayb=
e not stated in the draft but this kind of thing is among the objectives (in=
 my mind anyway).&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">My main c=
oncerns with the draft though are about efficiency and scalability of the pr=
oposed approach:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">1. The re=
quirement to use public key signatures, along with the anti-replay nonce, me=
ans that the RS is required to perform
 an expensive signature verification check on every request. That is not goi=
ng to scale up well. While there are more efficient schemes like Ed25519 now=
, these are still typically an order of magnitude slower than HMAC and the l=
atency and CPU overhead is likely
 to be a non-starter for many APIs (especially when you're billed by CPU usa=
ge). Public key signatures are also notoriously fragile (see e.g. the histor=
y of nonce reuse/leakage vulnerabilities in ECDSA or&nbsp;</span><o:p></o:p>=
</p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Yes, asym=
metric is more processing intensive than symmetric. But if you take away the=
 distributed replay check (see next
 response), it will scale out just fine. I'm not so sure latency is a real i=
ssue here - while these operations are an order of magnitude slower we're st=
ill talking about times that are not perceptible to a human. CPU usage/cost i=
s a part of a trade-off for
 the simplicity afforded by public/private keys.&nbsp; And it is significant=
ly simpler. The design you sketched out is admittedly quite clever but it's n=
ot even in the same ballpark with respect to complexity. And, as you pointed=
 out, the other suggestion around
 symmetric keys has rather different security properties while still adding c=
omplexity. Adding symmetric key support isn't something that can just be add=
ed on easily.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">2. The ad=
vice for the RS to store a set of previously used nonces to prevent replay w=
ill also hamper scalability, especially
 in large deployments where such state would need to be replicated to all se=
rvers (or use sticky load balancing, which comes with its own problems). Thi=
s violates the statelessness of HTTP, and it also potentially breaks idempot=
ency of operations: Think of
 the case where the JWT validation and replay protection is done at an API g=
ateway but then the call to the backend API server fails for a transient rea=
son. The client (or a proxy/library) cannot simply replay the (idempotent) r=
equest in this case because it
 will be rejected by the gateway. It must instead recreate the DPoP JWT, inc=
urring additional overheads.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">The actua=
l value of replay checking on jti is somewhat questionable. The DPoP JWT onl=
y transits between client and server
 so a TLS MITM is likely needed to steal a DPoP JWT. But we are assuming TLS=
 works here. And an active MITM could thwart this check by just being first t=
o present DPoP JWT. I think the jti check made its way into the draft mostly=
 because it seemed like something
 was needed to try and bring it closer to the TLS PoP models. Being aware of=
 the scalability concerns, I did endeavor to write the text in such a way so=
 as to leave some wiggle room in implementations/deployments with text like '=
"jti" SHOULD be used by the
 server for replay detection and prevention` and [ensure that] 'within a rea=
sonable consideration of accuracy and resource utilization, a JWT with the s=
ame "jti" value has not been received previously'. The idea being that using=
 something eventually consistent
 or even local only to the runtime instance would be permissible. Perhaps th=
at allowance and the rational could be made more clear? Or would you suggest=
 to do away with the jti replay stuff al? Or something else?&nbsp;</span><o:=
p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">3. Minor:=
 The use of a custom header for communicating the DPoP proof will require ad=
ditional CORS configuration on top
 of that already done for the Authorization header, and so adds a small amou=
nt of additional friction for adoption. Given that CORS configuration change=
s often require approval by a security team, this may make more of an impact=
 than you'd expect.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Feels rea=
lly minor. I mean, we could try to roll everything up under one header. But i=
t does seem unwarranted and would
 complicate things - at least in the model we've got now where the proof is s=
ent the same way ono all types of requests.&nbsp;</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0in=
 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bo=
ttom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">It's also=
 not clear to me exactly what threat the anti-replay nonce is protecting aga=
inst. It does nothing against the replay
 scenario discussed in section 2, as I understand it - which really seems to=
 be more of a MitM scenario. Given that the connection between the client an=
d the RS is supposed to be over TLS, and TLS is already protected against re=
play attacks, I think this part
 needs to be better motivated given the obvious costs of implementing it.</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">I have a t=
entative suggestion for an alternative design which avoids these problems, b=
ut at a cost of potentially more complexity
 elsewhere. I'll summarise it here for consideration:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">1. The cl=
ient obtains an access token in the normal way. When calling the token endpo=
int it provides an EC/okp public key
 as the confirmation key to be associated with the access/refresh tokens.</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">2. The fi=
rst time the client calls an RS it passes its access token in the Authorizat=
ion: Bearer header as normal. (If the
 RS doesn't support DPoP then this would just succeed and no further action i=
s required by the client - allowing clients to opportunistically ask for DPo=
P without needing a priori knowledge of RS capabilities).</span><o:p></o:p><=
/p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">3. The RS=
 introspects the access token and learns the EC public key associated with t=
he access token. As there is no DPoP
 proof with the access token, the RS will generate a challenge in the follow=
ing way:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp; &n=
bsp;&nbsp;o The RS generates an ephemeral EC key pair for the same curve as t=
he confirmation key (e.g. P-256 or X25519).</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp; &n=
bsp;&nbsp;o The RS stores the ephemeral private key somewhere, associated wi=
th this access token (see below for a scalable implementation
 choice)</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp; &n=
bsp;&nbsp;o The RS encodes the ephemeral public key into a JWK (epk) and bas=
e64url-encodes it. It uses this as a challenge to
 the client by sending back a 401 response with WWW-Authenticate: DPoP &lt;e=
ncoded-epk&gt;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">4. The cl=
ient decodes the epk challenge and performs an ECDH key agreement between it=
s private key and the challenge epk
 as per the method described for the existing JWA ECDH-ES encryption algorit=
hm. Rather than deriving an AES key however, it derives a HMAC key for HS256=
. The "apu" value is set to the access token (string value as ASCII bytes) a=
nd the "apv" value is set to
 the hostname of the RS (e.g. "<a href=3D"http://api.example.com/" target=3D=
"_blank">api.example.com</a>"). This ensures that the derived key is cryptog=
raphically bound to the context in which it is used.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">5. The cl=
ient uses the HMAC key to create a DPoP proof JWT much like the one in the c=
urrent draft, but signed using the
 HS256 key. If a "kid" field was present in the challenge JWK sent by the RS=
 then the same value MUST be used in the "kid" header of this discharge JWT.=
 It retries its original request sending Authorization: DPoP &lt;hmac-jwt&gt=
; at=3D&lt;access_token&gt;.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">6. The RS=
 uses its stored ephemeral private key to derive the same HMAC key and verif=
y the DPoP discharge JWT. If it validates
 and all fields are correct then the request is allowed.</span><o:p></o:p></=
p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Efficient=
 implementation trick:</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Because t=
he client is required to copy and "kid" value from the challenge JWK, the RS=
 can preemptively carry out the ECDH
 key agreement immediately and generate the derived HMAC key. The RS can the=
n encrypt this derived key using a local authenticated encryption key (e.g. A=
ES-GCM) and use that encrypted value as the "kid" value in the challenge (pe=
rhaps along with some context
 or an expiry time). That way the RS only needs to decrypt this kid value ra=
ther than performing the ECDH key agreement on every request. This also avoi=
ds the need for the RS to store any per-client state locally.</span><o:p></o=
:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">The chall=
enge-response nature of the scheme prevents traditional replay attacks in th=
e case where a DPoP discharge JWT is
 accidentally leaked through server logs or some other flaw, without needing=
 to store nonces on the server. Using the RS's hostname in the key derivatio=
n process prevents mitm attacks in a similar way to how FIDO/WebAuthn preven=
ts this. Most importantly, once
 a HS256 key has been derived between a client and RS they can reuse that ke=
y for multiple requests, reducing the overhead of the ECDH key agreement ste=
p. Either side can decide as a matter of policy how long to let this occur a=
nd when to trigger a fresh challenge-response.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Because t=
his fits within the standard HTTP authentication framework, it also requires=
 no additional CORS configuration and
 is relatively easy to plug in to existing HTTP client libraries.</span><o:p=
></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">The main d=
ownside of this approach to me is the fact that you can't simply reuse an ex=
isting JWT library to implement it,
 and so it will take time for client libs to develop. (Although I think this=
 might be achievable now with existing *COSE* libraries). This would increas=
e the risk of people hand-rolling solutions, rather than using well-tested l=
ibraries. On the other hand,
 it uses fairly widely supported primitives so e.g. an implementation using W=
ebCrypto is probably only a few dozen lines of code.</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">-- Neil</=
span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue"><br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">On 31 Oct=
 2019, at 19:20, Brian Campbell &lt;<a href=3D"mailto:bcampbell=3D40pingiden=
tity.com@dmarc.ietf.org" target=3D"_blank">bcampbell=3D40pingidentity.com@dm=
arc.ietf.org</a>&gt;
 wrote:</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Hello WG,=
&nbsp;</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Just a qu=
ick note to let folks know that -03 of the DPoP draft was published earlier t=
oday. The usual various document links
 are in the forwarded message below and the relevant snippet from the doc hi=
story with a summary of the changes is included here for convenience.&nbsp;<=
/span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Hopefully=
 folks will have time to read the (relativity) short document before the mee=
ting(s) in Singapore where (spoiler
 alert) I plan to ask that the WG consider adoption of the draft.&nbsp;</spa=
n><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">Thanks,</=
span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue"><br>
&nbsp;-03<br>
&nbsp; &nbsp;o &nbsp;rework the text around uniqueness requirements on the j=
ti claim in<br>
&nbsp; &nbsp; &nbsp;&nbsp;the DPoP proof JWT<br>
&nbsp; &nbsp;o &nbsp;make tokens a bit smaller by using "htm", "htu", and "j=
kt" rather<br>
&nbsp; &nbsp; &nbsp;&nbsp;than "http_method", "http_uri", and "jkt#S256" res=
pectively<br>
&nbsp; &nbsp;o &nbsp;more explicit recommendation to use mTLS if that is ava=
ilable<br>
&nbsp; &nbsp;o &nbsp;added David Waite as co-author<br>
&nbsp; &nbsp;o &nbsp;editorial updates</span><o:p></o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">---------=
- Forwarded message ---------<br>
From:&nbsp;&lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank"=
>internet-drafts@ietf.org</a>&gt;<br>
Date: Thu, Oct 31, 2019 at 11:53 AM<br>
Subject: New Version Notification for draft-fett-oauth-dpop-03.txt<br>
To: Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.net" targe=
t=3D"_blank">torsten@lodderstedt.net</a>&gt;, Michael Jones &lt;<a href=3D"m=
ailto:mbj@microsoft.com" target=3D"_blank">mbj@microsoft.com</a>&gt;, John B=
radley &lt;<a href=3D"mailto:ve7jtb@ve7jtb..com" target=3D"_blank">ve7jtb@ve=
7jtb.com</a>&gt;,
 Brian Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.com" target=3D"=
_blank">bcampbell@pingidentity.com</a>&gt;, David Waite &lt;<a href=3D"mailt=
o:david@alkaline-solutions.com" target=3D"_blank">david@alkaline-solutions.c=
om</a>&gt;, Daniel Fett &lt;<a href=3D"mailto:mail@danielfett.de" target=3D"=
_blank">mail@danielfett.de</a>&gt;</span><o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;margin-bottom:12.0pt=
"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue"><br>
<br>
<br>
A new version of I-D, draft-fett-oauth-dpop-03.txt<br>
has been successfully submitted by Brian Campbell and posted to the<br>
IETF repository.<br>
<br>
Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;draft-fett-oauth-dpop<br>
Revision:&nbsp; &nbsp; &nbsp; &nbsp;03<br>
Title:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; OAuth 2.0 Demonstration of Proof-of=
-Possession at the Application Layer (DPoP)<br>
Document date:&nbsp; 2019-10-30<br>
Group:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Individual Submission<br>
Pages:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15<br>
URL:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<a href=3D"https://www.ie=
tf.org/internet-drafts/draft-fett-oauth-dpop-03.txt" target=3D"_blank">https=
://www.ietf.org/internet-drafts/draft-fett-oauth-dpop-03.txt</a><br>
Status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf=
.org/doc/draft-fett-oauth-dpop/" target=3D"_blank">https://datatracker.ietf.=
org/doc/draft-fett-oauth-dpop/</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://tools.ietf.org/html/d=
raft-fett-oauth-dpop-03" target=3D"_blank">https://tools.ietf.org/html/draft=
-fett-oauth-dpop-03</a><br>
Htmlized:&nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://datatracker.ietf.org/=
doc/html/draft-fett-oauth-dpop" target=3D"_blank">https://datatracker.ietf.o=
rg/doc/html/draft-fett-oauth-dpop</a><br>
Diff:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<a href=3D"https://www.ietf.or=
g/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03" target=3D"_blank">https://www.iet=
f.org/rfcdiff?url2=3Ddraft-fett-oauth-dpop-03</a><br>
<br>
Abstract:<br>
&nbsp; &nbsp;This document describes a mechanism for sender-constraining OAu=
th 2.0<br>
&nbsp; &nbsp;tokens via a proof-of-possession mechanism on the application l=
evel.<br>
&nbsp; &nbsp;This mechanism allows for the detection of replay attacks with a=
ccess<br>
&nbsp; &nbsp;and refresh tokens.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission=
<br>
until the htmlized version and diff are available at&nbsp;<a href=3D"http://=
tools.ietf.org/" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d..&nbsp; If you have received this communication in error, please notify th=
e sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</span></i></b><span style=3D"font-size:10.=
5pt;font-family:HelveticaNeue">_____________________________________________=
__<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/oauth</a></span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue">&nbsp;</s=
pan><o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><span style=3D"font-size:10.5pt;font-family:HelveticaNeue"><br>
</span><b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neu=
e&quot;;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIAL=
ITY NOTICE: This email may contain confidential and privileged material for t=
he sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibite=
d.&nbsp; If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachment=
s from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto"><br>
<b><i><span style=3D"font-size:10.0pt;font-family:&quot;Helvetica Neue&quot;=
;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOT=
ICE: This email may contain confidential and privileged material for the sol=
e use of the intended recipient(s). Any review,
 use, distribution or disclosure by others is strictly prohibited.&nbsp; If y=
ou have received this communication in error, please notify the sender immed=
iately by e-mail and delete the message and any file attachments from your c=
omputer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-al=
t:auto">&nbsp;<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>


</div></blockquote></div></div></body></html>=

--Apple-Mail-38AA6948-58E0-49B0-B92C-CAD0EDFE541F--


From nobody Tue Nov 26 00:26:14 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B7F312003F for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 00:26:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yt0jJtaIdnfA for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 00:26:10 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BB2B12081B for <oauth@ietf.org>; Tue, 26 Nov 2019 00:26:06 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.22]) by mx.stet.eu  with ESMTP id xAQ8Q3KR007786-xAQ8Q3KT007786 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL); Tue, 26 Nov 2019 09:26:03 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES002.steteu.corp (10.17.2.22) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 26 Nov 2019 09:26:03 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Tue, 26 Nov 2019 09:26:03 +0100
From: =?utf-8?B?Um9iYWNoZSBIZXJ2w6k=?= <herve.robache@stet.eu>
To: Joseph Heenan <joseph.heenan@fintechlabs.io>, Torsten Lodderstedt <torsten@lodderstedt.net>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Question regarding RFC 8628
Thread-Index: AdWeII26US5M3faEQ+WvksYaVb0XzwGEZkIA
Date: Tue, 26 Nov 2019 08:26:03 +0000
Message-ID: <c3601d96013842ed8570823ce0d07fad@STEMES002.steteu.corp>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.30]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25066.005
x-tm-as-result: No-22.083600-8.000000-10
x-tmase-matchedrid: 6jmP1Ht9qSueGXFpAoGIoe5i6weAmSDKqr0Np6cKdO5fQRiqw0gT4DcI a9gjeLdiWRv4gMq+CegHdptXFFME7wRytbWF0BphCgHQMFomsrRv+B0owAW3BpcDGDiTFmuGs03 PiUbxvvhR1tTDNqr8dVjZYFGVYSCavqDeDn7UX95DO9NSmfde1K6IBbSnfz+3CwWRLqiC/UqTvZ kBseIwt+1GNG8gfAYq1EsO4+XMhUs8Ph3xmtQMM36Y5s54+e3KwcNYF/8uAnxKddiF2Wo8edk2l 7i3oc4zRw3fpQHgw3sSs4PEHE58E2GA/BgSguhrW4b3LWV65TthS5mf1VdlYW+fXVEQ/fGeLKiG E4quj62tMJUmFtokrLdxpg1wk3ZZqtUjpgakDg4mEURBmKrZlDYCN3h43uATjFFYmmGGytxNc6P VcEC7cClO83MoWhLa1gfFWv2A3tFuVFQ4+Z0ChqmGTQytjAwlmRKFhwukYf10+P0tQGP+S3uKC/ mB6YsP50kZRfUS7pmGCLqQvRi5SAtOjMpOrPSt9VjtTc1fwmBRvgR0hkbG4DuwTDpX8ii0RGTvU rkVuyNWGLjxzYP1N+Lpee4QwI3eT11Qm3nv9lJtJYfOb0q5O2ZrKp1iUZhLuFQeUK7rNFsxLOo7 8h7rqFKSO61FHUul3GP0YVYnhxHH4Bb5h1nA8V9WMqffuCQmOh+3EpVSzUbDv5dDcuT2edRlmyj fMuuvPqh/Toa5DvXO9GIXQI4vS2fcSuJaXwtioYYDKbevse1VogWRsEaR/rLWf00E+3M1o1Uypg rbZr7ezkYoPxTs3pKlrkWVMYlhweGG47UzGkyrm7DrUlmNkIlfAW57f8KpmBJMroHl9O11NYf7U qBJ/CdXB5z8HM7hZMVYtyRnc/x5LAuoLWfu8twk9syBlhOci1Q/lWFA9dRnLdKPXE/ywp3zdOY4 m5CF2X8N5yzEaamByf9vwiEp9A==
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--22.083600-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25066.005
x-tm-snts-smtp: 6190CA6CA80881E2519ECEC0949854B2F18A2419B0FE6398A34530745713D4502000:9
Content-Type: multipart/related; boundary="_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_"; type="multipart/alternative"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/E6GFSPbOfRpEdcghstDUSLT5pGI>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 08:26:13 -0000

--_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: multipart/alternative;
 boundary="_000_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_"

--_000_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_--

--_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: application/octet-stream; name="image001.emz"
Content-Description: image001.emz
Content-Disposition: inline; filename="image001.emz"; size=206097;
 creation-date="Tue, 26 Nov 2019 08:26:01 GMT";
 modification-date="Tue, 26 Nov 2019 08:26:01 GMT"
Content-ID: <image001.emz@01D5A43B.335100B0>
Content-Transfer-Encoding: base64
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--_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: image/png; name="image002.png"
Content-Description: image002.png
Content-Disposition: inline; filename="image002.png"; size=44992;
 creation-date="Tue, 26 Nov 2019 08:26:02 GMT";
 modification-date="Tue, 26 Nov 2019 08:26:02 GMT"
Content-ID: <image002.png@01D5A43B.335100B0>
Content-Transfer-Encoding: base64
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--_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_
Content-Type: application/octet-stream; name="oledata.mso"
Content-Description: oledata.mso
Content-Disposition: inline; filename="oledata.mso"; size=83468;
 creation-date="Tue, 26 Nov 2019 08:26:02 GMT";
 modification-date="Tue, 26 Nov 2019 08:26:02 GMT"
Content-ID: <oledata.mso>
Content-Transfer-Encoding: base64
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--_006_c3601d96013842ed8570823ce0d07fadSTEMES002steteucorp_--


From nobody Tue Nov 26 02:33:20 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5B59120870 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 02:33:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ke4hVrvgA-M4 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 02:33:16 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 098C71200E9 for <oauth@ietf.org>; Tue, 26 Nov 2019 02:33:15 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id y11so18675153wrt.6 for <oauth@ietf.org>; Tue, 26 Nov 2019 02:33:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=9/vC+NYIc4nk9vdGSvrNWLr8H79vM2WywT+WX7YdKeE=; b=GrK3VbLFGYaDv8JTrtEw65n+MbondwcoA8ydEDlVFnkUY18C+ku68j/5SK5DR6Mu7e PVgtog1mVAVGCxFDW07HsHzxUjHzptHFdrh1CIVOKPUKjKXBN7PHnbdCfccLCQrSm6N1 IREyhbgT7uVH7jTwnGNqect91cB3JGpDo5qak/ZFFG8K42t1qvmkoIhVf2ar7NaslRjR nrFspNfs6lE5cl7fGZsWLdVAVYhz8luROjMdzF5jdIqF+M+XnZRjhc8akhvxQwRwNztw JOW6u/sVFkC/ZwZqSka6pumsCX10BVrjQKKoUQqgpbhP80mKLcchoJOxzkTx5FJf6mg7 t56g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=9/vC+NYIc4nk9vdGSvrNWLr8H79vM2WywT+WX7YdKeE=; b=Z1hde060VFHlZlVWcphA4xAAr1yuRU3AY5r0xs4SOzoeBr/MYZwaszOooHNphKT5Bv jqI7Hk+ffStAu7BnXdM9xaGJtNvCEGRFqqgT43lDGdcxgtbExrZ1hGMq5AymI7MPhQcR 2wjsBUmuOXZi1d8an0YwEnMfKazACaXGGaYDeWDjp24s3N2NI0OEcDcup7Oaelc2nRYA gSaadwfSgJAozkZjqlRUQYMtrsww5LT06EAByt3KY3lpYCRR8gsEtZEi+NpHwwV1OvFT I8SMrIyDt/5qd6xcDFqBNk61mVdeYPb6rnJXSqGOqJCTzfjZMfzqXJBJUBDDkDJgFDrK 7Tqg==
X-Gm-Message-State: APjAAAVpkR/DmkU13J9lqtiFg5U6T7Z2zITjO6YLyWKr0MvIRByl5/nX 74HNoLDM7CB1hFTrP8d1oA+9Bw==
X-Google-Smtp-Source: APXvYqwl1pBVRkJ4cyCqz/rJ2Q0GWEpYESPfQg20HVURV6G9WJrZBLjB3KT6S9zdb8hCUyhjb84eHA==
X-Received: by 2002:adf:fec5:: with SMTP id q5mr36889637wrs.293.1574764393977;  Tue, 26 Nov 2019 02:33:13 -0800 (PST)
Received: from [10.3.21.206] (gate.haus-staade.de. [80.155.34.3]) by smtp.gmail.com with ESMTPSA id c12sm14123682wro.96.2019.11.26.02.33.12 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 26 Nov 2019 02:33:13 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <E15F777A-38F4-42E8-8EA5-86EAC8C53841@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_59DD1150-B8AD-44F8-9953-4A3C97C2FEE7"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 26 Nov 2019 11:33:02 +0100
In-Reply-To: <c3601d96013842ed8570823ce0d07fad@STEMES002.steteu.corp>
Cc: Joseph Heenan <joseph.heenan@fintechlabs.io>, "oauth@ietf.org" <oauth@ietf.org>
To: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
References: <c3601d96013842ed8570823ce0d07fad@STEMES002.steteu.corp>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/B2QBcbOu5I4S-HIE31WZSPhtaJM>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 10:33:19 -0000

--Apple-Mail=_59DD1150-B8AD-44F8-9953-4A3C97C2FEE7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi Herv=C3=A9,

the flow you outline is equivalent to CIBA =
(https://openid.net/specs/openid-client-initiated-backchannel-authenticati=
on-core-1_0-ID1.html).=20

RFC8628/device grant type and CIBA differ as follows:

- RFC8628 provides the client with an URL for the authorisation process
- CIBA requires the client to provide a user identifier to the AS/OP, =
the AS in turn uses an out of band mechanism to communicate with the =
user=20

best regards,
Torsten.=20

> On 26. Nov 2019, at 09:26, Robache Herv=C3=A9 <herve.robache@stet.eu> =
wrote:
>=20
> Dear all
> =20
> Thanks again for your clarifications. After discussion with the French =
community, we think that a full decoupled flow could be the following =
one
> =20
> <image002.png>
> =20
> =46rom my perspective, this flow  is very similar to RFC8628 or CIBA, =
except the following difference: instead of providing the customer with =
the authentication URI through the third party, the bank notifies =
directly the customer on a specific device or mobile app.
> =20
> Do you have any thought on this flow?
> =20
> Thanks in advance
> =20
> Herv=C3=A9
> =20
> De : Robache Herv=C3=A9=20
> Envoy=C3=A9 : lundi 18 novembre 2019 15:21
> =C3=80 : 'Joseph Heenan'; Torsten Lodderstedt
> Cc : oauth@ietf.org
> Objet : [OAUTH-WG] Question regarding RFC 8628
> =20
> Thanks Joseph
> =20
> I agree with you. There should be no issue when the URL is registered =
during the TPP app installation.
> =20
> =46rom my perspective, this URL should be passed during the =
authorization request within the [redirect_uri] field.
> =20
> By the way, most of the French banks will use Oauth2 AC and not OpenId =
Connect. I guess that the sequence diagram is roughly the same, isn=E2=80=99=
t it?
> =20
> Best regards
> =20
> Herv=C3=A9
> =20
> De : Joseph Heenan [mailto:joseph.heenan@fintechlabs.io]=20
> Envoy=C3=A9 : lundi 18 novembre 2019 14:49
> =C3=80 : Torsten Lodderstedt
> Cc : Robache Herv=C3=A9; oauth@ietf.org
> Objet : Re: [OAUTH-WG] Question regarding RFC 8628
> =20
> Hi all,
> =20
> Thanks, Torsten.
> =20
>=20
> On 18 Nov 2019, at 13:22, Torsten Lodderstedt =
<torsten@lodderstedt.net> wrote:
> =20
> Hi Herv=C3=A9,
>=20
> looping in Joseph.
>=20
>=20
> On 18. Nov 2019, at 21:17, Robache Herv=C3=A9 <herve.robache@stet.eu> =
wrote:
>=20
> Thanks Torsten
>=20
> Yes, we study this flow as well. Actually we consider the two =
following flows for a mobile-based authentication
>=20
> -          DECOUPLED : via a RFC8628-derived or CIBA approach (as =
suggested by Rob)
> -          REDIRECT : via the flow specified in the OpenId link you =
gave.
>=20
> The main issue encountered so far is to give back the focus on the =
third party app. Third Parties fear that their app will be kept in the =
back of the mobile screen.
>=20
> @Joseph: what=E2=80=99s your take on this concern?=20
> =20
> In app2app, it really shouldn=E2=80=99t happen - if the device OS has =
not properly registered the universal link, the TPP website would open =
instead and authorization code can still be processed (though admittedly =
supporting this use case may require a bit more care to ensure session =
mixup attacks can=E2=80=99t happen).
> =20
>=20
> =20
>=20
> This could happen when the TPP app [app link]/[universal link] is not =
properly registered or forwarded to the bank app.
> -          In the REDIRECT approach this means that the authorization =
code cannot be forwarded to the TPP
> =20
> I don=E2=80=99t really understand how the =E2=80=98app link=E2=80=99 =
would not be properly registered to the bank app. The universal link =
should be the same URL as for the redirect uri on the TPP website. =
Obviously if the TPP registers their redirect uri incorrectly with the =
bank the flow won=E2=80=99t work, but this applies equally to the web =
based flows, and it=E2=80=99s not the kind of problem you see occur on a =
production system.
> =20
> The evidence from the UK so far is that drop-off rates (where the user =
does not successfully complete the authentication and return to the =
third party) are far lower for app2app compared to a normal oauth2 =
browser based redirect flow; I can=E2=80=99t put my hand on the actual =
figures right now but from memory around 5 times more users successfully =
completed an app2app flow than the usual web flows.
> =20
>=20
> -          In the DECOUPLED approach it less critical since the TPP =
polls the bank and eventually gets its token once the PSU has =
authenticated.
>=20
> But in the decoupled flow, the PSU first has to enter her PSU ID in =
order to allow the TPP to identity the PSU towards the ASPSP. This is =
less convenient and leaks PII.
> =20
> Not necessarily the PSU ID, but generally something that can be used =
to identify the user. In theory it could be an ephemeral id, though in =
reality there=E2=80=99s all sorts of issues with implementing that, =
particularly on a =E2=80=99same device=E2=80=99 flow. It=E2=80=99s =
definitely less convenient, particularly for the first TPP<->ASPSP =
interaction where the TPP will necessarily have to collect more info =
from the user than would be necessary in a redirect based flow.
> =20
> The user also has to manually switch back to the TPP app at the end of =
the flow.
> =20
> My general opinion is that for most use cases where the consumption =
and authentication devices are the same device a decoupled flow should =
not be used, as for that use case app2app presents a far better user =
experience - both in terms of the number of steps and the time taken to =
successfully complete all the steps.
> =20
> Joseph
> =20
>=20
>=20
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 =
l'intention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas =
destin=C3=A9, merci de le d=C3=A9truire ainsi que toute copie de votre =
syst=C3=A8me et d'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui =
n'est pas conforme =C3=A0 sa destination, toute diffusion ou toute =
publication, totale ou partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce =
message =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline=
 toute responsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se =
o=C3=B9 il aurait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou =
falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 =
l'environnement.
>=20
> This message and any attachments is intended solely for the intended =
addressees and is confidential.
> If you receive this message in error, or are not the intended =
recipient(s), please delete it and any copies from your systems and =
immediately notify the sender.
> Any unauthorized view, use that does not comply with its purpose, =
dissemination or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message =
which may not be reliable, STET shall not be liable for the message if =
modified, changed or falsified.
> Do not print this message unless it is necessary, please consider the =
environment.
> <oledata.mso>


--Apple-Mail=_59DD1150-B8AD-44F8-9953-4A3C97C2FEE7
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow
ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE
BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG
A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu
dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5
NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I
91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii
ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b
xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX
5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB
5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU
GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG
AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE
AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw
UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl
Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV
HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls
OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+
SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g
qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm
5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg
jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ
KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH
EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV
U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw
MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx
EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj
dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq
KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb
M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L
bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH
fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB
AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy
/AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH
MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv
bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6
Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM
AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh
Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi
tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp
VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7
T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI
9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI
ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon
M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ
z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx
CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv
cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G
CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP
Fw0xOTExMjYxMDMzMDJaMC8GCSqGSIb3DQEJBDEiBCAWyHqE6WE/IGCGs2HersTMYw/8OcEVdJrA
/E4ZWpTr0TCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0
ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl
IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ
BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx
GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1
dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG
SIb3DQEBAQUABIIBAJQdm8d7v57hMmKJn5Yt82DRq38mObYkBvhcx67xjdInctoc5VRZil7kgLUy
6lKvg9n7WxmRi2gWUaRlJvDMS5kHXFeH6Hmme+UiGDVBKBN6J8JFHIiGFWZIfEVELZm+HzGqHgBp
5+oKa6SyqaufZ46X0tZSA0HzcJmwnW/KTvADpOJ0KPtGGe6a3MWZfLPGDbewnOT1ixjYAoxRnZ3l
BW9ZTDge8s2hZg4YLyZa3zlVHDttEyTsloJDoV/cNJ3AGgHzOLdVI2sRZorqouHlSpHZUnW1VdiD
k9H9GGLLUZWSSeIbuSgA39jCfDbK0p9asjcKc0hNKIM5LNIHeyzgLjUAAAAAAAA=
--Apple-Mail=_59DD1150-B8AD-44F8-9953-4A3C97C2FEE7--


From nobody Tue Nov 26 02:34:41 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7ABB1209FC for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 02:34:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jdymDKIX8SK9 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 02:34:38 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEF50120870 for <oauth@ietf.org>; Tue, 26 Nov 2019 02:34:37 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id i12so21752180wrn.11 for <oauth@ietf.org>; Tue, 26 Nov 2019 02:34:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=40fGIGW55vM3Zzp5fjR3cjlnWVgI0nQgWlqCdclLpGk=; b=bvBBiZO0c24ENwU8mHUOGG+PmbnqtLPWNGObNJ85UHSEO1bL0bguChB8JZwEOf1UHO G6euLQzgbNucXBIEGF45Vhd15ZjtHoSbpgfXfNhwwF60leDz2Gjzxs/GqHLehPxHAuUq x+yvblUByZIMSyTkbdz6xD5CH9uj+pIPTs6Fy1+1sFuIx6kHDsIZXqL6UaTzMIohQsu8 41G93NClk52ABbt4iEVk1+TBMCfKXtH9pvY8LIMBTz5sSvWZgOvGtzVoEznL20L6kbAf VUEZ9TOxrnmvVK2JZNazPN26J9RqA5nZHBEKs5iNzH8v9NDlC1uDcP3KUym1c2oW7aMv yHDg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=40fGIGW55vM3Zzp5fjR3cjlnWVgI0nQgWlqCdclLpGk=; b=RW2gdZYUB9ziz84UQy04kIg2pEYvyPKn4iMbUf7edJhTxMZPYYPrX2R4w0oOBbxJi3 LxMM6ZQTS0YG0P56PoPg+XXPeT1i8RcmjYYa8RFzu5tF4edbaYyv1IDBtroWfBFSuRTn 0Al3uJ+yAgdhHw2IIyIfTuc8rO535MJjfyHptmvCNZ7nSEZ1Gl3Gsbs2tLSCiPqCvrDx t9Sa2AuJ/QrDxJ4QWgka90uk9418hYRiFCegn0LGKNYNg4K+9LYVLWYvd38gsoA3C9ma 27IBXMNt/1zbNhx8AXvF1cTGsx5F3ypguIIqa9XHr25glkvHqnNfgMl1SvEojLK2AEJn 8pFA==
X-Gm-Message-State: APjAAAUurGO8GftXFZcOn5iMAp7PwzgPga0CMJCn9/u9VieMwIbeBEi3 Wtk+cMc3XrE9VLOSSu2eqJassA==
X-Google-Smtp-Source: APXvYqxqhAgkrG4qhlsRCU457GGTb2tTelDOn8RSyyfx7zhZ3E8e7vLUbgGEsS62uVHw9BfNqxZqzg==
X-Received: by 2002:adf:dc4b:: with SMTP id m11mr22042875wrj.344.1574764476260;  Tue, 26 Nov 2019 02:34:36 -0800 (PST)
Received: from [10.3.21.206] (gate.haus-staade.de. [80.155.34.3]) by smtp.gmail.com with ESMTPSA id j3sm14087364wrs.70.2019.11.26.02.34.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 26 Nov 2019 02:34:35 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <047A90BD-A275-4A42-A6F1-58B354872C3B@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_3544161A-6088-4351-970C-993091241CAE"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Tue, 26 Nov 2019 11:34:24 +0100
In-Reply-To: <0911bbfb-c80b-16c2-80a6-b0d0ed35ec55@danielfett.de>
Cc: "oauth@ietf.org" <oauth@ietf.org>, Aaron Parecki <aaron@parecki.com>, Brian Campbell <bcampbell=40pingidentity.com@dmarc.ietf.org>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, Andrey Labunets <isciurus@fb.com>, Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
To: Daniel Fett <fett@danielfett.de>
References: <CAGBSGjpeXoJXM-UzG2HrXefO6SW_NzFpuzD4Nh=9XPAmg_Wgtw@mail.gmail.com> <A11964CB-DD11-47A0-BA23-19731CB2C2FA@lodderstedt.net> <0911bbfb-c80b-16c2-80a6-b0d0ed35ec55@danielfett.de>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/BB4zaUpSLzqeTFac314EOh8JdTM>
Subject: Re: [OAUTH-WG] WGLC review of OAuth 2.0 Security Best Current Practice by Mike Jones
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 10:34:40 -0000

--Apple-Mail=_3544161A-6088-4351-970C-993091241CAE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Moving the discussions to an appendix sounds good.

> On 26. Nov 2019, at 08:17, Daniel Fett <fett@danielfett.de> wrote:
>=20
> Am 25.11.19 um 23:02 schrieb Torsten Lodderstedt:
>> Parts of the text in section 4 capture discussions of potential =
solutions and reasons why we decided in favor of a certain solution. I =
think this will be useful in the future and it has already proven useful =
for me, e.g. in the recent discussions around PoP vs audience =
restriction.
> Then let's move these discussions to an appendix or a separate =
document. I have the feeling that some sections have too many "could"s, =
"might"s and "should"s for a normative document. Another point is that =
the alternative solutions that we are discussing often have not been =
analyzed as thoroughly as the recommended solutions (see, e.g., PKCE vs. =
Code-bound State vs. Token binding for Code).
>=20
> -Daniel
>=20
>=20


--Apple-Mail=_3544161A-6088-4351-970C-993091241CAE
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_3544161A-6088-4351-970C-993091241CAE--


From nobody Tue Nov 26 05:07:42 2019
Return-Path: <herve.robache@stet.eu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2946A1208C2 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 05:07:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3mK7ih-eNR7G for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 05:07:36 -0800 (PST)
Received: from mx.stet.eu (mx.stet.eu [85.233.205.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 208501208C1 for <oauth@ietf.org>; Tue, 26 Nov 2019 05:07:35 -0800 (PST)
Received: from mail.stet.eu ([10.17.2.21]) by mx.stet.eu  with ESMTP id xAQD7X5Y020238-xAQD7X5a020238 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=CAFAIL); Tue, 26 Nov 2019 14:07:33 +0100
Received: from STEMES002.steteu.corp (10.17.2.22) by STEMES001.steteu.corp (10.17.2.21) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 26 Nov 2019 14:07:32 +0100
Received: from STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621]) by STEMES002.steteu.corp ([fe80::61f9:86a6:9add:e621%14]) with mapi id 15.00.1497.000; Tue, 26 Nov 2019 14:07:33 +0100
From: =?utf-8?B?Um9iYWNoZSBIZXJ2w6k=?= <herve.robache@stet.eu>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
CC: Joseph Heenan <joseph.heenan@fintechlabs.io>, "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Question regarding RFC 8628
Thread-Index: AQHVpEThyWPrEfzzS0Sf7MKifqz/waeda+lA
Date: Tue, 26 Nov 2019 13:07:32 +0000
Message-ID: <f1d8191c1f5f45ab934166f555fd541c@STEMES002.steteu.corp>
References: <c3601d96013842ed8570823ce0d07fad@STEMES002.steteu.corp> <E15F777A-38F4-42E8-8EA5-86EAC8C53841@lodderstedt.net>
In-Reply-To: <E15F777A-38F4-42E8-8EA5-86EAC8C53841@lodderstedt.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.17.2.30]
x-tm-as-product-ver: SMEX-12.5.0.1684-8.5.1010-25066.007
x-tm-as-result: No-21.817900-8.000000-10
x-tmase-matchedrid: 0Q75hiCFGFGeGXFpAoGIoe5i6weAmSDKPknazlXMVpV+SLLtNOiBhrLs vs6J0rHdIHWG7v5fy6v2GVkLwYOWc8591RPos4+kvOAv94sAIMSuQaF33T8MPk1XTAkCFd3TbCy 4W6odQvnB65R+4EBetfGaA1lY/wUcuSbSBbyAxCOdVNZaI2n6/3c33YEaoHSAuFQeUK7rNFtKj9 RzqMBfu5RVioENfKzgflBrDjfjUz9AwBJojht+gUlR2DE0NRda0FbkIBLFp+OqvcIF1TcLYAYj+ P9XfeSQc+A10JAgABXYN1nT1yH6jNtQoXKm4JivnMRCqQzD5eciJN3aXuV/oV6N6ObTD6WiuY1R O+T2hKUkDoYmrEATMn8BpiJwfCVVNB54/0ITI62qNnzrkU+2mqlmjFq8ZmGO7T/Ijjdi1b/4CUk NhHKCAsRCOfzpnriS76N6iVqH41aSxSMmbF1CAHTzPL3sqyAmlVYvDjhLEQWpUxQxmTD4QnIQTb 1/5mz7KwbB65xuDG6sJB2m5Ha4iFlXGeML158aq0reih3E9rGnOwpXuosudE+86maMM3aSFO56i Wm3dbchswehX6KacaWmkU4cdktV5BE6ECVCH/NoQhvKjFvislfkQxCz66NdBbeQSI3iTJ9ZnANz k+5w6Mn5/Ub5qWxUjDDvEWr+SwGAJmQRSVHSt5yBsp6+TmyG75cDvHbM+Qln24xohQO05T9QbYQ FllxRd2zp4SToebjQ8TzqE3IImD+bcMAaG0nehQwmwdAU7bJwKERr1WxkOsj0QMA/92m27NCXRL vVSdb9sf2dkYwlr0zaEBbkDykCp4Y8Z5dgQKyrm7DrUlmNkF+24nCsUSFNt7DW3B48kkEA+kaY6 kBmhfoLR4+zsDTtEU1sg5GpXeU=
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--21.817900-8.000000
x-tmase-version: SMEX-12.5.0.1684-8.5.1010-25066.007
x-tm-snts-smtp: 3DBAF4F42859E973576F5807A81F1329B83519F611B0DF43516050C221D1169E2000:9
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/PzDYOiiNEqmRKDWH6LwkwdCliV0>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 13:07:39 -0000

VGhhbmtzIFRvcnN0ZW4sIEkgZGlkbid0IG5vdGljZSB0aGlzIHBvaW50IGluIENJQkEuDQoNClNv
cnJ5IGFib3V0IGFza2luZyBhIHNvIHNpbGx5IHF1ZXN0aW9uLg0KDQpIZXJ2w6kNCg0KLS0tLS1N
ZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQpEZSA6IFRvcnN0ZW4gTG9kZGVyc3RlZHQgW21haWx0bzp0
b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldF0NCkVudm95w6kgOiBtYXJkaSAyNiBub3ZlbWJyZSAyMDE5
IDExOjMzDQrDgCA6IFJvYmFjaGUgSGVydsOpDQpDYyA6IEpvc2VwaCBIZWVuYW47IG9hdXRoQGll
dGYub3JnDQpPYmpldCA6IFJlOiBbT0FVVEgtV0ddIFF1ZXN0aW9uIHJlZ2FyZGluZyBSRkMgODYy
OA0KDQpIaSBIZXJ2w6ksDQoNCnRoZSBmbG93IHlvdSBvdXRsaW5lIGlzIGVxdWl2YWxlbnQgdG8g
Q0lCQSAoaHR0cHM6Ly9vcGVuaWQubmV0L3NwZWNzL29wZW5pZC1jbGllbnQtaW5pdGlhdGVkLWJh
Y2tjaGFubmVsLWF1dGhlbnRpY2F0aW9uLWNvcmUtMV8wLUlEMS5odG1sKS4NCg0KUkZDODYyOC9k
ZXZpY2UgZ3JhbnQgdHlwZSBhbmQgQ0lCQSBkaWZmZXIgYXMgZm9sbG93czoNCg0KLSBSRkM4NjI4
IHByb3ZpZGVzIHRoZSBjbGllbnQgd2l0aCBhbiBVUkwgZm9yIHRoZSBhdXRob3Jpc2F0aW9uIHBy
b2Nlc3MNCi0gQ0lCQSByZXF1aXJlcyB0aGUgY2xpZW50IHRvIHByb3ZpZGUgYSB1c2VyIGlkZW50
aWZpZXIgdG8gdGhlIEFTL09QLCB0aGUgQVMgaW4gdHVybiB1c2VzIGFuIG91dCBvZiBiYW5kIG1l
Y2hhbmlzbSB0byBjb21tdW5pY2F0ZSB3aXRoIHRoZSB1c2VyDQoNCmJlc3QgcmVnYXJkcywNClRv
cnN0ZW4uDQoNCj4gT24gMjYuIE5vdiAyMDE5LCBhdCAwOToyNiwgUm9iYWNoZSBIZXJ2w6kgPGhl
cnZlLnJvYmFjaGVAc3RldC5ldT4gd3JvdGU6DQo+DQo+IERlYXIgYWxsDQo+DQo+IFRoYW5rcyBh
Z2FpbiBmb3IgeW91ciBjbGFyaWZpY2F0aW9ucy4gQWZ0ZXIgZGlzY3Vzc2lvbiB3aXRoIHRoZSBG
cmVuY2ggY29tbXVuaXR5LCB3ZSB0aGluayB0aGF0IGEgZnVsbCBkZWNvdXBsZWQgZmxvdyBjb3Vs
ZCBiZSB0aGUgZm9sbG93aW5nIG9uZQ0KPg0KPiA8aW1hZ2UwMDIucG5nPg0KPg0KPiBGcm9tIG15
IHBlcnNwZWN0aXZlLCB0aGlzIGZsb3cgIGlzIHZlcnkgc2ltaWxhciB0byBSRkM4NjI4IG9yIENJ
QkEsIGV4Y2VwdCB0aGUgZm9sbG93aW5nIGRpZmZlcmVuY2U6IGluc3RlYWQgb2YgcHJvdmlkaW5n
IHRoZSBjdXN0b21lciB3aXRoIHRoZSBhdXRoZW50aWNhdGlvbiBVUkkgdGhyb3VnaCB0aGUgdGhp
cmQgcGFydHksIHRoZSBiYW5rIG5vdGlmaWVzIGRpcmVjdGx5IHRoZSBjdXN0b21lciBvbiBhIHNw
ZWNpZmljIGRldmljZSBvciBtb2JpbGUgYXBwLg0KPg0KPiBEbyB5b3UgaGF2ZSBhbnkgdGhvdWdo
dCBvbiB0aGlzIGZsb3c/DQo+DQo+IFRoYW5rcyBpbiBhZHZhbmNlDQo+DQo+IEhlcnbDqQ0KPg0K
PiBEZSA6IFJvYmFjaGUgSGVydsOpDQo+IEVudm95w6kgOiBsdW5kaSAxOCBub3ZlbWJyZSAyMDE5
IDE1OjIxDQo+IMOAIDogJ0pvc2VwaCBIZWVuYW4nOyBUb3JzdGVuIExvZGRlcnN0ZWR0DQo+IENj
IDogb2F1dGhAaWV0Zi5vcmcNCj4gT2JqZXQgOiBbT0FVVEgtV0ddIFF1ZXN0aW9uIHJlZ2FyZGlu
ZyBSRkMgODYyOA0KPg0KPiBUaGFua3MgSm9zZXBoDQo+DQo+IEkgYWdyZWUgd2l0aCB5b3UuIFRo
ZXJlIHNob3VsZCBiZSBubyBpc3N1ZSB3aGVuIHRoZSBVUkwgaXMgcmVnaXN0ZXJlZCBkdXJpbmcg
dGhlIFRQUCBhcHAgaW5zdGFsbGF0aW9uLg0KPg0KPiBGcm9tIG15IHBlcnNwZWN0aXZlLCB0aGlz
IFVSTCBzaG91bGQgYmUgcGFzc2VkIGR1cmluZyB0aGUgYXV0aG9yaXphdGlvbiByZXF1ZXN0IHdp
dGhpbiB0aGUgW3JlZGlyZWN0X3VyaV0gZmllbGQuDQo+DQo+IEJ5IHRoZSB3YXksIG1vc3Qgb2Yg
dGhlIEZyZW5jaCBiYW5rcyB3aWxsIHVzZSBPYXV0aDIgQUMgYW5kIG5vdCBPcGVuSWQgQ29ubmVj
dC4gSSBndWVzcyB0aGF0IHRoZSBzZXF1ZW5jZSBkaWFncmFtIGlzIHJvdWdobHkgdGhlIHNhbWUs
IGlzbuKAmXQgaXQ/DQo+DQo+IEJlc3QgcmVnYXJkcw0KPg0KPiBIZXJ2w6kNCj4NCj4gRGUgOiBK
b3NlcGggSGVlbmFuIFttYWlsdG86am9zZXBoLmhlZW5hbkBmaW50ZWNobGFicy5pb10NCj4gRW52
b3nDqSA6IGx1bmRpIDE4IG5vdmVtYnJlIDIwMTkgMTQ6NDkNCj4gw4AgOiBUb3JzdGVuIExvZGRl
cnN0ZWR0DQo+IENjIDogUm9iYWNoZSBIZXJ2w6k7IG9hdXRoQGlldGYub3JnDQo+IE9iamV0IDog
UmU6IFtPQVVUSC1XR10gUXVlc3Rpb24gcmVnYXJkaW5nIFJGQyA4NjI4DQo+DQo+IEhpIGFsbCwN
Cj4NCj4gVGhhbmtzLCBUb3JzdGVuLg0KPg0KPg0KPiBPbiAxOCBOb3YgMjAxOSwgYXQgMTM6MjIs
IFRvcnN0ZW4gTG9kZGVyc3RlZHQgPHRvcnN0ZW5AbG9kZGVyc3RlZHQubmV0PiB3cm90ZToNCj4N
Cj4gSGkgSGVydsOpLA0KPg0KPiBsb29waW5nIGluIEpvc2VwaC4NCj4NCj4NCj4gT24gMTguIE5v
diAyMDE5LCBhdCAyMToxNywgUm9iYWNoZSBIZXJ2w6kgPGhlcnZlLnJvYmFjaGVAc3RldC5ldT4g
d3JvdGU6DQo+DQo+IFRoYW5rcyBUb3JzdGVuDQo+DQo+IFllcywgd2Ugc3R1ZHkgdGhpcyBmbG93
IGFzIHdlbGwuIEFjdHVhbGx5IHdlIGNvbnNpZGVyIHRoZSB0d28gZm9sbG93aW5nIGZsb3dzIGZv
ciBhIG1vYmlsZS1iYXNlZCBhdXRoZW50aWNhdGlvbg0KPg0KPiAtICAgICAgICAgIERFQ09VUExF
RCA6IHZpYSBhIFJGQzg2MjgtZGVyaXZlZCBvciBDSUJBIGFwcHJvYWNoIChhcyBzdWdnZXN0ZWQg
YnkgUm9iKQ0KPiAtICAgICAgICAgIFJFRElSRUNUIDogdmlhIHRoZSBmbG93IHNwZWNpZmllZCBp
biB0aGUgT3BlbklkIGxpbmsgeW91IGdhdmUuDQo+DQo+IFRoZSBtYWluIGlzc3VlIGVuY291bnRl
cmVkIHNvIGZhciBpcyB0byBnaXZlIGJhY2sgdGhlIGZvY3VzIG9uIHRoZSB0aGlyZCBwYXJ0eSBh
cHAuIFRoaXJkIFBhcnRpZXMgZmVhciB0aGF0IHRoZWlyIGFwcCB3aWxsIGJlIGtlcHQgaW4gdGhl
IGJhY2sgb2YgdGhlIG1vYmlsZSBzY3JlZW4uDQo+DQo+IEBKb3NlcGg6IHdoYXTigJlzIHlvdXIg
dGFrZSBvbiB0aGlzIGNvbmNlcm4/DQo+DQo+IEluIGFwcDJhcHAsIGl0IHJlYWxseSBzaG91bGRu
4oCZdCBoYXBwZW4gLSBpZiB0aGUgZGV2aWNlIE9TIGhhcyBub3QgcHJvcGVybHkgcmVnaXN0ZXJl
ZCB0aGUgdW5pdmVyc2FsIGxpbmssIHRoZSBUUFAgd2Vic2l0ZSB3b3VsZCBvcGVuIGluc3RlYWQg
YW5kIGF1dGhvcml6YXRpb24gY29kZSBjYW4gc3RpbGwgYmUgcHJvY2Vzc2VkICh0aG91Z2ggYWRt
aXR0ZWRseSBzdXBwb3J0aW5nIHRoaXMgdXNlIGNhc2UgbWF5IHJlcXVpcmUgYSBiaXQgbW9yZSBj
YXJlIHRvIGVuc3VyZSBzZXNzaW9uIG1peHVwIGF0dGFja3MgY2Fu4oCZdCBoYXBwZW4pLg0KPg0K
Pg0KPg0KPg0KPiBUaGlzIGNvdWxkIGhhcHBlbiB3aGVuIHRoZSBUUFAgYXBwIFthcHAgbGlua10v
W3VuaXZlcnNhbCBsaW5rXSBpcyBub3QgcHJvcGVybHkgcmVnaXN0ZXJlZCBvciBmb3J3YXJkZWQg
dG8gdGhlIGJhbmsgYXBwLg0KPiAtICAgICAgICAgIEluIHRoZSBSRURJUkVDVCBhcHByb2FjaCB0
aGlzIG1lYW5zIHRoYXQgdGhlIGF1dGhvcml6YXRpb24gY29kZSBjYW5ub3QgYmUgZm9yd2FyZGVk
IHRvIHRoZSBUUFANCj4NCj4gSSBkb27igJl0IHJlYWxseSB1bmRlcnN0YW5kIGhvdyB0aGUg4oCY
YXBwIGxpbmvigJkgd291bGQgbm90IGJlIHByb3Blcmx5IHJlZ2lzdGVyZWQgdG8gdGhlIGJhbmsg
YXBwLiBUaGUgdW5pdmVyc2FsIGxpbmsgc2hvdWxkIGJlIHRoZSBzYW1lIFVSTCBhcyBmb3IgdGhl
IHJlZGlyZWN0IHVyaSBvbiB0aGUgVFBQIHdlYnNpdGUuIE9idmlvdXNseSBpZiB0aGUgVFBQIHJl
Z2lzdGVycyB0aGVpciByZWRpcmVjdCB1cmkgaW5jb3JyZWN0bHkgd2l0aCB0aGUgYmFuayB0aGUg
ZmxvdyB3b27igJl0IHdvcmssIGJ1dCB0aGlzIGFwcGxpZXMgZXF1YWxseSB0byB0aGUgd2ViIGJh
c2VkIGZsb3dzLCBhbmQgaXTigJlzIG5vdCB0aGUga2luZCBvZiBwcm9ibGVtIHlvdSBzZWUgb2Nj
dXIgb24gYSBwcm9kdWN0aW9uIHN5c3RlbS4NCj4NCj4gVGhlIGV2aWRlbmNlIGZyb20gdGhlIFVL
IHNvIGZhciBpcyB0aGF0IGRyb3Atb2ZmIHJhdGVzICh3aGVyZSB0aGUgdXNlciBkb2VzIG5vdCBz
dWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIGF1dGhlbnRpY2F0aW9uIGFuZCByZXR1cm4gdG8gdGhl
IHRoaXJkIHBhcnR5KSBhcmUgZmFyIGxvd2VyIGZvciBhcHAyYXBwIGNvbXBhcmVkIHRvIGEgbm9y
bWFsIG9hdXRoMiBicm93c2VyIGJhc2VkIHJlZGlyZWN0IGZsb3c7IEkgY2Fu4oCZdCBwdXQgbXkg
aGFuZCBvbiB0aGUgYWN0dWFsIGZpZ3VyZXMgcmlnaHQgbm93IGJ1dCBmcm9tIG1lbW9yeSBhcm91
bmQgNSB0aW1lcyBtb3JlIHVzZXJzIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZWQgYW4gYXBwMmFwcCBm
bG93IHRoYW4gdGhlIHVzdWFsIHdlYiBmbG93cy4NCj4NCj4NCj4gLSAgICAgICAgICBJbiB0aGUg
REVDT1VQTEVEIGFwcHJvYWNoIGl0IGxlc3MgY3JpdGljYWwgc2luY2UgdGhlIFRQUCBwb2xscyB0
aGUgYmFuayBhbmQgZXZlbnR1YWxseSBnZXRzIGl0cyB0b2tlbiBvbmNlIHRoZSBQU1UgaGFzIGF1
dGhlbnRpY2F0ZWQuDQo+DQo+IEJ1dCBpbiB0aGUgZGVjb3VwbGVkIGZsb3csIHRoZSBQU1UgZmly
c3QgaGFzIHRvIGVudGVyIGhlciBQU1UgSUQgaW4gb3JkZXIgdG8gYWxsb3cgdGhlIFRQUCB0byBp
ZGVudGl0eSB0aGUgUFNVIHRvd2FyZHMgdGhlIEFTUFNQLiBUaGlzIGlzIGxlc3MgY29udmVuaWVu
dCBhbmQgbGVha3MgUElJLg0KPg0KPiBOb3QgbmVjZXNzYXJpbHkgdGhlIFBTVSBJRCwgYnV0IGdl
bmVyYWxseSBzb21ldGhpbmcgdGhhdCBjYW4gYmUgdXNlZCB0byBpZGVudGlmeSB0aGUgdXNlci4g
SW4gdGhlb3J5IGl0IGNvdWxkIGJlIGFuIGVwaGVtZXJhbCBpZCwgdGhvdWdoIGluIHJlYWxpdHkg
dGhlcmXigJlzIGFsbCBzb3J0cyBvZiBpc3N1ZXMgd2l0aCBpbXBsZW1lbnRpbmcgdGhhdCwgcGFy
dGljdWxhcmx5IG9uIGEg4oCZc2FtZSBkZXZpY2XigJkgZmxvdy4gSXTigJlzIGRlZmluaXRlbHkg
bGVzcyBjb252ZW5pZW50LCBwYXJ0aWN1bGFybHkgZm9yIHRoZSBmaXJzdCBUUFA8LT5BU1BTUCBp
bnRlcmFjdGlvbiB3aGVyZSB0aGUgVFBQIHdpbGwgbmVjZXNzYXJpbHkgaGF2ZSB0byBjb2xsZWN0
IG1vcmUgaW5mbyBmcm9tIHRoZSB1c2VyIHRoYW4gd291bGQgYmUgbmVjZXNzYXJ5IGluIGEgcmVk
aXJlY3QgYmFzZWQgZmxvdy4NCj4NCj4gVGhlIHVzZXIgYWxzbyBoYXMgdG8gbWFudWFsbHkgc3dp
dGNoIGJhY2sgdG8gdGhlIFRQUCBhcHAgYXQgdGhlIGVuZCBvZiB0aGUgZmxvdy4NCj4NCj4gTXkg
Z2VuZXJhbCBvcGluaW9uIGlzIHRoYXQgZm9yIG1vc3QgdXNlIGNhc2VzIHdoZXJlIHRoZSBjb25z
dW1wdGlvbiBhbmQgYXV0aGVudGljYXRpb24gZGV2aWNlcyBhcmUgdGhlIHNhbWUgZGV2aWNlIGEg
ZGVjb3VwbGVkIGZsb3cgc2hvdWxkIG5vdCBiZSB1c2VkLCBhcyBmb3IgdGhhdCB1c2UgY2FzZSBh
cHAyYXBwIHByZXNlbnRzIGEgZmFyIGJldHRlciB1c2VyIGV4cGVyaWVuY2UgLSBib3RoIGluIHRl
cm1zIG9mIHRoZSBudW1iZXIgb2Ygc3RlcHMgYW5kIHRoZSB0aW1lIHRha2VuIHRvIHN1Y2Nlc3Nm
dWxseSBjb21wbGV0ZSBhbGwgdGhlIHN0ZXBzLg0KPg0KPiBKb3NlcGgNCj4NCj4NCj4NCj4gQ2Ug
bWVzc2FnZSBldCB0b3V0ZXMgbGVzIHBpw6hjZXMgam9pbnRlcyBzb250IMOpdGFibGlzIMOgIGwn
aW50ZW50aW9uIGV4Y2x1c2l2ZSBkZSBzZXMgZGVzdGluYXRhaXJlcyBldCBzb250IGNvbmZpZGVu
dGllbHMuDQo+IFNpIHZvdXMgcmVjZXZleiBjZSBtZXNzYWdlIHBhciBlcnJldXIgb3UgcydpbCBu
ZSB2b3VzIGVzdCBwYXMgZGVzdGluw6ksIG1lcmNpIGRlIGxlIGTDqXRydWlyZSBhaW5zaSBxdWUg
dG91dGUgY29waWUgZGUgdm90cmUgc3lzdMOobWUgZXQgZCdlbiBhdmVydGlyIGltbcOpZGlhdGVt
ZW50IGwnZXhww6lkaXRldXIuDQo+IFRvdXRlIGxlY3R1cmUgbm9uIGF1dG9yaXPDqWUsIHRvdXRl
IHV0aWxpc2F0aW9uIGRlIGNlIG1lc3NhZ2UgcXVpIG4nZXN0IHBhcyBjb25mb3JtZSDDoCBzYSBk
ZXN0aW5hdGlvbiwgdG91dGUgZGlmZnVzaW9uIG91IHRvdXRlIHB1YmxpY2F0aW9uLCB0b3RhbGUg
b3UgcGFydGllbGxlLCBlc3QgaW50ZXJkaXRlLg0KPiBMJ0ludGVybmV0IG5lIHBlcm1ldHRhbnQg
cGFzIGQnYXNzdXJlciBsJ2ludMOpZ3JpdMOpIGRlIGNlIG1lc3NhZ2Ugw6lsZWN0cm9uaXF1ZSBz
dXNjZXB0aWJsZSBkJ2FsdMOpcmF0aW9uLCBTVEVUIGTDqWNsaW5lIHRvdXRlIHJlc3BvbnNhYmls
aXTDqSBhdSB0aXRyZSBkZSBjZSBtZXNzYWdlIGRhbnMgbCdoeXBvdGjDqHNlIG/DuSBpbCBhdXJh
aXQgw6l0w6kgbW9kaWZpw6ksIGTDqWZvcm3DqSBvdSBmYWxzaWZpw6kuDQo+IE4naW1wcmltZXog
Y2UgbWVzc2FnZSBxdWUgc2kgbsOpY2Vzc2FpcmUsIHBlbnNleiDDoCBsJ2Vudmlyb25uZW1lbnQu
DQo+DQo+IFRoaXMgbWVzc2FnZSBhbmQgYW55IGF0dGFjaG1lbnRzIGlzIGludGVuZGVkIHNvbGVs
eSBmb3IgdGhlIGludGVuZGVkIGFkZHJlc3NlZXMgYW5kIGlzIGNvbmZpZGVudGlhbC4NCj4gSWYg
eW91IHJlY2VpdmUgdGhpcyBtZXNzYWdlIGluIGVycm9yLCBvciBhcmUgbm90IHRoZSBpbnRlbmRl
ZCByZWNpcGllbnQocyksIHBsZWFzZSBkZWxldGUgaXQgYW5kIGFueSBjb3BpZXMgZnJvbSB5b3Vy
IHN5c3RlbXMgYW5kIGltbWVkaWF0ZWx5IG5vdGlmeSB0aGUgc2VuZGVyLg0KPiBBbnkgdW5hdXRo
b3JpemVkIHZpZXcsIHVzZSB0aGF0IGRvZXMgbm90IGNvbXBseSB3aXRoIGl0cyBwdXJwb3NlLCBk
aXNzZW1pbmF0aW9uIG9yIGRpc2Nsb3N1cmUsIGVpdGhlciB3aG9sZSBvciBwYXJ0aWFsLCBpcyBw
cm9oaWJpdGVkLg0KPiBTaW5jZSB0aGUgaW50ZXJuZXQgY2Fubm90IGd1YXJhbnRlZSB0aGUgaW50
ZWdyaXR5IG9mIHRoaXMgbWVzc2FnZSB3aGljaCBtYXkgbm90IGJlIHJlbGlhYmxlLCBTVEVUIHNo
YWxsIG5vdCBiZSBsaWFibGUgZm9yIHRoZSBtZXNzYWdlIGlmIG1vZGlmaWVkLCBjaGFuZ2VkIG9y
IGZhbHNpZmllZC4NCj4gRG8gbm90IHByaW50IHRoaXMgbWVzc2FnZSB1bmxlc3MgaXQgaXMgbmVj
ZXNzYXJ5LCBwbGVhc2UgY29uc2lkZXIgdGhlIGVudmlyb25tZW50Lg0KPiA8b2xlZGF0YS5tc28+
DQoNCg0KDQpDZSBtZXNzYWdlIGV0IHRvdXRlcyBsZXMgcGnDqGNlcyBqb2ludGVzIHNvbnQgw6l0
YWJsaXMgw6AgbCdpbnRlbnRpb24gZXhjbHVzaXZlIGRlIHNlcyBkZXN0aW5hdGFpcmVzIGV0IHNv
bnQgY29uZmlkZW50aWVscy4NClNpIHZvdXMgcmVjZXZleiBjZSBtZXNzYWdlIHBhciBlcnJldXIg
b3UgcydpbCBuZSB2b3VzIGVzdCBwYXMgZGVzdGluw6ksIG1lcmNpIGRlIGxlIGTDqXRydWlyZSBh
aW5zaSBxdWUgdG91dGUgY29waWUgZGUgdm90cmUgc3lzdMOobWUgZXQgZCdlbiBhdmVydGlyIGlt
bcOpZGlhdGVtZW50IGwnZXhww6lkaXRldXIuDQpUb3V0ZSBsZWN0dXJlIG5vbiBhdXRvcmlzw6ll
LCB0b3V0ZSB1dGlsaXNhdGlvbiBkZSBjZSBtZXNzYWdlIHF1aSBuJ2VzdCBwYXMgY29uZm9ybWUg
w6Agc2EgZGVzdGluYXRpb24sIHRvdXRlIGRpZmZ1c2lvbiBvdSB0b3V0ZSBwdWJsaWNhdGlvbiwg
dG90YWxlIG91IHBhcnRpZWxsZSwgZXN0IGludGVyZGl0ZS4NCkwnSW50ZXJuZXQgbmUgcGVybWV0
dGFudCBwYXMgZCdhc3N1cmVyIGwnaW50w6lncml0w6kgZGUgY2UgbWVzc2FnZSDDqWxlY3Ryb25p
cXVlIHN1c2NlcHRpYmxlIGQnYWx0w6lyYXRpb24sIFNURVQgZMOpY2xpbmUgdG91dGUgcmVzcG9u
c2FiaWxpdMOpIGF1IHRpdHJlIGRlIGNlIG1lc3NhZ2UgZGFucyBsJ2h5cG90aMOoc2Ugb8O5IGls
IGF1cmFpdCDDqXTDqSBtb2RpZmnDqSwgZMOpZm9ybcOpIG91IGZhbHNpZmnDqS4NCk4naW1wcmlt
ZXogY2UgbWVzc2FnZSBxdWUgc2kgbsOpY2Vzc2FpcmUsIHBlbnNleiDDoCBsJ2Vudmlyb25uZW1l
bnQuDQoNClRoaXMgbWVzc2FnZSBhbmQgYW55IGF0dGFjaG1lbnRzIGlzIGludGVuZGVkIHNvbGVs
eSBmb3IgdGhlIGludGVuZGVkIGFkZHJlc3NlZXMgYW5kIGlzIGNvbmZpZGVudGlhbC4NCklmIHlv
dSByZWNlaXZlIHRoaXMgbWVzc2FnZSBpbiBlcnJvciwgb3IgYXJlIG5vdCB0aGUgaW50ZW5kZWQg
cmVjaXBpZW50KHMpLCBwbGVhc2UgZGVsZXRlIGl0IGFuZCBhbnkgY29waWVzIGZyb20geW91ciBz
eXN0ZW1zIGFuZCBpbW1lZGlhdGVseSBub3RpZnkgdGhlIHNlbmRlci4NCkFueSB1bmF1dGhvcml6
ZWQgdmlldywgdXNlIHRoYXQgZG9lcyBub3QgY29tcGx5IHdpdGggaXRzIHB1cnBvc2UsIGRpc3Nl
bWluYXRpb24gb3IgZGlzY2xvc3VyZSwgZWl0aGVyIHdob2xlIG9yIHBhcnRpYWwsIGlzIHByb2hp
Yml0ZWQuDQpTaW5jZSB0aGUgaW50ZXJuZXQgY2Fubm90IGd1YXJhbnRlZSB0aGUgaW50ZWdyaXR5
IG9mIHRoaXMgbWVzc2FnZSB3aGljaCBtYXkgbm90IGJlIHJlbGlhYmxlLCBTVEVUIHNoYWxsIG5v
dCBiZSBsaWFibGUgZm9yIHRoZSBtZXNzYWdlIGlmIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNp
ZmllZC4NCkRvIG5vdCBwcmludCB0aGlzIG1lc3NhZ2UgdW5sZXNzIGl0IGlzIG5lY2Vzc2FyeSwg
cGxlYXNlIGNvbnNpZGVyIHRoZSBlbnZpcm9ubWVudC4NCg==


From karsten.meyerzuselhausen@hackmanit.de  Tue Nov 26 05:24:19 2019
Return-Path: <karsten.meyerzuselhausen@hackmanit.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD7A212012A for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 05:24:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hackmanit-de.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vODurwM4SB0v for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 05:24:17 -0800 (PST)
Received: from mail-wr1-x42c.google.com (mail-wr1-x42c.google.com [IPv6:2a00:1450:4864:20::42c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8D3C120115 for <oauth@ietf.org>; Tue, 26 Nov 2019 05:24:17 -0800 (PST)
Received: by mail-wr1-x42c.google.com with SMTP id g7so1752376wrw.4 for <oauth@ietf.org>; Tue, 26 Nov 2019 05:24:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hackmanit-de.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:autocrypt:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=BrcjHOJysEjwQoBSbApTovZsOUTyxIH8+5cdXD7o3BM=; b=cxmESn65w/pMczj90iwvVfU1npoMCvf1Lag+F9PdpxSNj7sRAC8KqU9l629d+xMf05 c9hdrh5G01+Wteugo9GotMv2pI3bfqZyuLOQoxEVogV+DLdzjDPLRzKDF/jaI4OS85Bg vqg3Iqif41K5gp9HNmftxeMvblZgPgKaIJvmu2buTWZNWfrNyb3Rafq9B6o+MsLkD3+y wgP7xGmd2HikmyhLdKXD/PFOFzhmX2IiONb7L5k3MYgjytHOc37umgskjbKSROcYibpI Ce+adCka6o+Jt56rCZFhMt6Ise+ehBz/Z9GTGfqGya2RYYyA5ipH20CWpYb4cCyzMtxe QHOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:autocrypt:message-id:date :user-agent:mime-version:content-transfer-encoding:content-language; bh=BrcjHOJysEjwQoBSbApTovZsOUTyxIH8+5cdXD7o3BM=; b=LbaHvfQ2kEBVeu+FRAKb/2BL+RRi9jjSWr6bSGaT9K2gBnpkQyi7fzq23nQoiG/EXC STbIPR3glICBWHJkr/xNAsjMOZ7S3v2LbH5y2+f/VE3cGCZBqBGhd/j9xQrT8K/l9n4P R5s0yeElYMrq1Ae6PJethbYjOsXTr7+q6xu1OIuMDN9brTFoH2SCfnPGulhiIn/FMJqE zL/0xxkURTtoawFdwbX3VWoxnM5eyhUimTWDyuyJLgVzXN5TFIV+jQnEvQPQQ0lRgO1E 5HyiBGBgJ5zZ3/YRoreQOB9akRjxVEGY+6zekCUI3d1COeHgOc5s1GVNvbWxb30yWT7/ aJQg==
X-Gm-Message-State: APjAAAWcVn9gEr89v4wTaRkw9GrLkYwvl7YbkopgUYwaoUi2lJ2mVyKw zCPWxmp9jjF234QmXFUwQky62hNox2I=
X-Google-Smtp-Source: APXvYqzb+siHybGcmAMieLjrCzCkC+oIcZdKuJ29SQQgsXLjjDiwJCZnWDFWnrNNrOTb7bMBsOVROQ==
X-Received: by 2002:adf:c00a:: with SMTP id z10mr36988294wre.81.1574774655841;  Tue, 26 Nov 2019 05:24:15 -0800 (PST)
Received: from [192.168.0.253] (daedalus.nds.ruhr-uni-bochum.de. [134.147.40.33]) by smtp.gmail.com with ESMTPSA id z6sm1403961wrw.36.2019.11.26.05.24.14 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 26 Nov 2019 05:24:14 -0800 (PST)
From: Karsten Meyer zu Selhausen <karsten.meyerzuselhausen@hackmanit.de>
X-Google-Original-From: Karsten Meyer zu Selhausen <karsten.meyerzuselhausen+ietf@hackmanit.de>
To: oauth@ietf.org
Cc: Vladislav Mladenov <vladislav.mladenov@hackmanit.de>
Autocrypt: addr=karsten.meyerzuselhausen+ietf@hackmanit.de; keydata= mQINBFh1IBMBEADV73c10lB7zeFy6/ezLFzOBp8z6Zy1zUyIrf6RoBk1GQWREcGEGeaL90Pj F5plZeASVJdsEYnYXdgcIPE0tlBq6al6OYoWtH/VbFPWEPLVhA3rL1iXVJveD3J40OzSYP8N G7bla3zQ2+TXOB3iDPPsHZUdHCLASkIIWQK6+fE1C2epAdPtnsLsb++1d080jfXXwgyUUh4y bimcy9Jg5oZ4QMwnSq3Y+x38PNb+nTgjDi1X/89/WsNd7Bdh4Zvw3CAuc/W58CFaDjb7liUD YRoAp6ysnjPKEUSnAnMpgaiXJc1gFoL+ahdKJ3D9XTn28NTjUrvOkVidsuKbyxnXP9I6BO6i 2jzjrH6TEAfIYMjZlYTyPZTt271SW5iAHYwvPZWlqQTBT2P/d4gHl0To5b4e+UXxjQgxqUyi QIcxh3Ris21Kx4lKQKDXYWiwNTZzx8AdqrcxCWfK+MRpFyk0B+4uDMm7Apm5ZWwDKN/JnVsJ yokkkrrHs/elRCUGtN9NyhJQf3VnE87862Pej8PVvQJr3uVnoNX2yieTvJZftIOBG1b9ta6Z BcYyn3un1rSn7lBPg+RSnPemposVorQpjGwT+Dhg13Bpv5q0JfSc//js/nB6A4iq5YssdtQ7 35QBWLLaF1oCxalvrQVDD4Sh06eAUQsga9xeE0yv7sxqdsozdwARAQABtEJLYXJzdGVuIE1l eWVyIHp1IFNlbGhhdXNlbiA8a2Fyc3Rlbi5tZXllcnp1c2VsaGF1c2VuQGhhY2ttYW5pdC5k ZT6JAj8EEwEIACkFAlh1IBMCGyMFCQlmAYAHCwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAK CRBFNcDn2xbxSK7sEAC5hk0VQHo2+fMV3b4TgSt4qSPLz6EnWwoqcEzUGYHErQXy7tCENpqS rsZsFphpgvWo1tcQdpyQTFm0dry4ASJD78lEiYC/8Hedp0fIaJTGwxrSLpRxV/Wb+iqkbgz8 /Qydl3QyupSqznSHQMd0uhvzHLxoYvHAIKy52gCK0T9gmxcCIh7UEjDfm+kqHp+oU4sbNe+2 ZEtJLuCKW+amNyqnHXr7ehAIaYmTdKOEcUb2UM7Yzp9g4kSkg1GbPlAn6yjyAqJ96sobKFXX S3rkXksRTxkGKW278Nrs4UBO+OIu32kIXCM2m3fKaUK777jAQu1e8sdj2nL0sPWQvMikZRx6 0dy+wVuH8gGHZsd7rW201Sv5pAhSAK4l58GS3xSLId6smXCend9Vu+tcYA+Bb+45943LmoPA PrdIUeI+zC9pjGwm+x+jFiCxbChqAiJF7RyYv9crziEYnTQ70gHGNOTOTIS5t0ufc9D4wD4O IkkrPQYg3KcAqP2Kyj1uHcqdk7XEhV1fdTXdeEt1e7auWPh0d3Fo+BTtiGXfNMuORArE0El6 ky8eUOqZEJ8rYpEGDLt0JFkJM5AhX4PrQWekjaMhQ5yl/+M+Ss0V0JkImagSgWdvUn1+eAs0 zEuVxTc6ON69mIyMalQ5d4ofvPnKr3GNVmEiXAVDMGUZHoeabfgSBbkCDQRYdSATARAAsp2V mr3N7iNND8+M/OyA/OwcDQ6utZh+m4TnKsOVdiNLGpu2U3/2Qg3yrbjic2dWx1CsS6VH2/oO 1e/a4FlxA93wFv/OZjiUjHtEvdIJeHWlCvWOUlMsqyGDc3Q75fNjFw6DGKkiOu9lZaBs6naS BmkvAMGjV5bNKLyIL5j7Im1pCdZ2lCjD7eVwR3RQQKobTmu916htX8g1cB9yFmquu37X+ZBl A4GLJi63Kw0L2r8i8iO1NqDLOfT8IeNkOroEm3SDAuEApGAubKLSPBJ1khQ7kDhpdfzSYKUF tiIHpGWVOImDjqf4JIcF7OIdRPQfFPlwoPnsyBAS8znQJvmqbbMowgFZe3UMLAN78CETZHGM OLBPB873oWyZ07Ar4v/SL5/aD+FRj2VnYEcGwt0HMmMyaN6ed8Udj4OTNZ7ceZA1Tw8/lZuI KCamj0XfJIK6376RCGnqjsEfS65P1KWZXfWphCKWp2c7uWKtau1q8pgiVRoBSAmjvfXRrIvK LhhQyNOiCUDKrvEWpoeq9y5GTrY27ncLov8nSR/SUPOw5HwJmzdFjhOF9XAOtiND/QRH886O IohdlnUu668mwLCmL2ROe7XWcTkFQWLDg+5b0bC9dgfL+HHpWGUdQPG3CCyPG5LfDmnmuXkE eU1kSD27kFe1kM6pfqpCydJW66DuwoMAEQEAAYkCJQQYAQgADwUCWHUgEwIbDAUJCWYBgAAK CRBFNcDn2xbxSAAbEACeIsfrsq2tlyigZv+bwkiVP1oKtWfXN1e3K3lDOBqPJaPXWFOopq/1 9osk58PFtVEaDlYPlN/NP6Jq5nTTC8QyLG3swAdo4ZJXWEg1NTRu8ddYUvZWuRHWRghaq7qh eW5lVPqilCndSG7bkDPU/Vyd93nPKnKTKKs/Nd7ePneWA0JQohEg5gO/GU0v5SN3YfTxG1LV Cxu3HHHFodDLK4KITSYmt1+g0WCADeclwm5+L5lIvgKQvcIpjpMGNK1wj2E3exsLlgo/ZEyS AslOPXyQw2yfYLrcfGpvWa3e+AvU7eLVBgihskpibJg53yw31B0CXAJBbjg7AsxR8UE5pl6h 2gTjN2t++GvqefGtw/bPvx2RzFsorh1/RYaFgcaFyefghmpi55iiIhgEOiSIct0LoYl3cmH8 DGYKhSskpSDgfE41Esk/P2odeax9SmJuv4mnqkiGFPpTwCfUka2k0mCpBDpfTdECWUFhreGS qFbrvJDZRBiyaVyCjOvOc0v6Z0/iIRgHWTjITpqaQh69kqAtt9GQWV6i3THnpHFlIC2ecvdc YCagneZdoLEHCS8Nois/uDbp5qZwZcF5zKMI+T7u6Qf8EGdvxCB1fp0Sdlmeto0c6/gnFUix 4J/tozBwSXSg7JCxTrUdnJtcQAJzosOUZTVO/ZZR/n0+904kud6o3w==
Message-ID: <35143dd1-edeb-e0fd-6f36-a39d9b7f7008@hackmanit.de>
Date: Tue, 26 Nov 2019 14:24:14 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.2
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/A7F5xSEa8DdfxHKWHW3Mqol_a4A>
X-Mailman-Approved-At: Tue, 26 Nov 2019 05:37:39 -0800
Subject: [OAUTH-WG] OAuth 2.0 Security Best Current Practice | Issue in Mix-Up Countermeasure
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 13:33:04 -0000

Hi,

we identified a possible issue regarding the Mix-Up attack
countermeasures described in the Security Best Current Practices.

Section 4.4.2 of the latest version of the BCP lists "AS-specific
redirect URIs" as a countermeasure for Mix-Up attacks.

This countermeasure can be bypassed if Dynamic Client Registration is
used by the client.
The bypass works as follows:

The client will use a unique redirect URI in the Client Registration
Request when it registers at the authorization server operated by the
attacker (A-AS).
However, the A-AS can replace this redirect URI with the same redirect
URI the client uses for the "honest" authorization server (H-AS).
According to RFC7591, the AS is explicitly allowed to replace the
client's requested metadata values and must return all registered
metadata to the client in the Client Information Response. The same
applies to the Client Information Response defined in RFC7592.

For example the client sends the following request:

POST /register HTTP/1.1
{
"redirect_uris": [
"https://client.example.org/attacker-as"],
...
}

The A-AS responds as follows:

HTTP/1.1 201 Created
{
"client_id": "s6BhdRkqt3",
"redirect_uris": [
"https://client.example.org/honest-as"],Â Â Â  <-- redirect URI for H-AS
returned by A-AS
...
}

Neither RFC7591/RFC7592 nor the BCP state that the client should
validate the metadata contained in the Client Information Response in
any way.

Depending on its implementation the client might simply extract all data
contained in the Client Information Response and use it for
authorizations with the specific AS.
We were able to confirm that one popular open-source library behaves in
this exact way. It stores the redirect URI contained in the Client
Information Response and uses it for Authorization Requests with the
A-AS although it differs from the redirect URI in the Client
Registration Request.

In our opinion this makes the countermeasure "AS-specific redirect URIs"
obsolete and we believe the other countermeasure described in the BCP
(adding an AS identifier and the client_id of the intended recipient to
AS's responses) should be used to prevent Mix-Up attacks. If the
involved entities use the OIDC hybrid flow this countermeasure is
automatically applied.

Do we miss anything? Or what is your opinion about this?

Best regards,
Karsten Meyer zu Selhausen

-- 
Phone:	(+49)(0)234 / 45930961
Fax:	(+49)(0)234 / 45930960
Mail:	karsten.meyerzuselhausen@hackmanit.de
PGP:    0EDA AAC6 01DE 3D7F 2123 70F8 4535 C0E7 DB16 F148
Web:	www.hackmanit.de

Hackmanit GmbH
UniversitÃ¤tsstraÃŸe 150 (ID 2/411)
44801 Bochum, Germany

Vertreten durch: Prof. Dr. JÃ¶rg Schwenk, Dr. Juraj Somorovsky, Dr. Christian Mainka, Dr. Marcus Niemietz
Registergericht: Bochum


From nobody Tue Nov 26 06:20:24 2019
Return-Path: <fett@danielfett.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C26BA12012A for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 06:20:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001,  UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=danielfett.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oXdVqy5o5j3n for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 06:20:20 -0800 (PST)
Received: from d3f.me (redstone.d3f.me [5.9.29.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F08A120025 for <oauth@ietf.org>; Tue, 26 Nov 2019 06:20:20 -0800 (PST)
Received: from authenticated-user (PRIMARY_HOSTNAME [PUBLIC_IP]) by d3f.me (Postfix) with ESMTPA id 4E17B1B2A for <oauth@ietf.org>; Tue, 26 Nov 2019 14:20:18 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de; s=dkim; t=1574778018; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=rYJQIOuvyZ3iDQY/EPwA4FTqT88dpMh4NQYBMCUKsio=; b=KiQf0sPLhCGixHppLA5bHU5e51BZjQvSG0HEfsXTFZF+YnN7az/UjKX9EQ6d9kfhha86Vr VXJcxBwR+O33IC/Hq1/AuqfJAZ3NZ4NX+QJnVpR7cpAsp0xTj0jRje2UEWt3nJUBikORor 7WXLTqpX25pnbfAcaFM5mTftzlH+Ua0=
To: oauth@ietf.org
References: <35143dd1-edeb-e0fd-6f36-a39d9b7f7008@hackmanit.de>
From: Daniel Fett <fett@danielfett.de>
Message-ID: <4f1d1215-aa23-93ab-ae5b-75426d7f07cc@danielfett.de>
Date: Tue, 26 Nov 2019 15:20:17 +0100
MIME-Version: 1.0
In-Reply-To: <35143dd1-edeb-e0fd-6f36-a39d9b7f7008@hackmanit.de>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Language: de-AT-frami
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=danielfett.de;  s=dkim; t=1574778018; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=rYJQIOuvyZ3iDQY/EPwA4FTqT88dpMh4NQYBMCUKsio=; b=twoKM9tkpqQ5OzlLegV7vBbaayu8feeF3jZakaZ/OP+jN0kLRMg0rlzfBO6jPucDzxkvuR LuAqX4RjxK5kLJuRNj5+9a7Oi8U26xqZfz18yZO4tejrqx0n7EqtiFMDuTOu0jYjrRO6q5 bXs301AIkz+fkOhxO2AYOW3CBqjvp1w=
ARC-Seal: i=1; s=dkim; d=danielfett.de; t=1574778018; a=rsa-sha256; cv=none; b=OuEjeY5azK2oaGIRfBUxw1fE9SNnpO7qEVtfzaKsAjYn7YtNDrQjAj1RD2D5B5nwKhKscSLFSV/ZlGUx5BNTOaIGWBd3fC/bbCFvLliiECW5bkIfG6GbA5VtHq70a9hmXN5gsIGFy8sLi9gfeaisKAX0/h18xHuKA0jXtThOkkM=
ARC-Authentication-Results: i=1; d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
Authentication-Results: d3f.me; auth=pass smtp.auth=fett@danielfett.de smtp.mailfrom=fett@danielfett.de
X-Spamd-Bar: /
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/x_BSlioVtvaj1Gwq92GWF8Pf64c>
Subject: Re: [OAUTH-WG] OAuth 2.0 Security Best Current Practice | Issue in Mix-Up Countermeasure
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 14:20:22 -0000

Hi Karsten,

Very interesting observation!

My gut feeling is that this is the real problem here:

Am 26.11.19 um 14:24 schrieb Karsten Meyer zu Selhausen:
> Depending on its implementation the client might simply extract all data
> contained in the Client Information Response and use it for
> authorizations with the specific AS.
> We were able to confirm that one popular open-source library behaves in
> this exact way. It stores the redirect URI contained in the Client
> Information Response and uses it for Authorization Requests with the
> A-AS although it differs from the redirect URI in the Client
> Registration Request.

The client uses untrusted, unverified data to make its decision on what
redirect URI to use.

Nonetheless, we should definitely mention this in the BCP!

> In our opinion this makes the countermeasure "AS-specific redirect URIs"
> obsolete and we believe the other countermeasure described in the BCP
> (adding an AS identifier and the client_id of the intended recipient to
> AS's responses) should be used to prevent Mix-Up attacks. If the
> involved entities use the OIDC hybrid flow this countermeasure is
> automatically applied.

These are more intrusive changes than the per-AS redirect URI and may
require new parameters.

Daniel



From nobody Tue Nov 26 07:51:23 2019
Return-Path: <kaduk@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3629B1208E8 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 07:51:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DlOy38M_cQ3a for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 07:51:20 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD8F51208D1 for <oauth@ietf.org>; Tue, 26 Nov 2019 07:51:20 -0800 (PST)
Received: from mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAQFpGOl004529 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 26 Nov 2019 10:51:18 -0500
Date: Tue, 26 Nov 2019 07:51:16 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
Cc: oauth@ietf.org
Message-ID: <20191126155116.GW32847@mit.edu>
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/vwfMs3qnOh2NhHbw16qraXChqCI>
Subject: Re: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 15:51:22 -0000

Hi Pedram,

On Thu, Nov 21, 2019 at 02:50:52PM +0100, Pedram Hosseyni wrote:
> 
> Also, for this or the next version of this document, the Cuckoo's Token 
> attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ ), should 
> be addressed. We also discussed this issue extensively at the last OSW 
> in Stuttgart.

I took a look at the paper, and I'm not sure I'm properly understanding the
"Cuckoo's Token" attack.  Looking at Figure 4 of the paper to have
something concrete to refer to, I assume that the client, as a white box,
is presumed to be honest.  Since the access token is bound to the client, I
assume that the attacker has to return the phished access token to the same
client that originally (honestly) got it, as otherwise the token will not
be usable at the RS.  The paper concludes that in step 6, the client gets
access to the honest resource owner's resources, and furthermore that the
attacker has access to those resources through the client.  It's that last
part that I'm not sure I understand -- if the client is honest, why would
it return resource information to the attacker?  The best I can come up
with is that there's some sense of a "session" between the user and client,
such that the client links its resource accesses with the "session" on
behalf of which the access occurs, and is willing to return such
information back to the user only on the "linked session".  (The
countermeasure makes sense and is a good practice, of course.)

Thanks,

Ben


From nobody Tue Nov 26 09:33:15 2019
Return-Path: <pedram.hosseyni@sec.uni-stuttgart.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFFC1121122 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 09:33:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.197
X-Spam-Level: 
X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=uni-stuttgart.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sWxAS1IweCzO for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 09:33:11 -0800 (PST)
Received: from mxex2.tik.uni-stuttgart.de (mxex2.tik.uni-stuttgart.de [IPv6:2001:7c0:2041:24::a:2]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A659E121123 for <oauth@ietf.org>; Tue, 26 Nov 2019 09:33:10 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mxex2.tik.uni-stuttgart.de (Postfix) with ESMTP id 50D6B60341; Tue, 26 Nov 2019 18:33:08 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=uni-stuttgart.de; h=content-language:content-transfer-encoding:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:from:from:references:subject:subject:received :received; s=dkim; i=@sec.uni-stuttgart.de; t=1574789586; x= 1576528387; bh=zGjhYqjJWd5ntN2WhZNBkI00APA+/TmZKl/5GrG+LWo=; b=q x4Pi8pVQhlb4jWsIJMJtSAi9+6KVandqn1mle7ePDgvWoIYIbGdB+zTgqIOuMIf8 2F2Ps+6F/Mi4Ap4VyCGivOuHs4i5/s3vM3qJ78u2yscp6qRKGVsp1kMmx+rs4m/I M4GGv6AGuWDS+GCLWWTjAjZuIoMcRcv+8ROHomPqnaR1mqQ1fqmkU/7jRJTIlmSf LNfnW08Pf7NQrMddioVcgdBq/lnBTLhWdUUf6AkFaYq/7a5mr+flCHXRdrrGdodX TDTtADBhfh85qhvPVKOz0qAlGPmGYanZvYTidgiULXc6UKVNzeXiDIDWUsxvJCA+ 0bcwuzybO/SC4qJT5lf7g==
X-Virus-Scanned: USTUTT mailrelay AV services at mxex2.tik.uni-stuttgart.de
Received: from mxex2.tik.uni-stuttgart.de ([127.0.0.1]) by localhost (mxex2.tik.uni-stuttgart.de [127.0.0.1]) (amavisd-new, port 10031) with ESMTP id b46dbhrYEw1J; Tue, 26 Nov 2019 18:33:06 +0100 (CET)
Received: from [IPv6:2001:7c0:2015:182::1:9c] (unknown [IPv6:2001:7c0:2015:182::1:9c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mxex2.tik.uni-stuttgart.de (Postfix) with ESMTPSA; Tue, 26 Nov 2019 18:33:05 +0100 (CET)
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: oauth@ietf.org
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de> <20191126155116.GW32847@mit.edu>
From: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
Message-ID: <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de>
Date: Tue, 26 Nov 2019 18:33:04 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <20191126155116.GW32847@mit.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/xyZ5ZJDnvqX4W5UqI7SGRkgFPJ8>
Subject: Re: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 17:33:14 -0000

Hi Ben,

The attacker uses the (honest) client shown in Figure 4 as a regular 
user. For example, the client might provide access to a cloud storage 
via its website, i.e., by using the clients' website, a user can access 
her files stored at the resource server.

I'll try to clarify the attack with a simplified example.

Let's assume that the client supports two authorization servers 
AS_honest and AS_attacker. Intuitively, if the attacker phishes an 
access token created by AS_honest for an honest user (Alice), one would 
expect that sender-constraining the access token (e.g., via mTLS) 
prevents the attacker from using this access token.

The overall goal of the attacker is to use the sender-constrained access 
token (which he cannot use directly at the resource server) to access 
Alices cloud storage.

The attack works as follows:

First, the attacker visits the website of the client. Usually, the 
attacker would now choose an AS, and after successful authentication, 
access his files stored in the cloud. When selecting the AS, the 
attacker chooses AS_attacker. In Step 5 of Figure 4, AS_attacker now 
provides the phished access token. As this token is bound to this 
client, the client can use it at the resource server for getting access 
to the cloud storage of Alice. As the attacker is using the client 
(through the clients' website), he now gets access to these files 
(stored at the RS).

Please let me know if you have any other questions.

Best regards,
Pedram


On 26.11.19 16:51, Benjamin Kaduk wrote:
> Hi Pedram,
>
> On Thu, Nov 21, 2019 at 02:50:52PM +0100, Pedram Hosseyni wrote:
>> Also, for this or the next version of this document, the Cuckoo's Token
>> attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ ), should
>> be addressed. We also discussed this issue extensively at the last OSW
>> in Stuttgart.
> I took a look at the paper, and I'm not sure I'm properly understanding the
> "Cuckoo's Token" attack.  Looking at Figure 4 of the paper to have
> something concrete to refer to, I assume that the client, as a white box,
> is presumed to be honest.  Since the access token is bound to the client, I
> assume that the attacker has to return the phished access token to the same
> client that originally (honestly) got it, as otherwise the token will not
> be usable at the RS.  The paper concludes that in step 6, the client gets
> access to the honest resource owner's resources, and furthermore that the
> attacker has access to those resources through the client.  It's that last
> part that I'm not sure I understand -- if the client is honest, why would
> it return resource information to the attacker?  The best I can come up
> with is that there's some sense of a "session" between the user and client,
> such that the client links its resource accesses with the "session" on
> behalf of which the access occurs, and is willing to return such
> information back to the user only on the "linked session".  (The
> countermeasure makes sense and is a good practice, of course.)
>
> Thanks,
>
> Ben

-- 
Pedram Hosseyni, M.Sc.
Room V38 2.438
Institute of Information Security - SEC
UniversitÃ¤t Stuttgart
UniversitÃ¤tsstraÃŸe 38
D-70569 Stuttgart
Germany
Phone: +49 711 685 88454
https://sec.uni-stuttgart.de


From nobody Tue Nov 26 09:48:43 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BFD9120A4E for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 09:48:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ES3mRys9e2N for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 09:48:40 -0800 (PST)
Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8F9A1209CA for <oauth@ietf.org>; Tue, 26 Nov 2019 09:48:39 -0800 (PST)
Received: by mail-wm1-x332.google.com with SMTP id b11so4155224wmb.5 for <oauth@ietf.org>; Tue, 26 Nov 2019 09:48:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=kMjVwOQGVOIUtfSVGaQ6c3xNzxFgWu2WLOI+hf1lfrY=; b=t5RKDOeNu8RHUoFtpaLZ271jArv4ry2l5OKu5V9XzgAJrAqMkIQDVJBOJxvmgDL6ov 4q6uWwAZmt4jcFlL63C4LwZdzZrkk41hnEhxL7b/C+mSthue2V7z//KTN5CV9p9osJo5 HKOgGOynTnddckWanX24NxArw6suFaOrnUgdHliguP8SksdBAXLU8dZ/nKAcvl0nAKCG J414WbLXgpV/fUV799qkIWe+/KGjm/Ea8WRHCf9N8qVf1oOWcjrX2I2UHVdff+OesLta IJ77z1Sc8jshZOc+Xu/o9gc21MPEZvtRQMVoOT0wm7vD399afU844bl0ecC7jKzNd6U1 MfSw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=kMjVwOQGVOIUtfSVGaQ6c3xNzxFgWu2WLOI+hf1lfrY=; b=lrf+qSrSkL+8su4Lhbm4jrO2i8UF022jWCOyUIjWNmbHOyWtqLRTtnpGMNzg9XwWJZ PZiibhXe5GkJB/C5AeaAwhFI/d80n+JfgHWamq5B7nygaIp8iXp2kAZdaaR4Sp2bn2it uY7a3JzPYqMJqqXt46VP3+TCrn6eoYtDy+AdQj+eJsH0f5Ok+uzVzHszkWpioGtuBm7X cqXPcwZGsUNd2eWoWjBn8/CyW8Gz/mUjU/QhEswcQlvctTPxrxEYDIfnIDLIPNitcT3s wyyTLNxnS6mkA3XeneKfBZgIGQ3NJkEN8/DRR+IBhFEzKDolCj0MjjU7t2WlKRKdGrDS RL0A==
X-Gm-Message-State: APjAAAWYUmzKMVrWO/TRRMup8aXkYrLqd7VQduPYc5zmZyNFpeylQ6ub gSJDcqIgQ6dU+wM2W+qvQ26KuA==
X-Google-Smtp-Source: APXvYqwJwUC3DW1VO/N582wQkHYumLE4f8RjMAWNdfBz837hZ7Y1rrEhh0VBiNnM34Tp3kPuBJODDw==
X-Received: by 2002:a7b:cb4a:: with SMTP id v10mr243041wmj.106.1574790517919;  Tue, 26 Nov 2019 09:48:37 -0800 (PST)
Received: from ?IPv6:2a01:598:a90a:3ef4:34b2:dbfd:83dd:888b? ([2a01:598:a90a:3ef4:34b2:dbfd:83dd:888b]) by smtp.gmail.com with ESMTPSA id r2sm4010451wma.44.2019.11.26.09.48.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 26 Nov 2019 09:48:37 -0800 (PST)
Content-Type: multipart/signed; boundary=Apple-Mail-A2A6CA25-DAA1-45ED-BC3A-0761F82C1589; protocol="application/pkcs7-signature"; micalg=sha-256
Content-Transfer-Encoding: 7bit
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Mime-Version: 1.0 (1.0)
Date: Tue, 26 Nov 2019 18:48:34 +0100
Message-Id: <19562413-6D20-4DEF-BDF2-F73F5DF00A76@lodderstedt.net>
References: <f1d8191c1f5f45ab934166f555fd541c@STEMES002.steteu.corp>
Cc: Joseph Heenan <joseph.heenan@fintechlabs.io>, "oauth@ietf.org" <oauth@ietf.org>
In-Reply-To: <f1d8191c1f5f45ab934166f555fd541c@STEMES002.steteu.corp>
To: =?utf-8?Q?Robache_Herv=C3=A9?= <herve.robache@stet.eu>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/WJw1o-a84rSOJTsg5DCYuMN37g4>
Subject: Re: [OAUTH-WG] Question regarding RFC 8628
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 17:48:43 -0000

--Apple-Mail-A2A6CA25-DAA1-45ED-BC3A-0761F82C1589
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

No problem. You are always welcome.

> Am 26.11.2019 um 14:07 schrieb Robache Herv=C3=A9 <herve.robache@stet.eu>:=

>=20
> =EF=BB=BFThanks Torsten, I didn't notice this point in CIBA.
>=20
> Sorry about asking a so silly question.
>=20
> Herv=C3=A9
>=20
> -----Message d'origine-----
> De : Torsten Lodderstedt [mailto:torsten@lodderstedt.net]
> Envoy=C3=A9 : mardi 26 novembre 2019 11:33
> =C3=80 : Robache Herv=C3=A9
> Cc : Joseph Heenan; oauth@ietf.org
> Objet : Re: [OAUTH-WG] Question regarding RFC 8628
>=20
> Hi Herv=C3=A9,
>=20
> the flow you outline is equivalent to CIBA (https://openid.net/specs/openi=
d-client-initiated-backchannel-authentication-core-1_0-ID1.html).
>=20
> RFC8628/device grant type and CIBA differ as follows:
>=20
> - RFC8628 provides the client with an URL for the authorisation process
> - CIBA requires the client to provide a user identifier to the AS/OP, the A=
S in turn uses an out of band mechanism to communicate with the user
>=20
> best regards,
> Torsten.
>=20
>> On 26. Nov 2019, at 09:26, Robache Herv=C3=A9 <herve.robache@stet.eu> wro=
te:
>>=20
>> Dear all
>>=20
>> Thanks again for your clarifications. After discussion with the French co=
mmunity, we think that a full decoupled flow could be the following one
>>=20
>> <image002.png>
>>=20
>> =46rom my perspective, this flow  is very similar to RFC8628 or CIBA, exc=
ept the following difference: instead of providing the customer with the aut=
hentication URI through the third party, the bank notifies directly the cust=
omer on a specific device or mobile app.
>>=20
>> Do you have any thought on this flow?
>>=20
>> Thanks in advance
>>=20
>> Herv=C3=A9
>>=20
>> De : Robache Herv=C3=A9
>> Envoy=C3=A9 : lundi 18 novembre 2019 15:21
>> =C3=80 : 'Joseph Heenan'; Torsten Lodderstedt
>> Cc : oauth@ietf.org
>> Objet : [OAUTH-WG] Question regarding RFC 8628
>>=20
>> Thanks Joseph
>>=20
>> I agree with you. There should be no issue when the URL is registered dur=
ing the TPP app installation.
>>=20
>> =46rom my perspective, this URL should be passed during the authorization=
 request within the [redirect_uri] field.
>>=20
>> By the way, most of the French banks will use Oauth2 AC and not OpenId Co=
nnect. I guess that the sequence diagram is roughly the same, isn=E2=80=99t i=
t?
>>=20
>> Best regards
>>=20
>> Herv=C3=A9
>>=20
>> De : Joseph Heenan [mailto:joseph.heenan@fintechlabs.io]
>> Envoy=C3=A9 : lundi 18 novembre 2019 14:49
>> =C3=80 : Torsten Lodderstedt
>> Cc : Robache Herv=C3=A9; oauth@ietf.org
>> Objet : Re: [OAUTH-WG] Question regarding RFC 8628
>>=20
>> Hi all,
>>=20
>> Thanks, Torsten.
>>=20
>>=20
>> On 18 Nov 2019, at 13:22, Torsten Lodderstedt <torsten@lodderstedt.net> w=
rote:
>>=20
>> Hi Herv=C3=A9,
>>=20
>> looping in Joseph.
>>=20
>>=20
>> On 18. Nov 2019, at 21:17, Robache Herv=C3=A9 <herve.robache@stet.eu> wro=
te:
>>=20
>> Thanks Torsten
>>=20
>> Yes, we study this flow as well. Actually we consider the two following f=
lows for a mobile-based authentication
>>=20
>> -          DECOUPLED : via a RFC8628-derived or CIBA approach (as suggest=
ed by Rob)
>> -          REDIRECT : via the flow specified in the OpenId link you gave.=

>>=20
>> The main issue encountered so far is to give back the focus on the third p=
arty app. Third Parties fear that their app will be kept in the back of the m=
obile screen.
>>=20
>> @Joseph: what=E2=80=99s your take on this concern?
>>=20
>> In app2app, it really shouldn=E2=80=99t happen - if the device OS has not=
 properly registered the universal link, the TPP website would open instead a=
nd authorization code can still be processed (though admittedly supporting t=
his use case may require a bit more care to ensure session mixup attacks can=
=E2=80=99t happen).
>>=20
>>=20
>>=20
>>=20
>> This could happen when the TPP app [app link]/[universal link] is not pro=
perly registered or forwarded to the bank app.
>> -          In the REDIRECT approach this means that the authorization cod=
e cannot be forwarded to the TPP
>>=20
>> I don=E2=80=99t really understand how the =E2=80=98app link=E2=80=99 woul=
d not be properly registered to the bank app. The universal link should be t=
he same URL as for the redirect uri on the TPP website. Obviously if the TPP=
 registers their redirect uri incorrectly with the bank the flow won=E2=80=99=
t work, but this applies equally to the web based flows, and it=E2=80=99s no=
t the kind of problem you see occur on a production system.
>>=20
>> The evidence from the UK so far is that drop-off rates (where the user do=
es not successfully complete the authentication and return to the third part=
y) are far lower for app2app compared to a normal oauth2 browser based redir=
ect flow; I can=E2=80=99t put my hand on the actual figures right now but fr=
om memory around 5 times more users successfully completed an app2app flow t=
han the usual web flows.
>>=20
>>=20
>> -          In the DECOUPLED approach it less critical since the TPP polls=
 the bank and eventually gets its token once the PSU has authenticated.
>>=20
>> But in the decoupled flow, the PSU first has to enter her PSU ID in order=
 to allow the TPP to identity the PSU towards the ASPSP. This is less conven=
ient and leaks PII.
>>=20
>> Not necessarily the PSU ID, but generally something that can be used to i=
dentify the user. In theory it could be an ephemeral id, though in reality t=
here=E2=80=99s all sorts of issues with implementing that, particularly on a=
 =E2=80=99same device=E2=80=99 flow. It=E2=80=99s definitely less convenient=
, particularly for the first TPP<->ASPSP interaction where the TPP will nece=
ssarily have to collect more info from the user than would be necessary in a=
 redirect based flow.
>>=20
>> The user also has to manually switch back to the TPP app at the end of th=
e flow.
>>=20
>> My general opinion is that for most use cases where the consumption and a=
uthentication devices are the same device a decoupled flow should not be use=
d, as for that use case app2app presents a far better user experience - both=
 in terms of the number of steps and the time taken to successfully complete=
 all the steps.
>>=20
>> Joseph
>>=20
>>=20
>>=20
>> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'i=
ntention exclusive de ses destinataires et sont confidentiels.
>> Si vous recevez ce message par erreur ou s'il ne vous est pas destin=C3=A9=
, merci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me et d=
'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
>> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n'e=
st pas conforme =C3=A0 sa destination, toute diffusion ou toute publication,=
 totale ou partielle, est interdite.
>> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce messag=
e =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline toute r=
esponsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se o=C3=B9 il a=
urait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou falsifi=C3=A9.
>> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l'environneme=
nt.
>>=20
>> This message and any attachments is intended solely for the intended addr=
essees and is confidential.
>> If you receive this message in error, or are not the intended recipient(s=
), please delete it and any copies from your systems and immediately notify t=
he sender.
>> Any unauthorized view, use that does not comply with its purpose, dissemi=
nation or disclosure, either whole or partial, is prohibited.
>> Since the internet cannot guarantee the integrity of this message which m=
ay not be reliable, STET shall not be liable for the message if modified, ch=
anged or falsified.
>> Do not print this message unless it is necessary, please consider the env=
ironment.
>> <oledata.mso>
>=20
>=20
>=20
> Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'in=
tention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur ou s'il ne vous est pas destin=C3=A9=
, merci de le d=C3=A9truire ainsi que toute copie de votre syst=C3=A8me et d=
'en avertir imm=C3=A9diatement l'exp=C3=A9diteur.
> Toute lecture non autoris=C3=A9e, toute utilisation de ce message qui n'es=
t pas conforme =C3=A0 sa destination, toute diffusion ou toute publication, t=
otale ou partielle, est interdite.
> L'Internet ne permettant pas d'assurer l'int=C3=A9grit=C3=A9 de ce message=
 =C3=A9lectronique susceptible d'alt=C3=A9ration, STET d=C3=A9cline toute re=
sponsabilit=C3=A9 au titre de ce message dans l'hypoth=C3=A8se o=C3=B9 il au=
rait =C3=A9t=C3=A9 modifi=C3=A9, d=C3=A9form=C3=A9 ou falsifi=C3=A9.
> N'imprimez ce message que si n=C3=A9cessaire, pensez =C3=A0 l'environnemen=
t.
>=20
> This message and any attachments is intended solely for the intended addre=
ssees and is confidential.
> If you receive this message in error, or are not the intended recipient(s)=
, please delete it and any copies from your systems and immediately notify t=
he sender.
> Any unauthorized view, use that does not comply with its purpose, dissemin=
ation or disclosure, either whole or partial, is prohibited.
> Since the internet cannot guarantee the integrity of this message which ma=
y not be reliable, STET shall not be liable for the message if modified, cha=
nged or falsified.
> Do not print this message unless it is necessary, please consider the envi=
ronment.

--Apple-Mail-A2A6CA25-DAA1-45ED-BC3A-0761F82C1589
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-A2A6CA25-DAA1-45ED-BC3A-0761F82C1589--


From nobody Tue Nov 26 10:31:27 2019
Return-Path: <kaduk@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76E27120A96 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 10:31:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5W4fska9nDVS for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 10:31:23 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6604120AA1 for <oauth@ietf.org>; Tue, 26 Nov 2019 10:31:15 -0800 (PST)
Received: from mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAQIV94m032466 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 26 Nov 2019 13:31:13 -0500
Date: Tue, 26 Nov 2019 10:31:09 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
Cc: oauth@ietf.org
Message-ID: <20191126183109.GZ32847@mit.edu>
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de> <20191126155116.GW32847@mit.edu> <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/3ZvOa45bo8j3fc5dyd1HFS5hGmY>
Subject: Re: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 18:31:26 -0000

Hi Pedram,

Thanks for confirming that the scenario is as I was trying to understand
it.  I don't think it's universal that all clients will give transitive
access from the user to the accessed resource, though it's certainly
common; the lack of exposition on that point is what I had been stumbling
on.

-Ben

On Tue, Nov 26, 2019 at 06:33:04PM +0100, Pedram Hosseyni wrote:
> Hi Ben,
> 
> The attacker uses the (honest) client shown in Figure 4 as a regular 
> user. For example, the client might provide access to a cloud storage 
> via its website, i.e., by using the clients' website, a user can access 
> her files stored at the resource server.
> 
> I'll try to clarify the attack with a simplified example.
> 
> Let's assume that the client supports two authorization servers 
> AS_honest and AS_attacker. Intuitively, if the attacker phishes an 
> access token created by AS_honest for an honest user (Alice), one would 
> expect that sender-constraining the access token (e.g., via mTLS) 
> prevents the attacker from using this access token.
> 
> The overall goal of the attacker is to use the sender-constrained access 
> token (which he cannot use directly at the resource server) to access 
> Alices cloud storage.
> 
> The attack works as follows:
> 
> First, the attacker visits the website of the client. Usually, the 
> attacker would now choose an AS, and after successful authentication, 
> access his files stored in the cloud. When selecting the AS, the 
> attacker chooses AS_attacker. In Step 5 of Figure 4, AS_attacker now 
> provides the phished access token. As this token is bound to this 
> client, the client can use it at the resource server for getting access 
> to the cloud storage of Alice. As the attacker is using the client 
> (through the clients' website), he now gets access to these files 
> (stored at the RS).
> 
> Please let me know if you have any other questions.
> 
> Best regards,
> Pedram
> 
> 
> On 26.11.19 16:51, Benjamin Kaduk wrote:
> > Hi Pedram,
> >
> > On Thu, Nov 21, 2019 at 02:50:52PM +0100, Pedram Hosseyni wrote:
> >> Also, for this or the next version of this document, the Cuckoo's Token
> >> attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ ), should
> >> be addressed. We also discussed this issue extensively at the last OSW
> >> in Stuttgart.
> > I took a look at the paper, and I'm not sure I'm properly understanding the
> > "Cuckoo's Token" attack.  Looking at Figure 4 of the paper to have
> > something concrete to refer to, I assume that the client, as a white box,
> > is presumed to be honest.  Since the access token is bound to the client, I
> > assume that the attacker has to return the phished access token to the same
> > client that originally (honestly) got it, as otherwise the token will not
> > be usable at the RS.  The paper concludes that in step 6, the client gets
> > access to the honest resource owner's resources, and furthermore that the
> > attacker has access to those resources through the client.  It's that last
> > part that I'm not sure I understand -- if the client is honest, why would
> > it return resource information to the attacker?  The best I can come up
> > with is that there's some sense of a "session" between the user and client,
> > such that the client links its resource accesses with the "session" on
> > behalf of which the access occurs, and is willing to return such
> > information back to the user only on the "linked session".  (The
> > countermeasure makes sense and is a good practice, of course.)
> >
> > Thanks,
> >
> > Ben
> 
> -- 
> Pedram Hosseyni, M.Sc.
> Room V38 2.438
> Institute of Information Security - SEC
> Universität Stuttgart
> Universitätsstraße 38
> D-70569 Stuttgart
> Germany
> Phone: +49 711 685 88454
> https://sec.uni-stuttgart.de
> 


From nobody Tue Nov 26 12:08:26 2019
Return-Path: <mpeck@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A10C120980 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 12:08:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.3
X-Spam-Level: 
X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M3dIMk_WVMI0 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 12:08:22 -0800 (PST)
Received: from smtpvbsrv1.mitre.org (smtpvbsrv1.mitre.org [198.49.146.234]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6489E1208F8 for <oauth@ietf.org>; Tue, 26 Nov 2019 12:08:22 -0800 (PST)
Received: from smtpvbsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 8289133202C; Tue, 26 Nov 2019 15:08:21 -0500 (EST)
Received: from smtprhbv1.mitre.org (unknown [129.83.19.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtpvbsrv1.mitre.org (Postfix) with ESMTPS id 76440332024; Tue, 26 Nov 2019 15:08:21 -0500 (EST)
Received: from mbfesmtp-mgt.mitre.org (unknown [198.49.146.235]) by smtprhbv1.mitre.org (Postfix) with ESMTP id 716D780B76F; Tue, 26 Nov 2019 15:08:21 -0500 (EST)
Received: by mbfesmtp-mgt.mitre.org (Postfix, from userid 600) id 47Mw2F3DcjzkpG; Tue, 26 Nov 2019 20:08:13 +0000 (UTC)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02lp2107.outbound.protection.outlook.com [104.47.65.107]) by mbfesmtp-mgt.mitre.org (Postfix) with ESMTPS id 47Mw2041S1zks6; Tue, 26 Nov 2019 20:08:08 +0000 (UTC)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AvMwte/PPbSN4KuOTgqs8H3TTMUt/HHJ02EMKiBDVg4SQ7rHN/xHHJ4uR7hIx8vy1XfEBp9DYPN/mYm38+WgcP0oWLa2V1tJLm6oRRQGP7q410rdtQoW7Aid08zDddeVhTvaBBL2SCiGU67k2Ez2A5B6sHDtQgEpufbPS+XRC/rZpOlCYlaajWGjLg+E8Y/OmOtLT66mMcoY6FPwXuXPL0BiJ3fNtgAhIX/XoOZLjMBiSUw92LYfHTx7wEV6S6fFwAJWWb1oqIHPb59dnUXcXglrN3AGusmylY9Tgdlb1WyCkm1STJABedoAb4D4pl4RgxgY/+1d3bGjbLLxXyPVAQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=u6PAkiPykR5FjBgEvDpW2hqp67p0BP9ZpZJ9FCjw/wA=; b=Zwwj896p1fniY0fk/THPOGa6RZr35T3vlOEScykW8emOnP6fxOEe8Dim9knitgls8uGku/MyDAkpjsCis6S+x5anWv5y5Q9QFT7Aw61Uc/5cThSvOGuDIJzocBBwTD5Od2bqwj42NIdkOKYFQ2orBYzR15tb8ws7d9Tq4T1B4pYl96oIw8nS4t1TUwDqENYWfHrKgoAPyOA96Ev6kV6cAkPcQu+af5+p962YDxJpGfZ5FN5vwliGI4JVxHkg7tRUF/W3lYoNPYCdLWaQuQs24839A0bt/2Wx16cPxEbyK3UsPZX+UYJiSWODCGLtfkKm3zcpDgXUYojNAN/Xbpe2uw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mitre.org; dmarc=pass action=none header.from=mitre.org; dkim=pass header.d=mitre.org; arc=none
Received: from BL0PR0901MB4435.namprd09.prod.outlook.com (52.135.45.75) by BL0PR0901MB3010.namprd09.prod.outlook.com (20.177.243.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Tue, 26 Nov 2019 20:08:07 +0000
Received: from BL0PR0901MB4435.namprd09.prod.outlook.com ([fe80::80e0:62bd:ecd4:13d0]) by BL0PR0901MB4435.namprd09.prod.outlook.com ([fe80::80e0:62bd:ecd4:13d0%7]) with mapi id 15.20.2474.023; Tue, 26 Nov 2019 20:08:07 +0000
From: "Peck, Michael A" <mpeck@mitre.org>
To: Benjamin Kaduk <kaduk@mit.edu>, Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: [EXT] Re: [OAUTH-WG] WGLC review of draft-ietf-oauth-security-topics-13
Thread-Index: AQHVpIer7bC33WzP2Uyc9uCIyfTygqedjYyA
Date: Tue, 26 Nov 2019 20:08:07 +0000
Message-ID: <A6A5B0CC-FC91-48D9-A7EC-79163EF08F55@mitre.org>
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de> <20191126155116.GW32847@mit.edu> <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de> <31267_1574793090_5DDD6F81_31267_173_1_20191126183109.GZ32847@mit.edu>
In-Reply-To: <31267_1574793090_5DDD6F81_31267_173_1_20191126183109.GZ32847@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1e.0.191013
authentication-results: spf=none (sender IP is ) smtp.mailfrom=mpeck@mitre.org; 
x-originating-ip: [73.86.23.177]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: ad48e91d-ea01-4a3b-4b08-08d772ac5a86
x-ms-traffictypediagnostic: BL0PR0901MB3010:
x-ms-exchange-purlcount: 3
x-microsoft-antispam-prvs: <BL0PR0901MB3010634601653DAE6C572C97B9450@BL0PR0901MB3010.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0233768B38
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(366004)(39860400002)(346002)(376002)(199004)(189003)(58126008)(316002)(2616005)(33656002)(66574012)(2171002)(6116002)(99286004)(186003)(5660300002)(81156014)(81166006)(6306002)(14444005)(6246003)(36756003)(11346002)(446003)(256004)(6512007)(8936002)(7110500001)(71190400001)(66946007)(6436002)(71200400001)(66446008)(64756008)(66556008)(7736002)(66066001)(305945005)(229853002)(2906002)(86362001)(4326008)(6486002)(102836004)(53546011)(966005)(6506007)(2420400007)(15650500001)(26005)(76176011)(110136005)(76116006)(8676002)(14454004)(66476007)(3846002)(25786009)(478600001); DIR:OUT; SFP:1101; SCL:1; SRVR:BL0PR0901MB3010; H:BL0PR0901MB4435.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 67x1Ea+frgXkjlIcDrDW5nM/1AAk/10NkBVROV+0O9Y337Dg5UJXfv4tzFySYv2ql/CdkDv+m9IAshg51MJrrKaOG8TjUQpBu3kBdXhACPoaHQEgroP74vXZK67BlPYdmjbfA/fVUv/4UO0N257oeRXHQTe47WDsuMQ5zRlHddZvmix7LH11QjTJkSHvjFZ9AqA9I8G4KiqRiw4aYaqsh9G59df47weF/Ltm0IPYYstSY2nJfNhBZmWqQS0hMVPEXSPaCadD5y1GGchAOn5YQa8CHPxulMy8y1ELFtaXeypK7qzKaNPGwSQUHKBQLMsWQQH3jP6bbzm98u8IiYn5VnpKyGamPovdmp2o51/4zdhKQx/reUAf6vptr0fC7JpCH0ECGtLqR3x0sxiRkWJRBjVaBDfxRJ6KEubi3yiXGCD+Ffm8I6DgEufqvAXWMlIqZSq00xpJSvkoMv6j5iMcYfH+JztUntPCnseCJApsDds=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <1A76EDB0BC2FB541B56811B5F6FC7D7A@namprd09.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: mitre.org
X-MS-Exchange-CrossTenant-Network-Message-Id: ad48e91d-ea01-4a3b-4b08-08d772ac5a86
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Nov 2019 20:08:07.3661 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: zNdQm8iIqbqf/TO6f7yMqTd9mBAVt7bbss8GZDBcLhfDwMCWV1TS4YjtXQbUdetB
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB3010
X-MITRE: 8GQsMWxq66rxk57w
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.org; h=from:to:cc:subject:date:message-id:references:in-reply-to:content-type:content-id:content-transfer-encoding:mime-version; s=selector1; bh=u6PAkiPykR5FjBgEvDpW2hqp67p0BP9ZpZJ9FCjw/wA=; b=0fpj2fPbt62gv0D47M0Mdj/rbjdutPy84rWnTec0hjnPPI1q75tQXUXPG7aDifHjw9Vtpqct0Ha77Q1PlcH9AwpKXt9CHWsfac1Yq9GvoWeAe5k7sdQSHvpojqWFwzokqJMjFxXEmObJlUK44uEaDTxrQV0IgNnoJIG5thlNees=
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/U9DiFxBUYg6-cZn10zJoDsprS0Q>
Subject: Re: [OAUTH-WG] [EXT] Re: WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2019 20:08:24 -0000
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From nobody Tue Nov 26 17:26:23 2019
Return-Path: <prvs=227439623=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A9E1200C5 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 17:26:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.8
X-Spam-Level: 
X-Spam-Status: No, score=-11.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MLad17SPh3NS for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 17:26:15 -0800 (PST)
Received: from smtp-fw-33001.amazon.com (smtp-fw-33001.amazon.com [207.171.190.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0366C1200CE for <oauth@ietf.org>; Tue, 26 Nov 2019 17:26:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574817975; x=1606353975; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=jdIaz5roVO2N/sDhf/I2qAIyU6lK5RbL30TWQ3MrMQk=; b=JTbqJuihZJ0c/Hg6Q6X3Exfk+Y96om7p5vb1uE2BOGCeizCy0BOqLDw1 /FnAATsd8FArRANC7jQAE+h8L4Q2Y9n9wm3UT7WurCLjlsjX1UN8KxRNZ M5jIrhw+GtPQ+ZL4tjOC0SoMVjr0nvjuAlOkMDBVm8Z/iVtbk2diVcGvq s=;
IronPort-SDR: Xe0lvXfuoEh8slhwps7fCRsG6GXox+RAsrAcnId5TIjkk6+5SRgD6SszBFahXvRP4BKg7O2WBY KB2d13K49rMQ==
X-IronPort-AV: E=Sophos; i="5.69,247,1571702400"; d="scan'208,217"; a="11468729"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP; 27 Nov 2019 01:25:58 +0000
Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com (Postfix) with ESMTPS id 68AA5A2291; Wed, 27 Nov 2019 01:25:56 +0000 (UTC)
Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 01:25:55 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 01:25:55 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Wed, 27 Nov 2019 01:25:54 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAA3uqAgAJjuACAAgu/AIABCd+AgACdmgA=
Date: Wed, 27 Nov 2019 01:25:54 +0000
Message-ID: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com>
References: <7C33E17D-0E0B-49EC-8756-C4353D70EF27@amazon.com> <B147B292-925E-4B04-83E6-C66433D54F49@forgerock.com>
In-Reply-To: <B147B292-925E-4B04-83E6-C66433D54F49@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.162.45]
Content-Type: multipart/alternative; boundary="_000_3D5C611E4B034A46A22BD8AC9FE0AC51amazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uvAiNj9fIEvuy4zwkAhk2wEqtvU>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 01:26:22 -0000

--_000_3D5C611E4B034A46A22BD8AC9FE0AC51amazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

PiBUaGF04oCZcyBub3QgcHJvb2Ygb2YgcG9zc2Vzc2lvbiwgdGhhdOKAmXMganVzdCB2ZXJpZnlp
bmcgYSBNQUMuIFBvUCByZXF1aXJlcyB0aGUgb3RoZXIgcGFydHkgKGNsaWVudCkgdG8gcHJvdmlk
ZSBhIGZyZXNoIHByb29mIHRoYXQgdGhleSBjb250cm9sIGEga2V5LiBUaGUgY2xpZW50IGlzbuKA
mXQgdXNpbmcgYW55IGtleSBpbiB0aGlzIGNhc2UuDQoNCkkgdGhpbmsgd2XigJlyZSBvcGVyYXRp
bmcgd2l0aCBzbGlnaHRseSBkaWZmZXJlbnQgZGVmaW5pdGlvbnMgZm9yIFBvUC4gTXkgZGVmaW5p
dGlvbiBpcyBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVzIG9mIOKAnGEgcG9zc2Vzc29yIG9mIGEg
a2V5IGdlbmVyYXRlZCAob3Igd2FzIGluIHBvc3Nlc3Npb24gb2YpIHRoaXMgZGF0YSBibG9iIGF0
IHNvbWUgcG9pbnQu4oCdIFlvdSBjYW4gcHJvYmFibHkgc2VlIHdoeSB3ZeKAmXJlIGRpc2FncmVl
aW5nIG92ZXIgd2hldGhlciBvciBub3QgUG9QIGlzIGZ1bmRhbWVudGFsLiBJIGRvbuKAmXQgdGhp
bmsgdGhlcmUgaXMgYW55IHBvaW50IGluIGNvbnRpbnVpbmcgdGhpcyBzZW1hbnRpYyBkZWJhdGUu
IPCfmIMNCg0KPiBUaGF04oCZcyBub3QgZGlyZWN0bHkgYXR0YWNoZWQgdG8gdGhlIGFjY2VzcyB0
b2tlbi4gVGhpcyBtZWFucyB0aGF0IGV2ZXJ5IFJTIGhhcyB0byBrbm93IGFib3V0IERQb1AuDQpU
cnVlLCBidXQgeW91IGNvdWxkIGF2b2lkIHRoYXQgYnkgZW1iZWRkaW5nIHRoZSBhY2Nlc3MgdG9r
ZW4gaW4gdGhlIERQb1AgcHJvb2YgKHNpbWlsYXIgdG8gZHJhZnQtaWV0Zi1vYXV0aC1zaWduZWQt
aHR0cC1yZXF1ZXN0KSBhbmQgc2VuZGluZyB0aGF0IGFzIHRoZSBzb2xlIHRva2VuLiBUZWNobmlj
YWxseSwgdGhhdOKAmXMgbm8gbG9uZ2VyIGEgYmVhcmVyIHRva2VuIHNvIHNlbmRpbmcgaXQgYXMg
4oCcQXV0aG9yaXphdGlvbjogYmVhcmVyIDx0b2tlbj7igJ0gd291bGQgYmUgd3JvbmcsIGJ1dCBE
UG9QIGFscmVhZHkgY29tbWl0cyB0aGF0IHNpbi4NCg0KQWxzbywgaWYgdGhlIEFTIGlzIGRvaW5n
IGFsbCBhdXRoZW50aWNhdGlvbiBjaGVja3MsIHRoZW4gaW4gYSBsb3Qgb2YgY2FzZXMgdGhlIFJT
IHdpbGwgbmVlZCB0byBwcm92aWRlIHRoZSBBUyB3aXRoIGFkZGl0aW9uYWwgcmVxdWVzdCBtZXRh
ZGF0YSBhbG9uZyB3aXRoIHRoZSBtYWNhcm9vbiwgc3VjaCBhcyB0aGUgUE9TVCBtZXRob2QgdXNl
ZCwgb3JpZ2luIChpZiBpdOKAmXMgbm90IGluZmVyYWJsZSBmcm9tIHdoYXRldmVyIGNyZWRlbnRp
YWxzIHRoZSBSUyB1c2VzIHdoZW4gY2FsbGluZyB0aGUgQVMpLCByZXF1ZXN0IHBhdGgsIHNlbmRl
ciBJUCwgY2xpZW50IFRMUyBjZXJ0aWZpY2F0ZSwgdG9rZW4gYmluZGluZyBJRCwgZXRjLiBPYnZp
b3VzbHkgdGhlcmUgYXJlIHNvbWUgY2F2ZWF0cyB0aGF0IGRvbuKAmXQgcmVxdWlyZSB0aGlzIChl
LmcuLCB0aW1lc3RhbXApLiBJdCByZW1haW5zIHRvIGJlIHNlZW4gd2hldGhlciB0aGUgY2F2ZWF0
cyByZXF1aXJlZCB0byBtZWV0IERQb1DigJlzIHVzZSBjYXNlIGZhbGwgaW50byB0aGUgZm9ybWVy
IG9yIGxhdHRlciBjYXRlZ29yeS4NCg0KPiBQbGVhc2UgZXhwbGFpbiBob3cgdG8gYWNoaWV2ZSB0
aGUgZXhhbXBsZXMgSSBnYXZlIG9mIGxheWVyZWQgYXR0ZW51YXRpb24gd2l0aG91dCB1c2luZyBt
YWNhcm9vbnMuDQo+IDEuIFRoZSBjbGllbnQgYWRkcyBjYXZlYXRzIChlZyBleHAgPSBub3crNXMp
IHRvIGFuIGFjY2VzcyB0b2tlbiBhbmQgc2VuZHMgaXQgdG8gdGhlIFJTLiBUaGUgUlMgY3JlYXRl
cyBmb3VyIGNvcGllcyBvZiB0aGUgdG9rZW4gd2l0aCBkaWZmZXJlbnQgc2NvcGUgY29uc3RyYWlu
dHMgYW5kIHNlbmRzIHRoZW0gdG8gZm91ciBpbmRpdmlkdWFsIG1pY3Jvc2VydmljZXMuDQoNCkZv
ciBteSBleGFtcGxlIGJlbG93Og0KDQogICogICBMZXQgPGF0XzA+IGJlIHRoZSBhY2Nlc3MgdG9r
ZW4gb2J0YWluZWQgYnkgdGhlIGNsaWVudCBmcm9tIHRoZSBBUw0KICAqICAgTGV0IEpXRSBiZSBh
IGZ1bmN0aW9uIHRoYXQgZ2VuZXJhdGVzIGEgSldFIGdpdmVuIGEga2V5IGFuZCBwYXlsb2FkLg0K
ICAqICAgTGV0IDxFS2FzPiBiZSB0aGUgcHVibGljIGVuY3J5cHRpb24ga2V5IGZvciB0aGUgQVMu
DQoNCkNsaWVudDoNCjxhdF8xPiA9IEpXRSg8RUthcz4sIHsgYXQ6IDxhdF8wPiwgZXhwOiDigKYg
fSkNCg0KUlM6DQo8YXRfMj4gPSBKV0UoPEVLYXM+LCB7IGF0OiA8YXRfMT4sIHNjb3BlOiBzY29w
ZV9hIH0pDQo8YXRfMz4gPSBKV0UoPEVLYXM+LCB7IGF0OiA8YXRfMT4sIHNjb3BlOiBzY29wZV9i
IH0pDQo8YXRfND4gPSBKV0UoPEVLYXM+LCB7IGF0OiA8YXRfMT4sIHNjb3BlOiBzY29wZV9jIH0p
DQo8YXRfNT4gPSBKV0UoPEVLYXM+LCB7IGF0OiA8YXRfMT4sIHNjb3BlOiBzY29wZV9kIH0pDQoN
ClRoaXMgcGF0dGVybiBjYW4gYmUgYXBwbGllZCB0byB0aGUgb3RoZXIgc2NlbmFyaW9zIHlvdSBw
cm92aWRlZC4gVGhlIGRpZmZlcmVuY2UgYmV0d2VlbiBtYWNhcm9vbnMgYW5kIHRoZSBhYm92ZSBp
cyB0aGF0IHRoZSBmb3JtZXIgcmVsaWVzIG9uIGNoYWluZWQgSE1BQ3MgYW5kIHRoZSBsYXR0ZXIg
b24gYXN5bW1ldHJpYyBjcnlwdG8uIFlvdSBhbHNvIGxvc2UgdGhlIGFiaWxpdHkgdG8gaW5zcGVj
dCBjYXZlYXRzIG9yIGNvbnRleHQgdGhhdCBhcmUgYWxyZWFkeSBpbiB0aGUgdG9rZW4sIHdoaWNo
IG1heSBvciBtYXkgbm90IGJlIGltcG9ydGFudC4gVGhpcyBpcyBhbiBpbnRlcmVzdGluZyBwcm9w
ZXJ0eSBvZiB0aGUgbWFjYXJvb24gcGF0dGVybiB0aGF0IEnigJltIG5vdCBzdXJlIHlvdSBjb3Vs
ZCByZXBsaWNhdGUgd2l0aG91dCBiYXNpY2FsbHkgaW1wbGVtZW50aW5nIHRoZSBtYWNhcm9vbiBw
YXR0ZXJuIGluIGEgSldUIGZvcm1hdC4NCg0KPiBWYWxpZGF0aW9uIGF0IHRoZSBBUyBpcyBhbiBh
ZHZhbnRhZ2UgaW4gbW9zdCBjYXNlc+KApg0KTW9zdCwgYnV0IG5vdCBhbGwuIERQb1DigJlzIHVz
ZSBvZiBhc3ltbWV0cmljIHNpZ25hdHVyZXMgbWFrZXMgaXQgbW9yZSBhbWVuYWJsZSB0byBkaXN0
cmlidXRlZCB2YWxpZGF0aW9uIGluIHRob3NlIHNjZW5hcmlvcyB3aGVyZSBpdCBpcyBhcHByb3By
aWF0ZS4gWW91ciBSUy1zcGVjaWZpYyB0b2tlbiBzb2x1dGlvbiBpcyBvbmx5IGFwcGxpY2FibGUg
dG8gdXNlIGNhc2VzIHdoZXJlIHRoZSBSUy1zcGVjaWZpYyB0b2tlbnMgYXJlIGFwcHJvcHJpYXRl
IGFuZCB2aWFibGUuIFRoaXMgaXMgbm90IGEgcmVzdHJpY3Rpb24gdGhhdCBleGlzdHMgZm9yIERQ
b1AgYXMgd3JpdHRlbi4gQnV0IHlvdSBhcmUgY29ycmVjdCwgdGhlcmUgYXJlIHdheXMgdG8gdXNl
IHRoZSBtYWNhcm9vbiBwYXR0ZXJuIHdpdGggYXN5bW1ldHJpYyBjcnlwdG8uIElmIHRoYXTigJlz
IHlvdXIgcHJvcG9zYWwgdGhlbiBJIHN1Z2dlc3Qgc3BlY2lmeWluZyB0aGF0LCBhcyBtb3N0IG9m
IHRoZSBkb2N1bWVudGF0aW9uIEnigJl2ZSBzZWVuIChpbmNsdWRpbmcgdGhlIHZhc3QgbWFqb3Jp
dHkgb2YgdGhlIHBhcGVyKSBmb2N1c2VzIG9uIHRoZSBITUFDIGFwcHJvYWNoLiBXaGlsZSBJIGNh
biBzZWUgaG93IG9uZSBjb3VsZCBhcHBseSB0aGUgcGF0dGVybiB3aXRoIGFzeW1tZXRyaWMgY3J5
cHRvLCBpdCB3YXNu4oCZdCBjbGVhciB0byBtZSBmcm9tIHRoYXQgc2VjdGlvbiBvZiB0aGUgcGFw
ZXIgdGhhdCBteSB0aG91Z2h0cyBtYXRjaCB3aGF0IHRoZXkgd2VyZSBkZXNjcmliaW5nLg0KDQo+
IFRoZSBBUyBjYW4gc3RhcnQgaXNzdWluZyBtYWNhcm9vbnMgd2l0aG91dCBlaXRoZXIgY2xpZW50
cyBvciBSUyBiZWluZyBhd2FyZeKApi4NCknigJltIG5vdCBlbnRpcmVseSBzdXJlIHdoYXQgdmFs
dWUgeW914oCZcmUgdHJ5aW5nIHRvIGdldCBhdCBoZXJlLiBJIHRoaW5rIHlvdSBtZWFuIHRoYXQg
dGhlIHRva2VuIGhhbmRsaW5nL3ZhbGlkYXRpb24gbG9naWMgYXQgdGhlIFJTIGFuZCBBUyBpc27i
gJl0IHNpZ25pZmljYW50bHkgZGlmZmVyZW50IGZvciBub24tY29uc3RyYWluZWQgbWFjYXJvb25z
IHZlcnN1cyBjb25zdHJhaW5lZCBtYWNhcm9vbnMsIHdoZXJlYXMgaXQgaXMgZm9yIERQb1A/IFRy
dWUsIGZvciBEUG9QIHRoZSBSUyB3b3VsZCBuZWVkIHRvIGtub3cgdGhhdCBpdCBzaG91bGQgc2Vu
ZCB0aGUgRFBvUCBwcm9vZiB0byB0aGUgQVMsIGJ1dCBSU2VzIGNvdWxkIGJlIGNvbmZpZ3VyZWQg
dG8gYWx3YXlzIGluY2x1ZGUgaXQgaWYgcHJlc2VudCBpbiB0aGUgcmVxdWVzdC4gT24gdGhlIEFT
IHNpZGUsIHJlZ2FyZGxlc3Mgb2YgdG9rZW4gZm9ybWF0IHRoZSBBUyB3aWxsIG5lZWQgbG9naWMg
dG8gdmFsaWRhdGUgdGhhdCB0aGUgc2VuZGVyIGNvbnN0cmFpbnQgaXMgZnVsZmlsbGVkLiBUaGlz
IG1heSBiZSB2ZXJ5IHNpbXBsZSAoZS5nLiwganVzdCBhIHRpbWVzdGFtcCBjaGVjayksIG9yIGFz
IHJlbGF0aXZlIGNvbXBsZXggYXMgdmFsaWRhdGluZyBhIERQb1AgdG9rZW4sIGRlcGVuZGluZyBv
biB0aGUgbmVlZHMgb2YgdGhlIHVzZSBjYXNlIGFuZCB0aGUgY2F2ZWF0cyBpbnZvbHZlZC4NCg0K
PiAoUmU6IGFzeW1tZXRyaWMgY3J5cHRvKSBUaGF04oCZcyBub3QgYSByZXF1aXJlbWVudCwgaXTi
gJlzIGEgdGVjaG5vbG9neSBjaG9pY2UuDQpGYWlyIGVub3VnaCwgYnV0IHRlY2hub2xvZ3kgY2hv
aWNlcyBhcmUgZHJpdmVuIGJ5IHJlcXVpcmVtZW50cy4gQmFzZWQgb24gY29udmVyc2F0aW9ucyBJ
4oCZdmUgaGFkIHdpdGggSm9obiBCcmFkbGV5IChhbmQgb3RoZXJzIEkgdGhpbms/KSwgdGhpcyBv
bmUgaW4gcGFydGljdWxhciBzdGVtcyBpbiBwYXJ0IGZyb20gdGhlIGRlc2lyZSB0byBrZWVwIHRo
ZSBrZXkgbG9ja2VkIHVwIGJlaGluZCB0aGUgYnJvd3NlcuKAmXMgY3J5cHRvIEFQSSwgYW5kIG5v
dCBkaXJlY3RseSBleHBvc2VkIHRvIEphdmFTY3JpcHQuIEnigJltIHNvbWV3aGF0IHNrZXB0aWNh
bCBvZiB0aGUgdmFsdWUgb2YgdGhpcywgc2luY2UgYW4gYXR0YWNrZXIgY291bGQganVzdCBhcyBl
YXNpbHkgY2FsbCB0aGUgY3J5cHRvIEFQSSBkaXJlY3RseSwgYnV0IGlmIHdlIHNlZSB0aGlzIGFz
IGEgcmVxdWlyZW1lbnQsIHRoZW4gdGhhdCB3b3VsZCBzZWVtIHRvIHJlcXVpcmUgYXN5bW1ldHJp
YyBjcnlwdG8uIEhvd2V2ZXIsIGFzIHlvdSBub3RlZCB0aGF0IHdvdWxkIG5vdCBydWxlIG91dCB0
aGUgdXNlIG9mIHRoZSBtYWNhcm9vbiBwYXR0ZXJuLg0KDQo+IFRoZXJlIGFyZSBwbGVudHkgb2Yg
ZXhpc3RpbmcgaW50ZXJvcGVyYWJsZSBtYWNhcm9vbiBsaWJyYXJpZXPigKYNCuKAnFVzZSBvbmUg
b2YgdGhlc2UgZXhpc3RpbmcgbGlicmFyaWVz4oCdIGlzIG5vdCBhcHByb3ByaWF0ZSBhcyBub3Jt
YXRpdmUgdGV4dCBpbiBhIHNwZWNpZmljYXRpb24uIFRoYXQgZm9ybWF0IG5lZWRzIHRvIGJlIGV4
cGxpY2l0bHkgZGVmaW5lZC4gQ2F2ZWF0IHR5cGVzIChlLmcuLCBleHBpcnksIHNvdXJjZSBJUCwg
Y2xpZW50IFRMUyBjZXJ0aWZpY2F0ZSwgZXRjLikgbmVlZCB0byBiZSBkZWZpbmVkLCBwcm9iYWJs
eSB3aXRoIGFuIElBTkEgcmVnaXN0cnkuIFByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zIG5lZWQgdG8g
YmUgd3JpdHRlbiAoZS5nLiwgd2hhdCBoYXBwZW5zIHdoZW4gY2F2ZWF0cyBjb25mbGljdD8pLiBT
ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBhcm91bmQgdGhpcmQtcGFydHkgY2F2ZWF0cyBuZWVkIHRv
IGJlIHdyaXR0ZW4uDQoNCj4gSE1BQy1TSEEyNTYgaXMgdmVyeSB3aWRlbHkgaW1wbGVtZW50ZWQg
KGFuZCB1c3VhbGx5IHNlY3VyZWx5KS4gVGhhdOKAmXMgYWxsIHlvdSBuZWVkLg0KVGhhdOKAmXMg
d2hhdCBwZW9wbGUgc2FpZCBhYm91dCBTSEEtMS4gQ3J5cHRvZ3JhcGhpYyBhZ2lsaXR5IGlzIGEg
ZmVhdHVyZSwgbm90IGEgYnVnLg0KDQpBZ2FpbiwgSeKAmW0gbm90IHNheWluZyB3ZSBzaG91bGRu
4oCZdCB1c2UgbWFjYXJvb25zLCBidXQgSSB0aGluayB5b3UgYXJlIHVuZGVyc2VsbGluZyB0aGUg
YW1vdW50IG9mIHdvcmsgcmVxdWlyZWQgYW5kIG92ZXJzZWxsaW5nIHRoZWlyIHZhbHVlLg0KDQri
gJMNCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCkFXUyBJZGVudGl0eQ0KDQoNCkZyb206IE5l
aWwgTWFkZGVuIDxuZWlsLm1hZGRlbkBmb3JnZXJvY2suY29tPg0KRGF0ZTogVHVlc2RheSwgTm92
ZW1iZXIgMjYsIDIwMTkgYXQgMTI6MDIgQU0NClRvOiAiUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVs
bGUiIDxyaWNoYW5uYUBhbWF6b24uY29tPg0KQ2M6IEJyaWFuIENhbXBiZWxsIDxiY2FtcGJlbGxA
cGluZ2lkZW50aXR5LmNvbT4sIG9hdXRoIDxvYXV0aEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBb
T0FVVEgtV0ddIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtZmV0dC1vYXV0aC1k
cG9wLTAzLnR4dA0KDQpPbiAyNiBOb3YgMjAxOSwgYXQgMDA6MTAsIFJpY2hhcmQgQmFja21hbiwg
QW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPiB3cm90ZToNCg0KPiBBIGNsaWVudCBjYW4g
cmVjZWl2ZSBhIG1hY2Fyb29uIGFuZCB1c2UgaXQgbGlrZSBhIHB1cmUgYmVhcmVyIHRva2VuIGlm
IHRoZXkgd2FudC4NCkluIHdoaWNoIGNhc2UgaXTigJlzIG5vdCBzZW5kZXIgY29uc3RyYWluZWQs
IGFuZCBubyBkaWZmZXJlbnQgdGhhbiBhbnkgb3RoZXIgc3ltbWV0cmljYWxseSBlbmNyeXB0ZWQg
b3IgSE1BQ+KAmWQgYmVhcmVyIHRva2VuLg0KDQpZZXMsIHRoYXTigJlzIHdoYXQgSSBzYWlkLiBC
dXQgaWYgdGhleSB3YW50IHRvIHRoZXkgY2FuIGF0dGFjaCBjb250ZXh0dWFsIGNhdmVhdHMuIEZv
ciBleGFtcGxlLCB0aGV5IGNhbiBhdHRhY2ggaHR1L2h0bS9qdGkgY2xhaW1zIGp1c3QgbGlrZSBp
biBEUG9QLiBPciB0aGV5IGNhbiBhdHRhY2ggYSBjYXZlYXQgdGhhdCBpcyBhIGhhc2ggb2YgdGhl
IG1lc3NhZ2UgYW5kIGhlYWRlcnMgYW5kIGdldCBzb21ldGhpbmcgZXF1aXZhbGVudCAoYWxtb3N0
IGlkZW50aWNhbCkgdG8gQVdTIEhNQUMgc2lnbmF0dXJlcy4NCg0KSW4geW91ciBwcmV2aW91cyBt
ZXNzYWdlIHlvdSBhcmd1ZWQgdGhhdCBtYWNhcm9vbnMgd2VyZSBqdXN0IFBvUCB0b2tlbnMgd2hl
cmUgdGhlIGtleSBpcyBpbmxpbmVkLg0KDQpNeSBwb3NpdGlvbiBpcyB0aGF0IHRoZXkgY2FuIGJl
IGVpdGhlci4NCg0KDQoNCj4gTWFueSBBU2VzIGlzc3VlIEhNQUMtc2lnbmVkIGFjY2VzcyB0b2tl
bnMgYWxyZWFkeSB3aXRob3V0IHRoZSBjbGllbnQgZG9pbmcgYW55IGtpbmQgb2YgcHJvb2Ygb2Yg
cG9zc2Vzc2lvbi4NCkFuZCBob3cgZG9lcyB0aGUgQVMgdmFsaWRhdGUgdGhvc2UgdG9rZW5zPyBC
eSBjaGVja2luZyB0aGF0IHRoZSBITUFDIHdhcyBnZW5lcmF0ZWQgdXNpbmcgYSBrZXkgdGhhdCB0
aGUgQVMgcG9zc2Vzc2VzIGFuZCB0cnVzdHMuDQoNClRoYXTigJlzIG5vdCBwcm9vZiBvZiBwb3Nz
ZXNzaW9uLCB0aGF04oCZcyBqdXN0IHZlcmlmeWluZyBhIE1BQy4gUG9QIHJlcXVpcmVzIHRoZSBv
dGhlciBwYXJ0eSAoY2xpZW50KSB0byBwcm92aWRlIGEgZnJlc2ggcHJvb2YgdGhhdCB0aGV5IGNv
bnRyb2wgYSBrZXkuIFRoZSBjbGllbnQgaXNu4oCZdCB1c2luZyBhbnkga2V5IGluIHRoaXMgY2Fz
ZS4NCg0KDQpJbiB0aGUgY2FzZSBvZiBtYWNhcm9vbnMsIHRoZSBBUyBjaGVja3MgdGhhdCB0aGUg
Y2hhaW5lZCBITUFDIHdhcyBnZW5lcmF0ZWQgZnJvbSBhIGtleSB0aGF0IHRoZSBBUyBpc3N1ZWQg
dG8gdGhlIGNsaWVudCAoaW4gdGhlIGZvcm0gb2YgdGhlIEhNQUMgb24gdGhlIG9yaWdpbmFsIG1h
Y2Fyb29uKS4NCg0KWWVzLiBZb3Ugc2VlIHRoZSBkaWZmZXJlbmNlIHRoZXJlLCByaWdodD8NCg0K
DQoNCj4gdGhlIGF0dGVudWF0aW9ucyAoY2F2ZWF0cykgYXJlIGF0dGFjaGVkIGRpcmVjdGx5IHRv
IHRoZSBhY2Nlc3MgdG9rZW4gYW5kIGFyZSB2ZXJpZmllZCBieSB0aGUgQVMuDQpUaGlzIGlzIG5v
dCB1bmlxdWUgdG8gbWFjYXJvb25zLiBBbiBSUyBjb3VsZCBqdXN0IGFzIGVhc2lseSBzZW5kIHRo
ZSBhY2Nlc3MgdG9rZW4gKyBEUG9QIHByb29mIHRvIHRoZSBBUyBmb3IgdmVyaWZpY2F0aW9uLg0K
DQpUaGF04oCZcyBub3QgZGlyZWN0bHkgYXR0YWNoZWQgdG8gdGhlIGFjY2VzcyB0b2tlbi4gVGhp
cyBtZWFucyB0aGF0IGV2ZXJ5IFJTIGhhcyB0byBrbm93IGFib3V0IERQb1AuDQoNCg0KDQo+IG1h
Y2Fyb29uIGNhdmVhdHMgY2FuIGJlIGxheWVyZWQuDQpBbGwgeW91ciBvdGhlciBleGFtcGxlcyBh
cmUganVzdCBleGFtcGxlcyBvZiB0aGlzLCB3aGljaCBpcyBub3QgYXQgYWxsIHVuaXF1ZSB0byBt
YWNhcm9vbnMuIFNpZ24oS2V5LCBUb2tlbiArIFNvbWV0aGluZykgaXMgbm90IGEgbmV3IGNvbmNl
cHQuIE1hY2Fyb29ucyBhcmUgYSBuaWNlIHBhdHRlcm4gZm9yIGRvaW5nIHRoaXMgcHJvdmlkZWQg
eW91IGNhbiBsaXZlIHdpdGggdGhlIGRlcGVuZGVuY3kgb24gSE1BQywgYnV0IHRoZXnigJlyZSBu
b3QgdGhlIG9ubHkgd2F5Lg0KDQpQbGVhc2UgZXhwbGFpbiBob3cgdG8gYWNoaWV2ZSB0aGUgZXhh
bXBsZXMgSSBnYXZlIG9mIGxheWVyZWQgYXR0ZW51YXRpb24gd2l0aG91dCB1c2luZyBtYWNhcm9v
bnMuDQoNCllvdSBlbGlkZWQgdGhvc2UgZXhhbXBsZXMsIHNvIGhlcmUgdGhleSBhcmUgYWdhaW46
DQoNCjEuIFRoZSBjbGllbnQgYWRkcyBjYXZlYXRzIChlZyBleHAgPSBub3crNXMpIHRvIGFuIGFj
Y2VzcyB0b2tlbiBhbmQgc2VuZHMgaXQgdG8gdGhlIFJTLiBUaGUgUlMgY3JlYXRlcyBmb3VyIGNv
cGllcyBvZiB0aGUgdG9rZW4gd2l0aCBkaWZmZXJlbnQgc2NvcGUgY29uc3RyYWludHMgYW5kIHNl
bmRzIHRoZW0gdG8gZm91ciBpbmRpdmlkdWFsIG1pY3Jvc2VydmljZXMuDQoNCjIuIEEgZ2F0ZXdh
eSBhZGRzIGFkZGl0aW9uYWwgY2F2ZWF0cyB0byBhY2Nlc3MgdG9rZW5zIGlzc3VlZCB0byBleHRl
cm5hbCBjbGllbnRzIChlZyBsaW1pdGluZyB0aGUgZXhwaXJ5IHRpbWUgb3Igc2NvcGUpLiBUaGVz
ZSBjYXZlYXRzIGFyZSBlbmZvcmNlZCBldmVuIGlmIHRoZSBjbGllbnRzIGRvbuKAmXQgZ28gdmlh
IHRoZSBnYXRld2F5IHdoZW4gdGFsa2luZyB0byBSU2VzLg0KDQozLiBUaGUgbVRMUy9Qb1AgdHJh
bnNmZXIgb2Ygb3duZXJzaGlwIHBhdHRlcm4gSSBkZXNjcmliZWQuDQoNCkJvbnVzIHBvaW50cyBm
b3IgZGVtb25zdHJhdGluZyB0aG9zZSB0aGluZ3Mgd2l0aG91dCB0b2tlbiBleGNoYW5nZSBhbmQg
d2l0aG91dCB0aGUgUlMgYmVpbmcgYWJsZSB0byBtYWtlIGFyYml0cmFyeSB0b2tlbiBmb3JnZXJp
ZXMuDQoNCg0KDQpJ4oCZbSBub3QgdHJ5aW5nIHRvIGtub2NrIG1hY2Fyb29ucyBoZXJlLiBJIGxl
Z2l0aW1hdGVseSB0aGluayB0aGV54oCZcmUgYSBuZWF0IHBhdHRlcm4uIEJ1dCB0aGV5IGFyZSBp
bmNvbXBhdGlibGUgd2l0aCBhIHN0YXRlZCByZXF1aXJlbWVudDxodHRwczovL3Rvb2xzLmlldGYu
b3JnL2h0bWwvZHJhZnQtZmV0dC1vYXV0aC1kcG9wLTAzI3NlY3Rpb24tNC4yPiBieSB0aGUgRFBv
UCBhdXRob3JzICh1c2UgYW4gYXN5bW1ldHJpYyBkaWdpdGFsIHNpZ25hdHVyZSBhbGdvcml0aG0p
LA0KDQpUaGF04oCZcyBub3QgYSByZXF1aXJlbWVudCwgaXTigJlzIGEgdGVjaG5vbG9neSBjaG9p
Y2UuDQoNCg0KcmVxdWlyZSB2YWxpZGF0aW9uIGF0IHRoZSBBUyBvciBkaXN0cmlidXRpb24gb2Yg
c3ltbWV0cmljIGtleXMgdG8gUlNlcyAobm90IG5lY2Vzc2FyaWx5IGEgcHJvYmxlbSBpZiB5b3Xi
gJlyZSBpc3N1aW5nIFJTLXNwZWNpZmljIHRva2VucykNCg0KVmFsaWRhdGlvbiBhdCB0aGUgQVMg
aXMgYW4gYWR2YW50YWdlIGluIG1vc3QgY2FzZXMuIFRoZSBBUyBpcyBtb3JlIGxpa2VseSB0byBn
ZXQgaXQgcmlnaHQgYW5kIHRoaXMgaXMgb2Z0ZW4gbW9yZSBzY2FsYWJsZSAtIGFuIFJTIGNhbiB0
eXBpY2FsbHkgc2VuZCBtYW55IG1vcmUgdG9rZW4gaW50cm9zcGVjdGlvbiByZXF1ZXN0cyBpbiBw
YXJhbGxlbCB0aGFuIHRoZXkgY2FuIHZhbGlkYXRlIHB1YmxpYyBrZXkgc2lnbmF0dXJlcyBiZWNh
dXNlIHRoZSBsYXR0ZXIgcmVxdWlyZSBob3QgQ1BVIHRpbWUuIEEgbmV0d29yayByb3VuZHRyaXAg
d2l0aGluIHRoZSBzYW1lIGRhdGFjZW50cmUgYWxzbyB0eXBpY2FsbHkgdGFrZXMgbGVzcyB0aW1l
IHRoYW4gdmFsaWRhdGluZyBhIHB1YmxpYyBrZXkgc2lnLiBWYWxpZGF0aW5nIGF0IHRoZSBBUyBp
cyBhbHNvIHRoZSBlYXNpZXN0IHdheSB0byBlbnN1cmUgdGltZWx5IHRva2VuIHJldm9jYXRpb24u
DQoNCkJ1dCB5b3UgZG9u4oCZdCAqbmVlZCogdG8gdXNlIHB1cmVseSBzeW1tZXRyaWMga2V5cyB3
aXRoIG1hY2Fyb29ucy4gSWYgdGhlIEFTIGtub3dzIHRoZSBSUyhlcykgdGhlbiBpdCBjYW4gZW5j
cnlwdCBhIGZyZXNoIHN5bW1ldHJpYyBrZXkgdXNpbmcgYSBwdWJsaWMga2V5IHJlZ2lzdGVyZWQg
Zm9yIHRoYXQgUlMgYW5kIGFkZCBpdCB0byB0aGUgdG9rZW4gaWRlbnRpZmllci4NCg0KVGhlcmXi
gJlzIGV2ZW4gYSB2YXJpYW50IG9mIG1hY2Fyb29ucyB1c2luZyBwdWJsaWMga2V5IHNpZ25hdHVy
ZXMgKHNlZSByZWYgaW4gb3JpZ2luYWwgbWFjYXJvb24gcGFwZXIpLg0KDQoNCiwgcmVxdWlyZSBh
ZGRpdGlvbmFsIG5vbi10cml2aWFsIHdvcmsgdG8gdXNlIChzaW5jZSB0aGV54oCZcmUgYSBwYXR0
ZXJuLCBub3QgYSBmb3JtYXQpLCBhbmQgcmVxdWlyZSBkZXZlbG9wZXJzIHRvIGxlYXJuIGEgbmV3
IHRva2VuIGZvcm1hdC4NCg0KQXMgSSBhcmd1ZWQsIHRoaXMgaXMgaW5jcmVtZW50YWwuIFRoZSBB
UyBjYW4gc3RhcnQgaXNzdWluZyBtYWNhcm9vbnMgd2l0aG91dCBlaXRoZXIgY2xpZW50cyBvciBS
UyBiZWluZyBhd2FyZSAoc28gbG9uZyBhcyB0aGUgUlNlcyBhcmUgZG9pbmcgdG9rZW4gaW50cm9z
cGVjdGlvbiBhbHJlYWR5KS4gV2hlbiB0aGUgY2xpZW50IHdhbnRzIHRvIHN0YXJ0IHRha2luZyBh
ZHZhbnRhZ2Ugb2YgbWFjYXJvb25zIHRoZXkganVzdCB1c2Ugb25lIG9mIHRoZSBtYW55IGV4aXN0
aW5nIG1hY2Fyb29uIGxpYnJhcmllcyAobGlibWFjYXJvb25zLCBqbWFjYXJvb25zLCBldGMpIHRv
IGFwcGVuZCBjYXZlYXRzLiBUaGUgUlMgc3RpbGwgZG9lc27igJl0IG5lZWQgdG8gZG8gYW55dGhp
bmcuDQoNCg0KSWYgeW91IHdhbnQgRFBvUCB0byB1c2UgbWFjYXJvb25zLCB5b3UgbmVlZCB0byBt
YWtlIHRoZSBhcmd1bWVudCB0aGF0Og0KDQogIDEuICBUaGUgYXN5bW1ldHJpYyBkaWdpdGFsIHNp
Z25hdHVyZSBhbGdvcml0aG0gcmVxdWlyZW1lbnQgaXMgdW5uZWNlc3NhcnkuDQoNCknigJl2ZSBh
cmd1ZWQgdGhhdCBtdWx0aXBsZSB0aW1lcyBpbiB0aGlzIHRocmVhZC4NCg0KDQoNCiAgMS4NCiAg
Mi4gIERQb1Agc2hvdWxkIG9ubHkgYWRkcmVzcyB1c2UgY2FzZXMgd2hlcmUgY2VudHJhbGl6ZWQg
dmFsaWRhdGlvbiBhdCB0aGUgQVMgaXMgdmlhYmxlLCBvciB3aGVyZSBSU2VzIGNhbiBiZSB0cnVz
dGVkIHdpdGggc3ltbWV0cmljIGtleXMuDQoNClNlZSBhYm92ZS4NCg0KDQoNCiAgMS4NCiAgMi4g
IFRoZSB2YWx1ZSBwcm92aWRlZCBieSBtYWNhcm9vbnMgKGUuZy4sIHNlbmRlci1jb25zdHJhaW5l
ZCB0b2tlbnMgd2l0aG91dCBjbGllbnQga2V5IG5lZ290aWF0aW9uL3JlZ2lzdHJhdGlvbi9kaXN0
cmlidXRpb24pIGlzIHdvcnRoIHRoZSBjb3N0IG9mIGRlZmluaW5nIHRoZSBmb3JtYXQgb2YgYSBE
UG9QIG1hY2Fyb29uLCBzcGVjaWZpY2F0aW9uIG9mIGFsZ29yaXRobXMgdXNlZCwgZXRjLiwgYW5k
IHRoZSBjb2duaXRpdmUgbG9hZCBvbiBkZXZlbG9wZXJzIHdobyBub3cgaGF2ZSB0byBsZWFybiBh
IG5ldyB0b2tlbiBmb3JtYXQgKGluc3RlYWQgb2YgSldULCB3aGljaCB0aGV5IG1pZ2h0IGFscmVh
ZHkgd29yayB3aXRoKS4NCg0KVGhlcmUgYXJlIHBsZW50eSBvZiBleGlzdGluZyBpbnRlcm9wZXJh
YmxlIG1hY2Fyb29uIGxpYnJhcmllcyAtIHNlZSBsaW5rcyBmcm9tIGh0dHA6Ly9tYWNhcm9vbnMu
aW8gLiBITUFDLVNIQTI1NiBpcyB2ZXJ5IHdpZGVseSBpbXBsZW1lbnRlZCAoYW5kIHVzdWFsbHkg
c2VjdXJlbHkpLiBUaGF04oCZcyBhbGwgeW91IG5lZWQuDQoNCkFuZCBhcyBJIHNhaWQgYmVmb3Jl
LCBvbmUgb2YgdGhlIGtleSBhZHZhbnRhZ2VzIGlzIHRoYXQgY2xpZW50cyBhbmQgUlNlcyBvbmx5
IG5lZWQgdG8gY2FyZSBhYm91dCB0aGUgZm9ybWF0IHdoZW4gdGhleSB3YW50IHRvIHRha2UgYWR2
YW50YWdlIG9mIGl0LiBUaGV5IGNhbiBoYXBwaWx5IHRyZWF0IHRoZW0gYXMgcHVyZSBiZWFyZXIg
dG9rZW5zIHVudGlsIHRoZW4uDQoNCkNvbnRyYXN0IHdpdGggRFBvUCB3aGVyZSB0aGUgUlMgbmVl
ZHMgdG8gcG90ZW50aWFsbHkgc3VwcG9ydCAxMCBkaWZmZXJlbnQgcHVibGljIGtleSBKV1MgYWxn
b3JpdGhtcywgb3Igb3RoZXJ3aXNlIGhhdmUgc29tZSB3YXkgb2YgbmVnb3RpYXRpbmcgYWxnb3Jp
dGhtIHN1cHBvcnQgd2l0aCB0aGUgY2xpZW50IGFuZC9vciBBUy4gKEluIHdoaWNoIGNhc2UgdGhl
eSBjYW4gbmVnb3RpYXRlIGEga2V5KS4gQW5kIHRoZSBjbGllbnQsIEFTLCBhbmQgKmV2ZXJ5KiBS
UyBuZWVkcyB0byBiZSBzaW11bHRhbmVvdXNseSB1cGdyYWRlZCB0byBzdXBwb3J0IGl0LiAoT3Ro
ZXJ3aXNlIGEgcm9ndWUgUlMgY2FuIHJlcGxheSB0aGUgYWNjZXNzIHRva2VuIGF0IGFuIFJTIHRo
YXQgaGFzbuKAmXQgYmVlbiB1cGdyYWRlZCB5ZXQuIE5vdCBwb3NzaWJsZSB3aXRoIG1hY2Fyb29u
cykuDQoNCk5laWwNCg0KDQoNCg0K4oCTDQpBbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuDQpBV1Mg
SWRlbnRpdHkNCg0KDQpGcm9tOiBOZWlsIE1hZGRlbiA8bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNv
bT4NCkRhdGU6IFN1bmRheSwgTm92ZW1iZXIgMjQsIDIwMTkgYXQgMTI6NTYgQU0NClRvOiAiUmlj
aGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUiIDxyaWNoYW5uYUBhbWF6b24uY29tPg0KQ2M6IEJyaWFu
IENhbXBiZWxsIDxiY2FtcGJlbGxAcGluZ2lkZW50aXR5LmNvbT4sIG9hdXRoIDxvYXV0aEBpZXRm
Lm9yZz4NClN1YmplY3Q6IFJlOiBbT0FVVEgtV0ddIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBm
b3IgZHJhZnQtZmV0dC1vYXV0aC1kcG9wLTAzLnR4dA0KDQpPbiAyMiBOb3YgMjAxOSwgYXQgMTI6
MjYsIFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPiB3cm90
ZToNCj4gWWVzIG9mIGNvdXJzZS4gQnV0IHRoaXMgaXMgdGhlIEhNQUMgKnRhZyogbm90IHRoZSBv
cmlnaW5hbCBrZXkuDQpTdXJlLiBBbmQgaWYgdGhlIGNsaWVudCBhdHRlbnVhdGVzIHRoZSBtYWNh
cm9vbiwgaXQgaXMgdXNlZCBhcyBhIGtleSB0aGF0IHRoZSBjbGllbnQgcHJvdmVzIHBvc3Nlc3Np
b24gb2YgYnkgcHJlc2VudGluZyB0aGUgY2hhaW5lZCBITUFDLiBDbGllbnRzIGRvaW5nIERQb1Ag
YXJlbuKAmXQgcHJvdmluZyBwb3NzZXNzaW9uIG9mIHRoZSDigJxvcmlnaW5hbCBrZXnigJ0gKGku
ZS4sIGEga2V5IHVzZWQgdG8gZ2VuZXJhdGUgdGhlIGFjY2VzcyB0b2tlbikgZWl0aGVyLg0KQSB3
YXkgdG8gdGhpbmsgb2YgdGhpcyBpcyB0aGF0IG1hY2Fyb29ucyBicmlkZ2UgdGhlIGdhcCBiZXR3
ZWVuIGJlYXJlciB0b2tlbnMgYW5kIHByb29mIG9mIHBvc3Nlc3Npb24gdG9rZW5zLiBBIGNsaWVu
dCBjYW4gcmVjZWl2ZSBhIG1hY2Fyb29uIGFuZCB1c2UgaXQgbGlrZSBhIHB1cmUgYmVhcmVyIHRv
a2VuIGlmIHRoZXkgd2FudC4gT24gdGhlIG90aGVyIGhhbmQgdGhleSBjYW4gYXBwZW5kIGNvbnRl
eHR1YWwgY2F2ZWF0cyB0aGF0IHRpZ2h0bHkgY29uc3RyYWluIGEgdG9rZW4gYXQgdGhlIHBvaW50
IG9mIHVzZSwgbGlrZSBhIFBvUCB0b2tlbi4gWW91IGNhbiBldmVuIGRvIGEgZnVsbCBjaGFsbGVu
Z2UtcmVzcG9uc2UgcHJvdG9jb2wgd2hlcmUgdGhlIFJTIHNlbmRzIGEgY2hhbGxlbmdlIGFuZCB0
aGUgY2xpZW50IGFwcGVuZHMgaXQgYXMgYSBjYXZlYXQuDQoNCj4gV2VsbCwgeW91IGRvbuKAmXQg
aGF2ZSB0byByZXR1cm4gYSBrZXkgZnJvbSB0aGUgdG9rZW4gZW5kcG9pbnQgZm9yIGEgc3RhcnQu
DQpZZXMsIHRoYXTigJlzIHdoYXQgSSBtZWFudCBieSBzYXlpbmcgdGhhdCBpdCBlbGltaW5hdGVz
IGtleSBuZWdvdGlhdGlvbi4gVGhvdWdoIEkgc3VwcG9zZSBpdOKAmXMgbW9yZSBjb3JyZWN0IHRv
IHNheSB0aGF0IGl0IGlubGluZXMgaXQuIFRoZSBBUyBzdGlsbCBwcm92aWRlcyBhIGtleSwgaXQg
anVzdCBoYXBwZW5zIHRvIGJlIHBhcnQgb2YgdGhlIGFjY2VzcyB0b2tlbi4NCldoaWNoIGhlbHBz
IGEgbG90IHdpdGggYmFja3dhcmRzIGNvbXBhdC4NCk1hY2Fyb29ucyBhcmUgYW4gaW50ZXJlc3Rp
bmcgcGF0dGVybiwgYnV0IG5vdCBiZWNhdXNlIHRoZXnigJlyZSBub3QgZG9pbmcgUG9QLiBQcm9v
ZiBvZiBwb3NzZXNzaW9uIGlzIHByZXR0eSBjb3JlIHRvIHRoZSB3aG9sZSBpZGVhIG9mIGRpZ2l0
YWwgc2lnbmF0dXJlcyBhbmQgSE1BQ3MuDQpJIHdvdWxkIGFyZ3VlIHRoYXQgdGhpcmQgcGFydHkg
dmVyaWZpYWJpbGl0eSBhbmQgbm9uLXJlcHVkaWF0aW9uIGFyZSBhbHNvIGNvcmUgdG8gZGlnaXRh
bCBzaWduYXR1cmVzLCBidXQgYXJlbuKAmXQgcmVxdWlyZWQgb3IgdXNlZCBieSBEUG9QIChhbmQg
YWN0dWFsbHkgY2F1c2UgcHJvYmxlbXMpLg0KDQpJIGFsc28gZG9u4oCZdCB0aGluayBQb1AgaXMg
Y29yZSB0byBITUFDLiBNYW55IEFTZXMgaXNzdWUgSE1BQy1zaWduZWQgYWNjZXNzIHRva2VucyBh
bHJlYWR5IHdpdGhvdXQgdGhlIGNsaWVudCBkb2luZyBhbnkga2luZCBvZiBwcm9vZiBvZiBwb3Nz
ZXNzaW9uLiBUaGV5IGFyZSBhIGNvbnZlbmllbnQgd2F5IG9mIG1pbnRpbmcgYmVhcmVyIHRva2Vu
cy4NCldoYXQgbWFrZXMgdGhlbSBpbnRlcmVzdGluZyBpcyB0aGUgd2F5IHRoZXkgaW5saW5lIGtl
eSBkaXN0cmlidXRpb24uIFdoZXRoZXIgb3Igbm90IHRoZXnigJlyZSBhcHBsaWNhYmxlIHRvIERQ
b1AgZGVwZW5kcywgdWx0aW1hdGVseSwgb24gdGhlIHVzZSBjYXNlcyBEUG9QIGlzIHRhcmdldGlu
ZyBhbmQgdGhlIHRocmVhdHMgaXQgaXMgdHJ5aW5nIHRvIG1pdGlnYXRlLg0KVGhlcmUgYXJlIG1h
bnkgbW9yZSBpbnRlcmVzdGluZyB0aGluZ3MgdGhhbiB0aGUga2V5IGJlaW5nIGlubGluZSBmb3Ig
bWFjYXJvb25zLiBGb3IgZXhhbXBsZToNCg0KLSB0aGUgYXR0ZW51YXRpb25zIChjYXZlYXRzKSBh
cmUgYXR0YWNoZWQgZGlyZWN0bHkgdG8gdGhlIGFjY2VzcyB0b2tlbiBhbmQgYXJlIHZlcmlmaWVk
IGJ5IHRoZSBBUy4gQ29udHJhc3QgdGhpcyB0byBEUG9QIHdoZXJlIGV2ZXJ5IFJTIGhhcyB0byBj
b3JyZWN0bHkgdmFsaWRhdGUgdGhlIHByb29mIHRva2VuIC0gaWYgYW55IGRvbuKAmXQgdGhlbiB0
aGUgc2VjdXJpdHkgaXMgc2lnbmlmaWNhbnRseSByZWR1Y2VkLiBUaGUgQVMgaXMgcmVzcG9uc2li
bGUgZm9yIGFsbCBzZWN1cml0eS1jcml0aWNhbCBjaGVja3Mgd2l0aCBtYWNhcm9vbnMuDQoNCi0g
bWFjYXJvb24gY2F2ZWF0cyBjYW4gYmUgbGF5ZXJlZC4gVGhlIGluaXRpYWwgY2xpZW50IGNhbiBh
ZGQgc29tZSByZXN0cmljdGlvbnMgYW5kIHRoZW4gcGFzcyB0aGUgdG9rZW4gdG8gYW4gUlMuIFRo
YXQgUlMgY2FuIHRoZW4gYWRkIGl0cyBvd24gcmVzdHJpY3Rpb25zIHdoZW4gcGFzc2luZyB0aGUg
dG9rZW4gdG8gYmFja2VuZCBzZXJ2aWNlcy4gVGhpcyBpcyBhIGJpZyBkZWFsIGZvciBtaWNyb3Nl
cnZpY2UgYXJjaGl0ZWN0dXJlcy4NCg0KLSB5b3UgY2FuIGFkZCBjYXZlYXRzIGF0IGEgZ2F0ZXdh
eSBvciBwcm94eSBhbmQga25vdyB0aGVzZSB3aWxsIGJlIGVuZm9yY2VkIHdpdGhvdXQgaGF2aW5n
IHRvIGluc3BlY3QgaW5jb21pbmcgdHJhZmZpYy4NCg0KRXZlbiB3aGVuIHVzZWQgaW4gY29tYmlu
YXRpb24gd2l0aCBQb1AsIG1hY2Fyb29ucyBhZGQgdW5pcXVlIGNhcGFiaWxpdGllcy4gRm9yIGV4
YW1wbGUsIGEgY2xpZW50IGNhbiByZXRyaWV2ZSBhIHBsYWluIGJlYXJlciB0b2tlbiBmcm9tIHRo
ZSBBUyBhbmQgdGhlbiBhZnRlci10aGUtZmFjdCBiaW5kIGl0IHRvIGl0cyBUTFMgY2xpZW50IGNl
cnRpZmljYXRlIGJ5IGFwcGVuZGluZyBhIHg1dCNTMjU2IGNhdmVhdCBhbmQgdXNlIHRoYXQgbmV3
IGFjY2VzcyB0b2tlbiBmb3IgYWxsIEFQSSBjYWxscy4gQnV0IHRoYXQgY2xpZW50IHN0aWxsIGhh
cyB0aGUgb3JpZ2luYWwgYWNjZXNzIHRva2VuIHNvIHRoZXkgY2FuIGdldCB0aGUgY2VydGlmaWNh
dGUgZm9yIGEgZGlmZmVyZW50IGNsaWVudCAoZWcgYW5vdGhlciBtaWNyb3NlcnZpY2UpIGFuZCBj
cmVhdGUgYSBuZXcgY29weSBvZiB0aGUgYWNjZXNzIHRva2VuIGJvdW5kIHRvIHRoYXQgY2xpZW50
4oCZcyBjZXJ0aWZpY2F0ZS4gSXQgY2FuIHRoZW4gc2FmZWx5IHNlbmQgdGhpcyBhY2Nlc3MgdG9r
ZW4gdG8gdGhlIG90aGVyIGNsaWVudCwgZXZlbiBvdmVyIGEgY29tcGxldGVseSBpbnNlY3VyZSBj
b25uZWN0aW9uLiBJdCBjYW4gZG8gdGhpcyBmb3IgZXZlcnkgbWljcm9zZXJ2aWNlIGl0IG5lZWRz
IHRvIHRhbGsgdG8sIGVmZmVjdGl2ZWx5IHByb3ZpZGluZyB0cmFuc2ZlciBvZiBvd25lcnNoaXAg
Zm9yIFBvUCB0b2tlbnMgd2l0aG91dCBuZWVkaW5nIHRvIGNhbGwgYSBjZW50cmFsIHRva2VuIGV4
Y2hhbmdlIHNlcnZpY2UuDQoNCkFsbCB0aGlzIGFuZCBJIGhhdmVu4oCZdCBldmVuIGJlZ3VuIHRh
bGtpbmcgYWJvdXQgM3JkIHBhcnR5IGNhdmVhdHMuDQoNClNvIHRoZSByZWFsbHkgaW50ZXJlc3Rp
bmcgdGhpbmcgYWJvdXQgbWFjYXJvb25zIGlzIHRoYXQgdGhleSBlbmFibGUgYWxsIGtpbmRzIG9m
IG5ldyBhdXRob3JpemF0aW9uIHBhdHRlcm5zIHRvIGJlIGJ1aWx0IHdpdGhvdXQgcmVxdWlyaW5n
IGEgbmV3IHNwZWMgZm9yIGVhY2ggb25lLg0KDQpOZWlsDQoNCg0KDQpGcm9tOiBOZWlsIE1hZGRl
biA8bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNvbT4NCkRhdGU6IEZyaWRheSwgTm92ZW1iZXIgMjIs
IDIwMTkgYXQgMzowOSBQTQ0KVG86ICJSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSIgPHJpY2hh
bm5hQGFtYXpvbi5jb20+DQpDYzogQnJpYW4gQ2FtcGJlbGwgPGJjYW1wYmVsbEBwaW5naWRlbnRp
dHkuY29tPiwgb2F1dGggPG9hdXRoQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtPQVVUSC1XR10g
TmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1mZXR0LW9hdXRoLWRwb3AtMDMudHh0
DQoNCk9uIDIyIE5vdiAyMDE5LCBhdCAwMTo0MiwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUg
PHJpY2hhbm5hQGFtYXpvbi5jb20+IHdyb3RlOg0KDQpNYWNhcm9vbnMgYXJlIGJ1aWx0IG9uIHBy
b29mIG9mIHBvc3Nlc3Npb24uIEluIG9yZGVyIHRvIGFkZCBhIGNhdmVhdCB0byBhIG1hY2Fyb29u
LCB0aGUgc2VuZGVyIGhhcyB0byBoYXZlIHRoZSBITUFDIG9mIHRoZSBtYWNhcm9vbiB3aXRob3V0
IHRoZWlyIGNhdmVhdC4NCg0KWWVzIG9mIGNvdXJzZS4gQnV0IHRoaXMgaXMgdGhlIEhNQUMgKnRh
Zyogbm90IHRoZSBvcmlnaW5hbCBrZXkuIFRoZXkgY2Fu4oCZdCBjaGFuZ2UgYW55dGhpbmcgdGhl
IEFTIG9yaWdpbmFsbHkgc2lnbmVkLg0KDQoNCg0KDQpUaGUgZGlzdGluY3RpdmUgcHJvcGVydHkg
b2YgbWFjYXJvb25zIGFzIEkgc2VlIGl0IGlzIHRoYXQgdGhleSBlbGltaW5hdGUgdGhlIG5lZWQg
Zm9yIGtleSBuZWdvdGlhdGlvbiB3aXRoIHRoZSBiZWFyZXIuIEhvdyBtdWNoIHZhbHVlIHRoaXMg
aGFzIG92ZXIgdGhlIEFTIGp1c3QgcmV0dXJuaW5nIGEgc3ltbWV0cmljIGtleSBhbG9uZ3NpZGUg
dGhlIGFjY2VzcyB0b2tlbiBpbiB0aGUgdG9rZW4gcmVxdWVzdCwgSeKAmW0gbm90IHN1cmUuDQoN
CldlbGwsIHlvdSBkb27igJl0IGhhdmUgdG8gcmV0dXJuIGEga2V5IGZyb20gdGhlIHRva2VuIGVu
ZHBvaW50IGZvciBhIHN0YXJ0LiBUaGUgY2xpZW50IGRvZXNu4oCZdCBuZWVkIHRvIGNyZWF0ZSBh
bmQgc2VuZCBhbnkgYWRkaXRpb25hbCB0b2tlbi4gVGhlIHdob2xlIHRoaW5nIHdvcmtzIHdpdGgg
ZXhpc3Rpbmcgc3RhbmRhcmRzIGFuZCB0ZWNobm9sb2dpZXMgYW5kIGNhbiBiZSBpbmNyZW1lbnRh
bGx5IGFkb3B0ZWQgYXMgcmVxdWlyZWQuIElmIFJTZXMgZG8gdG9rZW4gaW50cm9zcGVjdGlvbiBh
bHJlYWR5IHRoZW4gdGhleSBuZWVkIHplcm8gY2hhbmdlcyB0byBzdXBwb3J0IHRoaXMuDQoNCg0K
DQoNClRoZXJlIGFyZSBrZXkgZGlzdHJpYnV0aW9uIGNoYWxsZW5nZXMgd2l0aCB0aGF0IGlmIHlv
dSBhcmUgZG9pbmcgdmFsaWRhdGlvbiBhdCB0aGUgUlMsIGJ1dCB2YWxpZGF0aW9uIGF0IHRoZSBS
UyB1c2luZyBlaXRoZXIgYXBwcm9hY2ggbWVhbnMgeW914oCZdmUgbG9zdCBwcm90ZWN0aW9uIGFn
YWluc3QgcmVwbGF5IGJ5IHRoZSBSUy4gVGhpcyBicmluZ3MgdXMgYmFjayB0byBhIGNvcmUgcXVl
c3Rpb246IHdoYXQgdGhyZWF0cyBhcmUgaW4gc2NvcGUgZm9yIERQb1AsIGFuZCBpbiB3aGF0IGNv
bnRleHRzPw0KDQpBZ3JlZWQsIGJ1dCB2YWxpZGF0aW9uIGF0IHRoZSBSUyBpcyBwcmVtYXR1cmUg
b3B0aW1pc2F0aW9uIGluIG1hbnkgY2FzZXMuIEFuZCBpZiB5b3UgZG8gbmVlZCBwcm90ZWN0aW9u
IGFnYWluc3QgdGhhdCB0aGUgY2xpZW50IGNhbiBldmVuIGFwcGVuZCBhIGNvbmZpcm1hdGlvbiBr
ZXkgYXMgYSBjYXZlYXQgYW5kIHJldHJvc3BlY3RpdmVseSB1cGdyYWRlIGEgYmVhcmVyIHRva2Vu
IHRvIGEgcG9wIHRva2VuLiBUaGV5IGNhbiBldmVuIGRvIHRyYW5zZmVyIG9mIG93bmVyc2hpcCBi
eSBjcmVhdGluZyBjb3BpZXMgb2YgdGhlIG9yaWdpbmFsIHRva2VuIGJvdW5kIHRvIG90aGVyIGNl
cnRpZmljYXRlcy9wdWJsaWMga2V5cy4NCg0KTmVpbA0KDQoNCg0KDQoNCg0K4oCTDQpBbm5hYmVs
bGUgUmljaGFyZCBCYWNrbWFuDQpBV1MgSWRlbnRpdHkNCg0KDQpGcm9tOiBPQXV0aCA8b2F1dGgt
Ym91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIE5laWwgTWFkZGVuIDxuZWlsLm1hZGRlbkBm
b3JnZXJvY2suY29tPg0KRGF0ZTogRnJpZGF5LCBOb3ZlbWJlciAyMiwgMjAxOSBhdCA0OjQwIEFN
DQpUbzogQnJpYW4gQ2FtcGJlbGwgPGJjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29tPg0KQ2M6IG9h
dXRoIDxvYXV0aEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbT0FVVEgtV0ddIE5ldyBWZXJzaW9u
IE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtZmV0dC1vYXV0aC1kcG9wLTAzLnR4dA0KDQpBdCB0aGUg
ZW5kIG9mIG15IHByZXZpb3VzIGVtYWlsIEkgbWVudGlvbmVkIHRoYXQgeW91IGNhbiBhY2hpZXZl
IHNvbWUgb2YgdGhlIHNhbWUgYWltcyBhcyBEUG9QIHdpdGhvdXQgbmVlZGluZyBhIFBvUCBtZWNo
YW5pc20gYXQgYWxsLiBUaGlzIGVtYWlsIGlzIHRoYXQgZm9sbG93LXVwLg0KDQpPQXV0aCBpcyBh
Z25vc3RpYyBhYm91dCB0aGUgZm9ybWF0IG9mIGFjY2VzcyB0b2tlbnMgYW5kIG1hbnkgdmVuZG9y
cyBzdXBwb3J0IGVpdGhlciByYW5kb20gc3RyaW5nIGRhdGFiYXNlIHRva2VucyBvciBKV1RzLiBC
dXQgdGhlcmUgYXJlIG90aGVyIGNob2ljZXMgZm9yIGFjY2VzcyB0b2tlbiBmb3JtYXQsIHNvbWUg
b2Ygd2hpY2ggaGF2ZSBtb3JlIGludGVyZXN0aW5nIHByb3BlcnRpZXMuIEluIHBhcnRpY3VsYXIs
IEdvb2dsZSBwcm9wb3NlZCBNYWNhcm9vbnMgYSBmZXcgeWVhcnMgYWdvIGFzIGEgImJldHRlciBj
b29raWUiIFsxXSBhbmQgSSB0aGluayB0aGV5IHN5c3RlbWF0aWNhbGx5IGFkZHJlc3MgbWFueSBv
ZiB0aGVzZSBpc3N1ZXMgd2hlbiB1c2VkIGFzIGFuIGFjY2VzcyB0b2tlbiBmb3JtYXQuDQoNCkZv
ciB0aG9zZSB3aG8gYXJlbid0IGZhbWlsaWFyIHdpdGggdGhlbSwgTWFjYXJvb25zIGFyZSBhIGJp
dCBsaWtlIGEgSFMyNTYgSldULiBUaGV5IGhhdmUgYSBsb2NhdGlvbiAoYSBiaXQgbGlrZSB0aGUg
YXVkaWVuY2UgaW4gYSBKV1QpIGFuZCBhbiBpZGVudGlmaWVyIChhbiBhcmJpdHJhcnkgc3RyaW5n
KSBhbmQgdGhlbiBhcmUgc2lnbmVkIHdpdGggSE1BQy1TSEEyNTYgdXNpbmcgYSBzZWNyZXQga2V5
LiAoVGhlcmUncyBubyBjbGFpbXMgc2V0IG9yIGhlYWRlcnMgLSB0aGV5IGFyZSB2ZXJ5IG1pbmlt
YWwpLiBJbiB0aGlzIGNhc2UgdGhlIHNlY3JldCBrZXkgd291bGQgYmUgb3duZWQgYnkgdGhlIEFT
IGFuZCB1c2VkIHRvIHNpZ24gbWFjYXJvb24tYmFzZWQgYWNjZXNzIHRva2Vucy4gVmFsaWRhdGlu
ZyB0aGUgdG9rZW4gd291bGQgYmUgZG9uZSB2aWEgdG9rZW4gaW50cm9zcGVjdGlvbiBhdCB0aGUg
QVMuDQoNClRoZSBjbGV2ZXIgYml0IGlzIHRoYXQgYW55Ym9keSBhdCBhbGwgY2FuIGFwcGVuZCAi
Y2F2ZWF0cyIgdG8gYSBtYWNhcm9vbiBhdCBhbnkgdGltZSwgYnV0IG5vYm9keSBjYW4gcmVtb3Zl
IG9uZSBvbmNlIGFkZGVkLiBDYXZlYXRzIGFyZSByZXN0cmljdGlvbnMgb24gdGhlIHVzZSBvZiBh
IHRva2VuIC0gdGhleSBvbmx5IGV2ZXIgcmVkdWNlIHRoZSBhdXRob3JpdHkgZ3JhbnRlZCBieSB0
aGUgdG9rZW4sIG5ldmVyIGV4cGFuZCBpdC4gVGhlIEFTIGNhbiB2YWxpZGF0ZSB0aGUgdG9rZW4g
YW5kIGFsbCB0aGUgY2F2ZWF0cyB3aXRoIGl0cyBzZWNyZXQga2V5LiBTbywgZm9yIGV4YW1wbGUs
IGlmIGFuIGFjY2VzcyB0b2tlbiB3YXMgYSBtYWNhcm9vbiB0aGVuIHRoZSBjbGllbnQgY291bGQg
YXBwZW5kIGEgY2F2ZWF0IHRvIHJlZHVjZSB0aGUgc2NvcGUsIG9yIHJlZHVjZSB0aGUgZXhwaXJ5
IHRpbWUsIG9yIHJlZHVjZSB0aGUgYXVkaWVuY2UsIGFuZCBzbyBvbi4NCg0KVGhlIHJlYWxseSBj
bGV2ZXIgYml0IGlzIHRoYXQgdGhlIGNsaWVudCBjYW4ga2VlcCBhIGNvcHkgb2YgdGhlIG9yaWdp
bmFsIHRva2VuIGFuZCBjcmVhdGUgcmVzdHJpY3RlZCB2ZXJzaW9ucyB0byBzZW5kIHRvIGRpZmZl
cmVudCByZXNvdXJjZSBzZXJ2ZXJzLiBCZWNhdXNlIEhNQUMgaXMgdmVyeSBjaGVhcCwgdGhlIGNs
aWVudCBjYW4gZXZlbiBkbyB0aGlzIGJlZm9yZSBlYWNoIGFuZCBldmVyeSByZXF1ZXN0LiAoVGhp
cyBpcyB3aGF0IHRoZSBvcmlnaW5hbCBwYXBlciByZWZlcnMgdG8gYXMgImNvbnRleHR1YWwgY2F2
ZWF0cyIpLiBUaGlzIG1lYW5zIHRoYXQgYSBjbGllbnQgY2FuIGJlIGlzc3VlZCBhIHNpbmdsZSBh
Y2Nlc3MgdG9rZW4gZnJvbSB0aGUgQVMgd2l0aCBicm9hZCBzY29wZSBhbmQgYXBwbGljYWJsZSB0
byBtYW55IGRpZmZlcmVudCBSUyBhbmQgY2FuIHRoZW4gbG9jYWxseSBjcmVhdGUgcmVzdHJpY3Rl
ZCBjb3BpZXMgZm9yIGVhY2ggaW5kaXZpZHVhbCBSUy4NCg0KVGhlIHJlbGV2YW5jZSB0byBEUG9Q
IGlzIHRoYXQgdGhlIGNsaWVudCBjb3VsZCBldmVuIGFwcGVuZCBjYXZlYXRzIGVxdWl2YWxlbnQg
dG8gImh0bSIgYW5kICJodHUiIGp1c3QgYmVmb3JlIHNlbmRpbmcgdGhlIGFjY2VzcyB0b2tlbiB0
byB0aGUgUlMsIGFuZCBtYXliZSBhZGQgYW4gImV4cCIgZm9yIDUgc2Vjb25kcyBpbiB0aGUgZnV0
dXJlLCByZWR1Y2UgdGhlIHNjb3BlLCBhbmQgc28gb246DQoNCiAgbmV3QWNjZXNzVG9rZW4gPSBh
Y2Nlc3NUb2tlbi53aXRoQ2F2ZWF0cyh7DQogICAgZXhwOiBub3cgKyA1c2Vjb25kcywNCiAgICBz
Y29wZTogImEgYiIsDQogICAgaHRtOiAiUE9TVCIsDQogICAgLi4uLg0KICB9KTsNCiAgaHR0cENs
aWVudC5wb3N0KGRhdGEsIEF1dGhvcml6YXRpb246IEJlYXJlciBuZXdBY2Nlc3NUb2tlbik7DQoN
Ck5vdGUgdGhhdCB0aGUgY2xpZW50IGRvZXNuJ3QgbmVlZCBhbnl0aGluZyBleHRyYSBoZXJlIC0g
bm8ga2V5cywgZXh0cmEgdG9rZW5zIGV0Yy4gVGhleSBqdXN0IGhhdmUgdGhlIGFjY2VzcyB0b2tl
biBhbmQgYSBtYWNhcm9vbiBsaWJyYXJ5Lg0KDQpUaGUgUlMgd2lsbCBzZWUgYW4gb3BhcXVlIGFj
Y2VzcyB0b2tlbiwgc2VuZCBpdCB0byB0aGUgQVMgZm9yIGludHJvc3BlY3Rpb24uIFRoZSBBUyBo
b3dldmVyLCB3aWxsIHNlZSBhbmQgdmFsaWRhdGUgdGhlIG5ldyBjYXZlYXRzIG9uIHRoZSB0b2tl
biBhbmQgcmV0dXJuIGFuIGludHJvc3BlY3Rpb24gcmVzcG9uc2Ugd2l0aCB0aGUgcmVzdHJpY3Rl
ZCBzY29wZSBhbmQgZXhwaXJ5IHRpbWUsIGFuZCByZXR1cm4gdGhlIGh0bS9odHUgcmVzdHJpY3Rp
b25zIHRoYXQgdGhlIFJTIGNhbiB0aGVuIGVuZm9yY2UuDQoNCkZvciBjbGllbnRzIHRoaXMgaXMg
dHJhbnNwYXJlbnQgdW50aWwgdGhleSB3YW50IHRvIHRha2UgYWR2YW50YWdlIG9mIGl0IGFuZCB0
aGVuIHRoZXkgY2FuIGp1c3QgdXNlIGFuIG9mZi10aGUtc2hlbGYgbWFjYXJvb24gbGlicmFyeS4g
Rm9yIHRoZSBSUyBpdCBpcyBhbHNvIGNvbXBsZXRlbHkgdHJhbnNwYXJlbnQuIEFsbCB0aGUgKHJl
bGF0aXZlbHkgc21hbGwpIGNvbXBsZXhpdHkgbGl2ZXMgaW4gdGhlIEFTLCB3aGljaCBqdXN0IGhh
cyB0byBiZSBhYmxlIHRvIHByb2R1Y2UgYW5kIHZlcmlmeSBtYWNhcm9vbnMgYW5kIHRha2UgY2F2
ZWF0cyBpbnRvIGFjY291bnQgd2hlbiBwZXJmb3JtaW5nIHRva2VuIGludHJvc3BlY3Rpb24gLSBl
LmcuIHRoZSByZXR1cm5lZCBzY29wZSBzaG91bGQgYmUgdGhlIGludGVyc2VjdGlvbiBvZiB0aGUg
b3JpZ2luYWwgdG9rZW4gc2NvcGUgYW5kIGFueSBzY29wZSBjYXZlYXRzLiBCdXQgSSBkb24ndCB0
aGluayB0aGlzIHdvdWxkIGJlIHRvbyBtdWNoIGVmZm9ydC4NCg0KWzFdOiBodHRwczovL2FpLmdv
b2dsZS9yZXNlYXJjaC9wdWJzL3B1YjQxODkyDQoNCi0tIE5laWwNCg0KDQoNCg0KDQpPbiAyMSBO
b3YgMjAxOSwgYXQgMDY6MjMsIEJyaWFuIENhbXBiZWxsIDxiY2FtcGJlbGxAcGluZ2lkZW50aXR5
LmNvbTxtYWlsdG86YmNhbXBiZWxsQHBpbmdpZGVudGl0eS5jb20+PiB3cm90ZToNCg0KWWVhaCwg
c3VnZ2VzdGlvbnMgYW5kL29yIGFuIE1USSBhYm91dCBhbGdvcml0aG0gc3VwcG9ydCB3b3VsZCBw
cm9iYWJseSBiZSB3b3J0aHdoaWxlLiBQZXJoYXBzIGFsc28gc29tZSBkZWZpbmVkIG1lYW5zIG9m
IHNpZ25hbGluZyB3aGVuIGFuIHVuc3VwcG9ydGVkIGFsZ29yaXRobSBpcyB1c2VkIGFsb25nIHdp
dGggYW55IG90aGVyIHJlYXNvbiBhIERQb1AgaXMgaW52YWxpZCBvciByZWplY3RlZC4NCg0KVGhl
cmUgYXJlIGEgbG90IG9mIHRyYWRlb2ZmcyBpbiB3aGF0IGNsYWltcyBhcmUgcmVxdWlyZWQgYW5k
IHdoYXQgcHJvdGVjdGlvbnMgYXJlIHByb3ZpZGVkIGV0Yy4gVGhlIGFpbSBvZiB3aGF0IHdhcyBj
aG9zZW4gd2FzIHRvIGRvIGp1c3QgZW5vdWdoIHRvIHByb3ZpZGUgc29tZSByZWFzb25hYmxlIHBy
b3RlY3Rpb25zIGFnYWluc3QgcmV1c2Ugb3IgdXNlIGluIGEgZGlmZmVyZW50IGNvbnRleHQgd2hp
bGUgYmVpbmcgc2ltcGxlIHRvIGltcGxlbWVudCBhbmQgZGVwbG95Lg0KDQoNCk9uIFdlZCwgTm92
IDIwLCAyMDE5IGF0IDY6MzQgQU0gTmVpbCBNYWRkZW4gPG5laWwubWFkZGVuQGZvcmdlcm9jay5j
b208bWFpbHRvOm5laWwubWFkZGVuQGZvcmdlcm9jay5jb20+PiB3cm90ZToNClRoYW5rcyBmb3Ig
dGhlIHJlcGx5LCBCcmlhbi4NCg0KQ29sbGVjdGluZyBteSB0aG91Z2h0cyB1cCBoZXJlIHJhdGhl
ciB0aGFuIHJlc3BvbmRpbmcgYmxvdyBieSBibG93Lg0KDQpQdWJsaWMga2V5IHNpZ25hdHVyZXMg
YXJlIHNpbXBsZXIgaW4gc29tZSByZXNwZWN0cywgbW9yZSBjb21wbGV4IGluIG90aGVycy4gVGhl
cmUgYXJlIGN1cnJlbnRseSAxMCBwdWJsaWMga2V5IEpXUyBzaWduYXR1cmUgc2NoZW1lcyBkZWZp
bmVkIChFUzI1Ni8zODQvNTEyLCBSUzI1Ni8zODQvNTEyLCBQUzI1Ni8zODQvNTEyLCBFZERTQSkg
LSBkb2VzIGFuIFJTIHBvdGVudGlhbGx5IGhhdmUgdG8gc3VwcG9ydCB0aGVtIGFsbD8gSWYgbm90
LCBob3cgZG8gdGhleSBuZWdvdGlhdGUgYWxnb3JpdGhtIHN1cHBvcnQgd2l0aCB0aGUgY2xpZW50
Pw0KDQpPbiB0aGUgb3RoZXIgaGFuZCwgdGhlIEVDREggc2NoZW1lIEkgcHJvcG9zZWQgY2FuIGJl
IGltcGxlbWVudGVkIGJ5IGFkYXB0aW5nIGFuIGV4aXN0aW5nIEVDREgtRVMgZW5jcnlwdGlvbiBz
dXBwb3J0IGluIGEgSldUIGxpYnJhcnkuIEZvciBleGFtcGxlLCBJIGRpc2NvdmVyZWQgd2hpbGUg
cGxheWluZyB3aXRoIHRoaXMgdGhhdCBvdXIgb3duIGludGVybmFsIGxpYnJhcnkgY2FuIGltcGxl
bWVudCB0aGUgZnVsbCBmbG93IEkgZGVzY3JpYmVkIGVudGlyZWx5IHZpYSB0aGUgZXhpc3Rpbmcg
cHVibGljIEFQSSBbMV0sIHNvIGl0J3Mgbm90IG5lY2Vzc2FyaWx5IGFzIGNvbXBsZXggYXMgaXQg
Zmlyc3QgbG9va3MuIEkgZXZlbiBrbm9ja2VkIHVwIGEgZnJvbS1zY3JhdGNoIGltcGxlbWVudGF0
aW9uIGluIFdlYkNyeXB0byAoSmF2YVNjcmlwdCkgd2l0aG91dCB0b28gbXVjaCBjb2RlIFsyXS4N
Cg0KQnV0IEkgYWRtaXQgdGhhdCB1c2luZyBhbiBleGlzdGluZyBKV1QgbGlicmFyeSB0byBzaWdu
IGEgSldUIHdpdGggYW4gZXhpc3RpbmcgYWxnb3JpdGhtIGlzIGV2ZW4gZWFzaWVyLCBhbmQgdGhh
dCBjb3VudHMgZm9yIGEgbG90LiBQZXJoYXBzIHdlIGNhbiBtYWtlIGNvbmNyZXRlIHN1Z2dlc3Rp
b25zL3JlcXVpcmVtZW50cyBhYm91dCBhbGdvcml0aG0gc3VwcG9ydD8gZS5nLiAiVGhlIFJTIE1V
U1Qgc3VwcG9ydCBSUzI1NiBhbmQgU0hPVUxEIHN1cHBvcnQgRWREU0EuIE90aGVyIGFsZ29yaXRo
bXMgTUFZIGJlIHN1cHBvcnRlZC4iDQoNCldpdGggcmVnYXJkcyB0byByZXBsYXkgcHJvdGVjdGlv
biwgSSB0aGluayB0aGVyZSBhcmUgYXQgbGVhc3QgdHdvIHJlYXNvbmFibGUgcG9zaXRpb25zOg0K
DQoxLiBXZSBhc3N1bWUgdGhhdCBUTFMgaXMgc2VjdXJlIGFuZCBkb24ndCB0cnkgdG8gZGVmZW5k
IGFnYWluc3QgYW55IGNvbXByb21pc2UgYXQgdGhhdCBsZXZlbC4gKENsZWFybHkgbm9uZSBvZiB0
aGUgVExTLWJhc2VkIFBvUCBtZWNoYW5pc21zIHN1cnZpdmUgaWYgVExTIGlzIGNvbXByb21pc2Vk
LCBieSBkZWZpbml0aW9uKS4gSW4gdGhpcyBjYXNlIHRoZSBtYWluIGF0dGFjayB0byBkZWZlbmQg
YWdhaW5zdCBpcyBhIG1hbGljaW91cyBSUyByZXBsYXlpbmcgdGhlIGFjY2VzcyB0b2tlbiBlbHNl
d2hlcmUuIFNpbXBseSBzaWduaW5nIHRoZSBvcmlnaW4gb2YgdGhlIFJTIHdvdWxkIGJlIGVub3Vn
aCB0byBwcmV2ZW50IHRoaXMgYXR0YWNrLCB3aGlsZSBsZXR0aW5nIHRoZSBjbGllbnQgcmV1c2Ug
dGhlIHNhbWUgSldUIGZvciBtYW55IHJlcXVlc3RzIChhbmQgdGhlIFJTIHRvIGNhY2hlIHRoZSBK
V1QgdmFsaWRhdGlvbikuIE5vbmUgb2YgImp0aSIsICJodHUiLCBvciAiaHRtIiBzZWVtIHJlbGV2
YW50IHRvIHRoaXMgbW9kZWwuDQoNCjIuIFdlIGRvbid0IGFzc3VtZSB0aGF0IFRMUyBpcyBzZWN1
cmUgKG9yIGl0J3Mgbm90IGZ1bGx5IGVuZC10by1lbmQpIGFuZCB0cnkgdG8gcHJvdmlkZSBzb21l
IGRlZmVuc2UgaW4gZGVwdGggYWdhaW5zdCBhIE1pdE0gYXR0YWNrZXIgcmVwbGF5aW5nIGEgdG9r
ZW4gYWdhaW5zdCB0aGUgc2FtZSBSUy4gVGhlcmUgaXMgYSBncmFkdWF0ZWQgc2VyaWVzIG9mIHN0
ZXBzIHlvdSBjYW4gdGFrZSBoZXJlLCBkZXBlbmRpbmcgb24gaG93IG11Y2ggeW91IHdhbnQgdG8g
cHJldmVudCB0aGlzOg0KICAgYS4gVGhlIERQb1AgdG9rZW4gY2FuIGJlIHJlcGxheWVkIGZvciBh
cmJpdHJhcnkgcmVxdWVzdHMgdG8gdGhlIHNhbWUgUlMgYnV0IGhhcyBhIHNob3J0IHRpbWUgbGlt
aXQgKGUuZy4sIGV4cCBjbGFpbSBvciBSUy1lbmZvcmNlZCBtYXggbGlmZXRpbWUgZnJvbSBpYXQp
DQogICBiLiBUaGUgRFBvUCB0b2tlbiBjYW4gYmUgcmVwbGF5ZWQgZm9yIHRoZSBzYW1lIHJlcXVl
c3QgKGh0dS9odG0gY2xhaW1zKQ0KICAgYy4gVGhlIERQb1AgdG9rZW4gY2FuJ3QgYmUgcmVwbGF5
ZWQgYXQgYWxsIC0gZWl0aGVyIGJlY2F1c2Ugb2YganRpIGJsYWNrbGlzdGluZyBvbiB0aGUgUlMg
b3IgYSBjaGFsbGVuZ2UtcmVzcG9uc2UgcHJvdG9jb2wgb24gZWFjaCByZXF1ZXN0Lg0KDQooVGhl
cmUgYXJlIGFsc28gdmFyaWFudHMgc3VjaCBhcyBpbmNsdWRpbmcgYSBoYXNoIG9mIHRoZSByZXF1
ZXN0IGJvZHkvaGVhZGVycywgb3IgZW5jb2RpbmcgYW4gRVRhZyBpbnRvIHRoZSBKV1QpLg0KDQpJ
IHRoaW5rIGVpdGhlciBhcmUgcmVhc29uYWJsZSBkZXNpZ24gZ29hbHMsIGJ1dCBhaW1pbmcgZm9y
IDIgYWRkcyBtb3JlIHZhbHVlLiBJIHRoaW5rIGFpbWluZyBmb3IgMmEgaXMgYSByZWFzb25hYmxl
IGRlZmF1bHQgYmFzZWxpbmUgdGhhdCBhbGxvd3MgdGhlIGNsaWVudCB0byByZXVzZSBhIERQb1Ag
dG9rZW4gZm9yIGEgZmV3IHJlcXVlc3RzLCByZWR1Y2luZyB0aGUgY29zdCBvZiB0aGUgc2lnbmF0
dXJlIChhbmQgdGhlIFJTIGNhbiBjYWNoZSB0aGUgdmFsaWRhdGVkIEpXVCkuIFN1cHBvcnQgZm9y
IDJiIG9yIDJjIGNhbiB0aGVuIGJlIGxpc3RlZCBhcyBvcHRpb25hbCBhZGRpdGlvbnMuDQoNClBT
IC0gMmEvMmIgY2FuIGJlIGFjaGlldmVkIHdpdGhvdXQgUG9QLiBJJ2xsIHNhdmUgdGhhdCBmb3Ig
YW5vdGhlciBlbWFpbCBpbiB0aGUgbmV4dCBmZXcgZGF5cyB0aG91Z2guDQoNClsxXTogaHR0cHM6
Ly9naXN0LmdpdGh1Yi5jb20vTmVpbE1hZGRlbi82ODVlYTY2ZmI3OWQzN2E1MGMyMzEwZjg1M2Jk
OTQ5Ng0KWzJdOiBodHRwczovL2dpc3QuZ2l0aHViLmNvbS9OZWlsTWFkZGVuLzcwZTFiMjMyYTNi
MjczZGUwMmVkNzMxZWIzNmVjNGE3DQoNCg0KLS0gTmVpbA0KDQoNCg0KDQoNCk9uIDE5IE5vdiAy
MDE5LCBhdCAwNzo0MywgQnJpYW4gQ2FtcGJlbGwgPGJjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29t
PG1haWx0bzpiY2FtcGJlbGxAcGluZ2lkZW50aXR5LmNvbT4+IHdyb3RlOg0KDQoNCk9uIFRodSwg
Tm92IDE0LCAyMDE5IGF0IDc6MjAgUE0gTmVpbCBNYWRkZW4gPG5laWwubWFkZGVuQGZvcmdlcm9j
ay5jb208bWFpbHRvOm5laWwubWFkZGVuQGZvcmdlcm9jay5jb20+PiB3cm90ZToNCkkgY2FuJ3Qg
YXR0ZW5kIFNpbmdhcG9yZSBlaXRoZXIgaW4gcGVyc29uIG9yIHJlbW90ZWx5IGR1ZSB0byBvdGhl
ciBjb21taXRtZW50cy4gSSBicm9hZGx5IHN1cHBvcnQgYWRvcHRpb24gb2YgdGhpcyBkcmFmdCwg
YnV0IEkgaGF2ZSBzb21lIGNvbW1lbnRzL3N1Z2dlc3Rpb25zIGFib3V0IGl0Lg0KDQpUaGFua3Mg
TmVpbC4gQW5kIHNvcnJ5IHRvIGhlYXIgdGhhdCB5b3Ugd29uJ3QgYmUgaW4gU2luZ2Fwb3JlLiBU
aGlzIGtpbmQgb2Ygc3R1ZmYgaXMgZGVmaW5pdGVseSBtb3JlIGVhc2lseSBkaXNjdXNzZWQgaW4g
cGVyc29uIChmb3IgbWUgYW55d2F5KS4gQnV0IEknbGwgdHJ5IGFuZCBjb21tZW50IG9uIHlvdXIg
Y29tbWVudHMgaGVyZSBhcyBiZXN0IEkgY2FuLiBJIGFsc28gcGxhbiB0byBhbHNvIG1lbnRpb24g
dGhlbSBpbiB0aGUgV2VkbmVzZGF5IGFuZC9vciBUaHVyc2RheSBwcmVzZW50YXRpb24uDQoNClNl
Y3Rpb24gMiBsaXN0cyB0aGUgbWFpbiBvYmplY3RpdmUgYXMgYmVpbmcgdG8gaGFyZGVuIGFnYWlu
c3QgY29tcHJvbWlzZWQvbWFsaWNpb3VzIEFTIG9yIFJTLCB3aGljaCBtYXkgYXR0ZW1wdCB0byBy
ZXBsYXkgY2FwdHVyZWQgdG9rZW5zIGVsc2V3aGVyZS4gV2hpbGUgdGhpcyBpcyBhIGdvb2QgaWRl
YSwgYSBjYXN1YWwgcmVhZGVyIG1pZ2h0IHdvbmRlciB3aHkgYSBzaW1wbGUgYXVkaWVuY2UgY2xh
aW0gaW4gdGhlIGFjY2VzcyB0b2tlbi9pbnRyb3NwZWN0aW9uIHJlc3BvbnNlIGlzIG5vdCBzdWZm
aWNpZW50IHRvIHByZXZlbnQgdGhpcy4gQmVjYXVzZSBpbnRlcmFjdGlvbnMgYmV0d2VlbiB0aGUg
Y2xpZW50IGFuZCBSUyBhcmUgc3VwcG9zZWQgdG8gYmUgb3ZlciBUTFMsIGlzIHRoZSBpbnRlbmRl
ZCB0aHJlYXQgbW9kZWwgb25lIGluIHdoaWNoIHRoZXNlIHByb3RlY3Rpb25zIGhhdmUgYnJva2Vu
IGRvd24/ICgiY291bnRlcmZlaXQiIGluIHRoZSBkZXNjcmlwdGlvbiBzdWdnZXN0cyB0aGlzKS4g
T3IgaXMgdGhlIG1vdGl2YXRpb24gdGhhdCBjbGllbnRzIHdhbnQgdG8gZ2V0IGEgc2luZ2xlIGJy
b2FkLXNjb3BlZCBhY2Nlc3MgdG9rZW4gKGZvciB1c2FiaWxpdHkvcGVyZm9ybWFuY2UgcmVhc29u
cykgYW5kIHVzZSBpdCB0byBhY2Nlc3MgbXVsdGlwbGUgcmVzb3VyY2Ugc2VydmVycyB3aXRob3V0
IGdpdmluZyBlYWNoIG9mIHRoZW0gdGhlIGFiaWxpdHkgdG8gcmVwbGF5IHRoZSB0b2tlbiB0byB0
aGUgb3RoZXIgc2VydmVycz8gT3IgYXJlIHdlIHRoaW5raW5nIG9mIGEgcGhpc2hpbmctdHlwZSB2
dWxuZXJhYmlsaXR5IHdlcmUgYSBnZW5lcmFsLXB1cnBvc2UgY2xpZW50IG1pZ2h0IGFjY2lkZW50
YWxseSB2aXNpdCBhIG1hbGljaW91cyBzaXRlIHdoaWNoIHByb21wdHMgZm9yIGFuIGFjY2VzcyB0
b2tlbiB0aGF0IHRoZSBjbGllbnQgdGhlbiBibGluZGx5IGdvZXMgb2ZmIGFuZCBnZXRzPyAoVU1B
PykgSXQncyBub3QgY2xlYXIgdG8gbWUgd2hpY2ggb2YgdGhlc2Ugc2NlbmFyaW9zIGlzIGJlaW5n
IGNvbnNpZGVyZWQsIHNvIGl0IHdvdWxkIGJlIGdvb2QgdG8gdGlnaHRlbiB1cCB0aGlzIHNlY3Rp
b24uDQoNCkl0IGlzIGFkbWl0dGVkbHkgYSBiaXQgbG9vc2UgYW5kIEkgYWdyZWUgaXQnZCBiZSBn
b29kIHRvIHRpZ2h0ZW4gaXQgdXAuIEJ1dCBwYXJ0IG9mIHdoeSBpdCdzIGxvb3NlIGlzIHRoYXQg
aXQgdHJpZXMgdG8gb2ZmZXIgc29tZSBwcm90ZWN0aW9ucyBmb3IgYWxsIHRob3NlIHNjZW5hcmlv
cyBhbmQgbW9yZSBzdWNoIGFzIGEgZ2VuZXJhbCBsb3N0L3N0b2xlbiB0b2tlbi4gSXQncyBlZmZl
Y3RpdmVseSB0cnlpbmcgdG8gcHJvdmlkZSBhcyBtYW55IG9mIHRoZSBzYW1lIHR5cGVzIG9mIHBy
b3RlY3Rpb25zL2Fzc3VyYW5jZXMgdGhhdCB5b3UnZCBnZXQgd2l0aCBUTFMgYmFzZWQgUG9QIG1l
Y2hhbmlzbXMgKGxpa2UgT0F1dGggTVRMUyBvciBUb2tlbiBiaW5kaW5nKSB0byB0aGUgZXh0ZW50
IHRoYXQgY2FuIGJlIGRvbmUgYXQgdGhlIEhUVFAgYXBwbGljYXRpb24gbGF5ZXIuIFdoaWNoIGNh
bid0IHJlYWxpc3RpY2FsbHkgYmUgZXhhY3RseSB0aGUgc2FtZSBidXQgY2FuIG1heWJlIGJlIGtp
bmRhIGNsb3NlIHdoaWxlIGFjdHVhbGx5IGJlaW5nIGFjY2Vzc2libGUgYW5kIGltcGxlbWVudGFi
bGUgYmVjYXVzZSBpdCdzIGFsbCBkb25lIGF0IHRoZSBhcHBsaWNhdGlvbiBsYXllci4gVGhlcmUg
YXJlIHRyYWRlLW9mZnMsIG9mIGNvdXJzZSwgYW5kIHRoZSBkb2N1bWVudCB3cml0ZXJzIGhhdmUg
ZW5kZWF2b3JlZCB0byBmaW5kIGEgZ29vZCBiYWxhbmNlIGluIHRoZSB0cmFkZS1vZmYgZGVjaXNp
b25zIHdlJ3ZlIG1hZGUuIEJ1dCB0aGF0IGRvZXNuJ3QgbWVhbiB0aGV5IGFyZSBuZWNlc3Nhcmls
eSB0aGUgcmlnaHQgZGVjaXNpb25zIG9yIGFyZSBjbG9zZWQgdG8gZGlzY3Vzc2lvbi4gVG8gdGhl
IGNhc3VhbCByZWFkZXIgSSB3b3VsZCBzYXkgdGhhdCBpdCB0dXJucyBvdXQgdGhhdCBnZXR0aW5n
IGFuIGFwcHJvcHJpYXRlIHNpbXBsZSBhdWRpZW5jZSBjbGFpbSBpbnRvIGFuIGFjY2VzcyB0b2tl
biBpc24ndCBuZWFybHkgYXMgc2ltcGxlIGFzIGl0IG1pZ2h0IHNlZW0uIEFuZCB3aGlsZSBpdCB3
aWxsIHByZXZlbnQgUlMgdG8gUlMgcmVwbGF5IChhcyBsb25nIGFzIGJvdGggUlNzIGFyZW4ndCBs
ZWdpdCBhdWRpZW5jZXMpIGl0IGRvZXNuJ3QgaGVscCB3aXRoIHByZXZlbnRpbmcgdGhlIHVzZSBv
ZiB0b2tlbnMgc3RvbGVuIG9yIGxlYWtlZCBieSBvdGhlciBtZWFucyAoaW5jbHVkaW5nIGZvciBy
ZWZyZXNoIHRva2VucyBpc3N1ZWQgdG8gcHVibGljIGNsaWVudHMpLg0KDQpBbm90aGVyIHBvdGVu
dGlhbCBtb3RpdmF0aW9uIGlzIGZvciBtb2JpbGUgYXBwcy4gU29tZSBjdXN0b21lcnMgb2Ygb3Vy
cyB3b3VsZCBsaWtlIHRvIHRpZSBhY2Nlc3MvcmVmcmVzaCB0b2tlbnMgdG8gcHJpdmF0ZSBrZXkg
bWF0ZXJpYWwgZ2VuZXJhdGVkIG9uIGEgc2VjdXJlIGVsZW1lbnQgaW4gdGhlIGRldmljZSwgdGhh
dCBjYW4gb25seSBiZSBhY2Nlc3NlZCBhZnRlciBsb2NhbCBiaW9tZXRyaWMgYXV0aGVudGljYXRp
b24gKGUuZy4gVG91Y2hJRC9GYWNlSUQgb24gaU9TKS4gSSBoYXZlIHN1Z2dlc3RlZCB1c2luZyBt
VExTIGNlcnQtYm91bmQgdG9rZW5zIGZvciB0aGlzLCBidXQgaGF2ZSBoZWFyZCBzb21lIHB1c2hi
YWNrIGR1ZSB0byB0aGUgZGlmZmljdWx0eSBvZiBjb25maWd1cmluZyBzdXBwb3J0IGZvciBjbGll
bnQgY2VydHMgYWNyb3NzIGRpdmVyc2UgaW5mcmFzdHJ1Y3R1cmUuIEEgc2ltcGxlIEpXVC1iYXNl
ZCBzb2x1dGlvbiBsaWtlIERQb1AgY291bGQgZmlsbCB0aGlzIG5lZWQuDQoNCkl0J3MgbWF5YmUg
bm90IHN0YXRlZCBpbiB0aGUgZHJhZnQgYnV0IHRoaXMga2luZCBvZiB0aGluZyBpcyBhbW9uZyB0
aGUgb2JqZWN0aXZlcyAoaW4gbXkgbWluZCBhbnl3YXkpLg0KDQoNCk15IG1haW4gY29uY2VybnMg
d2l0aCB0aGUgZHJhZnQgdGhvdWdoIGFyZSBhYm91dCBlZmZpY2llbmN5IGFuZCBzY2FsYWJpbGl0
eSBvZiB0aGUgcHJvcG9zZWQgYXBwcm9hY2g6DQoNCjEuIFRoZSByZXF1aXJlbWVudCB0byB1c2Ug
cHVibGljIGtleSBzaWduYXR1cmVzLCBhbG9uZyB3aXRoIHRoZSBhbnRpLXJlcGxheSBub25jZSwg
bWVhbnMgdGhhdCB0aGUgUlMgaXMgcmVxdWlyZWQgdG8gcGVyZm9ybSBhbiBleHBlbnNpdmUgc2ln
bmF0dXJlIHZlcmlmaWNhdGlvbiBjaGVjayBvbiBldmVyeSByZXF1ZXN0LiBUaGF0IGlzIG5vdCBn
b2luZyB0byBzY2FsZSB1cCB3ZWxsLiBXaGlsZSB0aGVyZSBhcmUgbW9yZSBlZmZpY2llbnQgc2No
ZW1lcyBsaWtlIEVkMjU1MTkgbm93LCB0aGVzZSBhcmUgc3RpbGwgdHlwaWNhbGx5IGFuIG9yZGVy
IG9mIG1hZ25pdHVkZSBzbG93ZXIgdGhhbiBITUFDIGFuZCB0aGUgbGF0ZW5jeSBhbmQgQ1BVIG92
ZXJoZWFkIGlzIGxpa2VseSB0byBiZSBhIG5vbi1zdGFydGVyIGZvciBtYW55IEFQSXMgKGVzcGVj
aWFsbHkgd2hlbiB5b3UncmUgYmlsbGVkIGJ5IENQVSB1c2FnZSkuIFB1YmxpYyBrZXkgc2lnbmF0
dXJlcyBhcmUgYWxzbyBub3RvcmlvdXNseSBmcmFnaWxlIChzZWUgZS5nLiB0aGUgaGlzdG9yeSBv
ZiBub25jZSByZXVzZS9sZWFrYWdlIHZ1bG5lcmFiaWxpdGllcyBpbiBFQ0RTQSBvcg0KDQpZZXMs
IGFzeW1tZXRyaWMgaXMgbW9yZSBwcm9jZXNzaW5nIGludGVuc2l2ZSB0aGFuIHN5bW1ldHJpYy4g
QnV0IGlmIHlvdSB0YWtlIGF3YXkgdGhlIGRpc3RyaWJ1dGVkIHJlcGxheSBjaGVjayAoc2VlIG5l
eHQgcmVzcG9uc2UpLCBpdCB3aWxsIHNjYWxlIG91dCBqdXN0IGZpbmUuIEknbSBub3Qgc28gc3Vy
ZSBsYXRlbmN5IGlzIGEgcmVhbCBpc3N1ZSBoZXJlIC0gd2hpbGUgdGhlc2Ugb3BlcmF0aW9ucyBh
cmUgYW4gb3JkZXIgb2YgbWFnbml0dWRlIHNsb3dlciB3ZSdyZSBzdGlsbCB0YWxraW5nIGFib3V0
IHRpbWVzIHRoYXQgYXJlIG5vdCBwZXJjZXB0aWJsZSB0byBhIGh1bWFuLiBDUFUgdXNhZ2UvY29z
dCBpcyBhIHBhcnQgb2YgYSB0cmFkZS1vZmYgZm9yIHRoZSBzaW1wbGljaXR5IGFmZm9yZGVkIGJ5
IHB1YmxpYy9wcml2YXRlIGtleXMuICBBbmQgaXQgaXMgc2lnbmlmaWNhbnRseSBzaW1wbGVyLiBU
aGUgZGVzaWduIHlvdSBza2V0Y2hlZCBvdXQgaXMgYWRtaXR0ZWRseSBxdWl0ZSBjbGV2ZXIgYnV0
IGl0J3Mgbm90IGV2ZW4gaW4gdGhlIHNhbWUgYmFsbHBhcmsgd2l0aCByZXNwZWN0IHRvIGNvbXBs
ZXhpdHkuIEFuZCwgYXMgeW91IHBvaW50ZWQgb3V0LCB0aGUgb3RoZXIgc3VnZ2VzdGlvbiBhcm91
bmQgc3ltbWV0cmljIGtleXMgaGFzIHJhdGhlciBkaWZmZXJlbnQgc2VjdXJpdHkgcHJvcGVydGll
cyB3aGlsZSBzdGlsbCBhZGRpbmcgY29tcGxleGl0eS4gQWRkaW5nIHN5bW1ldHJpYyBrZXkgc3Vw
cG9ydCBpc24ndCBzb21ldGhpbmcgdGhhdCBjYW4ganVzdCBiZSBhZGRlZCBvbiBlYXNpbHkuDQoN
Cg0KMi4gVGhlIGFkdmljZSBmb3IgdGhlIFJTIHRvIHN0b3JlIGEgc2V0IG9mIHByZXZpb3VzbHkg
dXNlZCBub25jZXMgdG8gcHJldmVudCByZXBsYXkgd2lsbCBhbHNvIGhhbXBlciBzY2FsYWJpbGl0
eSwgZXNwZWNpYWxseSBpbiBsYXJnZSBkZXBsb3ltZW50cyB3aGVyZSBzdWNoIHN0YXRlIHdvdWxk
IG5lZWQgdG8gYmUgcmVwbGljYXRlZCB0byBhbGwgc2VydmVycyAob3IgdXNlIHN0aWNreSBsb2Fk
IGJhbGFuY2luZywgd2hpY2ggY29tZXMgd2l0aCBpdHMgb3duIHByb2JsZW1zKS4gVGhpcyB2aW9s
YXRlcyB0aGUgc3RhdGVsZXNzbmVzcyBvZiBIVFRQLCBhbmQgaXQgYWxzbyBwb3RlbnRpYWxseSBi
cmVha3MgaWRlbXBvdGVuY3kgb2Ygb3BlcmF0aW9uczogVGhpbmsgb2YgdGhlIGNhc2Ugd2hlcmUg
dGhlIEpXVCB2YWxpZGF0aW9uIGFuZCByZXBsYXkgcHJvdGVjdGlvbiBpcyBkb25lIGF0IGFuIEFQ
SSBnYXRld2F5IGJ1dCB0aGVuIHRoZSBjYWxsIHRvIHRoZSBiYWNrZW5kIEFQSSBzZXJ2ZXIgZmFp
bHMgZm9yIGEgdHJhbnNpZW50IHJlYXNvbi4gVGhlIGNsaWVudCAob3IgYSBwcm94eS9saWJyYXJ5
KSBjYW5ub3Qgc2ltcGx5IHJlcGxheSB0aGUgKGlkZW1wb3RlbnQpIHJlcXVlc3QgaW4gdGhpcyBj
YXNlIGJlY2F1c2UgaXQgd2lsbCBiZSByZWplY3RlZCBieSB0aGUgZ2F0ZXdheS4gSXQgbXVzdCBp
bnN0ZWFkIHJlY3JlYXRlIHRoZSBEUG9QIEpXVCwgaW5jdXJyaW5nIGFkZGl0aW9uYWwgb3Zlcmhl
YWRzLg0KDQpUaGUgYWN0dWFsIHZhbHVlIG9mIHJlcGxheSBjaGVja2luZyBvbiBqdGkgaXMgc29t
ZXdoYXQgcXVlc3Rpb25hYmxlLiBUaGUgRFBvUCBKV1Qgb25seSB0cmFuc2l0cyBiZXR3ZWVuIGNs
aWVudCBhbmQgc2VydmVyIHNvIGEgVExTIE1JVE0gaXMgbGlrZWx5IG5lZWRlZCB0byBzdGVhbCBh
IERQb1AgSldULiBCdXQgd2UgYXJlIGFzc3VtaW5nIFRMUyB3b3JrcyBoZXJlLiBBbmQgYW4gYWN0
aXZlIE1JVE0gY291bGQgdGh3YXJ0IHRoaXMgY2hlY2sgYnkganVzdCBiZWluZyBmaXJzdCB0byBw
cmVzZW50IERQb1AgSldULiBJIHRoaW5rIHRoZSBqdGkgY2hlY2sgbWFkZSBpdHMgd2F5IGludG8g
dGhlIGRyYWZ0IG1vc3RseSBiZWNhdXNlIGl0IHNlZW1lZCBsaWtlIHNvbWV0aGluZyB3YXMgbmVl
ZGVkIHRvIHRyeSBhbmQgYnJpbmcgaXQgY2xvc2VyIHRvIHRoZSBUTFMgUG9QIG1vZGVscy4gQmVp
bmcgYXdhcmUgb2YgdGhlIHNjYWxhYmlsaXR5IGNvbmNlcm5zLCBJIGRpZCBlbmRlYXZvciB0byB3
cml0ZSB0aGUgdGV4dCBpbiBzdWNoIGEgd2F5IHNvIGFzIHRvIGxlYXZlIHNvbWUgd2lnZ2xlIHJv
b20gaW4gaW1wbGVtZW50YXRpb25zL2RlcGxveW1lbnRzIHdpdGggdGV4dCBsaWtlICcianRpIiBT
SE9VTEQgYmUgdXNlZCBieSB0aGUgc2VydmVyIGZvciByZXBsYXkgZGV0ZWN0aW9uIGFuZCBwcmV2
ZW50aW9uYCBhbmQgW2Vuc3VyZSB0aGF0XSAnd2l0aGluIGEgcmVhc29uYWJsZSBjb25zaWRlcmF0
aW9uIG9mIGFjY3VyYWN5IGFuZCByZXNvdXJjZSB1dGlsaXphdGlvbiwgYSBKV1Qgd2l0aCB0aGUg
c2FtZSAianRpIiB2YWx1ZSBoYXMgbm90IGJlZW4gcmVjZWl2ZWQgcHJldmlvdXNseScuIFRoZSBp
ZGVhIGJlaW5nIHRoYXQgdXNpbmcgc29tZXRoaW5nIGV2ZW50dWFsbHkgY29uc2lzdGVudCBvciBl
dmVuIGxvY2FsIG9ubHkgdG8gdGhlIHJ1bnRpbWUgaW5zdGFuY2Ugd291bGQgYmUgcGVybWlzc2li
bGUuIFBlcmhhcHMgdGhhdCBhbGxvd2FuY2UgYW5kIHRoZSByYXRpb25hbCBjb3VsZCBiZSBtYWRl
IG1vcmUgY2xlYXI/IE9yIHdvdWxkIHlvdSBzdWdnZXN0IHRvIGRvIGF3YXkgd2l0aCB0aGUganRp
IHJlcGxheSBzdHVmZiBhbD8gT3Igc29tZXRoaW5nIGVsc2U/DQoNCjMuIE1pbm9yOiBUaGUgdXNl
IG9mIGEgY3VzdG9tIGhlYWRlciBmb3IgY29tbXVuaWNhdGluZyB0aGUgRFBvUCBwcm9vZiB3aWxs
IHJlcXVpcmUgYWRkaXRpb25hbCBDT1JTIGNvbmZpZ3VyYXRpb24gb24gdG9wIG9mIHRoYXQgYWxy
ZWFkeSBkb25lIGZvciB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIsIGFuZCBzbyBhZGRzIGEgc21h
bGwgYW1vdW50IG9mIGFkZGl0aW9uYWwgZnJpY3Rpb24gZm9yIGFkb3B0aW9uLiBHaXZlbiB0aGF0
IENPUlMgY29uZmlndXJhdGlvbiBjaGFuZ2VzIG9mdGVuIHJlcXVpcmUgYXBwcm92YWwgYnkgYSBz
ZWN1cml0eSB0ZWFtLCB0aGlzIG1heSBtYWtlIG1vcmUgb2YgYW4gaW1wYWN0IHRoYW4geW91J2Qg
ZXhwZWN0Lg0KDQpGZWVscyByZWFsbHkgbWlub3IuIEkgbWVhbiwgd2UgY291bGQgdHJ5IHRvIHJv
bGwgZXZlcnl0aGluZyB1cCB1bmRlciBvbmUgaGVhZGVyLiBCdXQgaXQgZG9lcyBzZWVtIHVud2Fy
cmFudGVkIGFuZCB3b3VsZCBjb21wbGljYXRlIHRoaW5ncyAtIGF0IGxlYXN0IGluIHRoZSBtb2Rl
bCB3ZSd2ZSBnb3Qgbm93IHdoZXJlIHRoZSBwcm9vZiBpcyBzZW50IHRoZSBzYW1lIHdheSBvbm8g
YWxsIHR5cGVzIG9mIHJlcXVlc3RzLg0KDQoNCkl0J3MgYWxzbyBub3QgY2xlYXIgdG8gbWUgZXhh
Y3RseSB3aGF0IHRocmVhdCB0aGUgYW50aS1yZXBsYXkgbm9uY2UgaXMgcHJvdGVjdGluZyBhZ2Fp
bnN0LiBJdCBkb2VzIG5vdGhpbmcgYWdhaW5zdCB0aGUgcmVwbGF5IHNjZW5hcmlvIGRpc2N1c3Nl
ZCBpbiBzZWN0aW9uIDIsIGFzIEkgdW5kZXJzdGFuZCBpdCAtIHdoaWNoIHJlYWxseSBzZWVtcyB0
byBiZSBtb3JlIG9mIGEgTWl0TSBzY2VuYXJpby4gR2l2ZW4gdGhhdCB0aGUgY29ubmVjdGlvbiBi
ZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBSUyBpcyBzdXBwb3NlZCB0byBiZSBvdmVyIFRMUywg
YW5kIFRMUyBpcyBhbHJlYWR5IHByb3RlY3RlZCBhZ2FpbnN0IHJlcGxheSBhdHRhY2tzLCBJIHRo
aW5rIHRoaXMgcGFydCBuZWVkcyB0byBiZSBiZXR0ZXIgbW90aXZhdGVkIGdpdmVuIHRoZSBvYnZp
b3VzIGNvc3RzIG9mIGltcGxlbWVudGluZyBpdC4NCg0KSSBoYXZlIGEgdGVudGF0aXZlIHN1Z2dl
c3Rpb24gZm9yIGFuIGFsdGVybmF0aXZlIGRlc2lnbiB3aGljaCBhdm9pZHMgdGhlc2UgcHJvYmxl
bXMsIGJ1dCBhdCBhIGNvc3Qgb2YgcG90ZW50aWFsbHkgbW9yZSBjb21wbGV4aXR5IGVsc2V3aGVy
ZS4gSSdsbCBzdW1tYXJpc2UgaXQgaGVyZSBmb3IgY29uc2lkZXJhdGlvbjoNCg0KMS4gVGhlIGNs
aWVudCBvYnRhaW5zIGFuIGFjY2VzcyB0b2tlbiBpbiB0aGUgbm9ybWFsIHdheS4gV2hlbiBjYWxs
aW5nIHRoZSB0b2tlbiBlbmRwb2ludCBpdCBwcm92aWRlcyBhbiBFQy9va3AgcHVibGljIGtleSBh
cyB0aGUgY29uZmlybWF0aW9uIGtleSB0byBiZSBhc3NvY2lhdGVkIHdpdGggdGhlIGFjY2Vzcy9y
ZWZyZXNoIHRva2Vucy4NCg0KMi4gVGhlIGZpcnN0IHRpbWUgdGhlIGNsaWVudCBjYWxscyBhbiBS
UyBpdCBwYXNzZXMgaXRzIGFjY2VzcyB0b2tlbiBpbiB0aGUgQXV0aG9yaXphdGlvbjogQmVhcmVy
IGhlYWRlciBhcyBub3JtYWwuIChJZiB0aGUgUlMgZG9lc24ndCBzdXBwb3J0IERQb1AgdGhlbiB0
aGlzIHdvdWxkIGp1c3Qgc3VjY2VlZCBhbmQgbm8gZnVydGhlciBhY3Rpb24gaXMgcmVxdWlyZWQg
YnkgdGhlIGNsaWVudCAtIGFsbG93aW5nIGNsaWVudHMgdG8gb3Bwb3J0dW5pc3RpY2FsbHkgYXNr
IGZvciBEUG9QIHdpdGhvdXQgbmVlZGluZyBhIHByaW9yaSBrbm93bGVkZ2Ugb2YgUlMgY2FwYWJp
bGl0aWVzKS4NCg0KMy4gVGhlIFJTIGludHJvc3BlY3RzIHRoZSBhY2Nlc3MgdG9rZW4gYW5kIGxl
YXJucyB0aGUgRUMgcHVibGljIGtleSBhc3NvY2lhdGVkIHdpdGggdGhlIGFjY2VzcyB0b2tlbi4g
QXMgdGhlcmUgaXMgbm8gRFBvUCBwcm9vZiB3aXRoIHRoZSBhY2Nlc3MgdG9rZW4sIHRoZSBSUyB3
aWxsIGdlbmVyYXRlIGEgY2hhbGxlbmdlIGluIHRoZSBmb2xsb3dpbmcgd2F5Og0KICAgIG8gVGhl
IFJTIGdlbmVyYXRlcyBhbiBlcGhlbWVyYWwgRUMga2V5IHBhaXIgZm9yIHRoZSBzYW1lIGN1cnZl
IGFzIHRoZSBjb25maXJtYXRpb24ga2V5IChlLmcuIFAtMjU2IG9yIFgyNTUxOSkuDQogICAgbyBU
aGUgUlMgc3RvcmVzIHRoZSBlcGhlbWVyYWwgcHJpdmF0ZSBrZXkgc29tZXdoZXJlLCBhc3NvY2lh
dGVkIHdpdGggdGhpcyBhY2Nlc3MgdG9rZW4gKHNlZSBiZWxvdyBmb3IgYSBzY2FsYWJsZSBpbXBs
ZW1lbnRhdGlvbiBjaG9pY2UpDQogICAgbyBUaGUgUlMgZW5jb2RlcyB0aGUgZXBoZW1lcmFsIHB1
YmxpYyBrZXkgaW50byBhIEpXSyAoZXBrKSBhbmQgYmFzZTY0dXJsLWVuY29kZXMgaXQuIEl0IHVz
ZXMgdGhpcyBhcyBhIGNoYWxsZW5nZSB0byB0aGUgY2xpZW50IGJ5IHNlbmRpbmcgYmFjayBhIDQw
MSByZXNwb25zZSB3aXRoIFdXVy1BdXRoZW50aWNhdGU6IERQb1AgPGVuY29kZWQtZXBrPg0KDQo0
LiBUaGUgY2xpZW50IGRlY29kZXMgdGhlIGVwayBjaGFsbGVuZ2UgYW5kIHBlcmZvcm1zIGFuIEVD
REgga2V5IGFncmVlbWVudCBiZXR3ZWVuIGl0cyBwcml2YXRlIGtleSBhbmQgdGhlIGNoYWxsZW5n
ZSBlcGsgYXMgcGVyIHRoZSBtZXRob2QgZGVzY3JpYmVkIGZvciB0aGUgZXhpc3RpbmcgSldBIEVD
REgtRVMgZW5jcnlwdGlvbiBhbGdvcml0aG0uIFJhdGhlciB0aGFuIGRlcml2aW5nIGFuIEFFUyBr
ZXkgaG93ZXZlciwgaXQgZGVyaXZlcyBhIEhNQUMga2V5IGZvciBIUzI1Ni4gVGhlICJhcHUiIHZh
bHVlIGlzIHNldCB0byB0aGUgYWNjZXNzIHRva2VuIChzdHJpbmcgdmFsdWUgYXMgQVNDSUkgYnl0
ZXMpIGFuZCB0aGUgImFwdiIgdmFsdWUgaXMgc2V0IHRvIHRoZSBob3N0bmFtZSBvZiB0aGUgUlMg
KGUuZy4gImFwaS5leGFtcGxlLmNvbTxodHRwOi8vYXBpLmV4YW1wbGUuY29tLz4iKS4gVGhpcyBl
bnN1cmVzIHRoYXQgdGhlIGRlcml2ZWQga2V5IGlzIGNyeXB0b2dyYXBoaWNhbGx5IGJvdW5kIHRv
IHRoZSBjb250ZXh0IGluIHdoaWNoIGl0IGlzIHVzZWQuDQoNCjUuIFRoZSBjbGllbnQgdXNlcyB0
aGUgSE1BQyBrZXkgdG8gY3JlYXRlIGEgRFBvUCBwcm9vZiBKV1QgbXVjaCBsaWtlIHRoZSBvbmUg
aW4gdGhlIGN1cnJlbnQgZHJhZnQsIGJ1dCBzaWduZWQgdXNpbmcgdGhlIEhTMjU2IGtleS4gSWYg
YSAia2lkIiBmaWVsZCB3YXMgcHJlc2VudCBpbiB0aGUgY2hhbGxlbmdlIEpXSyBzZW50IGJ5IHRo
ZSBSUyB0aGVuIHRoZSBzYW1lIHZhbHVlIE1VU1QgYmUgdXNlZCBpbiB0aGUgImtpZCIgaGVhZGVy
IG9mIHRoaXMgZGlzY2hhcmdlIEpXVC4gSXQgcmV0cmllcyBpdHMgb3JpZ2luYWwgcmVxdWVzdCBz
ZW5kaW5nIEF1dGhvcml6YXRpb246IERQb1AgPGhtYWMtand0PiBhdD08YWNjZXNzX3Rva2VuPi4N
Cg0KNi4gVGhlIFJTIHVzZXMgaXRzIHN0b3JlZCBlcGhlbWVyYWwgcHJpdmF0ZSBrZXkgdG8gZGVy
aXZlIHRoZSBzYW1lIEhNQUMga2V5IGFuZCB2ZXJpZnkgdGhlIERQb1AgZGlzY2hhcmdlIEpXVC4g
SWYgaXQgdmFsaWRhdGVzIGFuZCBhbGwgZmllbGRzIGFyZSBjb3JyZWN0IHRoZW4gdGhlIHJlcXVl
c3QgaXMgYWxsb3dlZC4NCg0KRWZmaWNpZW50IGltcGxlbWVudGF0aW9uIHRyaWNrOg0KQmVjYXVz
ZSB0aGUgY2xpZW50IGlzIHJlcXVpcmVkIHRvIGNvcHkgYW5kICJraWQiIHZhbHVlIGZyb20gdGhl
IGNoYWxsZW5nZSBKV0ssIHRoZSBSUyBjYW4gcHJlZW1wdGl2ZWx5IGNhcnJ5IG91dCB0aGUgRUNE
SCBrZXkgYWdyZWVtZW50IGltbWVkaWF0ZWx5IGFuZCBnZW5lcmF0ZSB0aGUgZGVyaXZlZCBITUFD
IGtleS4gVGhlIFJTIGNhbiB0aGVuIGVuY3J5cHQgdGhpcyBkZXJpdmVkIGtleSB1c2luZyBhIGxv
Y2FsIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBrZXkgKGUuZy4gQUVTLUdDTSkgYW5kIHVzZSB0
aGF0IGVuY3J5cHRlZCB2YWx1ZSBhcyB0aGUgImtpZCIgdmFsdWUgaW4gdGhlIGNoYWxsZW5nZSAo
cGVyaGFwcyBhbG9uZyB3aXRoIHNvbWUgY29udGV4dCBvciBhbiBleHBpcnkgdGltZSkuIFRoYXQg
d2F5IHRoZSBSUyBvbmx5IG5lZWRzIHRvIGRlY3J5cHQgdGhpcyBraWQgdmFsdWUgcmF0aGVyIHRo
YW4gcGVyZm9ybWluZyB0aGUgRUNESCBrZXkgYWdyZWVtZW50IG9uIGV2ZXJ5IHJlcXVlc3QuIFRo
aXMgYWxzbyBhdm9pZHMgdGhlIG5lZWQgZm9yIHRoZSBSUyB0byBzdG9yZSBhbnkgcGVyLWNsaWVu
dCBzdGF0ZSBsb2NhbGx5Lg0KDQpUaGUgY2hhbGxlbmdlLXJlc3BvbnNlIG5hdHVyZSBvZiB0aGUg
c2NoZW1lIHByZXZlbnRzIHRyYWRpdGlvbmFsIHJlcGxheSBhdHRhY2tzIGluIHRoZSBjYXNlIHdo
ZXJlIGEgRFBvUCBkaXNjaGFyZ2UgSldUIGlzIGFjY2lkZW50YWxseSBsZWFrZWQgdGhyb3VnaCBz
ZXJ2ZXIgbG9ncyBvciBzb21lIG90aGVyIGZsYXcsIHdpdGhvdXQgbmVlZGluZyB0byBzdG9yZSBu
b25jZXMgb24gdGhlIHNlcnZlci4gVXNpbmcgdGhlIFJTJ3MgaG9zdG5hbWUgaW4gdGhlIGtleSBk
ZXJpdmF0aW9uIHByb2Nlc3MgcHJldmVudHMgbWl0bSBhdHRhY2tzIGluIGEgc2ltaWxhciB3YXkg
dG8gaG93IEZJRE8vV2ViQXV0aG4gcHJldmVudHMgdGhpcy4gTW9zdCBpbXBvcnRhbnRseSwgb25j
ZSBhIEhTMjU2IGtleSBoYXMgYmVlbiBkZXJpdmVkIGJldHdlZW4gYSBjbGllbnQgYW5kIFJTIHRo
ZXkgY2FuIHJldXNlIHRoYXQga2V5IGZvciBtdWx0aXBsZSByZXF1ZXN0cywgcmVkdWNpbmcgdGhl
IG92ZXJoZWFkIG9mIHRoZSBFQ0RIIGtleSBhZ3JlZW1lbnQgc3RlcC4gRWl0aGVyIHNpZGUgY2Fu
IGRlY2lkZSBhcyBhIG1hdHRlciBvZiBwb2xpY3kgaG93IGxvbmcgdG8gbGV0IHRoaXMgb2NjdXIg
YW5kIHdoZW4gdG8gdHJpZ2dlciBhIGZyZXNoIGNoYWxsZW5nZS1yZXNwb25zZS4NCg0KQmVjYXVz
ZSB0aGlzIGZpdHMgd2l0aGluIHRoZSBzdGFuZGFyZCBIVFRQIGF1dGhlbnRpY2F0aW9uIGZyYW1l
d29yaywgaXQgYWxzbyByZXF1aXJlcyBubyBhZGRpdGlvbmFsIENPUlMgY29uZmlndXJhdGlvbiBh
bmQgaXMgcmVsYXRpdmVseSBlYXN5IHRvIHBsdWcgaW4gdG8gZXhpc3RpbmcgSFRUUCBjbGllbnQg
bGlicmFyaWVzLg0KDQpUaGUgbWFpbiBkb3duc2lkZSBvZiB0aGlzIGFwcHJvYWNoIHRvIG1lIGlz
IHRoZSBmYWN0IHRoYXQgeW91IGNhbid0IHNpbXBseSByZXVzZSBhbiBleGlzdGluZyBKV1QgbGli
cmFyeSB0byBpbXBsZW1lbnQgaXQsIGFuZCBzbyBpdCB3aWxsIHRha2UgdGltZSBmb3IgY2xpZW50
IGxpYnMgdG8gZGV2ZWxvcC4gKEFsdGhvdWdoIEkgdGhpbmsgdGhpcyBtaWdodCBiZSBhY2hpZXZh
YmxlIG5vdyB3aXRoIGV4aXN0aW5nICpDT1NFKiBsaWJyYXJpZXMpLiBUaGlzIHdvdWxkIGluY3Jl
YXNlIHRoZSByaXNrIG9mIHBlb3BsZSBoYW5kLXJvbGxpbmcgc29sdXRpb25zLCByYXRoZXIgdGhh
biB1c2luZyB3ZWxsLXRlc3RlZCBsaWJyYXJpZXMuIE9uIHRoZSBvdGhlciBoYW5kLCBpdCB1c2Vz
IGZhaXJseSB3aWRlbHkgc3VwcG9ydGVkIHByaW1pdGl2ZXMgc28gZS5nLiBhbiBpbXBsZW1lbnRh
dGlvbiB1c2luZyBXZWJDcnlwdG8gaXMgcHJvYmFibHkgb25seSBhIGZldyBkb3plbiBsaW5lcyBv
ZiBjb2RlLg0KDQotLSBOZWlsDQoNCg0KDQoNCg0KDQpPbiAzMSBPY3QgMjAxOSwgYXQgMTk6MjAs
IEJyaWFuIENhbXBiZWxsIDxiY2FtcGJlbGw9NDBwaW5naWRlbnRpdHkuY29tQGRtYXJjLmlldGYu
b3JnPG1haWx0bzpiY2FtcGJlbGw9NDBwaW5naWRlbnRpdHkuY29tQGRtYXJjLmlldGYub3JnPj4g
d3JvdGU6DQoNCkhlbGxvIFdHLA0KDQpKdXN0IGEgcXVpY2sgbm90ZSB0byBsZXQgZm9sa3Mga25v
dyB0aGF0IC0wMyBvZiB0aGUgRFBvUCBkcmFmdCB3YXMgcHVibGlzaGVkIGVhcmxpZXIgdG9kYXku
IFRoZSB1c3VhbCB2YXJpb3VzIGRvY3VtZW50IGxpbmtzIGFyZSBpbiB0aGUgZm9yd2FyZGVkIG1l
c3NhZ2UgYmVsb3cgYW5kIHRoZSByZWxldmFudCBzbmlwcGV0IGZyb20gdGhlIGRvYyBoaXN0b3J5
IHdpdGggYSBzdW1tYXJ5IG9mIHRoZSBjaGFuZ2VzIGlzIGluY2x1ZGVkIGhlcmUgZm9yIGNvbnZl
bmllbmNlLg0KDQpIb3BlZnVsbHkgZm9sa3Mgd2lsbCBoYXZlIHRpbWUgdG8gcmVhZCB0aGUgKHJl
bGF0aXZpdHkpIHNob3J0IGRvY3VtZW50IGJlZm9yZSB0aGUgbWVldGluZyhzKSBpbiBTaW5nYXBv
cmUgd2hlcmUgKHNwb2lsZXIgYWxlcnQpIEkgcGxhbiB0byBhc2sgdGhhdCB0aGUgV0cgY29uc2lk
ZXIgYWRvcHRpb24gb2YgdGhlIGRyYWZ0Lg0KDQpUaGFua3MsDQoNCiAtMDMNCiAgIG8gIHJld29y
ayB0aGUgdGV4dCBhcm91bmQgdW5pcXVlbmVzcyByZXF1aXJlbWVudHMgb24gdGhlIGp0aSBjbGFp
bSBpbg0KICAgICAgdGhlIERQb1AgcHJvb2YgSldUDQogICBvICBtYWtlIHRva2VucyBhIGJpdCBz
bWFsbGVyIGJ5IHVzaW5nICJodG0iLCAiaHR1IiwgYW5kICJqa3QiIHJhdGhlcg0KICAgICAgdGhh
biAiaHR0cF9tZXRob2QiLCAiaHR0cF91cmkiLCBhbmQgImprdCNTMjU2IiByZXNwZWN0aXZlbHkN
CiAgIG8gIG1vcmUgZXhwbGljaXQgcmVjb21tZW5kYXRpb24gdG8gdXNlIG1UTFMgaWYgdGhhdCBp
cyBhdmFpbGFibGUNCiAgIG8gIGFkZGVkIERhdmlkIFdhaXRlIGFzIGNvLWF1dGhvcg0KICAgbyAg
ZWRpdG9yaWFsIHVwZGF0ZXMNCg0KLS0tLS0tLS0tLSBGb3J3YXJkZWQgbWVzc2FnZSAtLS0tLS0t
LS0NCkZyb206IDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0
c0BpZXRmLm9yZz4+DQpEYXRlOiBUaHUsIE9jdCAzMSwgMjAxOSBhdCAxMTo1MyBBTQ0KU3ViamVj
dDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1mZXR0LW9hdXRoLWRwb3AtMDMu
dHh0DQpUbzogVG9yc3RlbiBMb2RkZXJzdGVkdCA8dG9yc3RlbkBsb2RkZXJzdGVkdC5uZXQ8bWFp
bHRvOnRvcnN0ZW5AbG9kZGVyc3RlZHQubmV0Pj4sIE1pY2hhZWwgSm9uZXMgPG1iakBtaWNyb3Nv
ZnQuY29tPG1haWx0bzptYmpAbWljcm9zb2Z0LmNvbT4+LCBKb2huIEJyYWRsZXkgPHZlN2p0YkB2
ZTdqdGIuY29tPG1haWx0bzp2ZTdqdGJAdmU3anRiLi5jb20+PiwgQnJpYW4gQ2FtcGJlbGwgPGJj
YW1wYmVsbEBwaW5naWRlbnRpdHkuY29tPG1haWx0bzpiY2FtcGJlbGxAcGluZ2lkZW50aXR5LmNv
bT4+LCBEYXZpZCBXYWl0ZSA8ZGF2aWRAYWxrYWxpbmUtc29sdXRpb25zLmNvbTxtYWlsdG86ZGF2
aWRAYWxrYWxpbmUtc29sdXRpb25zLmNvbT4+LCBEYW5pZWwgRmV0dCA8bWFpbEBkYW5pZWxmZXR0
LmRlPG1haWx0bzptYWlsQGRhbmllbGZldHQuZGU+Pg0KDQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJ
LUQsIGRyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50eHQNCmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBz
dWJtaXR0ZWQgYnkgQnJpYW4gQ2FtcGJlbGwgYW5kIHBvc3RlZCB0byB0aGUNCklFVEYgcmVwb3Np
dG9yeS4NCg0KTmFtZTogICAgICAgICAgIGRyYWZ0LWZldHQtb2F1dGgtZHBvcA0KUmV2aXNpb246
ICAgICAgIDAzDQpUaXRsZTogICAgICAgICAgT0F1dGggMi4wIERlbW9uc3RyYXRpb24gb2YgUHJv
b2Ytb2YtUG9zc2Vzc2lvbiBhdCB0aGUgQXBwbGljYXRpb24gTGF5ZXIgKERQb1ApDQpEb2N1bWVu
dCBkYXRlOiAgMjAxOS0xMC0zMA0KR3JvdXA6ICAgICAgICAgIEluZGl2aWR1YWwgU3VibWlzc2lv
bg0KUGFnZXM6ICAgICAgICAgIDE1DQpVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5v
cmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50eHQNClN0YXR1czog
ICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1mZXR0LW9hdXRo
LWRwb3AvDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0
LWZldHQtb2F1dGgtZHBvcC0wMw0KSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIu
aWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtZmV0dC1vYXV0aC1kcG9wDQpEaWZmOiAgICAgICAgICAg
aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWZldHQtb2F1dGgtZHBvcC0w
Mw0KDQpBYnN0cmFjdDoNCiAgIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGEgbWVjaGFuaXNtIGZv
ciBzZW5kZXItY29uc3RyYWluaW5nIE9BdXRoIDIuMA0KICAgdG9rZW5zIHZpYSBhIHByb29mLW9m
LXBvc3Nlc3Npb24gbWVjaGFuaXNtIG9uIHRoZSBhcHBsaWNhdGlvbiBsZXZlbC4NCiAgIFRoaXMg
bWVjaGFuaXNtIGFsbG93cyBmb3IgdGhlIGRldGVjdGlvbiBvZiByZXBsYXkgYXR0YWNrcyB3aXRo
IGFjY2Vzcw0KICAgYW5kIHJlZnJlc2ggdG9rZW5zLg0KDQoNCg0KDQpQbGVhc2Ugbm90ZSB0aGF0
IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNz
aW9uDQp1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0
IHRvb2xzLmlldGYub3JnPGh0dHA6Ly90b29scy5pZXRmLm9yZy8+Lg0KDQpUaGUgSUVURiBTZWNy
ZXRhcmlhdA0KDQpDT05GSURFTlRJQUxJVFkgTk9USUNFOiBUaGlzIGVtYWlsIG1heSBjb250YWlu
IGNvbmZpZGVudGlhbCBhbmQgcHJpdmlsZWdlZCBtYXRlcmlhbCBmb3IgdGhlIHNvbGUgdXNlIG9m
IHRoZSBpbnRlbmRlZCByZWNpcGllbnQocykuIEFueSByZXZpZXcsIHVzZSwgZGlzdHJpYnV0aW9u
IG9yIGRpc2Nsb3N1cmUgYnkgb3RoZXJzIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuLiAgSWYgeW91
IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5
IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYnkgZS1tYWlsIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2Ug
YW5kIGFueSBmaWxlIGF0dGFjaG1lbnRzIGZyb20geW91ciBjb21wdXRlci4gVGhhbmsgeW91Ll9f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpPQXV0aCBtYWls
aW5nIGxpc3QNCk9BdXRoQGlldGYub3JnPG1haWx0bzpPQXV0aEBpZXRmLm9yZz4NCmh0dHBzOi8v
d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb2F1dGgNCg0KDQpDT05GSURFTlRJQUxJVFkg
Tk9USUNFOiBUaGlzIGVtYWlsIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBhbmQgcHJpdmlsZWdl
ZCBtYXRlcmlhbCBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQocyku
IEFueSByZXZpZXcsIHVzZSwgZGlzdHJpYnV0aW9uIG9yIGRpc2Nsb3N1cmUgYnkgb3RoZXJzIGlz
IHN0cmljdGx5IHByb2hpYml0ZWQuICBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmlj
YXRpb24gaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBieSBl
LW1haWwgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZSBhbmQgYW55IGZpbGUgYXR0YWNobWVudHMgZnJv
bSB5b3VyIGNvbXB1dGVyLiBUaGFuayB5b3UuDQoNCg0KQ09ORklERU5USUFMSVRZIE5PVElDRTog
VGhpcyBlbWFpbCBtYXkgY29udGFpbiBjb25maWRlbnRpYWwgYW5kIHByaXZpbGVnZWQgbWF0ZXJp
YWwgZm9yIHRoZSBzb2xlIHVzZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpLiBBbnkgcmV2
aWV3LCB1c2UsIGRpc3RyaWJ1dGlvbiBvciBkaXNjbG9zdXJlIGJ5IG90aGVycyBpcyBzdHJpY3Rs
eSBwcm9oaWJpdGVkLiAgSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGlu
IGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYnkgZS1tYWlsIGFu
ZCBkZWxldGUgdGhlIG1lc3NhZ2UgYW5kIGFueSBmaWxlIGF0dGFjaG1lbnRzIGZyb20geW91ciBj
b21wdXRlci4gVGhhbmsgeW91Lg0KDQo=

--_000_3D5C611E4B034A46A22BD8AC9FE0AC51amazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <2A5C773C6A96504E89FE930A3C8C50C9@amazon.com>
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy
bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt
YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj
cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv
VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg
Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv
ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl
PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6
V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K
CXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDggMyA0
O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6
MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7
DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh
bWlseTpIZWx2ZXRpY2FOZXVlOw0KCXBhbm9zZS0xOjIgMCA1IDMgMCAwIDAgMiAwIDQ7fQ0KQGZv
bnQtZmFjZQ0KCXtmb250LWZhbWlseToiSGVsdmV0aWNhIE5ldWUiOw0KCXBhbm9zZS0xOjIgMCA1
IDMgMCAwIDAgMiAwIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNUyBNaW5jaG8i
Ow0KCXBhbm9zZS0xOjIgMiA2IDkgNCAyIDUgOCAzIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg
Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp
bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh
bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ
e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1
bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z
dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy
bGluZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29M
aXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsN
CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41
aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m
YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWww
LCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdp
bi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh
bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5
bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj
b2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBl
cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y
OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u
bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp
biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2Vj
dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxp
c3QgbDANCgl7bXNvLWxpc3QtaWQ6ODY4NTQ5MDY7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJ
bXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xNTY0NDYxNTM2IDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4
NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4Njkz
O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ
bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl
bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p
bHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi
dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt
c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZv
bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1u
dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRh
Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k
ZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJ
e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ
bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0
Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6
bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4
dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp
b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3
Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K
CW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2
ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFt
aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt
YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u
ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu
Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51
bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1z
dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50
Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsOQ0K
CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0K
CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm
dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0
IGwxDQoJe21zby1saXN0LWlkOjI5ODE5NDU0MzsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTEz
NTI3NzY3NjA7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21zby1sZXZlbC10YWItc3RvcDouNWluOw0K
CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K
QGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwt
bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxl
dmVsMw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np
dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNv
LWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN
Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC10YWIt
c3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl
bnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My4waW47
DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9
DQpAbGlzdCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZl
bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6
bGV2ZWw4DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv
c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOQ0KCXtt
c28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0
Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDo0MjQ5NTU2
NTg7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi04MTE1
NDQ2NTYgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3
MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1s
ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0
ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXIt
Zm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl
bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6
bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZl
bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4
dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwyOmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6
bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y
NWluO30NCkBsaXN0IGwyOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1s
b3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0
aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNg0KCXttc28t
bGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u
ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBw
dDt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl
dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs
MjpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxl
dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl
eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1m
b3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs
LW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDMN
Cgl7bXNvLWxpc3QtaWQ6MTI1MTAzOTEzNDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6NDk0NTQ0
MjA0O30NCkBsaXN0IGwzOmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6MjsNCgltc28tbGV2
ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4
dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6
MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u
MjVpbjt9DQpAbGlzdCBsMzpsZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1z
by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp
c3QgbDM6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVt
YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVs
NQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv
bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDYNCgl7bXNvLWxl
dmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0
ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3Rv
cDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6
LS4yNWluO30NCkBsaXN0IGwzOmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJ
bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA
bGlzdCBsMzpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1u
dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDQNCgl7
bXNvLWxpc3QtaWQ6MTUwMTE5NDIyMzsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlz
dC10ZW1wbGF0ZS1pZHM6LTIwNzM5NDk4MjQgMTcyNTE4NTYxNCA2NzY5ODY5MSA2NzY5ODY5MyA2
NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpA
bGlzdCBsNDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLW51bWJl
ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0
b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6
LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseToi
VGltZXMgTmV3IFJvbWFuIjsNCgltc28tYmlkaS1mb250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0
IGw0OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs
LXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv
c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy
IE5ldyI7fQ0KQGxpc3QgbDQ6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl
dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv
LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250
LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDQ6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXIt
Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w
Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u
MjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWw1DQoJe21zby1sZXZl
bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10
YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu
ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsNDpsZXZl
bDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C
pzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u
OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpA
bGlzdCBsNDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s
ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt
YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5
bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0
Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl
dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh
bWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGw0OmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVy
LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3Rv
cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot
LjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGw1DQoJe21zby1saXN0LWlk
OjE1ODg4ODUxNTc7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xMDc5NTg1NzkyO30NCkBsaXN0
IGw1OmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy
LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw1OmxldmVsMg0K
CXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps
ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNTpsZXZlbDMNCgl7bXNvLWxldmVs
LXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0
LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDU6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoy
LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y
NWluO30NCkBsaXN0IGw1OmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNv
LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz
dCBsNTpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1i
ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDU6bGV2ZWw3
DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u
OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw1OmxldmVsOA0KCXttc28tbGV2
ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl
eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNTpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9w
OjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot
LjI1aW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTow
aW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs
dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t
W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk
bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu
ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJw
dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PiZndDsgVGhhdOKAmXMgbm90IHByb29mIG9mIHBvc3Nlc3Npb24sIHRoYXTigJlzIGp1c3QgdmVy
aWZ5aW5nIGEgTUFDLiBQb1AgcmVxdWlyZXMgdGhlIG90aGVyIHBhcnR5IChjbGllbnQpIHRvIHBy
b3ZpZGUgYSBmcmVzaCBwcm9vZiB0aGF0IHRoZXkgY29udHJvbCBhIGtleS4gVGhlIGNsaWVudCBp
c27igJl0IHVzaW5nIGFueSBrZXkgaW4gdGhpcyBjYXNlLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj5JIHRoaW5rIHdl4oCZcmUgb3BlcmF0aW5nIHdpdGggc2xpZ2h0bHkgZGlmZmVyZW50
IGRlZmluaXRpb25zIGZvciBQb1AuIE15IGRlZmluaXRpb24gaXMgc29tZXRoaW5nIGFsb25nIHRo
ZSBsaW5lcyBvZiDigJxhIHBvc3Nlc3NvciBvZiBhIGtleSBnZW5lcmF0ZWQgKG9yIHdhcyBpbiBw
b3NzZXNzaW9uIG9mKSB0aGlzIGRhdGEgYmxvYiBhdCBzb21lIHBvaW50LuKAnSBZb3UgY2FuIHBy
b2JhYmx5IHNlZSB3aHkgd2XigJlyZSBkaXNhZ3JlZWluZw0KIG92ZXIgd2hldGhlciBvciBub3Qg
UG9QIGlzIGZ1bmRhbWVudGFsLiBJIGRvbuKAmXQgdGhpbmsgdGhlcmUgaXMgYW55IHBvaW50IGlu
IGNvbnRpbnVpbmcgdGhpcyBzZW1hbnRpYyBkZWJhdGUuDQo8c3BhbiBzdHlsZT0iZm9udC1mYW1p
bHk6JnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDsiPiYjMTI4NTE1Ozwvc3Bhbj48bzpwPjwv
bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+Jmd0OyBUaGF04oCZcyBub3QgZGlyZWN0bHkgYXR0YWNoZWQgdG8g
dGhlIGFjY2VzcyB0b2tlbi4gVGhpcyBtZWFucyB0aGF0IGV2ZXJ5IFJTIGhhcyB0byBrbm93IGFi
b3V0IERQb1AuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UcnVlLCBidXQg
eW91IGNvdWxkIGF2b2lkIHRoYXQgYnkgZW1iZWRkaW5nIHRoZSBhY2Nlc3MgdG9rZW4gaW4gdGhl
IERQb1AgcHJvb2YgKHNpbWlsYXIgdG8gZHJhZnQtaWV0Zi1vYXV0aC1zaWduZWQtaHR0cC1yZXF1
ZXN0KSBhbmQgc2VuZGluZyB0aGF0IGFzIHRoZSBzb2xlIHRva2VuLiBUZWNobmljYWxseSwgdGhh
dOKAmXMgbm8gbG9uZ2VyIGEgYmVhcmVyIHRva2VuIHNvIHNlbmRpbmcgaXQgYXMg4oCcQXV0aG9y
aXphdGlvbjoNCiBiZWFyZXIgJmx0O3Rva2VuJmd0O+KAnSB3b3VsZCBiZSB3cm9uZywgYnV0IERQ
b1AgYWxyZWFkeSBjb21taXRzIHRoYXQgc2luLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BbHNv
LCBpZiB0aGUgQVMgaXMgZG9pbmcgYWxsIGF1dGhlbnRpY2F0aW9uIGNoZWNrcywgdGhlbiBpbiBh
IGxvdCBvZiBjYXNlcyB0aGUgUlMgd2lsbCBuZWVkIHRvIHByb3ZpZGUgdGhlIEFTIHdpdGggYWRk
aXRpb25hbCByZXF1ZXN0IG1ldGFkYXRhIGFsb25nIHdpdGggdGhlIG1hY2Fyb29uLCBzdWNoIGFz
IHRoZSBQT1NUIG1ldGhvZCB1c2VkLCBvcmlnaW4gKGlmIGl04oCZcyBub3QgaW5mZXJhYmxlIGZy
b20gd2hhdGV2ZXINCiBjcmVkZW50aWFscyB0aGUgUlMgdXNlcyB3aGVuIGNhbGxpbmcgdGhlIEFT
KSwgcmVxdWVzdCBwYXRoLCBzZW5kZXIgSVAsIGNsaWVudCBUTFMgY2VydGlmaWNhdGUsIHRva2Vu
IGJpbmRpbmcgSUQsIGV0Yy4gT2J2aW91c2x5IHRoZXJlIGFyZSBzb21lIGNhdmVhdHMgdGhhdCBk
b27igJl0IHJlcXVpcmUgdGhpcyAoZS5nLiwgdGltZXN0YW1wKS4gSXQgcmVtYWlucyB0byBiZSBz
ZWVuIHdoZXRoZXIgdGhlIGNhdmVhdHMgcmVxdWlyZWQgdG8gbWVldCBEUG9Q4oCZcw0KIHVzZSBj
YXNlIGZhbGwgaW50byB0aGUgZm9ybWVyIG9yIGxhdHRlciBjYXRlZ29yeS48bzpwPjwvbzpwPjwv
cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYWxpZ246anVzdGlmeSI+Jmd0OyBQbGVhc2UgZXhwbGFp
biBob3cgdG8gYWNoaWV2ZSB0aGUgZXhhbXBsZXMgSSBnYXZlIG9mIGxheWVyZWQgYXR0ZW51YXRp
b24gd2l0aG91dCB1c2luZyBtYWNhcm9vbnMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj4mZ3Q7IDEuIFRoZSBjbGllbnQgYWRkcyBjYXZlYXRzIChlZyBleHAgPSBub3cmIzQz
OzVzKSB0byBhbiBhY2Nlc3MgdG9rZW4gYW5kIHNlbmRzIGl0IHRvIHRoZSBSUy4gVGhlIFJTIGNy
ZWF0ZXMgZm91ciBjb3BpZXMgb2YgdGhlIHRva2VuIHdpdGggZGlmZmVyZW50IHNjb3BlIGNvbnN0
cmFpbnRzIGFuZCBzZW5kcyB0aGVtIHRvIGZvdXIgaW5kaXZpZHVhbCBtaWNyb3NlcnZpY2VzLjxv
OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYWxpZ246anVz
dGlmeSI+PGJyPg0KRm9yIG15IGV4YW1wbGUgYmVsb3c6PG86cD48L286cD48L3A+DQo8dWwgc3R5
bGU9Im1hcmdpbi10b3A6MGluIiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFn
cmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjt0ZXh0LWFsaWduOmp1c3RpZnk7bXNvLWxpc3Q6
bDQgbGV2ZWwxIGxmbzciPg0KTGV0IDxpPiZsdDthdF8wJmd0OzwvaT4gYmUgdGhlIGFjY2VzcyB0
b2tlbiBvYnRhaW5lZCBieSB0aGUgY2xpZW50IGZyb20gdGhlIEFTPG86cD48L286cD48L2xpPjxs
aSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjt0ZXh0LWFs
aWduOmp1c3RpZnk7bXNvLWxpc3Q6bDQgbGV2ZWwxIGxmbzciPg0KTGV0IDxpPkpXRSA8L2k+YmUg
YSBmdW5jdGlvbiB0aGF0IGdlbmVyYXRlcyBhIEpXRSBnaXZlbiBhIGtleSBhbmQgcGF5bG9hZC48
bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2lu
LWxlZnQ6MGluO3RleHQtYWxpZ246anVzdGlmeTttc28tbGlzdDpsNCBsZXZlbDEgbGZvNyI+DQpM
ZXQgPGk+Jmx0O0VLYXMmZ3Q7PC9pPiBiZSB0aGUgcHVibGljIGVuY3J5cHRpb24ga2V5IGZvciB0
aGUgQVMuPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu
YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNsaWVudDo8bzpwPjwvbzpwPjwv
cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxpPiZsdDthdF8xJmd0OzwvaT4gPSA8aT5KV0U8L2k+
KDxpPiZsdDtFS2FzJmd0OywgPC9pPnsgYXQ6IDxpPiZsdDthdF8wJmd0OzwvaT4sIGV4cDog4oCm
PGk+DQo8L2k+fSk8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiPlJTOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGk+Jmx0O2F0XzIm
Z3Q7IDwvaT49IDxpPkpXRTwvaT4oPGk+Jmx0O0VLYXMmZ3Q7PC9pPiwgeyBhdDogPGk+Jmx0O2F0
XzEmZ3Q7PC9pPiwgc2NvcGU6IHNjb3BlX2EgfSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiPjxpPiZsdDthdF8zJmd0OyA8L2k+PSA8aT5KV0U8L2k+KDxpPiZsdDtFS2FzJmd0
OzwvaT4sIHsgYXQ6IDxpPiZsdDthdF8xJmd0OzwvaT4sIHNjb3BlOiBzY29wZV9iIH0pPG86cD48
L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48aT4mbHQ7YXRfNCZndDsgPC9pPj0gPGk+
SldFPC9pPig8aT4mbHQ7RUthcyZndDs8L2k+LCB7IGF0OiA8aT4mbHQ7YXRfMSZndDs8L2k+LCBz
Y29wZTogc2NvcGVfYyB9KTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGk+
Jmx0O2F0XzUmZ3Q7IDwvaT49IDxpPkpXRTwvaT4oPGk+Jmx0O0VLYXMmZ3Q7PC9pPiwgeyBhdDog
PGk+Jmx0O2F0XzEmZ3Q7PC9pPiwgc2NvcGU6IHNjb3BlX2QgfSk8bzpwPjwvbzpwPjwvcD4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v
cm1hbCI+VGhpcyBwYXR0ZXJuIGNhbiBiZSBhcHBsaWVkIHRvIHRoZSBvdGhlciBzY2VuYXJpb3Mg
eW91IHByb3ZpZGVkLiBUaGUgZGlmZmVyZW5jZSBiZXR3ZWVuIG1hY2Fyb29ucyBhbmQgdGhlIGFi
b3ZlIGlzIHRoYXQgdGhlIGZvcm1lciByZWxpZXMgb24gY2hhaW5lZCBITUFDcyBhbmQgdGhlIGxh
dHRlciBvbiBhc3ltbWV0cmljIGNyeXB0by4gWW91IGFsc28gbG9zZSB0aGUgYWJpbGl0eSB0byBp
bnNwZWN0IGNhdmVhdHMNCiBvciBjb250ZXh0IHRoYXQgYXJlIGFscmVhZHkgaW4gdGhlIHRva2Vu
LCB3aGljaCBtYXkgb3IgbWF5IG5vdCBiZSBpbXBvcnRhbnQuIFRoaXMgaXMgYW4gaW50ZXJlc3Rp
bmcgcHJvcGVydHkgb2YgdGhlIG1hY2Fyb29uIHBhdHRlcm4gdGhhdCBJ4oCZbSBub3Qgc3VyZSB5
b3UgY291bGQgcmVwbGljYXRlIHdpdGhvdXQgYmFzaWNhbGx5IGltcGxlbWVudGluZyB0aGUgbWFj
YXJvb24gcGF0dGVybiBpbiBhIEpXVCBmb3JtYXQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZn
dDsgVmFsaWRhdGlvbiBhdCB0aGUgQVMgaXMgYW4gYWR2YW50YWdlIGluIG1vc3QgY2FzZXPigKY8
bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1vc3QsIGJ1dCBub3QgYWxsLiBE
UG9Q4oCZcyB1c2Ugb2YgYXN5bW1ldHJpYyBzaWduYXR1cmVzIG1ha2VzIGl0IG1vcmUgYW1lbmFi
bGUgdG8gZGlzdHJpYnV0ZWQgdmFsaWRhdGlvbiBpbiB0aG9zZSBzY2VuYXJpb3Mgd2hlcmUgaXQg
aXMgYXBwcm9wcmlhdGUuIFlvdXIgUlMtc3BlY2lmaWMgdG9rZW4gc29sdXRpb24gaXMgb25seSBh
cHBsaWNhYmxlIHRvIHVzZSBjYXNlcyB3aGVyZSB0aGUgUlMtc3BlY2lmaWMgdG9rZW5zDQogYXJl
IGFwcHJvcHJpYXRlIGFuZCB2aWFibGUuIFRoaXMgaXMgbm90IGEgcmVzdHJpY3Rpb24gdGhhdCBl
eGlzdHMgZm9yIERQb1AgYXMgd3JpdHRlbi4gQnV0IHlvdSBhcmUgY29ycmVjdCwgdGhlcmUgYXJl
IHdheXMgdG8gdXNlIHRoZSBtYWNhcm9vbiBwYXR0ZXJuIHdpdGggYXN5bW1ldHJpYyBjcnlwdG8u
IElmIHRoYXTigJlzIHlvdXIgcHJvcG9zYWwgdGhlbiBJIHN1Z2dlc3Qgc3BlY2lmeWluZyB0aGF0
LCBhcyBtb3N0IG9mIHRoZSBkb2N1bWVudGF0aW9uDQogSeKAmXZlIHNlZW4gKGluY2x1ZGluZyB0
aGUgdmFzdCBtYWpvcml0eSBvZiB0aGUgcGFwZXIpIGZvY3VzZXMgb24gdGhlIEhNQUMgYXBwcm9h
Y2guIFdoaWxlIEkgY2FuIHNlZSBob3cgb25lIGNvdWxkIGFwcGx5IHRoZSBwYXR0ZXJuIHdpdGgg
YXN5bW1ldHJpYyBjcnlwdG8sIGl0IHdhc27igJl0IGNsZWFyIHRvIG1lIGZyb20gdGhhdCBzZWN0
aW9uIG9mIHRoZSBwYXBlciB0aGF0IG15IHRob3VnaHRzIG1hdGNoIHdoYXQgdGhleSB3ZXJlIGRl
c2NyaWJpbmcuPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij4mZ3Q7IFRoZSBBUyBjYW4gc3RhcnQgaXNzdWluZyBtYWNhcm9vbnMgd2l0aG91dCBlaXRoZXIg
Y2xpZW50cyBvciBSUyBiZWluZyBhd2FyZeKApi48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj5J4oCZbSBub3QgZW50aXJlbHkgc3VyZSB3aGF0IHZhbHVlIHlvdeKA
mXJlIHRyeWluZyB0byBnZXQgYXQgaGVyZS4gSQ0KPGk+dGhpbms8L2k+IHlvdSBtZWFuIHRoYXQg
dGhlIHRva2VuIGhhbmRsaW5nL3ZhbGlkYXRpb24gbG9naWMgYXQgdGhlIFJTIGFuZCBBUyBpc27i
gJl0IHNpZ25pZmljYW50bHkgZGlmZmVyZW50IGZvciBub24tY29uc3RyYWluZWQgbWFjYXJvb25z
IHZlcnN1cyBjb25zdHJhaW5lZCBtYWNhcm9vbnMsIHdoZXJlYXMgaXQgaXMgZm9yIERQb1A/IFRy
dWUsIGZvciBEUG9QIHRoZSBSUyB3b3VsZCBuZWVkIHRvIGtub3cgdGhhdCBpdCBzaG91bGQgc2Vu
ZCB0aGUNCiBEUG9QIHByb29mIHRvIHRoZSBBUywgYnV0IFJTZXMgY291bGQgYmUgY29uZmlndXJl
ZCB0byBhbHdheXMgaW5jbHVkZSBpdCBpZiBwcmVzZW50IGluIHRoZSByZXF1ZXN0LiBPbiB0aGUg
QVMgc2lkZSwgcmVnYXJkbGVzcyBvZiB0b2tlbiBmb3JtYXQgdGhlIEFTIHdpbGwgbmVlZCBsb2dp
YyB0byB2YWxpZGF0ZSB0aGF0IHRoZSBzZW5kZXIgY29uc3RyYWludCBpcyBmdWxmaWxsZWQuIFRo
aXMgbWF5IGJlIHZlcnkgc2ltcGxlIChlLmcuLCBqdXN0IGENCiB0aW1lc3RhbXAgY2hlY2spLCBv
ciBhcyByZWxhdGl2ZSBjb21wbGV4IGFzIHZhbGlkYXRpbmcgYSBEUG9QIHRva2VuLCBkZXBlbmRp
bmcgb24gdGhlIG5lZWRzIG9mIHRoZSB1c2UgY2FzZSBhbmQgdGhlIGNhdmVhdHMgaW52b2x2ZWQu
PGJyPg0KPGJyPg0KJmd0OyAoUmU6IGFzeW1tZXRyaWMgY3J5cHRvKSBUaGF04oCZcyBub3QgYSBy
ZXF1aXJlbWVudCwgaXTigJlzIGEgdGVjaG5vbG9neSBjaG9pY2UuPGJyPg0KRmFpciBlbm91Z2gs
IGJ1dCB0ZWNobm9sb2d5IGNob2ljZXMgYXJlIGRyaXZlbiBieSByZXF1aXJlbWVudHMuIEJhc2Vk
IG9uIGNvbnZlcnNhdGlvbnMgSeKAmXZlIGhhZCB3aXRoIEpvaG4gQnJhZGxleSAoYW5kIG90aGVy
cyBJIHRoaW5rPyksIHRoaXMgb25lIGluIHBhcnRpY3VsYXIgc3RlbXMgaW4gcGFydCBmcm9tIHRo
ZSBkZXNpcmUgdG8ga2VlcCB0aGUga2V5IGxvY2tlZCB1cCBiZWhpbmQgdGhlIGJyb3dzZXLigJlz
IGNyeXB0byBBUEksIGFuZCBub3QNCiBkaXJlY3RseSBleHBvc2VkIHRvIEphdmFTY3JpcHQuIEni
gJltIHNvbWV3aGF0IHNrZXB0aWNhbCBvZiB0aGUgdmFsdWUgb2YgdGhpcywgc2luY2UgYW4gYXR0
YWNrZXIgY291bGQganVzdCBhcyBlYXNpbHkgY2FsbCB0aGUgY3J5cHRvIEFQSSBkaXJlY3RseSwg
YnV0IGlmIHdlIHNlZSB0aGlzIGFzIGEgcmVxdWlyZW1lbnQsIHRoZW4gdGhhdCB3b3VsZCBzZWVt
IHRvIHJlcXVpcmUgYXN5bW1ldHJpYyBjcnlwdG8uIEhvd2V2ZXIsIGFzIHlvdSBub3RlZA0KIHRo
YXQgd291bGQgbm90IHJ1bGUgb3V0IHRoZSB1c2Ugb2YgdGhlIG1hY2Fyb29uIHBhdHRlcm4uPG86
cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgVGhlcmUgYXJlIHBsZW50eSBvZiBleGlzdGluZyBp
bnRlcm9wZXJhYmxlIG1hY2Fyb29uIGxpYnJhcmllc+KApjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+4oCcVXNlIG9uZSBvZiB0aGVzZSBleGlzdGluZyBsaWJyYXJpZXPigJ0g
aXMgbm90IGFwcHJvcHJpYXRlIGFzIG5vcm1hdGl2ZSB0ZXh0IGluIGEgc3BlY2lmaWNhdGlvbi4g
VGhhdCBmb3JtYXQgbmVlZHMgdG8gYmUgZXhwbGljaXRseSBkZWZpbmVkLiBDYXZlYXQgdHlwZXMg
KGUuZy4sIGV4cGlyeSwgc291cmNlIElQLCBjbGllbnQgVExTIGNlcnRpZmljYXRlLCBldGMuKSBu
ZWVkIHRvIGJlIGRlZmluZWQsIHByb2JhYmx5DQogd2l0aCBhbiBJQU5BIHJlZ2lzdHJ5LiBQcm9j
ZXNzaW5nIGluc3RydWN0aW9ucyBuZWVkIHRvIGJlIHdyaXR0ZW4gKGUuZy4sIHdoYXQgaGFwcGVu
cyB3aGVuIGNhdmVhdHMgY29uZmxpY3Q/KS4gU2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgYXJvdW5k
IHRoaXJkLXBhcnR5IGNhdmVhdHMgbmVlZCB0byBiZSB3cml0dGVuLjxvOnA+PC9vOnA+PC9wPg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj4mZ3Q7IEhNQUMtU0hBMjU2IGlzIHZlcnkgd2lkZWx5IGltcGxlbWVudGVkIChhbmQg
dXN1YWxseSBzZWN1cmVseSkuIFRoYXTigJlzIGFsbCB5b3UgbmVlZC48bzpwPjwvbzpwPjwvcD4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYXTigJlzIHdoYXQgcGVvcGxlIHNhaWQgYWJvdXQgU0hB
LTEuIENyeXB0b2dyYXBoaWMgYWdpbGl0eSBpcyBhIGZlYXR1cmUsIG5vdCBhIGJ1Zy48bzpwPjwv
bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+QWdhaW4sIEnigJltIG5vdCBzYXlpbmcgd2Ugc2hvdWxkbuKAmXQg
dXNlIG1hY2Fyb29ucywgYnV0IEkgdGhpbmsgeW91IGFyZSB1bmRlcnNlbGxpbmcgdGhlIGFtb3Vu
dCBvZiB3b3JrIHJlcXVpcmVkIGFuZCBvdmVyc2VsbGluZyB0aGVpciB2YWx1ZS48bzpwPjwvbzpw
PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPuKAkyZuYnNwOzxv
OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm
b250LXNpemU6MTIuMHB0Ij5Bbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuPG86cD48L286cD48L3Nw
YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w
cHQiPkFXUyBJZGVudGl0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6
c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr
Ij5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJs
YWNrIj5OZWlsIE1hZGRlbiAmbHQ7bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNvbSZndDs8YnI+DQo8
Yj5EYXRlOiA8L2I+VHVlc2RheSwgTm92ZW1iZXIgMjYsIDIwMTkgYXQgMTI6MDIgQU08YnI+DQo8
Yj5UbzogPC9iPiZxdW90O1JpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlJnF1b3Q7ICZsdDtyaWNo
YW5uYUBhbWF6b24uY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+QnJpYW4gQ2FtcGJlbGwgJmx0O2Jj
YW1wYmVsbEBwaW5naWRlbnRpdHkuY29tJmd0Oywgb2F1dGggJmx0O29hdXRoQGlldGYub3JnJmd0
Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW09BVVRILVdHXSBOZXcgVmVyc2lvbiBOb3RpZmlj
YXRpb24gZm9yIGRyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw
PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
T24gMjYgTm92IDIwMTksIGF0IDAwOjEwLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7
cmljaGFubmFAYW1hem9uLmNvbSZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk
aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu
MHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9ibG9j
a3F1b3RlPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn
aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IEEgY2xp
ZW50IGNhbiByZWNlaXZlIGEgbWFjYXJvb24gYW5kIHVzZSBpdCBsaWtlIGEgcHVyZSBiZWFyZXIg
dG9rZW4gaWYgdGhleSB3YW50LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
SW4gd2hpY2ggY2FzZSBpdOKAmXMgbm90IHNlbmRlciBjb25zdHJhaW5lZCwgYW5kIG5vIGRpZmZl
cmVudCB0aGFuIGFueSBvdGhlciBzeW1tZXRyaWNhbGx5IGVuY3J5cHRlZCBvciBITUFD4oCZZCBi
ZWFyZXIgdG9rZW4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlllcywgdGhhdOKAmXMgd2hhdCBJIHNhaWQuIEJ1dCBp
ZiB0aGV5IHdhbnQgdG8gdGhleSBjYW4gYXR0YWNoIGNvbnRleHR1YWwgY2F2ZWF0cy4gRm9yIGV4
YW1wbGUsIHRoZXkgY2FuIGF0dGFjaCBodHUvaHRtL2p0aSBjbGFpbXMganVzdCBsaWtlIGluIERQ
b1AuIE9yIHRoZXkgY2FuIGF0dGFjaCBhIGNhdmVhdCB0aGF0IGlzIGEgaGFzaCBvZiB0aGUgbWVz
c2FnZSBhbmQgaGVhZGVycyBhbmQgZ2V0IHNvbWV0aGluZw0KIGVxdWl2YWxlbnQgKGFsbW9zdCBp
ZGVudGljYWwpIHRvIEFXUyBITUFDIHNpZ25hdHVyZXMuJm5ic3A7PG86cD48L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIHlvdXIgcHJldmlvdXMgbWVz
c2FnZSB5b3UgYXJndWVkIHRoYXQgbWFjYXJvb25zIHdlcmUganVzdCBQb1AgdG9rZW5zIHdoZXJl
IHRoZSBrZXkgaXMgaW5saW5lZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+TXkgcG9zaXRpb24gaXMgdGhhdCB0aGV5IGNhbiBiZSBlaXRoZXIu
Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N
Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w
cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i
c3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IE1hbnkgQVNlcyBp
c3N1ZSBITUFDLXNpZ25lZCBhY2Nlc3MgdG9rZW5zIGFscmVhZHkgd2l0aG91dCB0aGUgY2xpZW50
IGRvaW5nIGFueSBraW5kIG9mIHByb29mIG9mIHBvc3Nlc3Npb24uPG86cD48L286cD48L3A+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj5BbmQgaG93IGRvZXMgdGhlIEFTIHZhbGlkYXRlIHRob3NlIHRv
a2Vucz8gQnkgY2hlY2tpbmcgdGhhdCB0aGUgSE1BQyB3YXMgZ2VuZXJhdGVkIHVzaW5nIGEga2V5
IHRoYXQgdGhlIEFTIHBvc3Nlc3NlcyBhbmQgdHJ1c3RzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+
DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGF04oCZcyBu
b3QgcHJvb2Ygb2YgcG9zc2Vzc2lvbiwgdGhhdOKAmXMganVzdCB2ZXJpZnlpbmcgYSBNQUMuIFBv
UCByZXF1aXJlcyB0aGUgb3RoZXIgcGFydHkgKGNsaWVudCkgdG8gcHJvdmlkZSBhIGZyZXNoIHBy
b29mIHRoYXQgdGhleSBjb250cm9sIGEga2V5LiBUaGUgY2xpZW50IGlzbuKAmXQgdXNpbmcgYW55
IGtleSBpbiB0aGlzIGNhc2UuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5
bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+SW4gdGhlIGNhc2Ugb2YgbWFjYXJvb25zLCB0aGUgQVMgY2hlY2tzIHRo
YXQgdGhlIGNoYWluZWQgSE1BQyB3YXMgZ2VuZXJhdGVkIGZyb20gYSBrZXkgdGhhdCB0aGUgQVMg
aXNzdWVkIHRvIHRoZSBjbGllbnQgKGluIHRoZSBmb3JtIG9mIHRoZSBITUFDIG9uIHRoZSBvcmln
aW5hbCBtYWNhcm9vbikuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlllcy4gWW91IHNlZSB0aGUgZGlmZmVyZW5jZSB0
aGVyZSwgcmlnaHQ/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
Pjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10
b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IHRoZSBh
dHRlbnVhdGlvbnMgKGNhdmVhdHMpIGFyZSBhdHRhY2hlZCBkaXJlY3RseSB0byB0aGUgYWNjZXNz
IHRva2VuIGFuZCBhcmUgdmVyaWZpZWQgYnkgdGhlIEFTLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+VGhpcyBpcyBub3QgdW5pcXVlIHRvIG1hY2Fyb29ucy4gQW4gUlMgY291
bGQganVzdCBhcyBlYXNpbHkgc2VuZCB0aGUgYWNjZXNzIHRva2VuICYjNDM7IERQb1AgcHJvb2Yg
dG8gdGhlIEFTIGZvciB2ZXJpZmljYXRpb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxv
Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYXTigJlzIG5vdCBkaXJl
Y3RseSBhdHRhY2hlZCB0byB0aGUgYWNjZXNzIHRva2VuLiBUaGlzIG1lYW5zIHRoYXQgZXZlcnkg
UlMgaGFzIHRvIGtub3cgYWJvdXQgRFBvUC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2tx
dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiPiZndDsgbWFjYXJvb24gY2F2ZWF0cyBjYW4gYmUgbGF5ZXJlZC48bzpwPjwvbzpw
PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFsbCB5b3VyIG90aGVyIGV4YW1wbGVzIGFyZSBq
dXN0IGV4YW1wbGVzIG9mIHRoaXMsIHdoaWNoIGlzIG5vdCBhdCBhbGwgdW5pcXVlIHRvIG1hY2Fy
b29ucy4NCjxpPlNpZ24oS2V5LCBUb2tlbiAmIzQzOyBTb21ldGhpbmcpPC9pPiBpcyBub3QgYSBu
ZXcgY29uY2VwdC4gTWFjYXJvb25zIGFyZSBhIG5pY2UgcGF0dGVybiBmb3IgZG9pbmcgdGhpcyBw
cm92aWRlZCB5b3UgY2FuIGxpdmUgd2l0aCB0aGUgZGVwZW5kZW5jeSBvbiBITUFDLCBidXQgdGhl
eeKAmXJlIG5vdCB0aGUgb25seSB3YXkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2tx
dW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBsZWFzZSBleHBsYWluIGhvdyB0
byBhY2hpZXZlIHRoZSBleGFtcGxlcyBJIGdhdmUgb2YgbGF5ZXJlZCBhdHRlbnVhdGlvbiB3aXRo
b3V0IHVzaW5nIG1hY2Fyb29ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+WW91IGVsaWRlZCB0aG9zZSBleGFtcGxlcywgc28gaGVyZSB0aGV5
IGFyZSBhZ2Fpbjo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+MS4gVGhlIGNsaWVudCBhZGRzIGNhdmVhdHMgKGVnIGV4cCA9IG5vdyYjNDM7NXMp
IHRvIGFuIGFjY2VzcyB0b2tlbiBhbmQgc2VuZHMgaXQgdG8gdGhlIFJTLiBUaGUgUlMgY3JlYXRl
cyBmb3VyIGNvcGllcyBvZiB0aGUgdG9rZW4gd2l0aCBkaWZmZXJlbnQgc2NvcGUgY29uc3RyYWlu
dHMgYW5kIHNlbmRzIHRoZW0gdG8gZm91ciBpbmRpdmlkdWFsIG1pY3Jvc2VydmljZXMuJm5ic3A7
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw
PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjIu
IEEgZ2F0ZXdheSBhZGRzIGFkZGl0aW9uYWwgY2F2ZWF0cyB0byBhY2Nlc3MgdG9rZW5zIGlzc3Vl
ZCB0byBleHRlcm5hbCBjbGllbnRzIChlZyBsaW1pdGluZyB0aGUgZXhwaXJ5IHRpbWUgb3Igc2Nv
cGUpLiBUaGVzZSBjYXZlYXRzIGFyZSBlbmZvcmNlZCBldmVuIGlmIHRoZSBjbGllbnRzIGRvbuKA
mXQgZ28gdmlhIHRoZSBnYXRld2F5IHdoZW4gdGFsa2luZyB0byBSU2VzLiZuYnNwOzxvOnA+PC9v
OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zLiBUaGUgbVRM
Uy9Qb1AgdHJhbnNmZXIgb2Ygb3duZXJzaGlwIHBhdHRlcm4gSSBkZXNjcmliZWQuJm5ic3A7PG86
cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu
YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJvbnVz
IHBvaW50cyBmb3IgZGVtb25zdHJhdGluZyB0aG9zZSB0aGluZ3Mgd2l0aG91dCB0b2tlbiBleGNo
YW5nZSBhbmQgd2l0aG91dCB0aGUgUlMgYmVpbmcgYWJsZSB0byBtYWtlIGFyYml0cmFyeSB0b2tl
biBmb3JnZXJpZXMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h
cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZ
bSBub3QgdHJ5aW5nIHRvIGtub2NrIG1hY2Fyb29ucyBoZXJlLiBJIGxlZ2l0aW1hdGVseSB0aGlu
ayB0aGV54oCZcmUgYSBuZWF0IHBhdHRlcm4uIEJ1dCB0aGV5IGFyZSBpbmNvbXBhdGlibGUgd2l0
aA0KPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWZldHQtb2F1dGgt
ZHBvcC0wMyNzZWN0aW9uLTQuMiI+YSBzdGF0ZWQgcmVxdWlyZW1lbnQ8L2E+IGJ5IHRoZSBEUG9Q
IGF1dGhvcnMgKHVzZSBhbiBhc3ltbWV0cmljIGRpZ2l0YWwgc2lnbmF0dXJlIGFsZ29yaXRobSks
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiPlRoYXTigJlzIG5vdCBhIHJlcXVpcmVtZW50LCBpdOKAmXMgYSB0ZWNobm9s
b2d5IGNob2ljZS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v
cm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy
Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj5yZXF1aXJlIHZhbGlkYXRpb24gYXQgdGhlIEFTIG9yIGRpc3RyaWJ1dGlvbiBvZiBz
eW1tZXRyaWMga2V5cyB0byBSU2VzIChub3QgbmVjZXNzYXJpbHkgYSBwcm9ibGVtIGlmIHlvdeKA
mXJlIGlzc3VpbmcgUlMtc3BlY2lmaWMgdG9rZW5zKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5WYWxpZGF0aW9uIGF0
IHRoZSBBUyBpcyBhbiBhZHZhbnRhZ2UgaW4gbW9zdCBjYXNlcy4gVGhlIEFTIGlzIG1vcmUgbGlr
ZWx5IHRvIGdldCBpdCByaWdodCBhbmQgdGhpcyBpcyBvZnRlbiBtb3JlIHNjYWxhYmxlIC0gYW4g
UlMgY2FuIHR5cGljYWxseSBzZW5kIG1hbnkgbW9yZSB0b2tlbiBpbnRyb3NwZWN0aW9uIHJlcXVl
c3RzIGluIHBhcmFsbGVsIHRoYW4gdGhleSBjYW4gdmFsaWRhdGUgcHVibGljIGtleSBzaWduYXR1
cmVzDQogYmVjYXVzZSB0aGUgbGF0dGVyIHJlcXVpcmUgaG90IENQVSB0aW1lLiBBIG5ldHdvcmsg
cm91bmR0cmlwIHdpdGhpbiB0aGUgc2FtZSBkYXRhY2VudHJlIGFsc28gdHlwaWNhbGx5IHRha2Vz
IGxlc3MgdGltZSB0aGFuIHZhbGlkYXRpbmcgYSBwdWJsaWMga2V5IHNpZy4gVmFsaWRhdGluZyBh
dCB0aGUgQVMgaXMgYWxzbyB0aGUgZWFzaWVzdCB3YXkgdG8gZW5zdXJlIHRpbWVseSB0b2tlbiBy
ZXZvY2F0aW9uLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz
cz0iTXNvTm9ybWFsIj5CdXQgeW91IGRvbuKAmXQgKm5lZWQqIHRvIHVzZSBwdXJlbHkgc3ltbWV0
cmljIGtleXMgd2l0aCBtYWNhcm9vbnMuIElmIHRoZSBBUyBrbm93cyB0aGUgUlMoZXMpIHRoZW4g
aXQgY2FuIGVuY3J5cHQgYSBmcmVzaCBzeW1tZXRyaWMga2V5IHVzaW5nIGEgcHVibGljIGtleSBy
ZWdpc3RlcmVkIGZvciB0aGF0IFJTIGFuZCBhZGQgaXQgdG8gdGhlIHRva2VuIGlkZW50aWZpZXIu
Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiPlRoZXJl4oCZcyBldmVuIGEgdmFyaWFudCBvZiBtYWNhcm9vbnMgdXNpbmcgcHVibGljIGtl
eSBzaWduYXR1cmVzIChzZWUgcmVmIGluIG9yaWdpbmFsIG1hY2Fyb29uIHBhcGVyKS4mbmJzcDs8
bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0K
PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn
aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4sIHJlcXVpcmUg
YWRkaXRpb25hbCBub24tdHJpdmlhbCB3b3JrIHRvIHVzZSAoc2luY2UgdGhleeKAmXJlIGEgcGF0
dGVybiwgbm90IGEgZm9ybWF0KSwgYW5kIHJlcXVpcmUgZGV2ZWxvcGVycyB0byBsZWFybiBhIG5l
dyB0b2tlbiBmb3JtYXQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFzIEkgYXJndWVkLCB0aGlzIGlzIGluY3JlbWVu
dGFsLiBUaGUgQVMgY2FuIHN0YXJ0IGlzc3VpbmcgbWFjYXJvb25zIHdpdGhvdXQgZWl0aGVyIGNs
aWVudHMgb3IgUlMgYmVpbmcgYXdhcmUgKHNvIGxvbmcgYXMgdGhlIFJTZXMgYXJlIGRvaW5nIHRv
a2VuIGludHJvc3BlY3Rpb24gYWxyZWFkeSkuIFdoZW4gdGhlIGNsaWVudCB3YW50cyB0byBzdGFy
dCB0YWtpbmcgYWR2YW50YWdlIG9mIG1hY2Fyb29ucyB0aGV5DQoganVzdCB1c2Ugb25lIG9mIHRo
ZSBtYW55IGV4aXN0aW5nIG1hY2Fyb29uIGxpYnJhcmllcyAobGlibWFjYXJvb25zLCBqbWFjYXJv
b25zLCBldGMpIHRvIGFwcGVuZCBjYXZlYXRzLiBUaGUgUlMgc3RpbGwgZG9lc27igJl0IG5lZWQg
dG8gZG8gYW55dGhpbmcuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9
Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+SWYgeW91IHdhbnQgRFBvUCB0byB1c2UgbWFjYXJvb25zLCB5b3UgbmVlZCB0
byBtYWtlIHRoZSBhcmd1bWVudCB0aGF0OjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0eWxlPSJtYXJn
aW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdy
YXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zIj5UaGUg
YXN5bW1ldHJpYyBkaWdpdGFsIHNpZ25hdHVyZSBhbGdvcml0aG0gcmVxdWlyZW1lbnQgaXMgdW5u
ZWNlc3NhcnkuPG86cD48L286cD48L2xpPjwvb2w+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJl2ZSBhcmd1ZWQgdGhhdCBtdWx0aXBsZSB0
aW1lcyBpbiB0aGlzIHRocmVhZC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBz
dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8b2wg
c3R5bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iMiIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9Ik1z
b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDIgbGV2ZWwx
IGxmbzMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgi
IHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzMiPkRQb1Agc2hv
dWxkIG9ubHkgYWRkcmVzcyB1c2UgY2FzZXMgd2hlcmUgY2VudHJhbGl6ZWQgdmFsaWRhdGlvbiBh
dCB0aGUgQVMgaXMgdmlhYmxlLCBvciB3aGVyZSBSU2VzIGNhbiBiZSB0cnVzdGVkIHdpdGggc3lt
bWV0cmljIGtleXMuPG86cD48L286cD48L2xpPjwvb2w+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNlZSBhYm92ZS4mbmJzcDs8bzpwPjwvbzpw
PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286
cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t
OjUuMHB0Ij4NCjxkaXY+DQo8b2wgc3R5bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iNCIgdHlw
ZT0iMSI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDow
aW47bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9saT48bGkgY2xh
c3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDIg
bGV2ZWwxIGxmbzMiPlRoZSB2YWx1ZSBwcm92aWRlZCBieSBtYWNhcm9vbnMgKGUuZy4sIHNlbmRl
ci1jb25zdHJhaW5lZCB0b2tlbnMgd2l0aG91dCBjbGllbnQga2V5IG5lZ290aWF0aW9uL3JlZ2lz
dHJhdGlvbi9kaXN0cmlidXRpb24pIGlzIHdvcnRoIHRoZSBjb3N0IG9mIGRlZmluaW5nIHRoZSBm
b3JtYXQgb2YgYSBEUG9QIG1hY2Fyb29uLA0KIHNwZWNpZmljYXRpb24gb2YgYWxnb3JpdGhtcyB1
c2VkLCBldGMuLCBhbmQgdGhlIGNvZ25pdGl2ZSBsb2FkIG9uIGRldmVsb3BlcnMgd2hvIG5vdyBo
YXZlIHRvIGxlYXJuIGEgbmV3IHRva2VuIGZvcm1hdCAoaW5zdGVhZCBvZiBKV1QsIHdoaWNoIHRo
ZXkNCjxpPm1pZ2h0PC9pPiBhbHJlYWR5IHdvcmsgd2l0aCkuPG86cD48L286cD48L2xpPjwvb2w+
DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw
PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo
ZXJlIGFyZSBwbGVudHkgb2YgZXhpc3RpbmcgaW50ZXJvcGVyYWJsZSBtYWNhcm9vbiBsaWJyYXJp
ZXMgLSBzZWUgbGlua3MgZnJvbSBodHRwOi8vbWFjYXJvb25zLmlvIC4gSE1BQy1TSEEyNTYgaXMg
dmVyeSB3aWRlbHkgaW1wbGVtZW50ZWQgKGFuZCB1c3VhbGx5IHNlY3VyZWx5KS4gVGhhdOKAmXMg
YWxsIHlvdSBuZWVkLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj5BbmQgYXMgSSBzYWlkIGJlZm9yZSwgb25lIG9mIHRoZSBrZXkgYWR2
YW50YWdlcyBpcyB0aGF0IGNsaWVudHMgYW5kIFJTZXMgb25seSBuZWVkIHRvIGNhcmUgYWJvdXQg
dGhlIGZvcm1hdCB3aGVuIHRoZXkgd2FudCB0byB0YWtlIGFkdmFudGFnZSBvZiBpdC4gVGhleSBj
YW4gaGFwcGlseSB0cmVhdCB0aGVtIGFzIHB1cmUgYmVhcmVyIHRva2VucyB1bnRpbCB0aGVuLiZu
YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij5Db250cmFzdCB3aXRoIERQb1Agd2hlcmUgdGhlIFJTIG5lZWRzIHRvIHBvdGVudGlhbGx5IHN1
cHBvcnQgMTAgZGlmZmVyZW50IHB1YmxpYyBrZXkgSldTIGFsZ29yaXRobXMsIG9yIG90aGVyd2lz
ZSBoYXZlIHNvbWUgd2F5IG9mIG5lZ290aWF0aW5nIGFsZ29yaXRobSBzdXBwb3J0IHdpdGggdGhl
IGNsaWVudCBhbmQvb3IgQVMuIChJbiB3aGljaCBjYXNlIHRoZXkgY2FuIG5lZ290aWF0ZSBhIGtl
eSkuIEFuZCB0aGUNCiBjbGllbnQsIEFTLCBhbmQgKmV2ZXJ5KiBSUyBuZWVkcyB0byBiZSBzaW11
bHRhbmVvdXNseSB1cGdyYWRlZCB0byBzdXBwb3J0IGl0LiAoT3RoZXJ3aXNlIGEgcm9ndWUgUlMg
Y2FuIHJlcGxheSB0aGUgYWNjZXNzIHRva2VuIGF0IGFuIFJTIHRoYXQgaGFzbuKAmXQgYmVlbiB1
cGdyYWRlZCB5ZXQuIE5vdCBwb3NzaWJsZSB3aXRoIG1hY2Fyb29ucykuJm5ic3A7PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv
bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5laWw8bzpwPjwv
bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7
PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpw
PjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1i
b3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v
OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTIuMHB0Ij7igJMmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+QW5uYWJlbGxlIFJpY2hhcmQg
QmFja21hbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5BV1MgSWRlbnRpdHk8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJi
b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAw
aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u
dC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+TmVpbCBNYWRkZW4gJmx0O25laWwubWFkZGVuQGZv
cmdlcm9jay5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlN1bmRheSwgTm92ZW1iZXIgMjQsIDIw
MTkgYXQgMTI6NTYgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90O1JpY2hhcmQgQmFja21hbiwgQW5u
YWJlbGxlJnF1b3Q7ICZsdDtyaWNoYW5uYUBhbWF6b24uY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+
QnJpYW4gQ2FtcGJlbGwgJmx0O2JjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29tJmd0Oywgb2F1dGgg
Jmx0O29hdXRoQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW09BVVRILVdH
XSBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50
eHQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y
bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPk9uIDIyIE5vdiAyMDE5LCBhdCAxMjoyNiwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVs
bGUgJmx0O3JpY2hhbm5hQGFtYXpvbi5jb20mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu
MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn
aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mZ3Q7IFllcyBvZiBj
b3Vyc2UuIEJ1dCB0aGlzIGlzIHRoZSBITUFDICp0YWcqIG5vdCB0aGUgb3JpZ2luYWwga2V5Ljxv
OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5TdXJlLiBBbmQgaWYgdGhlIGNs
aWVudCBhdHRlbnVhdGVzIHRoZSBtYWNhcm9vbiwgaXQgaXMgdXNlZCBhcyBhIGtleSB0aGF0IHRo
ZSBjbGllbnQgcHJvdmVzIHBvc3Nlc3Npb24gb2YgYnkgcHJlc2VudGluZyB0aGUgY2hhaW5lZCBI
TUFDLiBDbGllbnRzIGRvaW5nIERQb1AgYXJlbuKAmXQgcHJvdmluZyBwb3NzZXNzaW9uDQogb2Yg
dGhlIOKAnG9yaWdpbmFsIGtleeKAnSAoaS5lLiwgYSBrZXkgdXNlZCB0byBnZW5lcmF0ZSB0aGUg
YWNjZXNzIHRva2VuKSBlaXRoZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i
bG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkEgd2F5IHRvIHRoaW5rIG9m
IHRoaXMgaXMgdGhhdCBtYWNhcm9vbnMgYnJpZGdlIHRoZSBnYXAgYmV0d2VlbiBiZWFyZXIgdG9r
ZW5zIGFuZCBwcm9vZiBvZiBwb3NzZXNzaW9uIHRva2Vucy4gQSBjbGllbnQgY2FuIHJlY2VpdmUg
YSBtYWNhcm9vbiBhbmQgdXNlIGl0IGxpa2UgYSBwdXJlIGJlYXJlciB0b2tlbiBpZiB0aGV5IHdh
bnQuIE9uIHRoZSBvdGhlciBoYW5kIHRoZXkgY2FuIGFwcGVuZCBjb250ZXh0dWFsDQogY2F2ZWF0
cyB0aGF0IHRpZ2h0bHkgY29uc3RyYWluIGEgdG9rZW4gYXQgdGhlIHBvaW50IG9mIHVzZSwgbGlr
ZSBhIFBvUCB0b2tlbi4gWW91IGNhbiBldmVuIGRvIGEgZnVsbCBjaGFsbGVuZ2UtcmVzcG9uc2Ug
cHJvdG9jb2wgd2hlcmUgdGhlIFJTIHNlbmRzIGEgY2hhbGxlbmdlIGFuZCB0aGUgY2xpZW50IGFw
cGVuZHMgaXQgYXMgYSBjYXZlYXQuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJs
b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8
ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h
bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jmd0OyBXZWxsLCB5b3UgZG9u4oCZ
dCBoYXZlIHRvIHJldHVybiBhIGtleSBmcm9tIHRoZSB0b2tlbiBlbmRwb2ludCBmb3IgYSBzdGFy
dC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+WWVzLCB0aGF04oCZcyB3
aGF0IEkgbWVhbnQgYnkgc2F5aW5nIHRoYXQgaXQgZWxpbWluYXRlcyBrZXkgbmVnb3RpYXRpb24u
IFRob3VnaCBJIHN1cHBvc2UgaXTigJlzIG1vcmUgY29ycmVjdCB0byBzYXkgdGhhdCBpdCBpbmxp
bmVzIGl0LiBUaGUgQVMgc3RpbGwgcHJvdmlkZXMgYSBrZXksIGl0IGp1c3QgaGFwcGVucw0KIHRv
IGJlIHBhcnQgb2YgdGhlIGFjY2VzcyB0b2tlbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k
aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2hpY2ggaGVs
cHMgYSBsb3Qgd2l0aCBiYWNrd2FyZHMgY29tcGF0LiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu
MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn
aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5NYWNhcm9vbnMgYXJl
IGFuIGludGVyZXN0aW5nIHBhdHRlcm4sIGJ1dCBub3QgYmVjYXVzZSB0aGV54oCZcmUgbm90IGRv
aW5nIFBvUC4gUHJvb2Ygb2YgcG9zc2Vzc2lvbiBpcyBwcmV0dHkgY29yZSB0byB0aGUgd2hvbGUg
aWRlYSBvZiBkaWdpdGFsIHNpZ25hdHVyZXMgYW5kIEhNQUNzLjxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J
IHdvdWxkIGFyZ3VlIHRoYXQgdGhpcmQgcGFydHkgdmVyaWZpYWJpbGl0eSBhbmQgbm9uLXJlcHVk
aWF0aW9uIGFyZSBhbHNvIGNvcmUgdG8gZGlnaXRhbCBzaWduYXR1cmVzLCBidXQgYXJlbuKAmXQg
cmVxdWlyZWQgb3IgdXNlZCBieSBEUG9QIChhbmQgYWN0dWFsbHkgY2F1c2UgcHJvYmxlbXMpLiZu
YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+
Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij5JIGFsc28gZG9u4oCZdCB0aGluayBQb1AgaXMgY29yZSB0byBITUFDLiBNYW55IEFTZXMgaXNz
dWUgSE1BQy1zaWduZWQgYWNjZXNzIHRva2VucyBhbHJlYWR5IHdpdGhvdXQgdGhlIGNsaWVudCBk
b2luZyBhbnkga2luZCBvZiBwcm9vZiBvZiBwb3NzZXNzaW9uLiBUaGV5IGFyZSBhIGNvbnZlbmll
bnQgd2F5IG9mIG1pbnRpbmcgYmVhcmVyIHRva2Vucy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv
ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1
LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy
Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+V2hhdCBtYWtlcyB0
aGVtIGludGVyZXN0aW5nIGlzIHRoZSB3YXkgdGhleSBpbmxpbmUga2V5IGRpc3RyaWJ1dGlvbi4g
V2hldGhlciBvciBub3QgdGhleeKAmXJlIGFwcGxpY2FibGUgdG8gRFBvUCBkZXBlbmRzLCB1bHRp
bWF0ZWx5LCBvbiB0aGUgdXNlIGNhc2VzIERQb1AgaXMgdGFyZ2V0aW5nIGFuZCB0aGUgdGhyZWF0
cw0KIGl0IGlzIHRyeWluZyB0byBtaXRpZ2F0ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k
aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlcmUgYXJl
IG1hbnkgbW9yZSBpbnRlcmVzdGluZyB0aGluZ3MgdGhhbiB0aGUga2V5IGJlaW5nIGlubGluZSBm
b3IgbWFjYXJvb25zLiBGb3IgZXhhbXBsZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSB0aGUgYXR0ZW51YXRpb25zIChjYXZlYXRzKSBhcmUg
YXR0YWNoZWQgZGlyZWN0bHkgdG8gdGhlIGFjY2VzcyB0b2tlbiBhbmQgYXJlIHZlcmlmaWVkIGJ5
IHRoZSBBUy4gQ29udHJhc3QgdGhpcyB0byBEUG9QIHdoZXJlIGV2ZXJ5IFJTIGhhcyB0byBjb3Jy
ZWN0bHkgdmFsaWRhdGUgdGhlIHByb29mIHRva2VuIC0gaWYgYW55IGRvbuKAmXQgdGhlbiB0aGUg
c2VjdXJpdHkgaXMgc2lnbmlmaWNhbnRseSByZWR1Y2VkLg0KIFRoZSBBUyBpcyByZXNwb25zaWJs
ZSBmb3IgYWxsIHNlY3VyaXR5LWNyaXRpY2FsIGNoZWNrcyB3aXRoIG1hY2Fyb29ucy48bzpwPjwv
bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+
PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBtYWNhcm9v
biBjYXZlYXRzIGNhbiBiZSBsYXllcmVkLiBUaGUgaW5pdGlhbCBjbGllbnQgY2FuIGFkZCBzb21l
IHJlc3RyaWN0aW9ucyBhbmQgdGhlbiBwYXNzIHRoZSB0b2tlbiB0byBhbiBSUy4gVGhhdCBSUyBj
YW4gdGhlbiBhZGQgaXRzIG93biByZXN0cmljdGlvbnMgd2hlbiBwYXNzaW5nIHRoZSB0b2tlbiB0
byBiYWNrZW5kIHNlcnZpY2VzLiBUaGlzIGlzIGEgYmlnIGRlYWwgZm9yIG1pY3Jvc2VydmljZQ0K
IGFyY2hpdGVjdHVyZXMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPi0geW91IGNhbiBhZGQgY2F2ZWF0cyBhdCBhIGdhdGV3YXkgb3Ig
cHJveHkgYW5kIGtub3cgdGhlc2Ugd2lsbCBiZSBlbmZvcmNlZCB3aXRob3V0IGhhdmluZyB0byBp
bnNwZWN0IGluY29taW5nIHRyYWZmaWMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkV2ZW4gd2hlbiB1c2VkIGluIGNvbWJpbmF0aW9u
IHdpdGggUG9QLCBtYWNhcm9vbnMgYWRkIHVuaXF1ZSBjYXBhYmlsaXRpZXMuIEZvciBleGFtcGxl
LCBhIGNsaWVudCBjYW4gcmV0cmlldmUgYSBwbGFpbiBiZWFyZXIgdG9rZW4gZnJvbSB0aGUgQVMg
YW5kIHRoZW4gYWZ0ZXItdGhlLWZhY3QgYmluZCBpdCB0byBpdHMgVExTIGNsaWVudCBjZXJ0aWZp
Y2F0ZSBieSBhcHBlbmRpbmcgYSB4NXQjUzI1NiBjYXZlYXQNCiBhbmQgdXNlIHRoYXQgbmV3IGFj
Y2VzcyB0b2tlbiBmb3IgYWxsIEFQSSBjYWxscy4gQnV0IHRoYXQgY2xpZW50IHN0aWxsIGhhcyB0
aGUgb3JpZ2luYWwgYWNjZXNzIHRva2VuIHNvIHRoZXkgY2FuIGdldCB0aGUgY2VydGlmaWNhdGUg
Zm9yIGEgZGlmZmVyZW50IGNsaWVudCAoZWcgYW5vdGhlciBtaWNyb3NlcnZpY2UpIGFuZCBjcmVh
dGUgYSBuZXcgY29weSBvZiB0aGUgYWNjZXNzIHRva2VuIGJvdW5kIHRvIHRoYXQgY2xpZW504oCZ
cyBjZXJ0aWZpY2F0ZS4NCiBJdCBjYW4gdGhlbiBzYWZlbHkgc2VuZCB0aGlzIGFjY2VzcyB0b2tl
biB0byB0aGUgb3RoZXIgY2xpZW50LCBldmVuIG92ZXIgYSBjb21wbGV0ZWx5IGluc2VjdXJlIGNv
bm5lY3Rpb24uIEl0IGNhbiBkbyB0aGlzIGZvciBldmVyeSBtaWNyb3NlcnZpY2UgaXQgbmVlZHMg
dG8gdGFsayB0bywgZWZmZWN0aXZlbHkgcHJvdmlkaW5nIHRyYW5zZmVyIG9mIG93bmVyc2hpcCBm
b3IgUG9QIHRva2VucyB3aXRob3V0IG5lZWRpbmcgdG8gY2FsbCBhIGNlbnRyYWwNCiB0b2tlbiBl
eGNoYW5nZSBzZXJ2aWNlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz
cz0iTXNvTm9ybWFsIj5BbGwgdGhpcyBhbmQgSSBoYXZlbuKAmXQgZXZlbiBiZWd1biB0YWxraW5n
IGFib3V0IDNyZCBwYXJ0eSBjYXZlYXRzLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyB0aGUgcmVhbGx5IGludGVyZXN0aW5nIHRo
aW5nIGFib3V0IG1hY2Fyb29ucyBpcyB0aGF0IHRoZXkgZW5hYmxlIGFsbCBraW5kcyBvZiBuZXcg
YXV0aG9yaXphdGlvbiBwYXR0ZXJucyB0byBiZSBidWlsdCB3aXRob3V0IHJlcXVpcmluZyBhIG5l
dyBzcGVjIGZvciBlYWNoIG9uZS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TmVpbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9j
a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp
dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0
REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1
dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0K
PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+TmVp
bCBNYWRkZW4gJmx0O25laWwubWFkZGVuQGZvcmdlcm9jay5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTog
PC9iPkZyaWRheSwgTm92ZW1iZXIgMjIsIDIwMTkgYXQgMzowOSBQTTxicj4NCjxiPlRvOiA8L2I+
JnF1b3Q7UmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUmcXVvdDsgJmx0O3JpY2hhbm5hQGFtYXpv
bi5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5CcmlhbiBDYW1wYmVsbCAmbHQ7YmNhbXBiZWxsQHBp
bmdpZGVudGl0eS5jb20mZ3Q7LCBvYXV0aCAmbHQ7b2F1dGhAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+
U3ViamVjdDogPC9iPlJlOiBbT0FVVEgtV0ddIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3Ig
ZHJhZnQtZmV0dC1vYXV0aC1kcG9wLTAzLnR4dDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6
YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At
YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIDIyIE5vdiAyMDE5LCBhdCAw
MTo0MiwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgJmx0O3JpY2hhbm5hQGFtYXpvbi5jb20m
Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5
bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8
YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk1hY2Fyb29ucyBhcmUgYnVpbHQgb24gcHJv
b2Ygb2YgcG9zc2Vzc2lvbi4gSW4gb3JkZXIgdG8gYWRkIGEgY2F2ZWF0IHRvIGEgbWFjYXJvb24s
IHRoZSBzZW5kZXIgaGFzIHRvIGhhdmUgdGhlIEhNQUMgb2YgdGhlIG1hY2Fyb29uIHdpdGhvdXQg
dGhlaXIgY2F2ZWF0Lg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87
bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph
dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5ZZXMgb2YgY291cnNlLiBCdXQgdGhpcyBp
cyB0aGUgSE1BQyAqdGFnKiBub3QgdGhlIG9yaWdpbmFsIGtleS4gVGhleSBjYW7igJl0IGNoYW5n
ZSBhbnl0aGluZyB0aGUgQVMgb3JpZ2luYWxseSBzaWduZWQuJm5ic3A7PG86cD48L286cD48L3A+
DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6
YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0K
PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn
aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv
LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlRoZSBkaXN0
aW5jdGl2ZSBwcm9wZXJ0eSBvZiBtYWNhcm9vbnMgYXMgSSBzZWUgaXQgaXMgdGhhdCB0aGV5IGVs
aW1pbmF0ZSB0aGUgbmVlZCBmb3Iga2V5IG5lZ290aWF0aW9uIHdpdGggdGhlIGJlYXJlci4gSG93
IG11Y2ggdmFsdWUgdGhpcyBoYXMgb3ZlciB0aGUgQVMganVzdCByZXR1cm5pbmcgYSBzeW1tZXRy
aWMNCiBrZXkgYWxvbmdzaWRlIHRoZSBhY2Nlc3MgdG9rZW4gaW4gdGhlIHRva2VuIHJlcXVlc3Qs
IEnigJltIG5vdCBzdXJlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv
O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6
YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+V2VsbCwgeW91IGRvbuKAmXQgaGF2ZSB0
byByZXR1cm4gYSBrZXkgZnJvbSB0aGUgdG9rZW4gZW5kcG9pbnQgZm9yIGEgc3RhcnQuIFRoZSBj
bGllbnQgZG9lc27igJl0IG5lZWQgdG8gY3JlYXRlIGFuZCBzZW5kIGFueSBhZGRpdGlvbmFsIHRv
a2VuLiBUaGUgd2hvbGUgdGhpbmcgd29ya3Mgd2l0aCBleGlzdGluZyBzdGFuZGFyZHMNCiBhbmQg
dGVjaG5vbG9naWVzIGFuZCBjYW4gYmUgaW5jcmVtZW50YWxseSBhZG9wdGVkIGFzIHJlcXVpcmVk
LiBJZiBSU2VzIGRvIHRva2VuIGludHJvc3BlY3Rpb24gYWxyZWFkeSB0aGVuIHRoZXkgbmVlZCB6
ZXJvIGNoYW5nZXMgdG8gc3VwcG9ydCB0aGlzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp
bi1ib3R0b20tYWx0OmF1dG8iPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9w
Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBw
dCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5UaGVyZSBhcmUga2V5IGRpc3RyaWJ1
dGlvbiBjaGFsbGVuZ2VzIHdpdGggdGhhdCBpZiB5b3UgYXJlIGRvaW5nIHZhbGlkYXRpb24gYXQg
dGhlIFJTLCBidXQgdmFsaWRhdGlvbiBhdCB0aGUgUlMgdXNpbmcgZWl0aGVyIGFwcHJvYWNoIG1l
YW5zIHlvdeKAmXZlIGxvc3QgcHJvdGVjdGlvbiBhZ2FpbnN0IHJlcGxheQ0KIGJ5IHRoZSBSUy4g
VGhpcyBicmluZ3MgdXMgYmFjayB0byBhIGNvcmUgcXVlc3Rpb246IHdoYXQgdGhyZWF0cyBhcmUg
aW4gc2NvcGUgZm9yIERQb1AsIGFuZCBpbiB3aGF0IGNvbnRleHRzPzxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9
Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz
cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z
by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5BZ3JlZWQs
IGJ1dCB2YWxpZGF0aW9uIGF0IHRoZSBSUyBpcyBwcmVtYXR1cmUgb3B0aW1pc2F0aW9uIGluIG1h
bnkgY2FzZXMuIEFuZCBpZiB5b3UgZG8gbmVlZCBwcm90ZWN0aW9uIGFnYWluc3QgdGhhdCB0aGUg
Y2xpZW50IGNhbiBldmVuIGFwcGVuZCBhIGNvbmZpcm1hdGlvbiBrZXkgYXMgYSBjYXZlYXQgYW5k
DQogcmV0cm9zcGVjdGl2ZWx5IHVwZ3JhZGUgYSBiZWFyZXIgdG9rZW4gdG8gYSBwb3AgdG9rZW4u
IFRoZXkgY2FuIGV2ZW4gZG8gdHJhbnNmZXIgb2Ygb3duZXJzaGlwIGJ5IGNyZWF0aW5nIGNvcGll
cyBvZiB0aGUgb3JpZ2luYWwgdG9rZW4gYm91bmQgdG8gb3RoZXIgY2VydGlmaWNhdGVzL3B1Ymxp
YyBrZXlzLiZuYnNwOw0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph
dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+TmVpbDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0
byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0
eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+
PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHls
ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t
YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv
bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPuKAkyZuYnNwOzwvc3Bh
bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMi4wcHQiPkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW48L3NwYW4+PG86cD48L286
cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu
MHB0Ij5BV1MgSWRlbnRpdHk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv
dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1
dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy
LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn
aW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xv
cjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7
Y29sb3I6YmxhY2siPk9BdXRoICZsdDtvYXV0aC1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhh
bGYgb2YgTmVpbCBNYWRkZW4gJmx0O25laWwubWFkZGVuQGZvcmdlcm9jay5jb20mZ3Q7PGJyPg0K
PGI+RGF0ZTogPC9iPkZyaWRheSwgTm92ZW1iZXIgMjIsIDIwMTkgYXQgNDo0MCBBTTxicj4NCjxi
PlRvOiA8L2I+QnJpYW4gQ2FtcGJlbGwgJmx0O2JjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29tJmd0
Ozxicj4NCjxiPkNjOiA8L2I+b2F1dGggJmx0O29hdXRoQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1
YmplY3Q6IDwvYj5SZTogW09BVVRILVdHXSBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRy
YWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50eHQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87
bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkF0IHRoZSBlbmQgb2YgbXkgcHJldmlvdXMgZW1h
aWwgSSBtZW50aW9uZWQgdGhhdCB5b3UgY2FuIGFjaGlldmUgc29tZSBvZiB0aGUgc2FtZSBhaW1z
IGFzIERQb1Agd2l0aG91dCBuZWVkaW5nIGEgUG9QIG1lY2hhbmlzbSBhdCBhbGwuIFRoaXMgZW1h
aWwgaXMgdGhhdCBmb2xsb3ctdXAuDQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0
b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t
Ym90dG9tLWFsdDphdXRvIj5PQXV0aCBpcyBhZ25vc3RpYyBhYm91dCB0aGUgZm9ybWF0IG9mIGFj
Y2VzcyB0b2tlbnMgYW5kIG1hbnkgdmVuZG9ycyBzdXBwb3J0IGVpdGhlciByYW5kb20gc3RyaW5n
IGRhdGFiYXNlIHRva2VucyBvciBKV1RzLiBCdXQgdGhlcmUgYXJlIG90aGVyIGNob2ljZXMgZm9y
IGFjY2VzcyB0b2tlbiBmb3JtYXQsIHNvbWUNCiBvZiB3aGljaCBoYXZlIG1vcmUgaW50ZXJlc3Rp
bmcgcHJvcGVydGllcy4gSW4gcGFydGljdWxhciwgR29vZ2xlIHByb3Bvc2VkIE1hY2Fyb29ucyBh
IGZldyB5ZWFycyBhZ28gYXMgYSAmcXVvdDtiZXR0ZXIgY29va2llJnF1b3Q7IFsxXSBhbmQgSSB0
aGluayB0aGV5IHN5c3RlbWF0aWNhbGx5IGFkZHJlc3MgbWFueSBvZiB0aGVzZSBpc3N1ZXMgd2hl
biB1c2VkIGFzIGFuIGFjY2VzcyB0b2tlbiBmb3JtYXQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5Gb3IgdGhvc2Ugd2hvIGFyZW4ndCBm
YW1pbGlhciB3aXRoIHRoZW0sIE1hY2Fyb29ucyBhcmUgYSBiaXQgbGlrZSBhIEhTMjU2IEpXVC4g
VGhleSBoYXZlIGEgbG9jYXRpb24gKGEgYml0IGxpa2UgdGhlIGF1ZGllbmNlIGluIGEgSldUKSBh
bmQgYW4gaWRlbnRpZmllciAoYW4gYXJiaXRyYXJ5IHN0cmluZykgYW5kDQogdGhlbiBhcmUgc2ln
bmVkIHdpdGggSE1BQy1TSEEyNTYgdXNpbmcgYSBzZWNyZXQga2V5LiAoVGhlcmUncyBubyBjbGFp
bXMgc2V0IG9yIGhlYWRlcnMgLSB0aGV5IGFyZSB2ZXJ5IG1pbmltYWwpLiBJbiB0aGlzIGNhc2Ug
dGhlIHNlY3JldCBrZXkgd291bGQgYmUgb3duZWQgYnkgdGhlIEFTIGFuZCB1c2VkIHRvIHNpZ24g
bWFjYXJvb24tYmFzZWQgYWNjZXNzIHRva2Vucy4gVmFsaWRhdGluZyB0aGUgdG9rZW4gd291bGQg
YmUgZG9uZSB2aWEgdG9rZW4NCiBpbnRyb3NwZWN0aW9uIGF0IHRoZSBBUy48bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h
cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlRoZSBjbGV2ZXIg
Yml0IGlzIHRoYXQgYW55Ym9keSBhdCBhbGwgY2FuIGFwcGVuZCAmcXVvdDtjYXZlYXRzJnF1b3Q7
IHRvIGEgbWFjYXJvb24gYXQgYW55IHRpbWUsIGJ1dCBub2JvZHkgY2FuIHJlbW92ZSBvbmUgb25j
ZSBhZGRlZC4gQ2F2ZWF0cyBhcmUgcmVzdHJpY3Rpb25zIG9uIHRoZSB1c2Ugb2YgYSB0b2tlbiAt
IHRoZXkNCiBvbmx5IGV2ZXIgcmVkdWNlIHRoZSBhdXRob3JpdHkgZ3JhbnRlZCBieSB0aGUgdG9r
ZW4sIG5ldmVyIGV4cGFuZCBpdC4gVGhlIEFTIGNhbiB2YWxpZGF0ZSB0aGUgdG9rZW4gYW5kIGFs
bCB0aGUgY2F2ZWF0cyB3aXRoIGl0cyBzZWNyZXQga2V5LiBTbywgZm9yIGV4YW1wbGUsIGlmIGFu
IGFjY2VzcyB0b2tlbiB3YXMgYSBtYWNhcm9vbiB0aGVuIHRoZSBjbGllbnQgY291bGQgYXBwZW5k
IGEgY2F2ZWF0IHRvIHJlZHVjZSB0aGUgc2NvcGUsIG9yIHJlZHVjZQ0KIHRoZSBleHBpcnkgdGlt
ZSwgb3IgcmVkdWNlIHRoZSBhdWRpZW5jZSwgYW5kIHNvIG9uLjxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv
cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhlIHJlYWxseSBjbGV2ZXIg
Yml0IGlzIHRoYXQgdGhlIGNsaWVudCBjYW4ga2VlcCBhIGNvcHkgb2YgdGhlIG9yaWdpbmFsIHRv
a2VuIGFuZCBjcmVhdGUgcmVzdHJpY3RlZCB2ZXJzaW9ucyB0byBzZW5kIHRvIGRpZmZlcmVudCBy
ZXNvdXJjZSBzZXJ2ZXJzLiBCZWNhdXNlIEhNQUMgaXMgdmVyeSBjaGVhcCwNCiB0aGUgY2xpZW50
IGNhbiBldmVuIGRvIHRoaXMgYmVmb3JlIGVhY2ggYW5kIGV2ZXJ5IHJlcXVlc3QuIChUaGlzIGlz
IHdoYXQgdGhlIG9yaWdpbmFsIHBhcGVyIHJlZmVycyB0byBhcyAmcXVvdDtjb250ZXh0dWFsIGNh
dmVhdHMmcXVvdDspLiBUaGlzIG1lYW5zIHRoYXQgYSBjbGllbnQgY2FuIGJlIGlzc3VlZCBhIHNp
bmdsZSBhY2Nlc3MgdG9rZW4gZnJvbSB0aGUgQVMgd2l0aCBicm9hZCBzY29wZSBhbmQgYXBwbGlj
YWJsZSB0byBtYW55IGRpZmZlcmVudCBSUyBhbmQNCiBjYW4gdGhlbiBsb2NhbGx5IGNyZWF0ZSBy
ZXN0cmljdGVkIGNvcGllcyBmb3IgZWFjaCBpbmRpdmlkdWFsIFJTLjxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhlIHJlbGV2YW5jZSB0
byBEUG9QIGlzIHRoYXQgdGhlIGNsaWVudCBjb3VsZCBldmVuIGFwcGVuZCBjYXZlYXRzIGVxdWl2
YWxlbnQgdG8gJnF1b3Q7aHRtJnF1b3Q7IGFuZCAmcXVvdDtodHUmcXVvdDsganVzdCBiZWZvcmUg
c2VuZGluZyB0aGUgYWNjZXNzIHRva2VuIHRvIHRoZSBSUywgYW5kIG1heWJlIGFkZCBhbiAmcXVv
dDtleHAmcXVvdDsgZm9yIDUgc2Vjb25kcw0KIGluIHRoZSBmdXR1cmUsIHJlZHVjZSB0aGUgc2Nv
cGUsIGFuZCBzbyBvbjo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv
bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz
cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i
b3R0b20tYWx0OmF1dG8iPiZuYnNwOyBuZXdBY2Nlc3NUb2tlbiA9IGFjY2Vzc1Rva2VuLndpdGhD
YXZlYXRzKHs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6
YXV0byI+Jm5ic3A7ICZuYnNwOyBleHA6IG5vdyAmIzQzOyA1c2Vjb25kcyw8bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwOyBz
Y29wZTogJnF1b3Q7YSBiJnF1b3Q7LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn
aW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDsgJm5ic3A7IGh0bTogJnF1b3Q7UE9TVCZxdW90Oyw8
bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl
PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i
c3A7ICZuYnNwOyAuLi4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0
b20tYWx0OmF1dG8iPiZuYnNwOyB9KTs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy
Z2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7IGh0dHBDbGllbnQucG9zdChkYXRhLCBBdXRob3Jp
emF0aW9uOiBCZWFyZXIgbmV3QWNjZXNzVG9rZW4pOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv
O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6
YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Tm90ZSB0aGF0IHRoZSBjbGllbnQgZG9l
c24ndCBuZWVkIGFueXRoaW5nIGV4dHJhIGhlcmUgLSBubyBrZXlzLCBleHRyYSB0b2tlbnMgZXRj
LiBUaGV5IGp1c3QgaGF2ZSB0aGUgYWNjZXNzIHRva2VuIGFuZCBhIG1hY2Fyb29uIGxpYnJhcnku
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls
ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu
YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg
c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv
Ij5UaGUgUlMgd2lsbCBzZWUgYW4gb3BhcXVlIGFjY2VzcyB0b2tlbiwgc2VuZCBpdCB0byB0aGUg
QVMgZm9yIGludHJvc3BlY3Rpb24uIFRoZSBBUyBob3dldmVyLCB3aWxsIHNlZSBhbmQgdmFsaWRh
dGUgdGhlIG5ldyBjYXZlYXRzIG9uIHRoZSB0b2tlbiBhbmQgcmV0dXJuIGFuIGludHJvc3BlY3Rp
b24gcmVzcG9uc2UNCiB3aXRoIHRoZSByZXN0cmljdGVkIHNjb3BlIGFuZCBleHBpcnkgdGltZSwg
YW5kIHJldHVybiB0aGUgaHRtL2h0dSByZXN0cmljdGlvbnMgdGhhdCB0aGUgUlMgY2FuIHRoZW4g
ZW5mb3JjZS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv
bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz
cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i
b3R0b20tYWx0OmF1dG8iPkZvciBjbGllbnRzIHRoaXMgaXMgdHJhbnNwYXJlbnQgdW50aWwgdGhl
eSB3YW50IHRvIHRha2UgYWR2YW50YWdlIG9mIGl0IGFuZCB0aGVuIHRoZXkgY2FuIGp1c3QgdXNl
IGFuIG9mZi10aGUtc2hlbGYgbWFjYXJvb24gbGlicmFyeS4gRm9yIHRoZSBSUyBpdCBpcyBhbHNv
IGNvbXBsZXRlbHkgdHJhbnNwYXJlbnQuDQogQWxsIHRoZSAocmVsYXRpdmVseSBzbWFsbCkgY29t
cGxleGl0eSBsaXZlcyBpbiB0aGUgQVMsIHdoaWNoIGp1c3QgaGFzIHRvIGJlIGFibGUgdG8gcHJv
ZHVjZSBhbmQgdmVyaWZ5IG1hY2Fyb29ucyBhbmQgdGFrZSBjYXZlYXRzIGludG8gYWNjb3VudCB3
aGVuIHBlcmZvcm1pbmcgdG9rZW4gaW50cm9zcGVjdGlvbiAtIGUuZy4gdGhlIHJldHVybmVkIHNj
b3BlIHNob3VsZCBiZSB0aGUgaW50ZXJzZWN0aW9uIG9mIHRoZSBvcmlnaW5hbCB0b2tlbiBzY29w
ZQ0KIGFuZCBhbnkgc2NvcGUgY2F2ZWF0cy4gQnV0IEkgZG9uJ3QgdGhpbmsgdGhpcyB3b3VsZCBi
ZSB0b28gbXVjaCBlZmZvcnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz
cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i
b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn
aW4tYm90dG9tLWFsdDphdXRvIj5bMV06Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9haS5nb29nbGUv
cmVzZWFyY2gvcHVicy9wdWI0MTg5MiI+aHR0cHM6Ly9haS5nb29nbGUvcmVzZWFyY2gvcHVicy9w
dWI0MTg5MjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0
b20tYWx0OmF1dG8iPi0tIE5laWw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K
PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph
dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiAyMSBOb3YgMjAxOSwgYXQgMDY6MjMs
IEJyaWFuIENhbXBiZWxsICZsdDs8YSBocmVmPSJtYWlsdG86YmNhbXBiZWxsQHBpbmdpZGVudGl0
eS5jb20iPmJjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv
cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48
L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv
LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlllYWgsIHN1
Z2dlc3Rpb25zIGFuZC9vciBhbiBNVEkgYWJvdXQgYWxnb3JpdGhtIHN1cHBvcnQgd291bGQgcHJv
YmFibHkgYmUgd29ydGh3aGlsZS4gUGVyaGFwcyBhbHNvIHNvbWUgZGVmaW5lZCBtZWFucyBvZiBz
aWduYWxpbmcgd2hlbiBhbiB1bnN1cHBvcnRlZCBhbGdvcml0aG0gaXMgdXNlZCBhbG9uZyB3aXRo
DQogYW55IG90aGVyIHJlYXNvbiBhIERQb1AgaXMgaW52YWxpZCBvciByZWplY3RlZC4mbmJzcDsg
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls
ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu
YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg
c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv
Ij5UaGVyZSBhcmUgYSBsb3Qgb2YgdHJhZGVvZmZzIGluIHdoYXQgY2xhaW1zIGFyZSByZXF1aXJl
ZCBhbmQgd2hhdCBwcm90ZWN0aW9ucyBhcmUgcHJvdmlkZWQgZXRjLiBUaGUgYWltIG9mIHdoYXQg
d2FzIGNob3NlbiB3YXMgdG8gZG8ganVzdCBlbm91Z2ggdG8gcHJvdmlkZSBzb21lIHJlYXNvbmFi
bGUgcHJvdGVjdGlvbnMNCiBhZ2FpbnN0IHJldXNlIG9yIHVzZSBpbiBhIGRpZmZlcmVudCBjb250
ZXh0IHdoaWxlIGJlaW5nIHNpbXBsZSB0byBpbXBsZW1lbnQgYW5kIGRlcGxveS48bzpwPjwvbzpw
PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N
CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBXZWQsIE5vdiAyMCwgMjAx
OSBhdCA2OjM0IEFNIE5laWwgTWFkZGVuICZsdDs8YSBocmVmPSJtYWlsdG86bmVpbC5tYWRkZW5A
Zm9yZ2Vyb2NrLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPm5laWwubWFkZGVuQGZvcmdlcm9jay5jb208
L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9
ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4g
MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1y
aWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph
dXRvIj5UaGFua3MgZm9yIHRoZSByZXBseSwgQnJpYW4uJm5ic3A7DQo8bzpwPjwvbzpwPjwvcD4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5Db2xsZWN0aW5nIG15IHRob3VnaHRz
IHVwIGhlcmUgcmF0aGVyIHRoYW4gcmVzcG9uZGluZyBibG93IGJ5IGJsb3cuDQo8bzpwPjwvbzpw
PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At
YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t
bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+UHVibGljIGtl
eSBzaWduYXR1cmVzIGFyZSBzaW1wbGVyIGluIHNvbWUgcmVzcGVjdHMsIG1vcmUgY29tcGxleCBp
biBvdGhlcnMuIFRoZXJlIGFyZSBjdXJyZW50bHkgMTAgcHVibGljIGtleSBKV1Mgc2lnbmF0dXJl
IHNjaGVtZXMgZGVmaW5lZCAoRVMyNTYvMzg0LzUxMiwgUlMyNTYvMzg0LzUxMiwgUFMyNTYvMzg0
LzUxMiwNCiBFZERTQSkgLSBkb2VzIGFuIFJTIHBvdGVudGlhbGx5IGhhdmUgdG8gc3VwcG9ydCB0
aGVtIGFsbD8gSWYgbm90LCBob3cgZG8gdGhleSBuZWdvdGlhdGUgYWxnb3JpdGhtIHN1cHBvcnQg
d2l0aCB0aGUgY2xpZW50PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu
LWJvdHRvbS1hbHQ6YXV0byI+T24gdGhlIG90aGVyIGhhbmQsIHRoZSBFQ0RIIHNjaGVtZSBJIHBy
b3Bvc2VkIGNhbiBiZSBpbXBsZW1lbnRlZCBieSBhZGFwdGluZyBhbiBleGlzdGluZyBFQ0RILUVT
IGVuY3J5cHRpb24gc3VwcG9ydCBpbiBhIEpXVCBsaWJyYXJ5LiBGb3IgZXhhbXBsZSwgSSBkaXNj
b3ZlcmVkIHdoaWxlIHBsYXlpbmcgd2l0aA0KIHRoaXMgdGhhdCBvdXIgb3duIGludGVybmFsIGxp
YnJhcnkgY2FuIGltcGxlbWVudCB0aGUgZnVsbCBmbG93IEkgZGVzY3JpYmVkIGVudGlyZWx5IHZp
YSB0aGUgZXhpc3RpbmcgcHVibGljIEFQSSBbMV0sIHNvIGl0J3Mgbm90IG5lY2Vzc2FyaWx5IGFz
IGNvbXBsZXggYXMgaXQgZmlyc3QgbG9va3MuIEkgZXZlbiBrbm9ja2VkIHVwIGEgZnJvbS1zY3Jh
dGNoIGltcGxlbWVudGF0aW9uIGluIFdlYkNyeXB0byAoSmF2YVNjcmlwdCkgd2l0aG91dCB0b28N
CiBtdWNoIGNvZGUgWzJdLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu
LWJvdHRvbS1hbHQ6YXV0byI+QnV0IEkgYWRtaXQgdGhhdCB1c2luZyBhbiBleGlzdGluZyBKV1Qg
bGlicmFyeSB0byBzaWduIGEgSldUIHdpdGggYW4gZXhpc3RpbmcgYWxnb3JpdGhtIGlzIGV2ZW4g
ZWFzaWVyLCBhbmQgdGhhdCBjb3VudHMgZm9yIGEgbG90LiBQZXJoYXBzIHdlIGNhbiBtYWtlIGNv
bmNyZXRlIHN1Z2dlc3Rpb25zL3JlcXVpcmVtZW50cw0KIGFib3V0IGFsZ29yaXRobSBzdXBwb3J0
PyBlLmcuICZxdW90O1RoZSBSUyBNVVNUIHN1cHBvcnQgUlMyNTYgYW5kIFNIT1VMRCBzdXBwb3J0
IEVkRFNBLiBPdGhlciBhbGdvcml0aG1zIE1BWSBiZSBzdXBwb3J0ZWQuJnF1b3Q7Jm5ic3A7PG86
cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i
bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNw
OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5
bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5X
aXRoIHJlZ2FyZHMgdG8gcmVwbGF5IHByb3RlY3Rpb24sIEkgdGhpbmsgdGhlcmUgYXJlIGF0IGxl
YXN0IHR3byByZWFzb25hYmxlIHBvc2l0aW9uczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt
c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjEuIFdlIGFzc3VtZSB0aGF0IFRMUyBpcyBz
ZWN1cmUgYW5kIGRvbid0IHRyeSB0byBkZWZlbmQgYWdhaW5zdCBhbnkgY29tcHJvbWlzZSBhdCB0
aGF0IGxldmVsLiAoQ2xlYXJseSBub25lIG9mIHRoZSBUTFMtYmFzZWQgUG9QIG1lY2hhbmlzbXMg
c3Vydml2ZSBpZiBUTFMgaXMgY29tcHJvbWlzZWQsIGJ5IGRlZmluaXRpb24pLg0KIEluIHRoaXMg
Y2FzZSB0aGUgbWFpbiBhdHRhY2sgdG8gZGVmZW5kIGFnYWluc3QgaXMgYSBtYWxpY2lvdXMgUlMg
cmVwbGF5aW5nIHRoZSBhY2Nlc3MgdG9rZW4gZWxzZXdoZXJlLiBTaW1wbHkgc2lnbmluZyB0aGUg
b3JpZ2luIG9mIHRoZSBSUyB3b3VsZCBiZSBlbm91Z2ggdG8gcHJldmVudCB0aGlzIGF0dGFjaywg
d2hpbGUgbGV0dGluZyB0aGUgY2xpZW50IHJldXNlIHRoZSBzYW1lIEpXVCBmb3IgbWFueSByZXF1
ZXN0cyAoYW5kIHRoZSBSUyB0bw0KIGNhY2hlIHRoZSBKV1QgdmFsaWRhdGlvbikuIE5vbmUgb2Yg
JnF1b3Q7anRpJnF1b3Q7LCAmcXVvdDtodHUmcXVvdDssIG9yICZxdW90O2h0bSZxdW90OyBzZWVt
IHJlbGV2YW50IHRvIHRoaXMgbW9kZWwuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h
cmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z
by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4yLiBXZSBkb24ndCBhc3N1bWUgdGhhdCBUTFMgaXMg
c2VjdXJlIChvciBpdCdzIG5vdCBmdWxseSBlbmQtdG8tZW5kKSBhbmQgdHJ5IHRvIHByb3ZpZGUg
c29tZSBkZWZlbnNlIGluIGRlcHRoIGFnYWluc3QgYSBNaXRNIGF0dGFja2VyIHJlcGxheWluZyBh
IHRva2VuIGFnYWluc3QgdGhlIHNhbWUgUlMuIFRoZXJlDQogaXMgYSBncmFkdWF0ZWQgc2VyaWVz
IG9mIHN0ZXBzIHlvdSBjYW4gdGFrZSBoZXJlLCBkZXBlbmRpbmcgb24gaG93IG11Y2ggeW91IHdh
bnQgdG8gcHJldmVudCB0aGlzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t
Ym90dG9tLWFsdDphdXRvIj4mbmJzcDsgJm5ic3A7YS4gVGhlIERQb1AgdG9rZW4gY2FuIGJlIHJl
cGxheWVkIGZvciBhcmJpdHJhcnkgcmVxdWVzdHMgdG8gdGhlIHNhbWUgUlMgYnV0IGhhcyBhIHNo
b3J0IHRpbWUgbGltaXQgKGUuZy4sIGV4cCBjbGFpbSBvciBSUy1lbmZvcmNlZCBtYXggbGlmZXRp
bWUgZnJvbSBpYXQpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPiZuYnNwOyAmbmJzcDtiLiBUaGUgRFBvUCB0b2tlbiBjYW4gYmUgcmVwbGF5ZWQg
Zm9yIHRoZSBzYW1lIHJlcXVlc3QgKGh0dS9odG0gY2xhaW1zKTxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDsgJm5ic3A7Yy4gVGhlIERQ
b1AgdG9rZW4gY2FuJ3QgYmUgcmVwbGF5ZWQgYXQgYWxsIC0gZWl0aGVyIGJlY2F1c2Ugb2YganRp
IGJsYWNrbGlzdGluZyBvbiB0aGUgUlMgb3IgYSBjaGFsbGVuZ2UtcmVzcG9uc2UgcHJvdG9jb2wg
b24gZWFjaCByZXF1ZXN0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu
LWJvdHRvbS1hbHQ6YXV0byI+KFRoZXJlIGFyZSBhbHNvIHZhcmlhbnRzIHN1Y2ggYXMgaW5jbHVk
aW5nIGEgaGFzaCBvZiB0aGUgcmVxdWVzdCBib2R5L2hlYWRlcnMsIG9yIGVuY29kaW5nIGFuIEVU
YWcgaW50byB0aGUgSldUKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv
dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp
bi1ib3R0b20tYWx0OmF1dG8iPkkgdGhpbmsgZWl0aGVyIGFyZSByZWFzb25hYmxlIGRlc2lnbiBn
b2FscywgYnV0IGFpbWluZyBmb3IgMiBhZGRzIG1vcmUgdmFsdWUuIEkgdGhpbmsgYWltaW5nIGZv
ciAyYSBpcyBhIHJlYXNvbmFibGUgZGVmYXVsdCBiYXNlbGluZSB0aGF0IGFsbG93cyB0aGUgY2xp
ZW50IHRvIHJldXNlIGEgRFBvUCB0b2tlbg0KIGZvciBhIGZldyByZXF1ZXN0cywgcmVkdWNpbmcg
dGhlIGNvc3Qgb2YgdGhlIHNpZ25hdHVyZSAoYW5kIHRoZSBSUyBjYW4gY2FjaGUgdGhlIHZhbGlk
YXRlZCBKV1QpLiBTdXBwb3J0IGZvciAyYiBvciAyYyBjYW4gdGhlbiBiZSBsaXN0ZWQgYXMgb3B0
aW9uYWwgYWRkaXRpb25zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu
LWJvdHRvbS1hbHQ6YXV0byI+UFMgLSAyYS8yYiBjYW4gYmUgYWNoaWV2ZWQgd2l0aG91dCBQb1Au
IEknbGwgc2F2ZSB0aGF0IGZvciBhbm90aGVyIGVtYWlsIGluIHRoZSBuZXh0IGZldyBkYXlzIHRo
b3VnaC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0
byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87
bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlsxXTombmJzcDs8YSBocmVmPSJodHRwczovL2dp
c3QuZ2l0aHViLmNvbS9OZWlsTWFkZGVuLzY4NWVhNjZmYjc5ZDM3YTUwYzIzMTBmODUzYmQ5NDk2
IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9naXN0LmdpdGh1Yi5jb20vTmVpbE1hZGRlbi82ODVl
YTY2ZmI3OWQzN2E1MGMyMzEwZjg1M2JkOTQ5NjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0
bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+WzJdOg0KPGEgaHJlZj0iaHR0cHM6Ly9naXN0
LmdpdGh1Yi5jb20vTmVpbE1hZGRlbi83MGUxYjIzMmEzYjI3M2RlMDJlZDczMWViMzZlYzRhNyIg
dGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly9naXN0LmdpdGh1Yi5jb20vTmVpbE1hZGRlbi83MGUx
YjIzMmEzYjI3M2RlMDJlZDczMWViMzZlYzRhNzwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0
bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0
OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4tLSBOZWlsPG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K
PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph
dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiAxOSBOb3YgMjAxOSwgYXQgMDc6NDMs
IEJyaWFuIENhbXBiZWxsICZsdDs8YSBocmVmPSJtYWlsdG86YmNhbXBiZWxsQHBpbmdpZGVudGl0
eS5jb20iIHRhcmdldD0iX2JsYW5rIj5iY2FtcGJlbGxAcGluZ2lkZW50aXR5LmNvbTwvYT4mZ3Q7
IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls
ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu
YnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz
dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNw
Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph
dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FO
ZXVlIj5PbiBUaHUsIE5vdiAxNCwgMjAxOSBhdCA3OjIwIFBNIE5laWwgTWFkZGVuICZsdDs8YSBo
cmVmPSJtYWlsdG86bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPm5l
aWwubWFkZGVuQGZvcmdlcm9jay5jb208L2E+Jmd0Ow0KIHdyb3RlOjwvc3Bhbj48bzpwPjwvbzpw
PjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0
OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVm
dDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1
LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj5JIGNhbid0IGF0dGVuZCBTaW5n
YXBvcmUgZWl0aGVyIGluIHBlcnNvbiBvciByZW1vdGVseSBkdWUgdG8gb3RoZXIgY29tbWl0bWVu
dHMuIEkgYnJvYWRseSBzdXBwb3J0IGFkb3B0aW9uIG9mIHRoaXMgZHJhZnQsDQogYnV0IEkgaGF2
ZSBzb21lIGNvbW1lbnRzL3N1Z2dlc3Rpb25zIGFib3V0IGl0Ljwvc3Bhbj48bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0
eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+
PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+
Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t
LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2
ZXRpY2FOZXVlIj5UaGFua3MgTmVpbC4gQW5kIHNvcnJ5IHRvIGhlYXIgdGhhdCB5b3Ugd29uJ3Qg
YmUgaW4gU2luZ2Fwb3JlLiBUaGlzIGtpbmQgb2Ygc3R1ZmYgaXMgZGVmaW5pdGVseSBtb3JlIGVh
c2lseSBkaXNjdXNzZWQgaW4NCiBwZXJzb24gKGZvciBtZSBhbnl3YXkpLiBCdXQgSSdsbCB0cnkg
YW5kIGNvbW1lbnQgb24geW91ciBjb21tZW50cyBoZXJlIGFzIGJlc3QgSSBjYW4uIEkgYWxzbyBw
bGFuIHRvIGFsc28gbWVudGlvbiB0aGVtIGluIHRoZSBXZWRuZXNkYXkgYW5kL29yIFRodXJzZGF5
IHByZXNlbnRhdGlvbi4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2
Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn
aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0
bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41
cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s
aWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQu
OHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjUuMHB0
Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t
dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u
dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj5TZWN0aW9uIDIgbGlzdHMg
dGhlIG1haW4gb2JqZWN0aXZlIGFzIGJlaW5nIHRvIGhhcmRlbiBhZ2FpbnN0IGNvbXByb21pc2Vk
L21hbGljaW91cyBBUyBvciBSUywgd2hpY2ggbWF5IGF0dGVtcHQgdG8gcmVwbGF5DQogY2FwdHVy
ZWQgdG9rZW5zIGVsc2V3aGVyZS4gV2hpbGUgdGhpcyBpcyBhIGdvb2QgaWRlYSwgYSBjYXN1YWwg
cmVhZGVyIG1pZ2h0IHdvbmRlciB3aHkgYSBzaW1wbGUgYXVkaWVuY2UgY2xhaW0gaW4gdGhlIGFj
Y2VzcyB0b2tlbi9pbnRyb3NwZWN0aW9uIHJlc3BvbnNlIGlzIG5vdCBzdWZmaWNpZW50IHRvIHBy
ZXZlbnQgdGhpcy4gQmVjYXVzZSBpbnRlcmFjdGlvbnMgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCBS
UyBhcmUgc3VwcG9zZWQgdG8gYmUgb3Zlcg0KIFRMUywgaXMgdGhlIGludGVuZGVkIHRocmVhdCBt
b2RlbCBvbmUgaW4gd2hpY2ggdGhlc2UgcHJvdGVjdGlvbnMgaGF2ZSBicm9rZW4gZG93bj8gKCZx
dW90O2NvdW50ZXJmZWl0JnF1b3Q7IGluIHRoZSBkZXNjcmlwdGlvbiBzdWdnZXN0cyB0aGlzKS4g
T3IgaXMgdGhlIG1vdGl2YXRpb24gdGhhdCBjbGllbnRzIHdhbnQgdG8gZ2V0IGEgc2luZ2xlIGJy
b2FkLXNjb3BlZCBhY2Nlc3MgdG9rZW4gKGZvciB1c2FiaWxpdHkvcGVyZm9ybWFuY2UgcmVhc29u
cykgYW5kIHVzZQ0KIGl0IHRvIGFjY2VzcyBtdWx0aXBsZSByZXNvdXJjZSBzZXJ2ZXJzIHdpdGhv
dXQgZ2l2aW5nIGVhY2ggb2YgdGhlbSB0aGUgYWJpbGl0eSB0byByZXBsYXkgdGhlIHRva2VuIHRv
IHRoZSBvdGhlciBzZXJ2ZXJzPyBPciBhcmUgd2UgdGhpbmtpbmcgb2YgYSBwaGlzaGluZy10eXBl
IHZ1bG5lcmFiaWxpdHkgd2VyZSBhIGdlbmVyYWwtcHVycG9zZSBjbGllbnQgbWlnaHQgYWNjaWRl
bnRhbGx5IHZpc2l0IGEgbWFsaWNpb3VzIHNpdGUgd2hpY2ggcHJvbXB0cw0KIGZvciBhbiBhY2Nl
c3MgdG9rZW4gdGhhdCB0aGUgY2xpZW50IHRoZW4gYmxpbmRseSBnb2VzIG9mZiBhbmQgZ2V0cz8g
KFVNQT8pIEl0J3Mgbm90IGNsZWFyIHRvIG1lIHdoaWNoIG9mIHRoZXNlIHNjZW5hcmlvcyBpcyBi
ZWluZyBjb25zaWRlcmVkLCBzbyBpdCB3b3VsZCBiZSBnb29kIHRvIHRpZ2h0ZW4gdXAgdGhpcyBz
ZWN0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv
dGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs
dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl
OjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h
cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl
PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPkl0IGlzIGFkbWl0
dGVkbHkgYSBiaXQgbG9vc2UgYW5kIEkgYWdyZWUgaXQnZCBiZSBnb29kIHRvIHRpZ2h0ZW4gaXQg
dXAuIEJ1dCBwYXJ0IG9mIHdoeSBpdCdzIGxvb3NlIGlzIHRoYXQgaXQgdHJpZXMgdG8gb2ZmZXIN
CiBzb21lIHByb3RlY3Rpb25zIGZvciBhbGwgdGhvc2Ugc2NlbmFyaW9zIGFuZCBtb3JlIHN1Y2gg
YXMgYSBnZW5lcmFsIGxvc3Qvc3RvbGVuIHRva2VuLiBJdCdzIGVmZmVjdGl2ZWx5IHRyeWluZyB0
byBwcm92aWRlIGFzIG1hbnkgb2YgdGhlIHNhbWUgdHlwZXMgb2YgcHJvdGVjdGlvbnMvYXNzdXJh
bmNlcyB0aGF0IHlvdSdkIGdldCB3aXRoIFRMUyBiYXNlZCBQb1AgbWVjaGFuaXNtcyAobGlrZSBP
QXV0aCBNVExTIG9yIFRva2VuIGJpbmRpbmcpIHRvDQogdGhlIGV4dGVudCB0aGF0IGNhbiBiZSBk
b25lIGF0IHRoZSBIVFRQIGFwcGxpY2F0aW9uIGxheWVyLiBXaGljaCBjYW4ndCByZWFsaXN0aWNh
bGx5IGJlIGV4YWN0bHkgdGhlIHNhbWUgYnV0IGNhbiBtYXliZSBiZSBraW5kYSBjbG9zZSB3aGls
ZSBhY3R1YWxseSBiZWluZyBhY2Nlc3NpYmxlIGFuZCBpbXBsZW1lbnRhYmxlIGJlY2F1c2UgaXQn
cyBhbGwgZG9uZSBhdCB0aGUgYXBwbGljYXRpb24gbGF5ZXIuIFRoZXJlIGFyZSB0cmFkZS1vZmZz
LCBvZg0KIGNvdXJzZSwgYW5kIHRoZSBkb2N1bWVudCB3cml0ZXJzIGhhdmUgZW5kZWF2b3JlZCB0
byBmaW5kIGEgZ29vZCBiYWxhbmNlIGluIHRoZSB0cmFkZS1vZmYgZGVjaXNpb25zIHdlJ3ZlIG1h
ZGUuIEJ1dCB0aGF0IGRvZXNuJ3QgbWVhbiB0aGV5IGFyZSBuZWNlc3NhcmlseSB0aGUgcmlnaHQg
ZGVjaXNpb25zIG9yIGFyZSBjbG9zZWQgdG8gZGlzY3Vzc2lvbi4gVG8gdGhlIGNhc3VhbCByZWFk
ZXIgSSB3b3VsZCBzYXkgdGhhdCBpdCB0dXJucyBvdXQgdGhhdA0KIGdldHRpbmcgYW4gYXBwcm9w
cmlhdGUgc2ltcGxlIGF1ZGllbmNlIGNsYWltIGludG8gYW4gYWNjZXNzIHRva2VuIGlzbid0IG5l
YXJseSBhcyBzaW1wbGUgYXMgaXQgbWlnaHQgc2VlbS4gQW5kIHdoaWxlIGl0IHdpbGwgcHJldmVu
dCBSUyB0byBSUyByZXBsYXkgKGFzIGxvbmcgYXMgYm90aCBSU3MgYXJlbid0IGxlZ2l0IGF1ZGll
bmNlcykgaXQgZG9lc24ndCBoZWxwIHdpdGggcHJldmVudGluZyB0aGUgdXNlIG9mIHRva2VucyBz
dG9sZW4gb3IgbGVha2VkDQogYnkgb3RoZXIgbWVhbnMgKGluY2x1ZGluZyBmb3IgcmVmcmVzaCB0
b2tlbnMgaXNzdWVkIHRvIHB1YmxpYyBjbGllbnRzKS4mbmJzcDs8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9j
a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp
dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t
bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5
bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9z
cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5v
bmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYu
MHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjtt
YXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg
c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv
Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVl
Ij5Bbm90aGVyIHBvdGVudGlhbCBtb3RpdmF0aW9uIGlzIGZvciBtb2JpbGUgYXBwcy4gU29tZSBj
dXN0b21lcnMgb2Ygb3VycyB3b3VsZCBsaWtlIHRvIHRpZSBhY2Nlc3MvcmVmcmVzaCB0b2tlbnMg
dG8gcHJpdmF0ZQ0KIGtleSBtYXRlcmlhbCBnZW5lcmF0ZWQgb24gYSBzZWN1cmUgZWxlbWVudCBp
biB0aGUgZGV2aWNlLCB0aGF0IGNhbiBvbmx5IGJlIGFjY2Vzc2VkIGFmdGVyIGxvY2FsIGJpb21l
dHJpYyBhdXRoZW50aWNhdGlvbiAoZS5nLiBUb3VjaElEL0ZhY2VJRCBvbiBpT1MpLiBJIGhhdmUg
c3VnZ2VzdGVkIHVzaW5nIG1UTFMgY2VydC1ib3VuZCB0b2tlbnMgZm9yIHRoaXMsIGJ1dCBoYXZl
IGhlYXJkIHNvbWUgcHVzaGJhY2sgZHVlIHRvIHRoZSBkaWZmaWN1bHR5DQogb2YgY29uZmlndXJp
bmcgc3VwcG9ydCBmb3IgY2xpZW50IGNlcnRzIGFjcm9zcyBkaXZlcnNlIGluZnJhc3RydWN0dXJl
LiBBIHNpbXBsZSBKV1QtYmFzZWQgc29sdXRpb24gbGlrZSBEUG9QIGNvdWxkIGZpbGwgdGhpcyBu
ZWVkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph
dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw
LjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp
bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm
b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPkl0J3MgbWF5YmUgbm90
IHN0YXRlZCBpbiB0aGUgZHJhZnQgYnV0IHRoaXMga2luZCBvZiB0aGluZyBpcyBhbW9uZyB0aGUg
b2JqZWN0aXZlcyAoaW4gbXkgbWluZCBhbnl3YXkpLiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxv
OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9
Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh
biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJz
cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk
ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw
aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6
MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y
bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0
OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj
YU5ldWUiPk15IG1haW4gY29uY2VybnMgd2l0aCB0aGUgZHJhZnQgdGhvdWdoIGFyZSBhYm91dCBl
ZmZpY2llbmN5IGFuZCBzY2FsYWJpbGl0eSBvZiB0aGUgcHJvcG9zZWQgYXBwcm9hY2g6PC9zcGFu
PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5
bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48
c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4m
bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZl
dGljYU5ldWUiPjEuIFRoZSByZXF1aXJlbWVudCB0byB1c2UgcHVibGljIGtleSBzaWduYXR1cmVz
LCBhbG9uZyB3aXRoIHRoZSBhbnRpLXJlcGxheSBub25jZSwgbWVhbnMgdGhhdCB0aGUgUlMgaXMg
cmVxdWlyZWQgdG8gcGVyZm9ybQ0KIGFuIGV4cGVuc2l2ZSBzaWduYXR1cmUgdmVyaWZpY2F0aW9u
IGNoZWNrIG9uIGV2ZXJ5IHJlcXVlc3QuIFRoYXQgaXMgbm90IGdvaW5nIHRvIHNjYWxlIHVwIHdl
bGwuIFdoaWxlIHRoZXJlIGFyZSBtb3JlIGVmZmljaWVudCBzY2hlbWVzIGxpa2UgRWQyNTUxOSBu
b3csIHRoZXNlIGFyZSBzdGlsbCB0eXBpY2FsbHkgYW4gb3JkZXIgb2YgbWFnbml0dWRlIHNsb3dl
ciB0aGFuIEhNQUMgYW5kIHRoZSBsYXRlbmN5IGFuZCBDUFUgb3ZlcmhlYWQgaXMgbGlrZWx5DQog
dG8gYmUgYSBub24tc3RhcnRlciBmb3IgbWFueSBBUElzIChlc3BlY2lhbGx5IHdoZW4geW91J3Jl
IGJpbGxlZCBieSBDUFUgdXNhZ2UpLiBQdWJsaWMga2V5IHNpZ25hdHVyZXMgYXJlIGFsc28gbm90
b3Jpb3VzbHkgZnJhZ2lsZSAoc2VlIGUuZy4gdGhlIGhpc3Rvcnkgb2Ygbm9uY2UgcmV1c2UvbGVh
a2FnZSB2dWxuZXJhYmlsaXRpZXMgaW4gRUNEU0Egb3ImbmJzcDs8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0
aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn
aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh
bWlseTpIZWx2ZXRpY2FOZXVlIj5ZZXMsIGFzeW1tZXRyaWMgaXMgbW9yZSBwcm9jZXNzaW5nIGlu
dGVuc2l2ZSB0aGFuIHN5bW1ldHJpYy4gQnV0IGlmIHlvdSB0YWtlIGF3YXkgdGhlIGRpc3RyaWJ1
dGVkIHJlcGxheSBjaGVjayAoc2VlIG5leHQNCiByZXNwb25zZSksIGl0IHdpbGwgc2NhbGUgb3V0
IGp1c3QgZmluZS4gSSdtIG5vdCBzbyBzdXJlIGxhdGVuY3kgaXMgYSByZWFsIGlzc3VlIGhlcmUg
LSB3aGlsZSB0aGVzZSBvcGVyYXRpb25zIGFyZSBhbiBvcmRlciBvZiBtYWduaXR1ZGUgc2xvd2Vy
IHdlJ3JlIHN0aWxsIHRhbGtpbmcgYWJvdXQgdGltZXMgdGhhdCBhcmUgbm90IHBlcmNlcHRpYmxl
IHRvIGEgaHVtYW4uIENQVSB1c2FnZS9jb3N0IGlzIGEgcGFydCBvZiBhIHRyYWRlLW9mZiBmb3IN
CiB0aGUgc2ltcGxpY2l0eSBhZmZvcmRlZCBieSBwdWJsaWMvcHJpdmF0ZSBrZXlzLiZuYnNwOyBB
bmQgaXQgaXMgc2lnbmlmaWNhbnRseSBzaW1wbGVyLiBUaGUgZGVzaWduIHlvdSBza2V0Y2hlZCBv
dXQgaXMgYWRtaXR0ZWRseSBxdWl0ZSBjbGV2ZXIgYnV0IGl0J3Mgbm90IGV2ZW4gaW4gdGhlIHNh
bWUgYmFsbHBhcmsgd2l0aCByZXNwZWN0IHRvIGNvbXBsZXhpdHkuIEFuZCwgYXMgeW91IHBvaW50
ZWQgb3V0LCB0aGUgb3RoZXIgc3VnZ2VzdGlvbiBhcm91bmQNCiBzeW1tZXRyaWMga2V5cyBoYXMg
cmF0aGVyIGRpZmZlcmVudCBzZWN1cml0eSBwcm9wZXJ0aWVzIHdoaWxlIHN0aWxsIGFkZGluZyBj
b21wbGV4aXR5LiBBZGRpbmcgc3ltbWV0cmljIGtleSBzdXBwb3J0IGlzbid0IHNvbWV0aGluZyB0
aGF0IGNhbiBqdXN0IGJlIGFkZGVkIG9uIGVhc2lseS4mbmJzcDs8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2
Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0
b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6
YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh
TmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBz
dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5n
OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFy
Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t
Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls
eTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87
bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0
O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjIuIFRoZSBhZHZpY2UgZm9yIHRoZSBSUyB0byBz
dG9yZSBhIHNldCBvZiBwcmV2aW91c2x5IHVzZWQgbm9uY2VzIHRvIHByZXZlbnQgcmVwbGF5IHdp
bGwgYWxzbyBoYW1wZXIgc2NhbGFiaWxpdHksIGVzcGVjaWFsbHkNCiBpbiBsYXJnZSBkZXBsb3lt
ZW50cyB3aGVyZSBzdWNoIHN0YXRlIHdvdWxkIG5lZWQgdG8gYmUgcmVwbGljYXRlZCB0byBhbGwg
c2VydmVycyAob3IgdXNlIHN0aWNreSBsb2FkIGJhbGFuY2luZywgd2hpY2ggY29tZXMgd2l0aCBp
dHMgb3duIHByb2JsZW1zKS4gVGhpcyB2aW9sYXRlcyB0aGUgc3RhdGVsZXNzbmVzcyBvZiBIVFRQ
LCBhbmQgaXQgYWxzbyBwb3RlbnRpYWxseSBicmVha3MgaWRlbXBvdGVuY3kgb2Ygb3BlcmF0aW9u
czogVGhpbmsgb2YNCiB0aGUgY2FzZSB3aGVyZSB0aGUgSldUIHZhbGlkYXRpb24gYW5kIHJlcGxh
eSBwcm90ZWN0aW9uIGlzIGRvbmUgYXQgYW4gQVBJIGdhdGV3YXkgYnV0IHRoZW4gdGhlIGNhbGwg
dG8gdGhlIGJhY2tlbmQgQVBJIHNlcnZlciBmYWlscyBmb3IgYSB0cmFuc2llbnQgcmVhc29uLiBU
aGUgY2xpZW50IChvciBhIHByb3h5L2xpYnJhcnkpIGNhbm5vdCBzaW1wbHkgcmVwbGF5IHRoZSAo
aWRlbXBvdGVudCkgcmVxdWVzdCBpbiB0aGlzIGNhc2UgYmVjYXVzZSBpdA0KIHdpbGwgYmUgcmVq
ZWN0ZWQgYnkgdGhlIGdhdGV3YXkuIEl0IG11c3QgaW5zdGVhZCByZWNyZWF0ZSB0aGUgRFBvUCBK
V1QsIGluY3VycmluZyBhZGRpdGlvbmFsIG92ZXJoZWFkcy48L3NwYW4+PG86cD48L286cD48L3A+
DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6
YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh
TmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t
Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls
eTpIZWx2ZXRpY2FOZXVlIj5UaGUgYWN0dWFsIHZhbHVlIG9mIHJlcGxheSBjaGVja2luZyBvbiBq
dGkgaXMgc29tZXdoYXQgcXVlc3Rpb25hYmxlLiBUaGUgRFBvUCBKV1Qgb25seSB0cmFuc2l0cyBi
ZXR3ZWVuIGNsaWVudCBhbmQgc2VydmVyDQogc28gYSBUTFMgTUlUTSBpcyBsaWtlbHkgbmVlZGVk
IHRvIHN0ZWFsIGEgRFBvUCBKV1QuIEJ1dCB3ZSBhcmUgYXNzdW1pbmcgVExTIHdvcmtzIGhlcmUu
IEFuZCBhbiBhY3RpdmUgTUlUTSBjb3VsZCB0aHdhcnQgdGhpcyBjaGVjayBieSBqdXN0IGJlaW5n
IGZpcnN0IHRvIHByZXNlbnQgRFBvUCBKV1QuIEkgdGhpbmsgdGhlIGp0aSBjaGVjayBtYWRlIGl0
cyB3YXkgaW50byB0aGUgZHJhZnQgbW9zdGx5IGJlY2F1c2UgaXQgc2VlbWVkIGxpa2Ugc29tZXRo
aW5nDQogd2FzIG5lZWRlZCB0byB0cnkgYW5kIGJyaW5nIGl0IGNsb3NlciB0byB0aGUgVExTIFBv
UCBtb2RlbHMuIEJlaW5nIGF3YXJlIG9mIHRoZSBzY2FsYWJpbGl0eSBjb25jZXJucywgSSBkaWQg
ZW5kZWF2b3IgdG8gd3JpdGUgdGhlIHRleHQgaW4gc3VjaCBhIHdheSBzbyBhcyB0byBsZWF2ZSBz
b21lIHdpZ2dsZSByb29tIGluIGltcGxlbWVudGF0aW9ucy9kZXBsb3ltZW50cyB3aXRoIHRleHQg
bGlrZSAnJnF1b3Q7anRpJnF1b3Q7IFNIT1VMRCBiZSB1c2VkIGJ5IHRoZQ0KIHNlcnZlciBmb3Ig
cmVwbGF5IGRldGVjdGlvbiBhbmQgcHJldmVudGlvbmAgYW5kIFtlbnN1cmUgdGhhdF0gJ3dpdGhp
biBhIHJlYXNvbmFibGUgY29uc2lkZXJhdGlvbiBvZiBhY2N1cmFjeSBhbmQgcmVzb3VyY2UgdXRp
bGl6YXRpb24sIGEgSldUIHdpdGggdGhlIHNhbWUgJnF1b3Q7anRpJnF1b3Q7IHZhbHVlIGhhcyBu
b3QgYmVlbiByZWNlaXZlZCBwcmV2aW91c2x5Jy4gVGhlIGlkZWEgYmVpbmcgdGhhdCB1c2luZyBz
b21ldGhpbmcgZXZlbnR1YWxseSBjb25zaXN0ZW50DQogb3IgZXZlbiBsb2NhbCBvbmx5IHRvIHRo
ZSBydW50aW1lIGluc3RhbmNlIHdvdWxkIGJlIHBlcm1pc3NpYmxlLiBQZXJoYXBzIHRoYXQgYWxs
b3dhbmNlIGFuZCB0aGUgcmF0aW9uYWwgY291bGQgYmUgbWFkZSBtb3JlIGNsZWFyPyBPciB3b3Vs
ZCB5b3Ugc3VnZ2VzdCB0byBkbyBhd2F5IHdpdGggdGhlIGp0aSByZXBsYXkgc3R1ZmYgYWw/IE9y
IHNvbWV0aGluZyBlbHNlPyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k
aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h
cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+
DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0ND
QyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp
bi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph
dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw
LjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp
bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm
b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjMuIE1pbm9yOiBUaGUg
dXNlIG9mIGEgY3VzdG9tIGhlYWRlciBmb3IgY29tbXVuaWNhdGluZyB0aGUgRFBvUCBwcm9vZiB3
aWxsIHJlcXVpcmUgYWRkaXRpb25hbCBDT1JTIGNvbmZpZ3VyYXRpb24gb24gdG9wDQogb2YgdGhh
dCBhbHJlYWR5IGRvbmUgZm9yIHRoZSBBdXRob3JpemF0aW9uIGhlYWRlciwgYW5kIHNvIGFkZHMg
YSBzbWFsbCBhbW91bnQgb2YgYWRkaXRpb25hbCBmcmljdGlvbiBmb3IgYWRvcHRpb24uIEdpdmVu
IHRoYXQgQ09SUyBjb25maWd1cmF0aW9uIGNoYW5nZXMgb2Z0ZW4gcmVxdWlyZSBhcHByb3ZhbCBi
eSBhIHNlY3VyaXR5IHRlYW0sIHRoaXMgbWF5IG1ha2UgbW9yZSBvZiBhbiBpbXBhY3QgdGhhbiB5
b3UnZCBleHBlY3QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv
Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10
b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250
LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpw
PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt
c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g
c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+RmVlbHMg
cmVhbGx5IG1pbm9yLiBJIG1lYW4sIHdlIGNvdWxkIHRyeSB0byByb2xsIGV2ZXJ5dGhpbmcgdXAg
dW5kZXIgb25lIGhlYWRlci4gQnV0IGl0IGRvZXMgc2VlbSB1bndhcnJhbnRlZCBhbmQgd291bGQN
CiBjb21wbGljYXRlIHRoaW5ncyAtIGF0IGxlYXN0IGluIHRoZSBtb2RlbCB3ZSd2ZSBnb3Qgbm93
IHdoZXJlIHRoZSBwcm9vZiBpcyBzZW50IHRoZSBzYW1lIHdheSBvbm8gYWxsIHR5cGVzIG9mIHJl
cXVlc3RzLiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp
dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6
NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t
YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250
LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0
OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw
PjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0
OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVm
dDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1
LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy
Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+SXQncyBhbHNvIG5v
dCBjbGVhciB0byBtZSBleGFjdGx5IHdoYXQgdGhyZWF0IHRoZSBhbnRpLXJlcGxheSBub25jZSBp
cyBwcm90ZWN0aW5nIGFnYWluc3QuIEl0IGRvZXMgbm90aGluZyBhZ2FpbnN0IHRoZSByZXBsYXkN
CiBzY2VuYXJpbyBkaXNjdXNzZWQgaW4gc2VjdGlvbiAyLCBhcyBJIHVuZGVyc3RhbmQgaXQgLSB3
aGljaCByZWFsbHkgc2VlbXMgdG8gYmUgbW9yZSBvZiBhIE1pdE0gc2NlbmFyaW8uIEdpdmVuIHRo
YXQgdGhlIGNvbm5lY3Rpb24gYmV0d2VlbiB0aGUgY2xpZW50IGFuZCB0aGUgUlMgaXMgc3VwcG9z
ZWQgdG8gYmUgb3ZlciBUTFMsIGFuZCBUTFMgaXMgYWxyZWFkeSBwcm90ZWN0ZWQgYWdhaW5zdCBy
ZXBsYXkgYXR0YWNrcywgSSB0aGluayB0aGlzIHBhcnQNCiBuZWVkcyB0byBiZSBiZXR0ZXIgbW90
aXZhdGVkIGdpdmVuIHRoZSBvYnZpb3VzIGNvc3RzIG9mIGltcGxlbWVudGluZyBpdC48L3NwYW4+
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls
ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZu
YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h
bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0
aWNhTmV1ZSI+SSBoYXZlIGEgdGVudGF0aXZlIHN1Z2dlc3Rpb24gZm9yIGFuIGFsdGVybmF0aXZl
IGRlc2lnbiB3aGljaCBhdm9pZHMgdGhlc2UgcHJvYmxlbXMsIGJ1dCBhdCBhIGNvc3Qgb2YgcG90
ZW50aWFsbHkgbW9yZSBjb21wbGV4aXR5DQogZWxzZXdoZXJlLiBJJ2xsIHN1bW1hcmlzZSBpdCBo
ZXJlIGZvciBjb25zaWRlcmF0aW9uOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt
c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7
Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4xLiBUaGUgY2xpZW50IG9idGFp
bnMgYW4gYWNjZXNzIHRva2VuIGluIHRoZSBub3JtYWwgd2F5LiBXaGVuIGNhbGxpbmcgdGhlIHRv
a2VuIGVuZHBvaW50IGl0IHByb3ZpZGVzIGFuIEVDL29rcCBwdWJsaWMga2V5DQogYXMgdGhlIGNv
bmZpcm1hdGlvbiBrZXkgdG8gYmUgYXNzb2NpYXRlZCB3aXRoIHRoZSBhY2Nlc3MvcmVmcmVzaCB0
b2tlbnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t
LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2
ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h
cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt
ZmFtaWx5OkhlbHZldGljYU5ldWUiPjIuIFRoZSBmaXJzdCB0aW1lIHRoZSBjbGllbnQgY2FsbHMg
YW4gUlMgaXQgcGFzc2VzIGl0cyBhY2Nlc3MgdG9rZW4gaW4gdGhlIEF1dGhvcml6YXRpb246IEJl
YXJlciBoZWFkZXIgYXMgbm9ybWFsLiAoSWYgdGhlDQogUlMgZG9lc24ndCBzdXBwb3J0IERQb1Ag
dGhlbiB0aGlzIHdvdWxkIGp1c3Qgc3VjY2VlZCBhbmQgbm8gZnVydGhlciBhY3Rpb24gaXMgcmVx
dWlyZWQgYnkgdGhlIGNsaWVudCAtIGFsbG93aW5nIGNsaWVudHMgdG8gb3Bwb3J0dW5pc3RpY2Fs
bHkgYXNrIGZvciBEUG9QIHdpdGhvdXQgbmVlZGluZyBhIHByaW9yaSBrbm93bGVkZ2Ugb2YgUlMg
Y2FwYWJpbGl0aWVzKS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp
bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt
aWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0
bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41
cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+My4gVGhlIFJTIGludHJvc3BlY3RzIHRoZSBh
Y2Nlc3MgdG9rZW4gYW5kIGxlYXJucyB0aGUgRUMgcHVibGljIGtleSBhc3NvY2lhdGVkIHdpdGgg
dGhlIGFjY2VzcyB0b2tlbi4gQXMgdGhlcmUgaXMgbm8gRFBvUA0KIHByb29mIHdpdGggdGhlIGFj
Y2VzcyB0b2tlbiwgdGhlIFJTIHdpbGwgZ2VuZXJhdGUgYSBjaGFsbGVuZ2UgaW4gdGhlIGZvbGxv
d2luZyB3YXk6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpI
ZWx2ZXRpY2FOZXVlIj4mbmJzcDsgJm5ic3A7Jm5ic3A7byBUaGUgUlMgZ2VuZXJhdGVzIGFuIGVw
aGVtZXJhbCBFQyBrZXkgcGFpciBmb3IgdGhlIHNhbWUgY3VydmUgYXMgdGhlIGNvbmZpcm1hdGlv
biBrZXkgKGUuZy4gUC0yNTYgb3IgWDI1NTE5KS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0
OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOyAmbmJzcDsmbmJzcDtvIFRo
ZSBSUyBzdG9yZXMgdGhlIGVwaGVtZXJhbCBwcml2YXRlIGtleSBzb21ld2hlcmUsIGFzc29jaWF0
ZWQgd2l0aCB0aGlzIGFjY2VzcyB0b2tlbiAoc2VlIGJlbG93IGZvciBhIHNjYWxhYmxlIGltcGxl
bWVudGF0aW9uDQogY2hvaWNlKTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N
CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t
bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u
dC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7ICZuYnNwOyZuYnNwO28gVGhlIFJTIGVuY29k
ZXMgdGhlIGVwaGVtZXJhbCBwdWJsaWMga2V5IGludG8gYSBKV0sgKGVwaykgYW5kIGJhc2U2NHVy
bC1lbmNvZGVzIGl0LiBJdCB1c2VzIHRoaXMgYXMgYSBjaGFsbGVuZ2UgdG8NCiB0aGUgY2xpZW50
IGJ5IHNlbmRpbmcgYmFjayBhIDQwMSByZXNwb25zZSB3aXRoIFdXVy1BdXRoZW50aWNhdGU6IERQ
b1AgJmx0O2VuY29kZWQtZXBrJmd0Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt
c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7
Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj40LiBUaGUgY2xpZW50IGRlY29k
ZXMgdGhlIGVwayBjaGFsbGVuZ2UgYW5kIHBlcmZvcm1zIGFuIEVDREgga2V5IGFncmVlbWVudCBi
ZXR3ZWVuIGl0cyBwcml2YXRlIGtleSBhbmQgdGhlIGNoYWxsZW5nZSBlcGsNCiBhcyBwZXIgdGhl
IG1ldGhvZCBkZXNjcmliZWQgZm9yIHRoZSBleGlzdGluZyBKV0EgRUNESC1FUyBlbmNyeXB0aW9u
IGFsZ29yaXRobS4gUmF0aGVyIHRoYW4gZGVyaXZpbmcgYW4gQUVTIGtleSBob3dldmVyLCBpdCBk
ZXJpdmVzIGEgSE1BQyBrZXkgZm9yIEhTMjU2LiBUaGUgJnF1b3Q7YXB1JnF1b3Q7IHZhbHVlIGlz
IHNldCB0byB0aGUgYWNjZXNzIHRva2VuIChzdHJpbmcgdmFsdWUgYXMgQVNDSUkgYnl0ZXMpIGFu
ZCB0aGUgJnF1b3Q7YXB2JnF1b3Q7IHZhbHVlIGlzIHNldCB0bw0KIHRoZSBob3N0bmFtZSBvZiB0
aGUgUlMgKGUuZy4gJnF1b3Q7PGEgaHJlZj0iaHR0cDovL2FwaS5leGFtcGxlLmNvbS8iIHRhcmdl
dD0iX2JsYW5rIj5hcGkuZXhhbXBsZS5jb208L2E+JnF1b3Q7KS4gVGhpcyBlbnN1cmVzIHRoYXQg
dGhlIGRlcml2ZWQga2V5IGlzIGNyeXB0b2dyYXBoaWNhbGx5IGJvdW5kIHRvIHRoZSBjb250ZXh0
IGluIHdoaWNoIGl0IGlzIHVzZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z
by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm
b250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At
YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjUuIFRoZSBjbGllbnQgdXNlcyB0
aGUgSE1BQyBrZXkgdG8gY3JlYXRlIGEgRFBvUCBwcm9vZiBKV1QgbXVjaCBsaWtlIHRoZSBvbmUg
aW4gdGhlIGN1cnJlbnQgZHJhZnQsIGJ1dCBzaWduZWQgdXNpbmcgdGhlDQogSFMyNTYga2V5LiBJ
ZiBhICZxdW90O2tpZCZxdW90OyBmaWVsZCB3YXMgcHJlc2VudCBpbiB0aGUgY2hhbGxlbmdlIEpX
SyBzZW50IGJ5IHRoZSBSUyB0aGVuIHRoZSBzYW1lIHZhbHVlIE1VU1QgYmUgdXNlZCBpbiB0aGUg
JnF1b3Q7a2lkJnF1b3Q7IGhlYWRlciBvZiB0aGlzIGRpc2NoYXJnZSBKV1QuIEl0IHJldHJpZXMg
aXRzIG9yaWdpbmFsIHJlcXVlc3Qgc2VuZGluZyBBdXRob3JpemF0aW9uOiBEUG9QICZsdDtobWFj
LWp3dCZndDsgYXQ9Jmx0O2FjY2Vzc190b2tlbiZndDsuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K
PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w
LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv
LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0
eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjYuIFRoZSBS
UyB1c2VzIGl0cyBzdG9yZWQgZXBoZW1lcmFsIHByaXZhdGUga2V5IHRvIGRlcml2ZSB0aGUgc2Ft
ZSBITUFDIGtleSBhbmQgdmVyaWZ5IHRoZSBEUG9QIGRpc2NoYXJnZSBKV1QuIElmIGl0IHZhbGlk
YXRlcw0KIGFuZCBhbGwgZmllbGRzIGFyZSBjb3JyZWN0IHRoZW4gdGhlIHJlcXVlc3QgaXMgYWxs
b3dlZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t
YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZl
dGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy
Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m
YW1pbHk6SGVsdmV0aWNhTmV1ZSI+RWZmaWNpZW50IGltcGxlbWVudGF0aW9uIHRyaWNrOjwvc3Bh
bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0
eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+
PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+
QmVjYXVzZSB0aGUgY2xpZW50IGlzIHJlcXVpcmVkIHRvIGNvcHkgYW5kICZxdW90O2tpZCZxdW90
OyB2YWx1ZSBmcm9tIHRoZSBjaGFsbGVuZ2UgSldLLCB0aGUgUlMgY2FuIHByZWVtcHRpdmVseSBj
YXJyeSBvdXQgdGhlIEVDREgNCiBrZXkgYWdyZWVtZW50IGltbWVkaWF0ZWx5IGFuZCBnZW5lcmF0
ZSB0aGUgZGVyaXZlZCBITUFDIGtleS4gVGhlIFJTIGNhbiB0aGVuIGVuY3J5cHQgdGhpcyBkZXJp
dmVkIGtleSB1c2luZyBhIGxvY2FsIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGlvbiBrZXkgKGUuZy4g
QUVTLUdDTSkgYW5kIHVzZSB0aGF0IGVuY3J5cHRlZCB2YWx1ZSBhcyB0aGUgJnF1b3Q7a2lkJnF1
b3Q7IHZhbHVlIGluIHRoZSBjaGFsbGVuZ2UgKHBlcmhhcHMgYWxvbmcgd2l0aCBzb21lIGNvbnRl
eHQNCiBvciBhbiBleHBpcnkgdGltZSkuIFRoYXQgd2F5IHRoZSBSUyBvbmx5IG5lZWRzIHRvIGRl
Y3J5cHQgdGhpcyBraWQgdmFsdWUgcmF0aGVyIHRoYW4gcGVyZm9ybWluZyB0aGUgRUNESCBrZXkg
YWdyZWVtZW50IG9uIGV2ZXJ5IHJlcXVlc3QuIFRoaXMgYWxzbyBhdm9pZHMgdGhlIG5lZWQgZm9y
IHRoZSBSUyB0byBzdG9yZSBhbnkgcGVyLWNsaWVudCBzdGF0ZSBsb2NhbGx5Ljwvc3Bhbj48bzpw
PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt
c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g
c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph
dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FO
ZXVlIj5UaGUgY2hhbGxlbmdlLXJlc3BvbnNlIG5hdHVyZSBvZiB0aGUgc2NoZW1lIHByZXZlbnRz
IHRyYWRpdGlvbmFsIHJlcGxheSBhdHRhY2tzIGluIHRoZSBjYXNlIHdoZXJlIGEgRFBvUCBkaXNj
aGFyZ2UgSldUIGlzDQogYWNjaWRlbnRhbGx5IGxlYWtlZCB0aHJvdWdoIHNlcnZlciBsb2dzIG9y
IHNvbWUgb3RoZXIgZmxhdywgd2l0aG91dCBuZWVkaW5nIHRvIHN0b3JlIG5vbmNlcyBvbiB0aGUg
c2VydmVyLiBVc2luZyB0aGUgUlMncyBob3N0bmFtZSBpbiB0aGUga2V5IGRlcml2YXRpb24gcHJv
Y2VzcyBwcmV2ZW50cyBtaXRtIGF0dGFja3MgaW4gYSBzaW1pbGFyIHdheSB0byBob3cgRklETy9X
ZWJBdXRobiBwcmV2ZW50cyB0aGlzLiBNb3N0IGltcG9ydGFudGx5LCBvbmNlDQogYSBIUzI1NiBr
ZXkgaGFzIGJlZW4gZGVyaXZlZCBiZXR3ZWVuIGEgY2xpZW50IGFuZCBSUyB0aGV5IGNhbiByZXVz
ZSB0aGF0IGtleSBmb3IgbXVsdGlwbGUgcmVxdWVzdHMsIHJlZHVjaW5nIHRoZSBvdmVyaGVhZCBv
ZiB0aGUgRUNESCBrZXkgYWdyZWVtZW50IHN0ZXAuIEVpdGhlciBzaWRlIGNhbiBkZWNpZGUgYXMg
YSBtYXR0ZXIgb2YgcG9saWN5IGhvdyBsb25nIHRvIGxldCB0aGlzIG9jY3VyIGFuZCB3aGVuIHRv
IHRyaWdnZXIgYSBmcmVzaCBjaGFsbGVuZ2UtcmVzcG9uc2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t
dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u
dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86
cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i
bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPkJlY2F1
c2UgdGhpcyBmaXRzIHdpdGhpbiB0aGUgc3RhbmRhcmQgSFRUUCBhdXRoZW50aWNhdGlvbiBmcmFt
ZXdvcmssIGl0IGFsc28gcmVxdWlyZXMgbm8gYWRkaXRpb25hbCBDT1JTIGNvbmZpZ3VyYXRpb24g
YW5kDQogaXMgcmVsYXRpdmVseSBlYXN5IHRvIHBsdWcgaW4gdG8gZXhpc3RpbmcgSFRUUCBjbGll
bnQgbGlicmFyaWVzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu
LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p
bHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv
O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw
dDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj5UaGUgbWFpbiBkb3duc2lkZSBvZiB0aGlzIGFw
cHJvYWNoIHRvIG1lIGlzIHRoZSBmYWN0IHRoYXQgeW91IGNhbid0IHNpbXBseSByZXVzZSBhbiBl
eGlzdGluZyBKV1QgbGlicmFyeSB0byBpbXBsZW1lbnQgaXQsDQogYW5kIHNvIGl0IHdpbGwgdGFr
ZSB0aW1lIGZvciBjbGllbnQgbGlicyB0byBkZXZlbG9wLiAoQWx0aG91Z2ggSSB0aGluayB0aGlz
IG1pZ2h0IGJlIGFjaGlldmFibGUgbm93IHdpdGggZXhpc3RpbmcgKkNPU0UqIGxpYnJhcmllcyku
IFRoaXMgd291bGQgaW5jcmVhc2UgdGhlIHJpc2sgb2YgcGVvcGxlIGhhbmQtcm9sbGluZyBzb2x1
dGlvbnMsIHJhdGhlciB0aGFuIHVzaW5nIHdlbGwtdGVzdGVkIGxpYnJhcmllcy4gT24gdGhlIG90
aGVyIGhhbmQsDQogaXQgdXNlcyBmYWlybHkgd2lkZWx5IHN1cHBvcnRlZCBwcmltaXRpdmVzIHNv
IGUuZy4gYW4gaW1wbGVtZW50YXRpb24gdXNpbmcgV2ViQ3J5cHRvIGlzIHByb2JhYmx5IG9ubHkg
YSBmZXcgZG96ZW4gbGluZXMgb2YgY29kZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1
dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu
NXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu
LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+LS0gTmVpbDwvc3Bhbj48
bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1
dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5l
dWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y
bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0
OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj
YU5ldWUiPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwv
cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w
cHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h
bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6
ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+T24gMzEgT2N0IDIwMTksIGF0IDE5
OjIwLCBCcmlhbiBDYW1wYmVsbCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJjYW1wYmVsbD00MHBpbmdp
ZGVudGl0eS5jb21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5iY2FtcGJlbGw9NDBw
aW5naWRlbnRpdHkuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsNCiB3cm90ZTo8L3NwYW4+PG86
cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy
Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFu
PjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph
dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FO
ZXVlIj5IZWxsbyBXRywmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv
LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv
bnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv
ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h
bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6
ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+SnVzdCBhIHF1aWNrIG5vdGUgdG8g
bGV0IGZvbGtzIGtub3cgdGhhdCAtMDMgb2YgdGhlIERQb1AgZHJhZnQgd2FzIHB1Ymxpc2hlZCBl
YXJsaWVyIHRvZGF5LiBUaGUgdXN1YWwgdmFyaW91cyBkb2N1bWVudCBsaW5rcw0KIGFyZSBpbiB0
aGUgZm9yd2FyZGVkIG1lc3NhZ2UgYmVsb3cgYW5kIHRoZSByZWxldmFudCBzbmlwcGV0IGZyb20g
dGhlIGRvYyBoaXN0b3J5IHdpdGggYSBzdW1tYXJ5IG9mIHRoZSBjaGFuZ2VzIGlzIGluY2x1ZGVk
IGhlcmUgZm9yIGNvbnZlbmllbmNlLiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6
YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox
MC41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+
PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn
aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i
Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj5Ib3BlZnVsbHkgZm9s
a3Mgd2lsbCBoYXZlIHRpbWUgdG8gcmVhZCB0aGUgKHJlbGF0aXZpdHkpIHNob3J0IGRvY3VtZW50
IGJlZm9yZSB0aGUgbWVldGluZyhzKSBpbiBTaW5nYXBvcmUgd2hlcmUgKHNwb2lsZXINCiBhbGVy
dCkgSSBwbGFuIHRvIGFzayB0aGF0IHRoZSBXRyBjb25zaWRlciBhZG9wdGlvbiBvZiB0aGUgZHJh
ZnQuJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90
dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpI
ZWx2ZXRpY2FOZXVlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv
LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv
bnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPlRoYW5rcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At
YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjxicj4NCiZuYnNwOy0wMzxicj4N
CiZuYnNwOyAmbmJzcDtvICZuYnNwO3Jld29yayB0aGUgdGV4dCBhcm91bmQgdW5pcXVlbmVzcyBy
ZXF1aXJlbWVudHMgb24gdGhlIGp0aSBjbGFpbSBpbjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7
Jm5ic3A7dGhlIERQb1AgcHJvb2YgSldUPGJyPg0KJm5ic3A7ICZuYnNwO28gJm5ic3A7bWFrZSB0
b2tlbnMgYSBiaXQgc21hbGxlciBieSB1c2luZyAmcXVvdDtodG0mcXVvdDssICZxdW90O2h0dSZx
dW90OywgYW5kICZxdW90O2prdCZxdW90OyByYXRoZXI8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNw
OyZuYnNwO3RoYW4gJnF1b3Q7aHR0cF9tZXRob2QmcXVvdDssICZxdW90O2h0dHBfdXJpJnF1b3Q7
LCBhbmQgJnF1b3Q7amt0I1MyNTYmcXVvdDsgcmVzcGVjdGl2ZWx5PGJyPg0KJm5ic3A7ICZuYnNw
O28gJm5ic3A7bW9yZSBleHBsaWNpdCByZWNvbW1lbmRhdGlvbiB0byB1c2UgbVRMUyBpZiB0aGF0
IGlzIGF2YWlsYWJsZTxicj4NCiZuYnNwOyAmbmJzcDtvICZuYnNwO2FkZGVkIERhdmlkIFdhaXRl
IGFzIGNvLWF1dGhvcjxicj4NCiZuYnNwOyAmbmJzcDtvICZuYnNwO2VkaXRvcmlhbCB1cGRhdGVz
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv
bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6SGVs
dmV0aWNhTmV1ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h
cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt
ZmFtaWx5OkhlbHZldGljYU5ldWUiPi0tLS0tLS0tLS0gRm9yd2FyZGVkIG1lc3NhZ2UgLS0tLS0t
LS0tPGJyPg0KRnJvbTombmJzcDsmbHQ7PGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0Bp
ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mZ3Q7
PGJyPg0KRGF0ZTogVGh1LCBPY3QgMzEsIDIwMTkgYXQgMTE6NTMgQU08YnI+DQpTdWJqZWN0OiBO
ZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMy50eHQ8
YnI+DQpUbzogVG9yc3RlbiBMb2RkZXJzdGVkdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRvcnN0ZW5A
bG9kZGVyc3RlZHQubmV0IiB0YXJnZXQ9Il9ibGFuayI+dG9yc3RlbkBsb2RkZXJzdGVkdC5uZXQ8
L2E+Jmd0OywgTWljaGFlbCBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1iakBtaWNyb3NvZnQu
Y29tIiB0YXJnZXQ9Il9ibGFuayI+bWJqQG1pY3Jvc29mdC5jb208L2E+Jmd0OywgSm9obiBCcmFk
bGV5ICZsdDs8YSBocmVmPSJtYWlsdG86dmU3anRiQHZlN2p0Yi4uY29tIiB0YXJnZXQ9Il9ibGFu
ayI+dmU3anRiQHZlN2p0Yi5jb208L2E+Jmd0OywNCiBCcmlhbiBDYW1wYmVsbCAmbHQ7PGEgaHJl
Zj0ibWFpbHRvOmJjYW1wYmVsbEBwaW5naWRlbnRpdHkuY29tIiB0YXJnZXQ9Il9ibGFuayI+YmNh
bXBiZWxsQHBpbmdpZGVudGl0eS5jb208L2E+Jmd0OywgRGF2aWQgV2FpdGUgJmx0OzxhIGhyZWY9
Im1haWx0bzpkYXZpZEBhbGthbGluZS1zb2x1dGlvbnMuY29tIiB0YXJnZXQ9Il9ibGFuayI+ZGF2
aWRAYWxrYWxpbmUtc29sdXRpb25zLmNvbTwvYT4mZ3Q7LCBEYW5pZWwgRmV0dCAmbHQ7PGEgaHJl
Zj0ibWFpbHRvOm1haWxAZGFuaWVsZmV0dC5kZSIgdGFyZ2V0PSJfYmxhbmsiPm1haWxAZGFuaWVs
ZmV0dC5kZTwvYT4mZ3Q7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbTox
Mi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj
YU5ldWUiPjxicj4NCjxicj4NCjxicj4NCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1mZXR0
LW9hdXRoLWRwb3AtMDMudHh0PGJyPg0KaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBi
eSBCcmlhbiBDYW1wYmVsbCBhbmQgcG9zdGVkIHRvIHRoZTxicj4NCklFVEYgcmVwb3NpdG9yeS48
YnI+DQo8YnI+DQpOYW1lOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7
ZHJhZnQtZmV0dC1vYXV0aC1kcG9wPGJyPg0KUmV2aXNpb246Jm5ic3A7ICZuYnNwOyAmbmJzcDsg
Jm5ic3A7MDM8YnI+DQpUaXRsZTombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IE9B
dXRoIDIuMCBEZW1vbnN0cmF0aW9uIG9mIFByb29mLW9mLVBvc3Nlc3Npb24gYXQgdGhlIEFwcGxp
Y2F0aW9uIExheWVyIChEUG9QKTxicj4NCkRvY3VtZW50IGRhdGU6Jm5ic3A7IDIwMTktMTAtMzA8
YnI+DQpHcm91cDombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IEluZGl2aWR1YWwg
U3VibWlzc2lvbjxicj4NClBhZ2VzOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg
MTU8YnI+DQpVUkw6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJz
cDs8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQtZmV0
dC1vYXV0aC1kcG9wLTAzLnR4dCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3Jn
L2ludGVybmV0LWRyYWZ0cy9kcmFmdC1mZXR0LW9hdXRoLWRwb3AtMDMudHh0PC9hPjxicj4NClN0
YXR1czombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9k
YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtZmV0dC1vYXV0aC1kcG9wLyIgdGFyZ2V0PSJf
YmxhbmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWZldHQtb2F1dGgt
ZHBvcC88L2E+PGJyPg0KSHRtbGl6ZWQ6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJl
Zj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMyIg
dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1mZXR0LW9h
dXRoLWRwb3AtMDM8L2E+PGJyPg0KSHRtbGl6ZWQ6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7
PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1mZXR0
LW9hdXRoLWRwb3AiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn
L2RvYy9odG1sL2RyYWZ0LWZldHQtb2F1dGgtZHBvcDwvYT48YnI+DQpEaWZmOiZuYnNwOyAmbmJz
cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5v
cmcvcmZjZGlmZj91cmwyPWRyYWZ0LWZldHQtb2F1dGgtZHBvcC0wMyIgdGFyZ2V0PSJfYmxhbmsi
Pmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1mZXR0LW9hdXRoLWRwb3At
MDM8L2E+PGJyPg0KPGJyPg0KQWJzdHJhY3Q6PGJyPg0KJm5ic3A7ICZuYnNwO1RoaXMgZG9jdW1l
bnQgZGVzY3JpYmVzIGEgbWVjaGFuaXNtIGZvciBzZW5kZXItY29uc3RyYWluaW5nIE9BdXRoIDIu
MDxicj4NCiZuYnNwOyAmbmJzcDt0b2tlbnMgdmlhIGEgcHJvb2Ytb2YtcG9zc2Vzc2lvbiBtZWNo
YW5pc20gb24gdGhlIGFwcGxpY2F0aW9uIGxldmVsLjxicj4NCiZuYnNwOyAmbmJzcDtUaGlzIG1l
Y2hhbmlzbSBhbGxvd3MgZm9yIHRoZSBkZXRlY3Rpb24gb2YgcmVwbGF5IGF0dGFja3Mgd2l0aCBh
Y2Nlc3M8YnI+DQombmJzcDsgJm5ic3A7YW5kIHJlZnJlc2ggdG9rZW5zLjxicj4NCjxicj4NCjxi
cj4NCjxicj4NCjxicj4NClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2Yg
bWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb248YnI+DQp1bnRpbCB0aGUgaHRtbGl6
ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0Jm5ic3A7PGEgaHJlZj0iaHR0cDov
L3Rvb2xzLmlldGYub3JnLyIgdGFyZ2V0PSJfYmxhbmsiPnRvb2xzLmlldGYub3JnPC9hPi48YnI+
DQo8YnI+DQpUaGUgSUVURiBTZWNyZXRhcmlhdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z
by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz
dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj48YnI+DQo8
L3NwYW4+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1
b3Q7SGVsdmV0aWNhIE5ldWUmcXVvdDs7Y29sb3I6IzU1NTU1NTtib3JkZXI6bm9uZSB3aW5kb3d0
ZXh0IDEuMHB0O3BhZGRpbmc6MGluIj5DT05GSURFTlRJQUxJVFkgTk9USUNFOiBUaGlzIGVtYWls
IG1heSBjb250YWluIGNvbmZpZGVudGlhbCBhbmQgcHJpdmlsZWdlZCBtYXRlcmlhbCBmb3IgdGhl
IHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQocykuDQogQW55IHJldmlldywgdXNl
LCBkaXN0cmlidXRpb24gb3IgZGlzY2xvc3VyZSBieSBvdGhlcnMgaXMgc3RyaWN0bHkgcHJvaGli
aXRlZC4uJm5ic3A7IElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBl
cnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGJ5IGUtbWFpbCBhbmQg
ZGVsZXRlIHRoZSBtZXNzYWdlIGFuZCBhbnkgZmlsZSBhdHRhY2htZW50cyBmcm9tIHlvdXIgY29t
cHV0ZXIuIFRoYW5rIHlvdS48L3NwYW4+PC9pPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw
LjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2FOZXVlIj5fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fXzxicj4NCk9BdXRoIG1haWxpbmcgbGlzdDxicj4NCjxhIGhy
ZWY9Im1haWx0bzpPQXV0aEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPk9BdXRoQGlldGYub3Jn
PC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v
b2F1dGgiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp
bmZvL29hdXRoPC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl
Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0
OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
MTAuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw
PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9k
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87
bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0
O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWUiPjxicj4NCjwvc3Bhbj48Yj48aT48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EgTmV1ZSZxdW90
Oztjb2xvcjojNTU1NTU1O2JvcmRlcjpub25lIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzowaW4i
PkNPTkZJREVOVElBTElUWSBOT1RJQ0U6IFRoaXMgZW1haWwgbWF5IGNvbnRhaW4gY29uZmlkZW50
aWFsIGFuZCBwcml2aWxlZ2VkIG1hdGVyaWFsIGZvciB0aGUgc29sZSB1c2Ugb2YgdGhlIGludGVu
ZGVkIHJlY2lwaWVudChzKS4NCiBBbnkgcmV2aWV3LCB1c2UsIGRpc3RyaWJ1dGlvbiBvciBkaXNj
bG9zdXJlIGJ5IG90aGVycyBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiZuYnNwOyBJZiB5b3UgaGF2
ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhl
IHNlbmRlciBpbW1lZGlhdGVseSBieSBlLW1haWwgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZSBhbmQg
YW55IGZpbGUgYXR0YWNobWVudHMgZnJvbSB5b3VyIGNvbXB1dGVyLiBUaGFuayB5b3UuPC9zcGFu
PjwvaT48L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t
YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k
aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg
c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv
Ij48YnI+DQo8Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom
cXVvdDtIZWx2ZXRpY2EgTmV1ZSZxdW90Oztjb2xvcjojNTU1NTU1O2JvcmRlcjpub25lIHdpbmRv
d3RleHQgMS4wcHQ7cGFkZGluZzowaW4iPkNPTkZJREVOVElBTElUWSBOT1RJQ0U6IFRoaXMgZW1h
aWwgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIGFuZCBwcml2aWxlZ2VkIG1hdGVyaWFsIGZvciB0
aGUgc29sZSB1c2Ugb2YgdGhlIGludGVuZGVkIHJlY2lwaWVudChzKS4gQW55IHJldmlldywNCiB1
c2UsIGRpc3RyaWJ1dGlvbiBvciBkaXNjbG9zdXJlIGJ5IG90aGVycyBpcyBzdHJpY3RseSBwcm9o
aWJpdGVkLiZuYnNwOyBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4g
ZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBieSBlLW1haWwgYW5k
IGRlbGV0ZSB0aGUgbWVzc2FnZSBhbmQgYW55IGZpbGUgYXR0YWNobWVudHMgZnJvbSB5b3VyIGNv
bXB1dGVyLiBUaGFuayB5b3UuPC9zcGFuPjwvaT48L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4N
CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t
YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw
PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2
Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K
PC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg==

--_000_3D5C611E4B034A46A22BD8AC9FE0AC51amazoncom_--


From nobody Tue Nov 26 17:46:50 2019
Return-Path: <prvs=227439623=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C49C120B23 for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 17:46:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.801
X-Spam-Level: 
X-Spam-Status: No, score=-11.801 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OAhAJuw_XEIb for <oauth@ietfa.amsl.com>; Tue, 26 Nov 2019 17:46:47 -0800 (PST)
Received: from smtp-fw-6001.amazon.com (smtp-fw-6001.amazon.com [52.95.48.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9F301200B9 for <oauth@ietf.org>; Tue, 26 Nov 2019 17:46:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574819207; x=1606355207; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=p5LiRElMTKNmqwMuBbJwxYHUb4GhnZjZYlJLfx23x8E=; b=dXsRUeIHnvR1elCwKUTcGan7hD9Hafhgd2ZP4ofSEUc3eqxpo4lgcC7a 0Wq3zsG5Cg+SqDxGS/ilSSvkjHpIDhPy+WD5E30M74NndnSwv0F6CLIUi anNVs7OgGQoPr7Kgq2S1IIdLFTGmuXglFsaj+J8hPodKr7HfhOZXvPfzu 4=;
IronPort-SDR: 7CW4vFDNtq1QpcohRxAp8zdOklOd2RJY6rUIRwRbmc1V6ZswbHKWy5G9kfZ/46KDr1wbzrfzmg PX84na3iRNOQ==
X-IronPort-AV: E=Sophos;i="5.69,247,1571702400";  d="scan'208";a="6501645"
Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2c-87a10be6.us-west-2.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6001.iad6.amazon.com with ESMTP; 27 Nov 2019 01:46:45 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan2.pdx.amazon.com [10.170.41.162]) by email-inbound-relay-2c-87a10be6.us-west-2.amazon.com (Postfix) with ESMTPS id 3097AA18CE; Wed, 27 Nov 2019 01:46:44 +0000 (UTC)
Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 01:46:43 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 01:46:43 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Wed, 27 Nov 2019 01:46:43 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
CC: "Richard Backman, Annabelle" <richanna=40amazon.com@dmarc.ietf.org>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAAAUqAgAADQoCAAAgdgIAAJayAgAAjj4CAAJhigP//fl+AgACP0QD//4SggAAUZ6MAACQsB4AAlr8HgA==
Date: Wed, 27 Nov 2019 01:46:43 +0000
Message-ID: <95EADC02-F2CE-41BF-BD23-DF879B3FBBE5@amazon.com>
References: <2EF412B8-AF8C-4642-9BE0-1B528B0C63D5@amazon.com> <288343F2-ACF0-43E0-8577-26AF45330E5C@forgerock.com> <CAD9ie-u_SM+1hRuBWR7zBGSi4Ex59Ht0SzoVTeFuWTRc3cFJXw@mail.gmail.com> <6DECA422-AACC-4DAA-8CD2-FF57CE02DE3E@mit.edu> <0235F8A2-83C4-4804-8805-F50305E263BB@lodderstedt.net> <D43D3929-F1B7-4A2C-ABEC-1326F3F0926C@forgerock.com> <1FD6E2DF-013A-4F42-862B-ADEF45EAE689@lodderstedt.net> <D6F0034F-7F70-442C-8334-733359DE44A9@amazon.com> <36707A3C-788D-4ACF-AAEF-35582BFB89B7@lodderstedt.net> <8E53499A-C2E1-4FE6-AE9B-BE8C582BECD1@amazon.com> <542F255E-FE31-4905-9253-7296FC7BEE87@lodderstedt.net> <0DBB5D3D-025C-4226-856F-C06907E28A6E@amazon.com> <7C62B4D3-6708-442A-BFBC-87825D71CA57@lodderstedt.net>
In-Reply-To: <7C62B4D3-6708-442A-BFBC-87825D71CA57@lodderstedt.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.162.45]
Content-Type: text/plain; charset="utf-8"
Content-ID: <E0D385B1C0D9674AA1A29EA417D8147C@amazon.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/BEQ3xTqo8-L68nqjhEvS1Fo7Ws0>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 01:46:50 -0000

VG9yc3RlbiwNCg0KSSdtIG5vdCB0cmFja2luZyBob3cgY29va2llcyBhcmUgcmVsZXZhbnQgdG8g
dGhlIGRpc2N1c3Npb24uIEknbSBndWVzc2luZyB0aGF0J3MgYmVjYXVzZSB3ZSdyZSBub3Qgb24g
dGhlIHNhbWUgcGFnZSByZWdhcmRpbmcgdXNlIGNhc2VzLCBzbyBhbGxvdyBtZSB0byBjbGVhcmx5
IHN0YXRlIG1pbmU6DQoNClRoZSB1c2UgY2FzZSBJIGFtIGNvbmNlcm5lZCB3aXRoIGlzIHJlcXVl
c3RzIGJldHdlZW4gc2VydmljZXMgd2hlcmUgZW5kLXRvLWVuZCBUTFMgY2Fubm90IGJlIGd1YXJh
bnRlZWQuIEZvciBleGFtcGxlLCBhbiBlbnRlcnByaXNlIHNlcnZpY2UgcnVubmluZyBvbi1wcmVt
aXNlLCBjb21tdW5pY2F0aW5nIHdpdGggYSBzZXJ2aWNlIGluIHRoZSBjbG91ZCwgd2hlcmUgdGhl
IGVudGVycHJpc2UncyBvdXRib3VuZCB0cmFmZmljIGlzIHJvdXRlZCB0aHJvdWdoIGEgVExTIElu
c3BlY3Rpb24gKFRMU0kpIGFwcGxpYW5jZS4gVGhlIFRMU0kgYXBwbGlhbmNlIHNpdHMgaW4gdGhl
IG1pZGRsZSBvZiB0aGUgY29tbXVuaWNhdGlvbiwgdGVybWluYXRpbmcgdGhlIFRMUyBzZXNzaW9u
IGVzdGFibGlzaGVkIGJ5IHRoZSBvbi1wcmVtaXNlIHNlcnZpY2UgYW5kIGVzdGFibGlzaGluZyBh
IHNlcGFyYXRlIFRMUyBjb25uZWN0aW9uIHdpdGggdGhlIGNsb3VkIHNlcnZpY2UuDQoNCkluIHRo
aXMga2luZCBvZiBlbnZpcm9ubWVudCwgdGhlcmUgaXMgbm8gZW5kLXRvLWVuZCBUTFMgY29ubmVj
dGlvbiBiZXR3ZWVuIG9uLXByZW1pc2Ugc2VydmljZSBhbmQgY2xvdWQgc2VydmljZSwgYW5kIGl0
IGlzIHZlcnkgdW5saWtlbHkgdGhhdCB0aGUgVExTSSBhcHBsaWFuY2UgaXMgY29uZmlndXJhYmxl
IGVub3VnaCB0byBzdXBwb3J0IFRMUy1iYXNlZCBzZW5kZXItY29uc3RyYWludCBtZWNoYW5pc21z
IHdpdGhvdXQgc2lnbmlmaWNhbnRseSBjb21wcm9taXNpbmcgb24gdGhlIHNjb3BlIG9mICJzZW5k
ZXIiIChlLmcuLCAidGhpcyBzZXJ2aWNlIGF0IHRoaXMgZW50ZXJwcmlzZSIgYmVjb21lcyAidGhp
cyBlbnRlcnByaXNlIikuIEV2ZW4gaWYgaXQgaXMgcG9zc2libGUsIGl0IGlzIGxpa2VseSB0byBy
ZXF1aXJlIGFkdmFuY2VkIGNvbmZpZ3VyYXRpb24gdGhhdCBpcyBub24tdHJpdmlhbCBmb3IgYWRt
aW5pc3RyYXRvcnMgdG8gZGVwbG95LiBJdCdzIG5vIGxvbmdlciBhcyBzaW1wbGUgYXMgdGhlIGRl
dmVsb3BlciBwYXNzaW5nIGEgc2VsZi1zaWduZWQgY2VydGlmaWNhdGUgdG8gdGhlIEhUVFAgc3Rh
Y2suDQoNCuKAkyANCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCkFXUyBJZGVudGl0eQ0KIA0K
DQrvu79PbiAxMS8yMy8xOSwgOTo1MCBBTSwgIlRvcnN0ZW4gTG9kZGVyc3RlZHQiIDx0b3JzdGVu
QGxvZGRlcnN0ZWR0Lm5ldD4gd3JvdGU6DQoNCiAgICANCiAgICANCiAgICA+IE9uIDIzLiBOb3Yg
MjAxOSwgYXQgMDA6MzQsIFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6
b24uY29tPiB3cm90ZToNCiAgICA+IA0KICAgID4+IGhvdyBhcmUgY29va2llcyBwcm90ZWN0ZWQg
ZnJvbSBsZWFrYWdlLCByZXBsYXksIGluamVjdGlvbiBpbiBhIHNldHVwIGxpa2UgdGhpcz8NCiAg
ICA+IFRoZXkgYXJlbuKAmXQuDQogICAgDQogICAgVGhhdHMgdmVyeSBpbnRlcmVzdGluZyB3aGVu
IGNvbXBhcmVkIHRvIHdoYXQgd2UgYXJlIGRpc2N1c3Npbmcgd2l0aCByZXNwZWN0IHRvIEFQSSBz
ZWN1cml0eS4gDQogICAgDQogICAgSXQgZWZmZWN0aXZlbHkgbWVhbnMgYW55b25lIGFibGUgdG8g
Y2FwdHVyZSBhIHNlc3Npb24gY29va2llLCBlLmcuIGJldHdlZW4gVExTIHRlcm1pbmF0aW9uIHBv
aW50IGFuZCBhcHBsaWNhdGlvbiwgYnkgd2F5IG9mIGFuIEhUTUwgaW5qZWN0aW9uLCBvciBhbnkg
b3RoZXIgc3VpdGFibGUgYXR0YWNrIGlzIGFibGUgdG8gaW1wZXJzb25hdGUgYSBsZWdpdGltYXRl
IHVzZXIgYnkgaW5qZWN0aW5nIHRoZSBjb29raWUocykgaW4gYW4gYXJiaXRyYXJ5IHVzZXIgYWdl
bnQuIFRoZSBpbXBhY3Qgb2Ygc3VjaCBhbiBhdHRhY2sgbWlnaHQgYmUgZXZlbiB3b3JzZSB0aGFu
IGFidXNpbmcgYW4gYWNjZXNzIHRva2VuIGdpdmVuIHRoZSAodHlwaWNhbGx5KSBicm9hZCBzY29w
ZSBvZiBhIHNlc3Npb24uDQogICAgDQogICAgVExTLWJhc2VkIG1ldGhvZHMgZm9yIHNlbmRlciBj
b25zdHJhaW5lZCBhY2Nlc3MgdG9rZW5zLCBpbiBjb250cmFzdCwgcHJldmVudCB0aGlzIHR5cGUg
b2YgcmVwbGF5LCBldmVuIGlmIHRoZSByZXF1ZXN0cyBhcmUgcHJvdGVjdGVkIGJldHdlZW4gY2xp
ZW50IGFuZCBUTFMgdGVybWluYXRpbmcgcHJveHksIG9ubHkuIEVuc3VyaW5nIHRoZSBhdXRoZW50
aWNpdHkgb2YgdGhlIGNsaWVudCBjZXJ0aWZpY2F0ZSB3aGVuIGZvcndhcmRlZCBmcm9tIFRMUyB0
ZXJtaW5hdGluZyBwcm94eSB0byBzZXJ2aWNlLCBlLmcuIHRocm91Z2ggYW5vdGhlciBhdXRoZW50
aWNhdGVkIFRMUyBjb25uZWN0aW9uLCB3aWxsIGV2ZW4gcHJldmVudCBpbmplY3Rpb24gd2l0aGlu
IHRoZSBkYXRhIGNlbnRlci9jbG91ZCBlbnZpcm9ubWVudC4gDQogICAgDQogICAgSSBjb21lIHRv
IHRoZSBjb25jbHVzaW9uIHRoYXQgd2UgYWxyZWFkeSBoYXZlIHRoZSBtZWNoYW5pc20gYXQgaGFu
ZCB0byBpbXBsZW1lbnQgQVBJcyB3aXRoIGEgY29uc2lkZXJhYmxlIGhpZ2hlciBzZWN1cml0eSBs
ZXZlbCB0aGFuIHdoYXQgaXMgYWNjZXB0ZWQgdG9kYXkgZm9yIHdlYiBhcHBsaWNhdGlvbnMuIFNv
IHdoYXQgcHJvYmxlbSBkbyB3ZSB3YW50IHRvIHNvbHZlPw0KICAgIA0KICAgID4gQnV0IG15IHBy
aW1hcnkgY29uY2VybiBoZXJlIGlzbid0IHdlYiBicm93c2VyIHRyYWZmaWMsIGl0J3MgY2FsbHMg
ZnJvbSBzZXJ2aWNlcy9hcHBzIHJ1bm5pbmcgaW5zaWRlIGEgY29ycG9yYXRlIG5ldHdvcmsgdG8g
c2VydmljZXMgb3V0c2lkZSBhIGNvcnBvcmF0ZSBuZXR3b3JrIChlLmcuLCBzZXJ2aWNlLXRvLXNl
cnZpY2UgQVBJIGNhbGxzIHRoYXQgcGFzcyB0aHJvdWdoIGEgY29ycG9yYXRlIFRMUyBnYXRld2F5
KS4NCiAgICANCiAgICBDYW4geW91IHBsZWFzZSBkZXNjcmliZSB0aGUgY2hhbGxlbmdlcyBhcmlz
aW5nIGluIHRoZXNlIHNldHRpbmdzPyBJIGFzc3VtZSB0aG9zZSBwcm94aWVzIHdvbuKAmXQgc3Vw
cG9ydCBDT05ORUNUIHN0eWxlIHBhc3MgdGhyb3VnaCBvdGhlcndpc2Ugd2Ugd291bGRu4oCZdCB0
YWxrIGFib3V0IHRoZW0uDQogICAgDQogICAgPiANCiAgICA+PiBUaGF04oCZcyBhIHRvdGFsbHkg
dmFsaWQgcG9pbnQuIEJ1dCBhZ2Fpbiwgc3VjaCBhIHNvbHV0aW9uIG1ha2VzIHRoZSBsaWZlIG9m
IGNsaWVudCBkZXZlbG9wZXJzIGhhcmRlci4gDQogICAgPj4gSSBwZXJzb25hbGx5IHRoaW5rLCB3
ZSBhcyBhIGNvbW11bml0eSBuZWVkIHRvIHVuZGVyc3RhbmQgdGhlIHByb3MgYW5kIGNvbnMgb2Yg
Ym90aCBhcHByb2FjaGVzLiBJIGFsc28gdGhpbmsgd2UgaGF2ZSBub3QgZXZlbiBjb21lIGNsb3Nl
IHRvIHRoaXMgcG9pbnQsIHdoaWNoLCBpbiBteSBvcHRpb24sIGlzIHRoZSBwcmVyZXF1aXNpdGUg
Zm9yIG1ha2luZyBpbmZvcm1lZCBkZWNpc2lvbnMuDQogICAgPiANCiAgICA+IEFncmVlZC4gSXQn
cyBjbGVhciB0aGF0IHRoZXJlIGFyZSBhIG51bWJlciBvZiBwYXJ0aWVzIGNvbWluZyBhdCB0aGlz
IGZyb20gYSBudW1iZXIgb2YgZGlmZmVyZW50IGRpcmVjdGlvbnMsIGFuZCB0aGF0J3MgY29sb3Jp
bmcgb3VyIHBlcmNlcHRpb25zLiBUaGF0J3Mgd2h5IEkgdGhpbmsgd2UgbmVlZCB0byBuYWlsIGRv
d24gdGhlIHNjb3BlIG9mIHdoYXQgd2UncmUgdHJ5aW5nIHRvIHNvbHZlIHdpdGggRFBvUCBiZWZv
cmUgd2UgY2FuIGhhdmUgYSBwcm9kdWN0aXZlIGNvbnZlcnNhdGlvbiBob3cgaXQgc2hvdWxkIHdv
cmsuDQogICAgDQogICAgV2Ugd2lsbCBkbyBzby4NCiAgICANCiAgICA+IA0KICAgID4g4oCTIA0K
ICAgID4gQW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbg0KICAgID4gQVdTIElkZW50aXR5DQogICAg
PiANCiAgICA+IA0KICAgID4g77u/T24gMTEvMjIvMTksIDEwOjUxIFBNLCAiVG9yc3RlbiBMb2Rk
ZXJzdGVkdCIgPHRvcnN0ZW5AbG9kZGVyc3RlZHQubmV0PiB3cm90ZToNCiAgICA+IA0KICAgID4g
DQogICAgPiANCiAgICA+PiBPbiAyMi4gTm92IDIwMTksIGF0IDIyOjEyLCBSaWNoYXJkIEJhY2tt
YW4sIEFubmFiZWxsZSA8cmljaGFubmE9NDBhbWF6b24uY29tQGRtYXJjLmlldGYub3JnPiB3cm90
ZToNCiAgICA+PiANCiAgICA+PiBUaGUgc2VydmljZSBwcm92aWRlciBkb2Vzbid0IG93biB0aGUg
ZW50aXJlIGNvbm5lY3Rpb24uIFRoZXkgaGF2ZSBubyBjb250cm9sIG92ZXIgY29ycG9yYXRlIG9y
IGdvdmVybm1lbnQgVExTIGdhdGV3YXlzLCBvciBvdGhlciB0ZXJtaW5hdG9ycyB0aGF0IG1pZ2h0
IGV4aXN0IG9uIHRoZSBjbGllbnQncyBzaWRlLiBJbiBsYXJnZXIgb3JnYW5pemF0aW9ucywgb3Ig
d2hlbiBjbG91ZCBob3N0aW5nIGlzIGludm9sdmVkLCB0aGUgc2VydmljZSB0ZWFtIG1heSBub3Qg
ZXZlbiBvd24gYWxsIHRoZSBob3BzIG9uIHRoZWlyIHNpZGUuDQogICAgPiANCiAgICA+ICAgIGhv
dyBhcmUgY29va2llcyBwcm90ZWN0ZWQgZnJvbSBsZWFrYWdlLCByZXBsYXksIGluamVjdGlvbiBp
biBhIHNldHVwIGxpa2UgdGhpcz8NCiAgICA+IA0KICAgID4+IFdoaWxlIHByZXN1bWFibHkgdGhl
eSBoYXZlIHNvbWUgdHJ1c3QgaW4gdGhlbSwgcHJvdGVjdGlvbiBhZ2FpbnN0IGxlYWtlZCBiZWFy
ZXIgdG9rZW5zIGlzIGFuIGF0dHJhY3RpdmUgZGVmZW5zZS1pbi1kZXB0aCBtZWFzdXJlLg0KICAg
ID4gDQogICAgPiAgICBUaGF04oCZcyBhIHRvdGFsbHkgdmFsaWQgcG9pbnQuIEJ1dCBhZ2Fpbiwg
c3VjaCBhIHNvbHV0aW9uIG1ha2VzIHRoZSBsaWZlIG9mIGNsaWVudCBkZXZlbG9wZXJzIGhhcmRl
ci4gDQogICAgPiANCiAgICA+ICAgIEkgcGVyc29uYWxseSB0aGluaywgd2UgYXMgYSBjb21tdW5p
dHkgbmVlZCB0byB1bmRlcnN0YW5kIHRoZSBwcm9zIGFuZCBjb25zIG9mIGJvdGggYXBwcm9hY2hl
cy4gSSBhbHNvIHRoaW5rIHdlIGhhdmUgbm90IGV2ZW4gY29tZSBjbG9zZSB0byB0aGlzIHBvaW50
LCB3aGljaCwgaW4gbXkgb3B0aW9uLCBpcyB0aGUgcHJlcmVxdWlzaXRlIGZvciBtYWtpbmcgaW5m
b3JtZWQgZGVjaXNpb25zLg0KICAgID4gDQogICAgPj4gDQogICAgPj4g4oCTIA0KICAgID4+IEFu
bmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCiAgICA+PiBBV1MgSWRlbnRpdHkNCiAgICA+PiANCiAg
ICA+PiANCiAgICA+PiDvu79PbiAxMS8yMi8xOSwgOTozNyBQTSwgIk9BdXRoIG9uIGJlaGFsZiBv
ZiBUb3JzdGVuIExvZGRlcnN0ZWR0IiA8b2F1dGgtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYg
b2YgdG9yc3Rlbj00MGxvZGRlcnN0ZWR0Lm5ldEBkbWFyYy5pZXRmLm9yZz4gd3JvdGU6DQogICAg
Pj4gDQogICAgPj4gDQogICAgPj4gDQogICAgPj4+IE9uIDIyLiBOb3YgMjAxOSwgYXQgMjE6MjEs
IFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYT00MGFtYXpvbi5jb21AZG1hcmMu
aWV0Zi5vcmc+IHdyb3RlOg0KICAgID4+PiANCiAgICA+Pj4gVGhlIGRpY2hvdG9teSBvZiAiVExT
IHdvcmtpbmciIGFuZCAiVExTIGZhaWxlZCIgb25seSBhcHBsaWVzIHRvIGEgc2luZ2xlIFRMUyBj
b25uZWN0aW9uLiBJbiBub24tZW5kLXRvLWVuZCBUTFMgZW52aXJvbm1lbnRzLCBlYWNoIFRMUyB0
ZXJtaW5hdG9yIGJldHdlZW4gY2xpZW50IGFuZCBSUyBpbnRyb2R1Y2VzIGFkZGl0aW9uYWwgdG9r
ZW4gbGVha2FnZS9leGZpbHRyYXRpb24gcmlzaywgaXJyZXNwZWN0aXZlIG9mIHRoZSBxdWFsaXR5
IG9mIHRoZSBUTFMgY29ubmVjdGlvbnMgdGhlbXNlbHZlcy4gRWFjaCB0ZXJtaW5hdG9yIGFsc28g
aW50cm9kdWNlcyBjb21wbGV4aXR5IGZvciBpbXBsZW1lbnRpbmcgbVRMUywgVG9rZW4gQmluZGlu
Zywgb3IgYW55IG90aGVyIFRMUy1iYXNlZCBzZW5kZXIgY29uc3RyYWludCBzb2x1dGlvbiwgd2hp
Y2ggbWVhbnMgZGV2ZWxvcGVycyB3aXRoIG5vbi1lbmQtdG8tZW5kIFRMUyB1c2UgY2FzZXMgd2ls
bCBiZSBtb3JlIGxpa2VseSB0byB0dXJuIHRvIERQb1AuDQogICAgPj4gDQogICAgPj4gICBUaGUg
cG9pbnQgaXMgd2UgYXJlIHRhbGtpbmcgYWJvdXQgZGlmZmVyZW50IGRldmVsb3BlcnMgaGVyZS4g
VGhlIGNsaWVudCBkZXZlbG9wZXIgZG9lcyBub3QgbmVlZCB0byBjYXJlIGFib3V0IHRoZSBjb25u
ZWN0aW9uIGJldHdlZW4gcHJveHkgYW5kIHNlcnZpY2UuIFNoZSByZWxpZXMgb24gdGhlIHNlcnZp
Y2UgcHJvdmlkZXIgdG8gZ2V0IGl0IHJpZ2h0LiBTbyB0aGUgZGV2ZWxvcGVycyAob3IgRGV2T3Bz
IG9yIGFkbWlucykgb2YgdGhlIHNlcnZpY2UgcHJvdmlkZXIgbmVlZCB0byBlbnN1cmUgZW5kIHRv
IGVuZCBzZWN1cml0eS4gQW5kIGlmIHRoZSBwYXRoIGlzIHNlY3VyZWQgb25jZSwgaXQgd2lsbCB3
b3JrIGZvciBhbGwgY2xpZW50cy4gDQogICAgPj4gDQogICAgPj4+IElmIERQb1AgaXMgaW50ZW5k
ZWQgdG8gYWRkcmVzcyAiY2FzZXMgd2hlcmUgbmVpdGhlciBtVExTIG5vciBPQXV0aCBUb2tlbiBC
aW5kaW5nIGFyZSBhdmFpbGFibGUiIFsxXSwgdGhlbiBpdCBzaG91bGQgYWRkcmVzcyB0aGlzIHJp
c2sgb2YgdG9rZW4gbGVha2FnZSBiZXR3ZWVuIGNsaWVudCBhbmQgUlMuIElmIG9uIHRoZSBvdGhl
ciBoYW5kIERQb1AgaXMgb25seSBpbnRlbmRlZCB0byBzdXBwb3J0IHRoZSBTUEEgdXNlIGNhc2Ug
YW5kIGFzc3VtZXMgdGhlIHVzZSBvZiBlbmQtdG8tZW5kIFRMUywgdGhlbiB0aGUgZG9jdW1lbnQg
c2hvdWxkIGJlIHVwZGF0ZWQgdG8gcmVmbGVjdCB0aGF0Lg0KICAgID4+IA0KICAgID4+ICAgSSBh
Z3JlZS4gDQogICAgPj4gDQogICAgPj4+IA0KICAgID4+PiBbMV06IGh0dHBzOi8vdG9vbHMuaWV0
Zi5vcmcvaHRtbC9kcmFmdC1mZXR0LW9hdXRoLWRwb3AtMDMjc2VjdGlvbi0xDQogICAgPj4+IA0K
ICAgID4+PiDigJMgDQogICAgPj4+IEFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCiAgICA+Pj4g
QVdTIElkZW50aXR5DQogICAgPj4+IA0KICAgID4+PiANCiAgICA+Pj4gT24gMTEvMjIvMTksIDg6
MTcgUE0sICJPQXV0aCBvbiBiZWhhbGYgb2YgVG9yc3RlbiBMb2RkZXJzdGVkdCIgPG9hdXRoLWJv
dW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHRvcnN0ZW49NDBsb2RkZXJzdGVkdC5uZXRAZG1h
cmMuaWV0Zi5vcmc+IHdyb3RlOg0KICAgID4+PiANCiAgICA+Pj4gIEhpIE5laWwsDQogICAgPj4+
IA0KICAgID4+Pj4gT24gMjIuIE5vdiAyMDE5LCBhdCAxODowOCwgTmVpbCBNYWRkZW4gPG5laWwu
bWFkZGVuQGZvcmdlcm9jay5jb20+IHdyb3RlOg0KICAgID4+Pj4gDQogICAgPj4+PiBPbiAyMiBO
b3YgMjAxOSwgYXQgMDc6NTMsIFRvcnN0ZW4gTG9kZGVyc3RlZHQgPHRvcnN0ZW49NDBsb2RkZXJz
dGVkdC5uZXRAZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KICAgID4+Pj4+IA0KICAgID4+Pj4+IA0K
ICAgID4+Pj4+IA0KICAgID4+Pj4+PiBPbiAyMi4gTm92IDIwMTksIGF0IDE1OjI0LCBKdXN0aW4g
UmljaGVyIDxqcmljaGVyQG1pdC5lZHU+IHdyb3RlOg0KICAgID4+Pj4+PiANCiAgICA+Pj4+Pj4g
SeKAmW0gZ29pbmcgdG8gKzEgRGljayBhbmQgQW5uYWJlbGxl4oCZcyBxdWVzdGlvbiBhYm91dCB0
aGUgc2NvcGUgaGVyZS4gVGhhdCB3YXMgdGhlIG9uZSBtYWpvciB0aGluZyB0aGF0IHN0cnVjayBt
ZSBkdXJpbmcgdGhlIERQb1AgZGlzY3Vzc2lvbnMgaW4gU2luZ2Fwb3JlIHllc3RlcmRheTogd2Ug
ZG9u4oCZdCBzZWVtIHRvIGFncmVlIG9uIHdoYXQgRFBvUCBpcyBmb3IuIFNvbWUgKGluY2x1ZGlu
ZyB0aGUgYXV0aG9ycywgaXQgc2VlbXMpIHNlZSBpdCBhcyBhIHF1aWNrIHBvaW50LXNvbHV0aW9u
IHRvIGEgc3BlY2lmaWMgdXNlIGNhc2UuIE90aGVycyBzZWUgaXQgYXMgYSBnZW5lcmFsIFBvUCBt
ZWNoYW5pc20uIA0KICAgID4+Pj4+PiANCiAgICA+Pj4+Pj4gSWYgaXTigJlzIHRoZSBmb3JtZXIs
IHRoZW4gaXQgc2hvdWxkIGJlIGV4cGxpY2l0bHkgdGllZCB0byBvbmUgc3BlY2lmaWMgc2V0IG9m
IHRoaW5ncy4gSWYgaXTigJlzIHRoZSBsYXR0ZXIsIHRoZW4gaXQgbmVlZHMgdG8gYmUgZXhwYW5k
ZWQuIA0KICAgID4+Pj4+IA0KICAgID4+Pj4+IGFzIGEgY28tYXV0aG9yIG9mIHRoZSBEUG9QIGRy
YWZ0IEkgc3RhdGUgYWdhaW4gd2hhdCBJIHNhaWQgeWVzdGVyZGF5OiBEUG9QIGlzIGEgbWVjaGFu
aXNtIGZvciBzZW5kZXItY29uc3RyYWluaW5nIGFjY2VzcyB0b2tlbnMgc2VudCBmcm9tIFNQQXMg
b25seS4gVGhlIHRocmVhdCB0byBiZSBwcmV2ZW50ZWQgaXMgdG9rZW4gcmVwbGF5Lg0KICAgID4+
Pj4gDQogICAgPj4+PiBJIHRoaW5rIHRoZSBwaHJhc2UgInRva2VuIHJlcGxheSIgaXMgYW1iaWd1
b3VzLiBUcmFkaXRpb25hbGx5IGl0IHJlZmVycyB0byBhbiBhdHRhY2tlciBiZWluZyBhYmxlIHRv
IGNhcHR1cmUgYSB0b2tlbiAob3Igd2hvbGUgcmVxdWVzdHMpIGluIHVzZSBhbmQgdGhlbiByZXBs
YXkgaXQgYWdhaW5zdCB0aGUgc2FtZSBSUy4gVGhpcyBpcyBhbHJlYWR5IHByb3RlY3RlZCBhZ2Fp
bnN0IGJ5IHRoZSB1c2Ugb2Ygbm9ybWFsIFRMUyBvbiB0aGUgY29ubmVjdGlvbiBiZXR3ZWVuIHRo
ZSBjbGllbnQgYW5kIHRoZSBSUy4gSSB0aGluayBpbnN0ZWFkIHlvdSBhcmUgcmVmZXJyaW5nIHRv
IGEgbWFsaWNpb3VzL2NvbXByb21pc2VkIFJTIHJlcGxheWluZyB0aGUgdG9rZW4gdG8gYSBkaWZm
ZXJlbnQgUlMgLSB3aGljaCBoYXMgbW9yZSBvZiB0aGUgZmxhdm91ciBvZiBhIG1hbiBpbiB0aGUg
bWlkZGxlIGF0dGFjayAob2YgdGhlIHBoaXNoaW5nIGtpbmQpLg0KICAgID4+PiANCiAgICA+Pj4g
IEkgd291bGQgYXJndWUgVExTIGJhc2ljYWxseSBwcmV2ZW50cyBsZWFrYWdlIGFuZCBub3QgcmVw
bGF5LiBUaGUgdGhyZWF0cyB3ZSB0cnkgdG8gY29wZSB3aXRoIGNhbiBiZSBmb3VuZCBpbiB0aGUg
U2VjdXJpdHkgQkNQLiBUaGVyZSBhcmUgbXVsdGlwbGUgd2F5cyBhY2Nlc3MgdG9rZW5zIGNhbiBs
ZWFrLCBpbmNsdWRpbmcgcmVmZXJyZXIgaGVhZGVycywgbWl4LXVwLCBvcGVuIHJlZGlyZWN0aW9u
LCBicm93c2VyIGhpc3RvcnksIGFuZCBhbGwgc29ydHMgb2YgYWNjZXNzIHRva2VuIGxlYWthZ2Ug
YXQgdGhlIHJlc291cmNlIHNlcnZlcg0KICAgID4+PiANCiAgICA+Pj4gIFBsZWFzZSBoYXZlIGEg
bG9vayBhdCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vYXV0aC1zZWN1
cml0eS10b3BpY3MtMTMjc2VjdGlvbi00Lg0KICAgID4+PiANCiAgICA+Pj4gIGh0dHBzOi8vdG9v
bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9hdXRoLXNlY3VyaXR5LXRvcGljcy0xMyNzZWN0
aW9uLTQuOCBhbHNvIGhhcyBhbiBleHRlbnNpdmUgZGlzY3Vzc2lvbiBvZiBwb3RlbnRpYWwgY291
bnRlciBtZWFzdXJlcywgaW5jbHVkaW5nIGF1ZGllbmNlIHJlc3RyaWN0ZWQgYWNjZXNzIHRva2Vu
cyBhbmQgYSBjb25jbHVzaW9uIHRvIHJlY29tbWVuZCBzZW5kZXIgY29uc3RyYWluZWQgYWNjZXNz
IHRva2VucyBvdmVyIG90aGVyIG1lY2hhbmlzbXMuDQogICAgPj4+IA0KICAgID4+Pj4gDQogICAg
Pj4+PiBCdXQgaWYgdGhhdCdzIHRoZSBjYXNlIHRoZW4gdGhlcmUgYXJlIG11Y2ggc2ltcGxlciBk
ZWZlbmNlcyB0aGFuIHRob3NlIHByb3Bvc2VkIGluIHRoZSBjdXJyZW50IGRyYWZ0Og0KICAgID4+
Pj4gDQogICAgPj4+PiAxLiBHZXQgc2VwYXJhdGUgYWNjZXNzIHRva2VucyBmb3IgZWFjaCBSUyB3
aXRoIGNvcnJlY3QgYXVkaWVuY2UgYW5kIHNjb3Blcy4gVGhlIGNvbnNlbnN1cyBhcHBlYXJzIHRv
IGJlIHRoYXQgdGhpcyBpcyBoYXJkIHRvIGRvIGluIHNvbWUgY2FzZXMsIGhlbmNlIHRoZSBkcmFm
dC4NCiAgICA+Pj4gDQogICAgPj4+ICBIb3cgbWFueSBkZXBsb3ltZW50cyBkbyB5b3Uga25vdyB0
aGF0IHRvZGF5IGFyZSBhYmxlIHRvIGlzc3VlIFJTLXNwZWNpZmljIGFjY2VzcyB0b2tlbnM/DQog
ICAgPj4+ICBCVFc6IGhvdyB3b3VsZCB5b3UgaWRlbnRpZnkgdGhlIFJTPw0KICAgID4+PiANCiAg
ICA+Pj4gIEkgYWdyZWUgdGhhdCB3b3VsZCBiZSBhbiBhbHRlcm5hdGl2ZSBhbmQgSeKAmW0gYSBn
cmVhdCBmYW4gb2Ygc3VjaCB0b2tlbnMgKGFuZCB1c2VkIHRoZW0gYSBsb3QgYXQgRGV1dHNjaGUg
VGVsZWtvbSkgYnV0IGluIG15IHBlcmNlcHRpb24gdGhpcyBwYXR0ZXJuIG5lZWRzIHN0aWxsIHRv
IGJlIGVzdGFibGlzaGVkIGluIHRoZSBtYXJrZXQuIE1vcmVvdmVyLCB0aGV5IGJhc2ljYWxseSBw
cm90ZWN0IGZyb20gYSByb3VnaCBSUyAoaWYgdGhlIFVSTCBpcyB1c2VkIGFzIGF1ZGllbmNlKSBy
ZXBsYXlpbmcgdGhlIHRva2VuIHNvbWVwbGFjZSBlbHNlLCBidXQgdGhleSBkbyBub3QgcHJvdGVj
dCBmcm9tIGFsbCBvdGhlciBraW5kcyBvZiBsZWFrYWdlL3JlcGxheSAoZS5nLiBsb2cgZmlsZXMp
Lg0KICAgID4+PiANCiAgICA+Pj4+IDIuIE1ha2UgdGhlIERQb1AgdG9rZW4gYmUgYSBzaW1wbGUg
SldUIHdpdGggYW4gImlhdCIgYW5kIHRoZSBvcmlnaW4gb2YgdGhlIFJTLiBUaGlzIHN0b3BzIHRo
ZSB0b2tlbiBiZWluZyByZXVzZWQgZWxzZXdoZXJlIGJ1dCB0aGUgY2xpZW50IGNhbiByZXVzZSBp
dCAocmVwbGF5IGl0KSBmb3IgbWFueSByZXF1ZXN0cy4NCiAgICA+Pj4+IDMuIElzc3VlIGEgbWFj
YXJvb24tYmFzZWQgYWNjZXNzIHRva2VuIGFuZCB0aGUgY2xpZW50IGNhbiBhZGQgYSBjb3JyZWN0
IGF1ZGllbmNlIGFuZCBzY29wZSByZXN0cmljdGlvbnMgYXQgdGhlIHBvaW50IG9mIHVzZS4NCiAg
ICA+Pj4gDQogICAgPj4+ICBXaHkgaXMgdGhpcyBuZWVkZWQgaWYgdGhlIGFjY2VzcyB0b2tlbiBp
cyBhbHJlYWR5IGF1ZGllbmNlIHJlc3RyaWN0ZWQ/IE9yIGRvIHlvdSBwcm9wb3NlIHRoaXMgYXMg
YWx0ZXJuYXRpdmU/IA0KICAgID4+PiANCiAgICA+Pj4+IA0KICAgID4+Pj4gUHJvdGVjdGluZyBh
Z2FpbnN0IHRoZSBmaXJzdCBraW5kIG9mIHJlcGxheSBhdHRhY2tzIG9ubHkgYmVjb21lcyBhbiBp
c3N1ZSBpZiB3ZSBhc3N1bWUgdGhlIHByb3RlY3Rpb25zIGluIFRMUyBoYXZlIGZhaWxlZC4gQnV0
IGlmIERQb1AgaXMgb25seSBpbnRlbmRlZCBmb3IgY2FzZXMgd2hlcmUgbVRMUyBjYW4ndCBiZSB1
c2VkLCBpdCBzaG91bGRuJ3QgaGF2ZSB0byBwcm90ZWN0IGFnYWluc3QgYSBzdHJvbmdlciB0aHJl
YXQgbW9kZWwgaW4gd2hpY2ggd2UgYXNzdW1lIHRoYXQgVExTIHNlY3VyaXR5IGhhcyBiZWVuIGxv
c3QuDQogICAgPj4+IA0KICAgID4+PiAgSSBhZ3JlZS4gDQogICAgPj4+IA0KICAgID4+PiAgYmVz
dCByZWdhcmRzLA0KICAgID4+PiAgVG9yc3Rlbi4gDQogICAgPj4+IA0KICAgID4+Pj4gDQogICAg
Pj4+PiAtLSBOZWlsDQogICAgPj4+IA0KICAgID4+PiANCiAgICA+Pj4gDQogICAgPj4gDQogICAg
Pj4gDQogICAgPj4gDQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgDQogICAgDQoNCg==


From nobody Wed Nov 27 02:31:12 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A7E712082E for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 02:31:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uZP4yu1lioJU for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 02:31:06 -0800 (PST)
Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 175D11200DE for <oauth@ietf.org>; Wed, 27 Nov 2019 02:31:05 -0800 (PST)
Received: by mail-wm1-x32a.google.com with SMTP id f129so6830228wmf.2 for <oauth@ietf.org>; Wed, 27 Nov 2019 02:31:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=z3uvaN3h1Fo33Im4eokKq3ywp90xgEqAMxvih8mcMjE=; b=PFaQteo1qeO7G2muM4NUmUMw0QhnnrH5+JvBZBlrhZxBs7YuNnvxYNy/Cbw5TR1/Nh 3V5OMq9JX6GEt1kJgG+QtC4McQWDqcb4ixVOR7WSJlwft3nQpmC20DfsteOqbQTI1e10 WN0n0IyBi32n+59ZkTtDPpY89loEVm9pp7r/8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=z3uvaN3h1Fo33Im4eokKq3ywp90xgEqAMxvih8mcMjE=; b=diP2H/b+1yaVf3nBMwWy1a0siqEc9xb1hMgeWI22yIst9pSmvUXd1CJiA6NZgtA5nJ X6u3vmAfXYSlSYjb0TkWyo9wXKrY+lHNhZ5IG8paUP4+V0PQurCPzWzmwbKtmyRFJbh3 abkJdIzv58jMjygzVVemF4edrfX/aIVUAn4t3tSxbUxEnr10sEBQgqH62/oly9q6dvAl dRP1wg3KhZP3QbQthFB3mP28zCqAMiB/NG373bW0jrviJyQiBNxOVH3kX1xvialm1s2D feRaQ7+0hmNk47Ym+qfOCw3oiq9nox5RfMoypUUNVt+zCNt6Wgyr/DxFqYXPnGKjrwBg G3BA==
X-Gm-Message-State: APjAAAW34IlFG+S1lLkmt3iMb9gItvDOBRqoizDI5Ft0DLdHzG//WdHs dW/whkcbWIIZatyqvvjF9JJR6A==
X-Google-Smtp-Source: APXvYqxJyQiun2ovFAuCHThUJtKTOU+9KEQyrl1fIJDGTNSBn3HchbOoUHTgdYAFMSB63I4Z5pMx4w==
X-Received: by 2002:a05:600c:21d9:: with SMTP id x25mr3858072wmj.50.1574850664096;  Wed, 27 Nov 2019 02:31:04 -0800 (PST)
Received: from [192.168.1.64] (72.248.90.146.dyn.plus.net. [146.90.248.72]) by smtp.gmail.com with ESMTPSA id u203sm6444858wme.34.2019.11.27.02.31.02 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 27 Nov 2019 02:31:03 -0800 (PST)
From: Neil Madden <neil.madden@forgerock.com>
Message-Id: <D7215EC5-E9B5-4C9A-8E2A-1DAE8A5AA4D6@forgerock.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_085116B3-AEFC-44CE-9DC0-B78F9B558EB0"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Wed, 27 Nov 2019 10:31:01 +0000
In-Reply-To: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com>
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
References: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Y0iPOGhYHZ_6Y5XMPl0017fKRhQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 10:31:10 -0000

--Apple-Mail=_085116B3-AEFC-44CE-9DC0-B78F9B558EB0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On 27 Nov 2019, at 01:26, Richard Backman, Annabelle =
<richanna@amazon.com> wrote:
>=20
> =EF=BB=BF
> > That=E2=80=99s not proof of possession, that=E2=80=99s just =
verifying a MAC. PoP requires the other party (client) to provide a =
fresh proof that they control a key. The client isn=E2=80=99t using any =
key in this case.=20
> =20
> I think we=E2=80=99re operating with slightly different definitions =
for PoP. My definition is something along the lines of =E2=80=9Ca =
possessor of a key generated (or was in possession of) this data blob at =
some point.=E2=80=9D You can probably see why we=E2=80=99re disagreeing =
over whether or not PoP is fundamental. I don=E2=80=99t think there is =
any point in continuing this semantic debate. =F0=9F=98=83

See https://tools.ietf.org/html/rfc7800 =
<https://tools.ietf.org/html/rfc7800> for a definition (section 3.6 in =
particular).

> =20
> > That=E2=80=99s not directly attached to the access token. This means =
that every RS has to know about DPoP.
> True, but you could avoid that by embedding the access token in the =
DPoP proof (similar to draft-ietf-oauth-signed-http-request) and sending =
that as the sole token. Technically, that=E2=80=99s no longer a bearer =
token so sending it as =E2=80=9CAuthorization: bearer <token>=E2=80=9D =
would be wrong, but DPoP already commits that sin.
> =20
> Also, if the AS is doing all authentication checks, then in a lot of =
cases the RS will need to provide the AS with additional request =
metadata along with the macaroon, such as the POST method used, origin =
(if it=E2=80=99s not inferable from whatever credentials the RS uses =
when calling the AS), request path, sender IP, client TLS certificate, =
token binding ID, etc. Obviously there are some caveats that don=E2=80=99t=
 require this (e.g., timestamp). It remains to be seen whether the =
caveats required to meet DPoP=E2=80=99s use case fall into the former or =
latter category.

That=E2=80=99s true - and the RS being able to send more contextual info =
to the token introspection endpoint would be useful regardless of token =
format.=20

The current model is that the AS validates the token and checks basic =
things like the expiry time or audience and then returns any other =
constraints to the RS such as the scope, any confirmation key, etc. This =
model can be followed with macaroons - eg the scope returned should be =
the intersection of the original token scope and any scope caveats on =
the token.

But for many of the things discussed in this thread, the AS can validate =
by itself. For example, if the client appends an audience restricting a =
token to one RS then the AS can validate that because the RS =
authenticates when it calls the introspection endpoint. If the client =
appends something like a =E2=80=9Cjti=E2=80=9D caveat (probably =
renamed), then the AS can centrally record that to prevent replay - this =
has the same caveats on scalability, but at least can be done once at =
the AS rather than for each RS.=20

> =20
> > Please explain how to achieve the examples I gave of layered =
attenuation without using macaroons.
> > 1. The client adds caveats (eg exp =3D now+5s) to an access token =
and sends it to the RS. The RS creates four copies of the token with =
different scope constraints and sends them to four individual =
microservices.
>=20
> For my example below:
> Let <at_0> be the access token obtained by the client from the AS
> Let JWE be a function that generates a JWE given a key and payload.
> Let <EKas> be the public encryption key for the AS.
> =20
> Client:
> <at_1> =3D JWE(<EKas>, { at: <at_0>, exp: =E2=80=A6 })
>=20
> RS:
> <at_2> =3D JWE(<EKas>, { at: <at_1>, scope: scope_a })
> <at_3> =3D JWE(<EKas>, { at: <at_1>, scope: scope_b })
> <at_4> =3D JWE(<EKas>, { at: <at_1>, scope: scope_c })
> <at_5> =3D JWE(<EKas>, { at: <at_1>, scope: scope_d })
>=20

Assuming you can only append caveats here, not new claims, then this is =
functionally equivalent to macaroons. But only the AS can decrypt these =
layers, so the RS is still forced to call the AS's token introspection =
endpoint to validate this. So you've gained nothing over HMAC and added =
considerable CPU and size overhead and a reduction in security.

This is also only secure if the encryption scheme is non-malleable, =
which (if you want provable security) requires IND-CCA2. Not all JWE =
encryption schemes provide this, e.g. RSA1_5 would not be secure for =
this. The ones that are secure largely achieve that by the use of HMAC =
or another MAC in the authenticated content encryption because they are =
hybrid encryption schemes - effectively this is equivalent to using a =
macaroon where the identifier is an encrypted HMAC key, which you can =
already do with macaroons.

> This pattern can be applied to the other scenarios you provided. The =
difference between macaroons and the above is that the former relies on =
chained HMACs and the latter on asymmetric crypto. You also lose the =
ability to inspect caveats or context that are already in the token, =
which may or may not be important. This is an interesting property of =
the macaroon pattern that I=E2=80=99m not sure you could replicate =
without basically implementing the macaroon pattern in a JWT format.
> =20
> > Validation at the AS is an advantage in most cases=E2=80=A6
> Most, but not all. DPoP=E2=80=99s use of asymmetric signatures makes =
it more amenable to distributed validation in those scenarios where it =
is appropriate.

That is true, but is IMO more of a hindrance than an advantage for a PoP =
scheme. The very fact that the signature is valid at every RS is why you =
need additional measures to prevent cross-RS token reuse. This downside =
of signatures for authentication was pointed out by djb 18 years ago =
(https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO7IYXOw=
J =
<https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO7IYXOw=
J>), which is why most modern crypto protocols either use Diffie-Hellman =
for authN (https://noiseprotocol.org <https://noiseprotocol.org/>) or =
sign a hash of an interactive handshake transcript (TLS 1.3 - =
https://tools.ietf.org/html/rfc8446#section-4.4.3 =
<https://tools.ietf.org/html/rfc8446#section-4.4.3>) so that the =
signature is tightly bound to a specific interactive protocol run.

> Your RS-specific token solution is only applicable to use cases where =
the RS-specific tokens are appropriate and viable. This is not a =
restriction that exists for DPoP as written. But you are correct, there =
are ways to use the macaroon pattern with asymmetric crypto. If that=E2=80=
=99s your proposal then I suggest specifying that, as most of the =
documentation I=E2=80=99ve seen (including the vast majority of the =
paper) focuses on the HMAC approach. While I can see how one could apply =
the pattern with asymmetric crypto, it wasn=E2=80=99t clear to me from =
that section of the paper that my thoughts match what they were =
describing.

The easiest way to use macaroons with asymmetric crypto is to make the =
macaroon identifier be an encrypted random HMAC key that the RS can =
decrypt (or a derived key using diffie-hellman). You can concatenate =
multiple encrypted keys for multiple RSes. Alternatively in a closed =
ecosystem you can encrypt the random HMAC with a key stored in a KMS =
(such as AWS KMS) and grant each RS decrypt permissions for that KMS =
key.

>=20
> > The AS can start issuing macaroons without either clients or RS =
being aware=E2=80=A6.
> I=E2=80=99m not entirely sure what value you=E2=80=99re trying to get =
at here. I think you mean that the token handling/validation logic at =
the RS and AS isn=E2=80=99t significantly different for non-constrained =
macaroons versus constrained macaroons, whereas it is for DPoP? True, =
for DPoP the RS would need to know that it should send the DPoP proof to =
the AS, but RSes could be configured to always include it if present in =
the request. On the AS side, regardless of token format the AS will need =
logic to validate that the sender constraint is fulfilled. This may be =
very simple (e.g., just a timestamp check), or as relative complex as =
validating a DPoP token, depending on the needs of the use case and the =
caveats involved.

My point is that if say Google decided to start issuing macaroon-based =
access tokens from their AS today, assuming that their RSes are doing =
token introspection (I've no idea if they do or not), then it's likely =
nothing would break. OAuth access tokens are opaque and their format =
unspecified, so only software that is making additional assumptions =
about the format of access tokens would be impacted. Clients can then =
later start adding caveats (by choosing to make additional assumptions =
about the token format), while RSes still don't have to make any =
changes. The RS would only need to make changes to support things like =
htu/htm, but these are only applicable if you want to provide defence =
against more advanced threat models such as TLS compromise.

DPoP only effectively prevents cross-RS replay if all RSes implement it, =
otherwise the ones that don't are still vulnerable. When you have 1000+ =
microservices (e.g., =
https://twitter.com/JackKleeman/status/1190354757308862468 =
<https://twitter.com/JackKleeman/status/1190354757308862468>) then this =
is a big deal.

>=20
> > (Re: asymmetric crypto) That=E2=80=99s not a requirement, it=E2=80=99s=
 a technology choice.
> Fair enough, but technology choices are driven by requirements. Based =
on conversations I=E2=80=99ve had with John Bradley (and others I =
think?), this one in particular stems in part from the desire to keep =
the key locked up behind the browser=E2=80=99s crypto API, and not =
directly exposed to JavaScript. I=E2=80=99m somewhat skeptical of the =
value of this, since an attacker could just as easily call the crypto =
API directly, but if we see this as a requirement, then that would seem =
to require asymmetric crypto. However, as you noted that would not rule =
out the use of the macaroon pattern.

Right, I don't think this works for browsers. (I don't think anything =
will work for browsers until they abandon the weak same-origin policy =
and replace it with a more serious security model, such as =
https://github.com/Agoric/SES). I think it is a genuine advantage of =
DPoP for mobile devices though, and I'd support a draft that targeted =
that use case specifically.

> =20
> > There are plenty of existing interoperable macaroon libraries=E2=80=A6=

> =E2=80=9CUse one of these existing libraries=E2=80=9D is not =
appropriate as normative text in a specification. That format needs to =
be explicitly defined. Caveat types (e.g., expiry, source IP, client TLS =
certificate, etc.) need to be defined, probably with an IANA registry. =
Processing instructions need to be written (e.g., what happens when =
caveats conflict?). Security considerations around third-party caveats =
need to be written.

Sure, but that's work for me and the WG (if there's interest in =
standardizing this). Your previous point was that they require =
"non-trivial work to use ... and require developers to learn a new token =
format". That burden is significantly reduced when developers can just =
add a dependency and call a one-liner to add a caveat.

> =20
> > HMAC-SHA256 is very widely implemented (and usually securely). =
That=E2=80=99s all you need.
> That=E2=80=99s what people said about SHA-1. Cryptographic agility is =
a feature, not a bug.

Actually I would bet a lot of money on HMAC-SHA256 not being broken any =
time during our lifetimes. HMAC-SHA1 is still secure, as is HMAC-MD5, =
despite both of those hash functions no longer being collision =
resistant. The reason is that (a) preimage resistance often holds up =
much better than collision resistance (e.g. the best preimage attacks =
against MD5 are still not practical), and (b) the security proofs for =
HMAC require only fairly minimal security properties from the underlying =
hash function.

HMAC-SHA256 operates at a 256-bit security level which provides a huge =
margin of safety against advances in cryptanalysis. It's also safe =
against quantum attacks, as the best known attack (Grover's algorithm) =
would at best reduce the security level to around a 128-bit level (which =
is still better than RSA 2048).=20

> =20
> Again, I=E2=80=99m not saying we shouldn=E2=80=99t use macaroons, but =
I think you are underselling the amount of work required and overselling =
their value.
>=20
Compared to DPoP? I've deliberately confined myself to advantages that =
apply to DPoP in this thread, but they have advantages for other =
use-cases too.

-- Neil=

--Apple-Mail=_085116B3-AEFC-44CE-9DC0-B78F9B558EB0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><meta=
 http-equiv=3D"content-type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div dir=3D"auto" class=3D""><div dir=3D"ltr" class=3D""><meta =
http-equiv=3D"content-type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><div dir=3D"ltr" class=3D"">On 27 Nov 2019, at 01:26, Richard =
Backman, Annabelle &lt;<a href=3D"mailto:richanna@amazon.com" =
class=3D"">richanna@amazon.com</a>&gt; wrote:</div><div dir=3D"ltr" =
class=3D""><blockquote type=3D"cite" class=3D""><br =
class=3D""></blockquote></div><blockquote type=3D"cite" class=3D""><div =
dir=3D"ltr" class=3D"">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D"">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)" =
class=3D"">
<style class=3D""><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:HelveticaNeue;
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:"Helvetica Neue";
	panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle20
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:86854906;
	mso-list-type:hybrid;
	mso-list-template-ids:-1564461536 67698689 67698691 67698693 =
67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:298194543;
	mso-list-template-ids:-1352776760;}
@list l1:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2
	{mso-list-id:424955658;
	mso-list-type:hybrid;
	mso-list-template-ids:-811544656 67698703 67698713 67698715 =
67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l2:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l2:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l2:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l3
	{mso-list-id:1251039134;
	mso-list-template-ids:494544204;}
@list l3:level1
	{mso-level-start-at:2;
	mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l3:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l4
	{mso-list-id:1501194223;
	mso-list-type:hybrid;
	mso-list-template-ids:-2073949824 1725185614 67698691 67698693 =
67698689 67698691 67698693 67698689 67698691 67698693;}
@list l4:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;
	mso-fareast-font-family:"Times New Roman";
	mso-bidi-font-family:Calibri;}
@list l4:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l4:level3
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l4:level4
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l4:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l4:level6
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l4:level7
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l4:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l4:level9
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l5
	{mso-list-id:1588885157;
	mso-list-template-ids:-1079585792;}
@list l5:level1
	{mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l5:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1"><p class=3D"MsoNormal">&gt; That=E2=80=99s =
not proof of possession, that=E2=80=99s just verifying a MAC. PoP =
requires the other party (client) to provide a fresh proof that they =
control a key. The client isn=E2=80=99t using any key in this =
case.&nbsp;<o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">I think we=E2=80=99re =
operating with slightly different definitions for PoP. My definition is =
something along the lines of =E2=80=9Ca possessor of a key generated (or =
was in possession of) this data blob at some point.=E2=80=9D You can =
probably see why we=E2=80=99re disagreeing
 over whether or not PoP is fundamental. I don=E2=80=99t think there is =
any point in continuing this semantic debate.
<span style=3D"font-family:&quot;Apple Color Emoji&quot;" =
class=3D"">=F0=9F=98=83</span></p></div></div></blockquote><div =
class=3D""><br class=3D""></div><div class=3D"">See&nbsp;<a =
href=3D"https://tools.ietf.org/html/rfc7800" =
class=3D"">https://tools.ietf.org/html/rfc7800</a>&nbsp;for a definition =
(section 3.6 in particular).</div><br class=3D""><blockquote type=3D"cite"=
 class=3D""><div dir=3D"ltr" class=3D""><div class=3D"WordSection1"><p =
class=3D"MsoNormal"><o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">&gt; That=E2=80=99s =
not directly attached to the access token. This means that every RS has =
to know about DPoP.<o:p class=3D""></o:p></p><p class=3D"MsoNormal">True, =
but you could avoid that by embedding the access token in the DPoP proof =
(similar to draft-ietf-oauth-signed-http-request) and sending that as =
the sole token. Technically, that=E2=80=99s no longer a bearer token so =
sending it as =E2=80=9CAuthorization:
 bearer &lt;token&gt;=E2=80=9D would be wrong, but DPoP already commits =
that sin.<o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">Also, if the AS is =
doing all authentication checks, then in a lot of cases the RS will need =
to provide the AS with additional request metadata along with the =
macaroon, such as the POST method used, origin (if it=E2=80=99s not =
inferable from whatever
 credentials the RS uses when calling the AS), request path, sender IP, =
client TLS certificate, token binding ID, etc. Obviously there are some =
caveats that don=E2=80=99t require this (e.g., timestamp). It remains to =
be seen whether the caveats required to meet DPoP=E2=80=99s
 use case fall into the former or latter =
category.</p></div></div></blockquote><div class=3D""><br =
class=3D""></div><div class=3D"">That=E2=80=99s true - and the RS being =
able to send more contextual info to the token introspection endpoint =
would be useful regardless of token format.&nbsp;</div><div class=3D""><br=
 class=3D""></div><div class=3D"">The current model is that the AS =
validates the token and checks basic things like the expiry time or =
audience and then returns any other constraints to the RS such as the =
scope, any confirmation key, etc. This model can be followed with =
macaroons - eg the scope returned should be the intersection of the =
original token scope and any scope caveats on the token.</div><div =
class=3D""><br class=3D""></div><div class=3D"">But for many of the =
things discussed in this thread, the AS can validate by itself. For =
example, if the client appends an audience restricting a token to one RS =
then the AS can validate that because the RS authenticates when it calls =
the introspection endpoint. If the client appends something like a =
=E2=80=9Cjti=E2=80=9D caveat (probably renamed), then the AS can =
centrally record that to prevent replay - this has the same caveats on =
scalability, but at least can be done once at the AS rather than for =
each RS.&nbsp;</div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div dir=3D"ltr" class=3D""><div class=3D"WordSection1"><p =
class=3D"MsoNormal"><o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal" =
style=3D"text-align:justify">&gt; Please explain how to achieve the =
examples I gave of layered attenuation without using macaroons.<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal">&gt; 1. The client adds =
caveats (eg exp =3D now+5s) to an access token and sends it to the RS. =
The RS creates four copies of the token with different scope constraints =
and sends them to four individual microservices.<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal" =
style=3D"text-align:justify"><br class=3D"">
For my example below:<o:p class=3D""></o:p></p>
<ul style=3D"margin-top:0in" type=3D"disc" class=3D"">
<li class=3D"MsoListParagraph" =
style=3D"margin-left:0in;text-align:justify;mso-list:l4 level1 lfo7">
Let <i class=3D"">&lt;at_0&gt;</i> be the access token obtained by the =
client from the AS<o:p class=3D""></o:p></li><li =
class=3D"MsoListParagraph" =
style=3D"margin-left:0in;text-align:justify;mso-list:l4 level1 lfo7">
Let <i class=3D"">JWE </i>be a function that generates a JWE given a key =
and payload.<o:p class=3D""></o:p></li><li class=3D"MsoListParagraph" =
style=3D"margin-left:0in;text-align:justify;mso-list:l4 level1 lfo7">
Let <i class=3D"">&lt;EKas&gt;</i> be the public encryption key for the =
AS.<o:p class=3D""></o:p></li></ul><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">Client:<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal"><i class=3D"">&lt;at_1&gt;</i>=
 =3D <i class=3D"">JWE</i>(<i class=3D"">&lt;EKas&gt;, </i>{ at: <i =
class=3D"">&lt;at_0&gt;</i>, exp: =E2=80=A6<i class=3D"">
</i>})<br class=3D"">
<br class=3D"">
<o:p class=3D""></o:p></p><p class=3D"MsoNormal">RS:<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal"><i class=3D"">&lt;at_2&gt; =
</i>=3D <i class=3D"">JWE</i>(<i class=3D"">&lt;EKas&gt;</i>, { at: <i =
class=3D"">&lt;at_1&gt;</i>, scope: scope_a })<o:p class=3D""></o:p></p><p=
 class=3D"MsoNormal"><i class=3D"">&lt;at_3&gt; </i>=3D <i =
class=3D"">JWE</i>(<i class=3D"">&lt;EKas&gt;</i>, { at: <i =
class=3D"">&lt;at_1&gt;</i>, scope: scope_b })<o:p class=3D""></o:p></p><p=
 class=3D"MsoNormal"><i class=3D"">&lt;at_4&gt; </i>=3D <i =
class=3D"">JWE</i>(<i class=3D"">&lt;EKas&gt;</i>, { at: <i =
class=3D"">&lt;at_1&gt;</i>, scope: scope_c })<o:p class=3D""></o:p></p><p=
 class=3D"MsoNormal"><i class=3D"">&lt;at_5&gt; </i>=3D <i =
class=3D"">JWE</i>(<i class=3D"">&lt;EKas&gt;</i>, { at: <i =
class=3D"">&lt;at_1&gt;</i>, scope: scope_d })</p><div class=3D""><br =
class=3D""></div></div></div></blockquote><div dir=3D"ltr" class=3D""><br =
class=3D""></div><div dir=3D"ltr" class=3D"">Assuming you can only =
append caveats here, not new claims, then this is functionally =
equivalent to macaroons. But only the AS can decrypt these layers, so =
the RS is still forced to call the AS's token introspection endpoint to =
validate this. So you've gained nothing over HMAC and added considerable =
CPU and size overhead and a reduction in security.</div><div dir=3D"ltr" =
class=3D""><br class=3D""></div><div dir=3D"ltr" class=3D"">This is also =
only secure if the encryption scheme is non-malleable, which (if you =
want provable security) requires IND-CCA2. Not all JWE encryption =
schemes provide this, e.g. RSA1_5 would not be secure for this. The ones =
that are secure largely achieve that by the use of HMAC or another MAC =
in the authenticated content encryption because they are hybrid =
encryption schemes - effectively this is equivalent to using a macaroon =
where the identifier is an encrypted HMAC key, which you can already do =
with macaroons.</div><div dir=3D"ltr" class=3D""><br =
class=3D""></div><blockquote type=3D"cite" class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"WordSection1"><p class=3D"MsoNormal"><o:p =
class=3D""></o:p></p><p class=3D"MsoNormal">This pattern can be applied =
to the other scenarios you provided. The difference between macaroons =
and the above is that the former relies on chained HMACs and the latter =
on asymmetric crypto. You also lose the ability to inspect caveats
 or context that are already in the token, which may or may not be =
important. This is an interesting property of the macaroon pattern that =
I=E2=80=99m not sure you could replicate without basically implementing =
the macaroon pattern in a JWT =
format.</p></div></div></blockquote><blockquote type=3D"cite" =
class=3D""><div dir=3D"ltr" class=3D""><div class=3D"WordSection1"><p =
class=3D"MsoNormal"><o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">&gt; Validation at the =
AS is an advantage in most cases=E2=80=A6<o:p class=3D""></o:p></p><p =
class=3D"MsoNormal">Most, but not all. DPoP=E2=80=99s use of asymmetric =
signatures makes it more amenable to distributed validation in those =
scenarios where it is appropriate. </p></div></div></blockquote><div =
dir=3D"ltr" class=3D""><br class=3D""></div><div dir=3D"ltr" =
class=3D"">That is true, but is IMO more of a hindrance than an =
advantage for a PoP scheme. The very fact that the signature is valid at =
every RS is why you need additional measures to prevent cross-RS token =
reuse. This downside of signatures for authentication was pointed out by =
djb 18 years ago (<a =
href=3D"https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgR=
O7IYXOwJ" =
class=3D"">https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/L=
NgRO7IYXOwJ</a>), which is why most modern crypto protocols either use =
Diffie-Hellman for authN (<a href=3D"https://noiseprotocol.org" =
class=3D"">https://noiseprotocol.org</a>) or sign a hash of an =
interactive handshake transcript (TLS 1.3 -&nbsp;<a =
href=3D"https://tools.ietf.org/html/rfc8446#section-4.4.3" =
class=3D"">https://tools.ietf.org/html/rfc8446#section-4.4.3</a>) so =
that the signature is tightly bound to a specific interactive protocol =
run.</div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
dir=3D"ltr" class=3D""><div class=3D"WordSection1"><p =
class=3D"MsoNormal">Your RS-specific token solution is only applicable =
to use cases where the RS-specific tokens
 are appropriate and viable. This is not a restriction that exists for =
DPoP as written. But you are correct, there are ways to use the macaroon =
pattern with asymmetric crypto. If that=E2=80=99s your proposal then I =
suggest specifying that, as most of the documentation
 I=E2=80=99ve seen (including the vast majority of the paper) focuses on =
the HMAC approach. While I can see how one could apply the pattern with =
asymmetric crypto, it wasn=E2=80=99t clear to me from that section of =
the paper that my thoughts match what they were describing.<br =
class=3D""></p></div></div></blockquote><div dir=3D"ltr" class=3D""><br =
class=3D""></div><div dir=3D"ltr" class=3D"">The easiest way to use =
macaroons with asymmetric crypto is to make the macaroon identifier be =
an encrypted random HMAC key that the RS can decrypt (or a derived key =
using diffie-hellman). You can concatenate multiple encrypted keys for =
multiple RSes. Alternatively in a closed ecosystem you can encrypt the =
random HMAC with a key stored in a KMS (such as AWS KMS) and grant each =
RS decrypt permissions for that KMS key.</div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div dir=3D"ltr" class=3D""><div =
class=3D"WordSection1"><p class=3D"MsoNormal">
<br class=3D"">
<o:p class=3D""></o:p></p><p class=3D"MsoNormal">&gt; The AS can start =
issuing macaroons without either clients or RS being aware=E2=80=A6.<o:p =
class=3D""></o:p></p>
<div class=3D""><p class=3D"MsoNormal">I=E2=80=99m not entirely sure =
what value you=E2=80=99re trying to get at here. I
<i class=3D"">think</i> you mean that the token handling/validation =
logic at the RS and AS isn=E2=80=99t significantly different for =
non-constrained macaroons versus constrained macaroons, whereas it is =
for DPoP? True, for DPoP the RS would need to know that it should send =
the
 DPoP proof to the AS, but RSes could be configured to always include it =
if present in the request. On the AS side, regardless of token format =
the AS will need logic to validate that the sender constraint is =
fulfilled. This may be very simple (e.g., just a
 timestamp check), or as relative complex as validating a DPoP token, =
depending on the needs of the use case and the caveats involved.<br =
class=3D""></p></div></div></div></blockquote><div dir=3D"ltr" =
class=3D""><br class=3D""></div><div dir=3D"ltr" class=3D"">My point is =
that if say Google decided to start issuing macaroon-based access tokens =
from their AS today, assuming that their RSes are doing token =
introspection (I've no idea if they do or not), then it's likely nothing =
would break. OAuth access tokens are opaque and their format =
unspecified, so only software that is making additional assumptions =
about the format of access tokens would be impacted. Clients can then =
later start adding caveats (by choosing to make additional assumptions =
about the token format), while RSes still don't have to make any =
changes. The RS would only need to make changes to support things like =
htu/htm, but these are only applicable if you want to provide defence =
against more advanced threat models such as TLS compromise.</div><div =
dir=3D"ltr" class=3D""><br class=3D""></div><div dir=3D"ltr" =
class=3D"">DPoP only effectively prevents cross-RS replay if all RSes =
implement it, otherwise the ones that don't are still vulnerable. When =
you have 1000+ microservices (e.g.,&nbsp;<a =
href=3D"https://twitter.com/JackKleeman/status/1190354757308862468" =
class=3D"">https://twitter.com/JackKleeman/status/1190354757308862468</a>)=
 then this is a big deal.</div><br class=3D""><blockquote type=3D"cite" =
class=3D""><div dir=3D"ltr" class=3D""><div class=3D"WordSection1"><div =
class=3D""><p class=3D"MsoNormal">
<br class=3D"">
&gt; (Re: asymmetric crypto) That=E2=80=99s not a requirement, it=E2=80=99=
s a technology choice.<br class=3D"">
Fair enough, but technology choices are driven by requirements. Based on =
conversations I=E2=80=99ve had with John Bradley (and others I think?), =
this one in particular stems in part from the desire to keep the key =
locked up behind the browser=E2=80=99s crypto API, and not
 directly exposed to JavaScript. I=E2=80=99m somewhat skeptical of the =
value of this, since an attacker could just as easily call the crypto =
API directly, but if we see this as a requirement, then that would seem =
to require asymmetric crypto. However, as you noted
 that would not rule out the use of the macaroon =
pattern.</p></div></div></div></blockquote><div dir=3D"ltr" class=3D""><br=
 class=3D""></div><div dir=3D"ltr" class=3D"">Right, I don't think this =
works for browsers. (I don't think anything will work for browsers until =
they abandon the weak same-origin policy and replace it with a more =
serious security model, such as <a href=3D"https://github.com/Agoric/SES" =
class=3D"">https://github.com/Agoric/SES</a>). I think it is a genuine =
advantage of DPoP for mobile devices though, and I'd support a draft =
that targeted that use case specifically.</div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div dir=3D"ltr" class=3D""><div =
class=3D"WordSection1"><div class=3D""><p class=3D"MsoNormal"><o:p =
class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">&gt; There are plenty =
of existing interoperable macaroon libraries=E2=80=A6<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal">=E2=80=9CUse one of these =
existing libraries=E2=80=9D is not appropriate as normative text in a =
specification. That format needs to be explicitly defined. Caveat types =
(e.g., expiry, source IP, client TLS certificate, etc.) need to be =
defined, probably
 with an IANA registry. Processing instructions need to be written =
(e.g., what happens when caveats conflict?). Security considerations =
around third-party caveats need to be =
written.</p></div></div></div></blockquote><div dir=3D"ltr" class=3D""><br=
 class=3D""></div><div dir=3D"ltr" class=3D"">Sure, but that's work for =
me and the WG (if there's interest in standardizing this). Your previous =
point was that they require "non-trivial work to use ...&nbsp;and =
require developers to learn a new token format". That burden is =
significantly reduced when developers can just add a dependency and call =
a one-liner to add a caveat.</div><br class=3D""><blockquote type=3D"cite"=
 class=3D""><div dir=3D"ltr" class=3D""><div class=3D"WordSection1"><div =
class=3D""><p class=3D"MsoNormal"><o:p class=3D""></o:p></p><p =
class=3D"MsoNormal"><o:p class=3D"">&nbsp;</o:p></p><p =
class=3D"MsoNormal">&gt; HMAC-SHA256 is very widely implemented (and =
usually securely). That=E2=80=99s all you need.<o:p =
class=3D""></o:p></p><p class=3D"MsoNormal">That=E2=80=99s what people =
said about SHA-1. Cryptographic agility is a feature, not a =
bug.</p></div></div></div></blockquote><div dir=3D"ltr" class=3D""><br =
class=3D""></div><div dir=3D"ltr" class=3D"">Actually I would bet a lot =
of money on HMAC-SHA256 not being broken any time during our lifetimes. =
HMAC-SHA1 is still secure, as is HMAC-MD5, despite both of those hash =
functions no longer being collision resistant. The reason is that (a) =
preimage resistance often holds up much better than collision resistance =
(e.g. the best preimage attacks against MD5 are still not practical), =
and (b) the security proofs for HMAC require only fairly minimal =
security properties from the underlying hash function.</div><div =
dir=3D"ltr" class=3D""><br class=3D""></div><div dir=3D"ltr" =
class=3D"">HMAC-SHA256 operates at a 256-bit security level which =
provides a huge margin of safety against advances in cryptanalysis. It's =
also safe against quantum attacks, as the best known attack (Grover's =
algorithm) would at best reduce the security level to around a 128-bit =
level (which is still better than RSA 2048).&nbsp;</div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"WordSection1"><div class=3D""><p =
class=3D"MsoNormal"><o:p class=3D""></o:p></p><p class=3D"MsoNormal"><o:p =
class=3D"">&nbsp;</o:p></p><p class=3D"MsoNormal">Again, I=E2=80=99m not =
saying we shouldn=E2=80=99t use macaroons, but I think you are =
underselling the amount of work required and overselling their =
value.</p><div class=3D""><br =
class=3D""></div></div></div></div></blockquote>Compared to DPoP? I've =
deliberately confined myself to advantages that apply to DPoP in this =
thread, but they have advantages for other use-cases too.</div><div =
dir=3D"ltr" class=3D""><br class=3D""></div><div dir=3D"ltr" class=3D"">--=
 Neil</div></div></body></html>=

--Apple-Mail=_085116B3-AEFC-44CE-9DC0-B78F9B558EB0--


From nobody Wed Nov 27 06:05:48 2019
Return-Path: <pedram.hosseyni@sec.uni-stuttgart.de>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFE4812083B for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 06:05:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.198
X-Spam-Level: 
X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=uni-stuttgart.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id igDUeSk9I0lE for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 06:05:42 -0800 (PST)
Received: from mxex1.tik.uni-stuttgart.de (mxex1.tik.uni-stuttgart.de [IPv6:2001:7c0:2041:24::a:1]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1CA312012D for <oauth@ietf.org>; Wed, 27 Nov 2019 06:05:41 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mxex1.tik.uni-stuttgart.de (Postfix) with ESMTP id CD4E2603E5; Wed, 27 Nov 2019 15:05:39 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=uni-stuttgart.de; h=content-language:content-transfer-encoding:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:from:from:references:subject:subject:received :received; s=dkim; i=@sec.uni-stuttgart.de; t=1574863500; x= 1576602301; bh=CuNlFQlE4r6cmv2TXdQ3ksp74Syd25WsyU1tMxfwMEg=; b=T Tu1Tyu1N4WtCqUMqgT9rk+UNfuEW/GWwhaY95d6rMjcTER0HR3xXO6PdB6corUPw eGiYFtpS4Am3xEFcE0BTW9Y/anBHMaKQOSiJNus4L2Bx1AccirvQBhFL8ER+4c70 aEJgPBkI8Te7R2xqztBLWBkT9GktapUIYdEATg5VM5/yfThARxbdTWMaNJLHe23N AkR8Nk56nRwpQ1bzJFWHV+tc5Nf42Yeu1lEIOc1i0oUaDPoJ/Om2DuPrucAS/zsl 6BMlSPvGs+LBKpKAJjoKZ8lKt9/KORYM3BMNCtXvn9w8pjYcxzNubu99kr//C5Ct qw0xnbskO7JQce8Lt2k0A==
X-Virus-Scanned: USTUTT mailrelay AV services at mxex1.tik.uni-stuttgart.de
Received: from mxex1.tik.uni-stuttgart.de ([127.0.0.1]) by localhost (mxex1.tik.uni-stuttgart.de [127.0.0.1]) (amavisd-new, port 10031) with ESMTP id 9K3IvtcbcFLY; Wed, 27 Nov 2019 15:05:00 +0100 (CET)
Received: from [IPv6:2001:7c0:2015:182::1:9c] (unknown [IPv6:2001:7c0:2015:182::1:9c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mxex1.tik.uni-stuttgart.de (Postfix) with ESMTPSA; Wed, 27 Nov 2019 15:04:59 +0100 (CET)
To: "Peck, Michael A" <mpeck@mitre.org>, Benjamin Kaduk <kaduk@mit.edu>
Cc: "oauth@ietf.org" <oauth@ietf.org>
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de> <20191126155116.GW32847@mit.edu> <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de> <31267_1574793090_5DDD6F81_31267_173_1_20191126183109.GZ32847@mit.edu> <A6A5B0CC-FC91-48D9-A7EC-79163EF08F55@mitre.org>
From: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
Message-ID: <13df62f4-e53f-6a35-443d-2a88db741e55@sec.uni-stuttgart.de>
Date: Wed, 27 Nov 2019 15:04:58 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.2.1
MIME-Version: 1.0
In-Reply-To: <A6A5B0CC-FC91-48D9-A7EC-79163EF08F55@mitre.org>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/3rVChLUGaTceJVA5NWmwsSMeOsU>
Subject: Re: [OAUTH-WG] [EXT] Re: WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 14:05:46 -0000

Hi Mike,

 > Wouldn't most RSs only trust access tokens from a single AS anyways?

At the last OSW, there was broad agreement that this is typically the 
case. Otherwise, the mitigation that we suggested in the paper would not 
prevent the attack.

 > Would it be reasonable for the document to recommend that clients 
designate a specific AS for each RS that the client accesses (and not 
allow the user to select a different AS)? Would that help prevent the 
attack?

In principle, this should prevent the attack. However, this would 
require the client to identify the correct AS for each RS, which might 
not always be possible (e.g., in more dynamic settings) and more 
complicated than just delegating this decision to the RS.

Any opinions (also from other OAuth WG members) on this?

Best regards,
Pedram


On 26.11.19 21:08, Peck, Michael A wrote:
> Hi Pedram,
>
> I understand why a client would need to allow use of multiple authorization servers if the client needs to access various resource servers each of which may trust different ASs (e.g. the client supports accessing resources at multiple cloud storage services).
>
> However, how common is the case that a client would need to allow selecting from multiple authorization servers for accessing a particular resource server?
>
> Would it be reasonable for the document to recommend that clients designate a specific AS for each RS that the client accesses (and not allow the user to select a different AS)? Would that help prevent the attack? Wouldn't most RSs only trust access tokens from a single AS anyways?
>
> Thanks,
> Mike
>
> ï»¿On 11/26/19, 1:32 PM, "OAuth on behalf of Benjamin Kaduk" <oauth-bounces@ietf.org on behalf of kaduk@mit.edu> wrote:
>
>      Hi Pedram,
>      
>      Thanks for confirming that the scenario is as I was trying to understand
>      it.  I don't think it's universal that all clients will give transitive
>      access from the user to the accessed resource, though it's certainly
>      common; the lack of exposition on that point is what I had been stumbling
>      on.
>      
>      -Ben
>      
>      On Tue, Nov 26, 2019 at 06:33:04PM +0100, Pedram Hosseyni wrote:
>      > Hi Ben,
>      >
>      > The attacker uses the (honest) client shown in Figure 4 as a regular
>      > user. For example, the client might provide access to a cloud storage
>      > via its website, i.e., by using the clients' website, a user can access
>      > her files stored at the resource server.
>      >
>      > I'll try to clarify the attack with a simplified example.
>      >
>      > Let's assume that the client supports two authorization servers
>      > AS_honest and AS_attacker. Intuitively, if the attacker phishes an
>      > access token created by AS_honest for an honest user (Alice), one would
>      > expect that sender-constraining the access token (e.g., via mTLS)
>      > prevents the attacker from using this access token.
>      >
>      > The overall goal of the attacker is to use the sender-constrained access
>      > token (which he cannot use directly at the resource server) to access
>      > Alices cloud storage.
>      >
>      > The attack works as follows:
>      >
>      > First, the attacker visits the website of the client. Usually, the
>      > attacker would now choose an AS, and after successful authentication,
>      > access his files stored in the cloud. When selecting the AS, the
>      > attacker chooses AS_attacker. In Step 5 of Figure 4, AS_attacker now
>      > provides the phished access token. As this token is bound to this
>      > client, the client can use it at the resource server for getting access
>      > to the cloud storage of Alice. As the attacker is using the client
>      > (through the clients' website), he now gets access to these files
>      > (stored at the RS).
>      >
>      > Please let me know if you have any other questions.
>      >
>      > Best regards,
>      > Pedram
>      >
>      >
>      > On 26.11.19 16:51, Benjamin Kaduk wrote:
>      > > Hi Pedram,
>      > >
>      > > On Thu, Nov 21, 2019 at 02:50:52PM +0100, Pedram Hosseyni wrote:
>      > >> Also, for this or the next version of this document, the Cuckoo's Token
>      > >> attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ ), should
>      > >> be addressed. We also discussed this issue extensively at the last OSW
>      > >> in Stuttgart.
>      > > I took a look at the paper, and I'm not sure I'm properly understanding the
>      > > "Cuckoo's Token" attack.  Looking at Figure 4 of the paper to have
>      > > something concrete to refer to, I assume that the client, as a white box,
>      > > is presumed to be honest.  Since the access token is bound to the client, I
>      > > assume that the attacker has to return the phished access token to the same
>      > > client that originally (honestly) got it, as otherwise the token will not
>      > > be usable at the RS.  The paper concludes that in step 6, the client gets
>      > > access to the honest resource owner's resources, and furthermore that the
>      > > attacker has access to those resources through the client.  It's that last
>      > > part that I'm not sure I understand -- if the client is honest, why would
>      > > it return resource information to the attacker?  The best I can come up
>      > > with is that there's some sense of a "session" between the user and client,
>      > > such that the client links its resource accesses with the "session" on
>      > > behalf of which the access occurs, and is willing to return such
>      > > information back to the user only on the "linked session".  (The
>      > > countermeasure makes sense and is a good practice, of course.)
>      > >
>      > > Thanks,
>      > >
>      > > Ben
>      >
>      > --
>      > Pedram Hosseyni, M.Sc.
>      > Room V38 2.438
>      > Institute of Information Security - SEC
>      > UniversitÃ¤t Stuttgart
>      > UniversitÃ¤tsstraÃŸe 38
>      > D-70569 Stuttgart
>      > Germany
>      > Phone: +49 711 685 88454
>      > https://sec.uni-stuttgart.de
>      >
>      
>      _______________________________________________
>      OAuth mailing list
>      OAuth@ietf.org
>      https://www.ietf.org/mailman/listinfo/oauth
>      
>
-- 
Pedram Hosseyni, M.Sc.
Room V38 2.438
Institute of Information Security - SEC
UniversitÃ¤t Stuttgart
UniversitÃ¤tsstraÃŸe 38
D-70569 Stuttgart
Germany
Phone: +49 711 685 88454
https://sec.uni-stuttgart.de


From nobody Wed Nov 27 11:19:57 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC8461209D4 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 11:19:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c3CZP4VjNM0o for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 11:19:54 -0800 (PST)
Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0021D1209D3 for <oauth@ietf.org>; Wed, 27 Nov 2019 11:19:53 -0800 (PST)
Received: by mail-lj1-x22a.google.com with SMTP id e9so25697650ljp.13 for <oauth@ietf.org>; Wed, 27 Nov 2019 11:19:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=K8PUyAw2J62WTCRxaawVX2FDojA41+aAZc7rQ0eYDqM=; b=RVChpiGdB96dINsIAZJatNCIBzBu5WoM0b3786cyZkV2mVvkstg/plBJb8b5i81WC7 qcg9K6GvHJoXpBWhwe8GEbQjvBVar8i8yTTxeXdJDXKZX3gKdrWOTfhRcRmCYkTYxMXl hiEQePRsQw5bKFrKDYhjyIaBdaDr/PKjmCy3vQNjbv/92CClBIlNduj/q44NO7xI22q2 jirhfn4JGDCx+lgrzpstEz6eV1s86ynZF8ES108H/PObvFNwz50l7m3ZLJCJWSMxCxrT 0X40WLaenkSpq3rfPdiWK3GotdJeZ6hUSgHkZbKeiLf1qP5dsY5Y+rEYXOCt0C9pW/mS JhIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=K8PUyAw2J62WTCRxaawVX2FDojA41+aAZc7rQ0eYDqM=; b=a9HeLUbUSCF2Tc+YG3mWxskdbg0njMUdfGsAJazL+mL/AOSJ4kSFiZ4zmU2coQ0njI wm1S8ScwFZYOVfNsr0xOMGTo0m1t/0ZwtAm3WIqKxQb7m9NHWEICnlPj60t3bnGFXw+b C22D5IEsoAh3fOZTuARU8iWn3XrDoGYHjmALejeZ8RjiZZYKb7qVdQX8Fkl+Dar4rIb6 uKnOBEb2PYt/o2K0OWQpaEqFeQoyo2NGwTMUCeZWRsBRh8POFAISFk1l3MAfWjrX9Keo qkmazyz8v0ygOu/CNNj24f0WsggI0cswBr+N6+7VejqGKOMhSvEu1sIaj1wc9pUF3l2j eaNQ==
X-Gm-Message-State: APjAAAVkL0g50ZEq82dcpDPKEK+dv7WuUCCZb3GRNXhhCT7JQCRdZqDQ FVjEto5sWu1WW12ZhIA4b5qG+lCZIMVJuFf2WkIdDNNDdoTZfSV2+096ezcEEq0u5Mea5nelWM/ 8tNah+Kx7GSVn+Q==
X-Google-Smtp-Source: APXvYqzQalEIOCUMGYA25l7fK6ujiKG13gwCzZlk7I914xNPS8+t6bTdaPT091OzmTuQzAaYwA8uVPFjRsMSTmI0Eds=
X-Received: by 2002:a2e:8855:: with SMTP id z21mr33015412ljj.212.1574882391982;  Wed, 27 Nov 2019 11:19:51 -0800 (PST)
MIME-Version: 1.0
References: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com> <D7215EC5-E9B5-4C9A-8E2A-1DAE8A5AA4D6@forgerock.com>
In-Reply-To: <D7215EC5-E9B5-4C9A-8E2A-1DAE8A5AA4D6@forgerock.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 27 Nov 2019 12:19:24 -0700
Message-ID: <CA+k3eCSxyS+A76qMZL4qE5jkkrdXJ5-riWX7UkOB8SYiBxw1mQ@mail.gmail.com>
To: Neil Madden <neil.madden@forgerock.com>
Cc: "Richard Backman, Annabelle" <richanna@amazon.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000089a6db059858e14c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/yRo2rkmjQNfBZgW2zBAghFFsyWM>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 19:19:56 -0000

--00000000000089a6db059858e14c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, Nov 27, 2019 at 3:31 AM Neil Madden <neil.madden@forgerock.com>
wrote:

>
> That is true, but is IMO more of a hindrance than an advantage for a PoP
> scheme. The very fact that the signature is valid at every RS is why you
> need additional measures to prevent cross-RS token reuse. This downside o=
f
> signatures for authentication was pointed out by djb 18 years ago (
> https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO7IYXOw=
J),
> which is why most modern crypto protocols either use Diffie-Hellman for
> authN (https://noiseprotocol.org) or sign a hash of an interactive
> handshake transcript (TLS 1.3 -
> https://tools.ietf.org/html/rfc8446#section-4.4.3) so that the signature
> is tightly bound to a specific interactive protocol run.
>
>
Mostly for my own edification -  using Diffie-Hellman for authN (that a key
was held) was effectively at the heart of the "tentative suggestion for an
alternative design" that you had much early in this thread?

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--00000000000089a6db059858e14c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Wed, Nov 27, 2019 at 3:31 AM Neil =
Madden &lt;<a href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">n=
eil.madden@forgerock.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex"><div><div dir=3D"auto"><div dir=3D"ltr"><br><div di=
r=3D"ltr">That is true, but is IMO more of a hindrance than an advantage fo=
r a PoP scheme. The very fact that the signature is valid at every RS is wh=
y you need additional measures to prevent cross-RS token reuse. This downsi=
de of signatures for authentication was pointed out by djb 18 years ago (<a=
 href=3D"https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgR=
O7IYXOwJ" target=3D"_blank">https://groups.google.com/forum/m/#!msg/sci.cry=
pt/73yb5a9pz2Y/LNgRO7IYXOwJ</a>), which is why most modern crypto protocols=
 either use Diffie-Hellman for authN (<a href=3D"https://noiseprotocol.org"=
 target=3D"_blank">https://noiseprotocol.org</a>) or sign a hash of an inte=
ractive handshake transcript (TLS 1.3 -=C2=A0<a href=3D"https://tools.ietf.=
org/html/rfc8446#section-4.4.3" target=3D"_blank">https://tools.ietf.org/ht=
ml/rfc8446#section-4.4.3</a>) so that the signature is tightly bound to a s=
pecific interactive protocol run.</div><br></div></div></div></blockquote><=
div><br></div><div>Mostly for my own edification -=C2=A0 using Diffie-Hellm=
an for authN (that a key was held) was effectively at the heart of the &quo=
t;tentative suggestion for an alternative design&quot; that you had much ea=
rly in this thread? <br></div><div><br></div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--00000000000089a6db059858e14c--


From nobody Wed Nov 27 11:59:40 2019
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BC8A1209F3 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 11:59:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SJ2zbLkxTrwC for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 11:59:37 -0800 (PST)
Received: from mail-lj1-x22f.google.com (mail-lj1-x22f.google.com [IPv6:2a00:1450:4864:20::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A982812097A for <oauth@ietf.org>; Wed, 27 Nov 2019 11:59:36 -0800 (PST)
Received: by mail-lj1-x22f.google.com with SMTP id e28so1635547ljo.9 for <oauth@ietf.org>; Wed, 27 Nov 2019 11:59:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OfwjhDdqcisltI1cbeFj3sXIu4Psw9ioY9euZQpFlc4=; b=F20cQPeBcXkFwnKZcVmRsihqm2srz2PaN9MCk38/07mpkhIZwuZRb2ZQzx1j00TRDU VJAOiuhdMEb2JZ/0eubOtJ/+ZgsBZTAsjvrHrr/2UpjzNKWVD/XfWNh+fdoyNm7S7Fsi DaINpqkwyV4aL3W1pnJOWBindPBqoyDSQDzB2pP3sXap9+g7AuIfPpYdbvpP5ELkl2Ia UZYyHqymRkpGknbRYsiJpygLe9BWSrTLNbgJ2gWjU+aJCGCgnDsbPzwdoTn6xFmaRBrG uXrnpDoaUUSYDKXkyFnpMzAcu5xCnRdR8RAVl7GhWW82NBD153A85fwDXLXC6ZEXvu0i qJWw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OfwjhDdqcisltI1cbeFj3sXIu4Psw9ioY9euZQpFlc4=; b=Ya5PgMeAI63yEnCd6UW1Gv24bl2JY5BNuETO1Bnev8GcLfZKfnLVD6DWsg4WAPVUUw 9VG1DUEx9bnsFlyXG0/9qj2In7xeXCrVdvbwD267Jx6RRpeOzoOHr8NnICDCC+Yzfuh3 pQtQkod0bus5qfQx5OhrN/5zc5P7znyeZxVdk4x0BbTn5WqPwrqfCAoa44M0btvxI0yb Sj+ywraQVaMPRyTcxDSSteCYRzxfLsaVHZKjeocmmOD7tSj16Tp5xEYBJ/XmM1k9oW7T dG23IW5YDa2ARawYTL3t8Jwi+ylLwh6G9z+JFrGmN7fPljabQmoK4HwtWJXKFeAWSHbX tNaQ==
X-Gm-Message-State: APjAAAXsS3Bx6idRYeZHxjSGFm3t13lSrZFU95dUhXrtW/oTz94UOvMP X8ih0dMyPWLXte3O3/R0QU2OD5rTIEJDHWmxu5R1VUpYWSEEutVRRYpsU6CcPDd8wHafW1Fgf3+ bEnRSw5PEt2uFPA==
X-Google-Smtp-Source: APXvYqyKMbGJqS0qwdSZYMypM1uf9KmVLO5j6zOZ6MZVUv73CHpedgpMwTrwcWvs+lwyAnR3KAVdiopgmkHKJRfN6nQ=
X-Received: by 2002:a2e:8885:: with SMTP id k5mr15616257lji.98.1574884775033;  Wed, 27 Nov 2019 11:59:35 -0800 (PST)
MIME-Version: 1.0
References: <7C33E17D-0E0B-49EC-8756-C4353D70EF27@amazon.com> <B147B292-925E-4B04-83E6-C66433D54F49@forgerock.com> <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com>
In-Reply-To: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 27 Nov 2019 12:59:07 -0700
Message-ID: <CA+k3eCTSpT+o9A+irDesoCij9fEoYS5u6N+EaJ=kcZDiersn1Q@mail.gmail.com>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
Cc: Neil Madden <neil.madden@forgerock.com>, oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000095633c0598596f5d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/lUckUSAtVyCzkDIY4gZhPmBWSLs>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 19:59:39 -0000

--00000000000095633c0598596f5d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Nov 26, 2019 at 6:26 PM Richard Backman, Annabelle <
richanna@amazon.com> wrote:

> > That=E2=80=99s not directly attached to the access token. This means th=
at every
> RS has to know about DPoP.
>
> True, but you could avoid that by embedding the access token in the DPoP
> proof (similar to draft-ietf-oauth-signed-http-request) and sending that =
as
> the sole token. Technically, that=E2=80=99s no longer a bearer token so s=
ending it
> as =E2=80=9CAuthorization: bearer <token>=E2=80=9D would be wrong, but DP=
oP already commits
> that sin.
>

To clairy FWIW the current DPoP draft doesn't commit that sin. It uses
=E2=80=9CAuthorization: dpop <access-token>=E2=80=9D and "DPoP: <DPoP-proof=
-JWT>" headers.
There were some examples attempting to illustrate how all the pieces of the
proposal worked, including this particular part, in the slides I had for
Singapore. But unfortunately I never made it past slide #6.

On the other hand the OAuth MTLS draft does commit said sin. But it was
intentional with the aim of easing adoption/migration to it.

--=20
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged=
=20
material for the sole use of the intended recipient(s). Any review, use,=20
distribution or disclosure by others is strictly prohibited.=C2=A0 If you h=
ave=20
received this communication in error, please notify the sender immediately=
=20
by e-mail and delete the message and any file attachments from your=20
computer. Thank you._

--00000000000095633c0598596f5d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr" class=3D"gmail_attr"><br></div><div dir=
=3D"ltr" class=3D"gmail_attr">On Tue, Nov 26, 2019 at 6:26 PM Richard Backm=
an, Annabelle &lt;<a href=3D"mailto:richanna@amazon.com">richanna@amazon.co=
m</a>&gt; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=3D"g=
mail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204=
,204,204);padding-left:1ex">





<div lang=3D"EN-US">
<div class=3D"gmail-m_1484449767856442017WordSection1">
<p class=3D"MsoNormal">&gt; That=E2=80=99s not directly attached to the acc=
ess token. This means that every RS has to know about DPoP.<u></u><u></u></=
p>
<p class=3D"MsoNormal">True, but you could avoid that by embedding the acce=
ss token in the DPoP proof (similar to draft-ietf-oauth-signed-http-request=
) and sending that as the sole token. Technically, that=E2=80=99s no longer=
 a bearer token so sending it as =E2=80=9CAuthorization:
 bearer &lt;token&gt;=E2=80=9D would be wrong, but DPoP already commits tha=
t sin.<u></u><u></u></p>
</div></div></blockquote><div><br></div><div>To clairy FWIW the current DPo=
P draft doesn&#39;t  commit that sin. It uses =E2=80=9CAuthorization: dpop =
&lt;access-token&gt;=E2=80=9D and &quot;DPoP: &lt;DPoP-proof-JWT&gt;&quot; =
headers. There were some examples attempting to illustrate how all the piec=
es of the proposal worked, including this particular part, in the slides I =
had for Singapore. But unfortunately I never made it past slide #6. <br></d=
iv><div><br></div><div>On the other hand the OAuth MTLS draft does commit s=
aid sin. But it was intentional with the aim of easing adoption/migration t=
o it. <br></div><div>=C2=A0</div></div></div>

<br>
<i style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:ba=
seline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-=
ui,-apple-system,system-ui,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ubuntu,C=
antarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;color:rgb(85,85,85)"><=
span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:=
baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,=
-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Oxygen-Sans,Ub=
untu,Cantarell,&quot;Helvetica Neue&quot;,Arial,sans-serif;font-weight:600"=
><font size=3D"2">CONFIDENTIALITY NOTICE: This email may contain confidenti=
al and privileged material for the sole use of the intended recipient(s). A=
ny review, use, distribution or disclosure by others is strictly prohibited=
.=C2=A0 If you have received this communication in error, please notify the=
 sender immediately by e-mail and delete the message and any file attachmen=
ts from your computer. Thank you.</font></span></i>
--00000000000095633c0598596f5d--


From nobody Wed Nov 27 12:30:09 2019
Return-Path: <prvs=227439623=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 258A1120908 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 12:30:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.8
X-Spam-Level: 
X-Spam-Status: No, score=-11.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jq1FEkBsHxL5 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 12:30:04 -0800 (PST)
Received: from smtp-fw-33001.amazon.com (smtp-fw-33001.amazon.com [207.171.190.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D0EB120804 for <oauth@ietf.org>; Wed, 27 Nov 2019 12:30:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1574886604; x=1606422604; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=zqQYe7XGT6s9XrhAc3IAXoPqsI/hFU11QnNTZjS1WT0=; b=mjUMEU/d7i+iN3KYrqu0wRxM9vmk/2mXeXmq1My5cXJh3vADVCttzuwy sZkz+Y1XIn5rpbcmKBWyrK/Z6W/v9KzxhrbQuCvAbRlDpy+MEvrNFwvR9 yH1xzWFDYX3mH8IEHGEpjG6pOXSnUsP3DQqRwnGgWbKoIZNBlgiaeKjLJ k=;
IronPort-SDR: 6kefIBPbTLT2UxtFbOm8bJBrytiXIV5DUgPsWslI8oyKv09Np8x70Ue+ja3lWcODpPzMDGxj2F hvik2xBkXRDw==
X-IronPort-AV: E=Sophos; i="5.69,250,1571702400"; d="scan'208,217"; a="11667869"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1a-67b371d8.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP; 27 Nov 2019 20:29:46 +0000
Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1a-67b371d8.us-east-1.amazon.com (Postfix) with ESMTPS id 1CAAFA2303; Wed, 27 Nov 2019 20:29:44 +0000 (UTC)
Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 20:29:44 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 27 Nov 2019 20:29:43 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Wed, 27 Nov 2019 20:29:43 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVmt2iG9RAznniNkuvKQ6riy594aeSJFIAgAD4+QCAAhU5gIAA7zqAgADa3AD//9TtAIAA3uqAgAJjuACAAgu/AIABCd+AgACdmgCAAR5qgIAAISqA
Date: Wed, 27 Nov 2019 20:29:43 +0000
Message-ID: <C8A4F5A0-BE4A-46BF-B440-FFE18E039D6C@amazon.com>
References: <3D5C611E-4B03-4A46-A22B-D8AC9FE0AC51@amazon.com> <D7215EC5-E9B5-4C9A-8E2A-1DAE8A5AA4D6@forgerock.com>
In-Reply-To: <D7215EC5-E9B5-4C9A-8E2A-1DAE8A5AA4D6@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.162.171]
Content-Type: multipart/alternative; boundary="_000_C8A4F5A0BE4A46BFB440FFE18E039D6Camazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/aYMGYh78RG4TpLf50a1kX6jh1f8>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 20:30:07 -0000

--_000_C8A4F5A0BE4A46BFB440FFE18E039D6Camazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_C8A4F5A0BE4A46BFB440FFE18E039D6Camazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <9BD9D2B858F10F4094AACBC42397D0A2@amazon.com>
Content-Transfer-Encoding: base64
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--_000_C8A4F5A0BE4A46BFB440FFE18E039D6Camazoncom_--


From nobody Wed Nov 27 12:30:26 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FD44120A81 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 12:30:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uU89qmCoZkdq for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 12:30:23 -0800 (PST)
Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1576C120C99 for <oauth@ietf.org>; Wed, 27 Nov 2019 12:30:20 -0800 (PST)
Received: by mail-wm1-x331.google.com with SMTP id b11so8509302wmj.4 for <oauth@ietf.org>; Wed, 27 Nov 2019 12:30:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=vpkaRbm21BhmgDUy9OUmFiCAtChmpinirN9gjJCFBvU=; b=aZuAzqIDps6dAlTZwbmjoGJXrO4qo0JilIHUdHjuPo/hstylAEUttVwFi5tN6SRbCS 48bOxZSv1NCL7dif2OPHoZH1AxpXdMWwMz/o7MZKrKlQ5G5tYwmObqkXVgB147d5QlJo 3y7svWcIEnGV/33ACQWvwMEDNOKHuAYsw3UXQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=vpkaRbm21BhmgDUy9OUmFiCAtChmpinirN9gjJCFBvU=; b=tji1FGK4zd6Vx3xA2u11vop4XKSJp+DmtGj+Iklbqn67Wqk0n6d5DcRinbSkQE66V7 WFg9PNDfaiSMMC+Q9iPneca5dgT/xDO/ytbbzq1Sx5no+SsZCGlEQEoDymS39NMWjlFG htgW1Rs/q6IbbOA5HV9PnAcuzgJ0NIGlKmihKsySKysFeSpo0qyQXk2EF+mqInMvpiAQ 5zrdTQDu/Cjmadx3wes/xsKU56085m2cx+2bVz/cimUnk+yxBjEhRJG8rNoxJMR2zIIM XqX5S5cCFY+P4miihdmpNwfUokfY14L+ZNx88HPVNrSzEFzZwIX0SArCsDm2aR0gLXyC H7pw==
X-Gm-Message-State: APjAAAWf9ybAf9XUzQt2uTUXCau0keiLYitN+WT9gZUkOICBGo6Qd1om 3cSM+kFPA1S2gfkSeZV5GsSZ9Q==
X-Google-Smtp-Source: APXvYqyJmNU1mPETYb2iYpHksW3ZWXEs7Q9tseYXlXvpSHcTwCFYo+/TlBFBr1MHPUyKIU75GJiETg==
X-Received: by 2002:a05:600c:34c:: with SMTP id u12mr6293621wmd.3.1574886618206;  Wed, 27 Nov 2019 12:30:18 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:9d35:32b:7c76:aa8b? ([2a01:4c8:1e:a0cd:9d35:32b:7c76:aa8b]) by smtp.gmail.com with ESMTPSA id f1sm2113536wrp.93.2019.11.27.12.30.17 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 27 Nov 2019 12:30:17 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-2D69D42E-FD3F-4BA1-BEB6-10B3C958AEED
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Wed, 27 Nov 2019 20:30:16 +0000
Message-Id: <EFE1FB6B-23CE-4C15-AA71-0984F633B27E@forgerock.com>
References: <CA+k3eCSxyS+A76qMZL4qE5jkkrdXJ5-riWX7UkOB8SYiBxw1mQ@mail.gmail.com>
Cc: "Richard Backman, Annabelle" <richanna@amazon.com>, oauth <oauth@ietf.org>
In-Reply-To: <CA+k3eCSxyS+A76qMZL4qE5jkkrdXJ5-riWX7UkOB8SYiBxw1mQ@mail.gmail.com>
To: Brian Campbell <bcampbell@pingidentity.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/ueEoz0YLdlFcYkiZczN4sCxvDLU>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2019 20:30:25 -0000

--Apple-Mail-2D69D42E-FD3F-4BA1-BEB6-10B3C958AEED
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable


> On 27 Nov 2019, at 19:19, Brian Campbell <bcampbell@pingidentity.com> wrot=
e:
>=20
>> On Wed, Nov 27, 2019 at 3:31 AM Neil Madden <neil.madden@forgerock.com> w=
rote:
>>=20
>> That is true, but is IMO more of a hindrance than an advantage for a PoP s=
cheme. The very fact that the signature is valid at every RS is why you need=
 additional measures to prevent cross-RS token reuse. This downside of signa=
tures for authentication was pointed out by djb 18 years ago (https://groups=
.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO7IYXOwJ), which is why m=
ost modern crypto protocols either use Diffie-Hellman for authN (https://noi=
seprotocol.org) or sign a hash of an interactive handshake transcript (TLS 1=
.3 - https://tools.ietf.org/html/rfc8446#section-4.4.3) so that the signatur=
e is tightly bound to a specific interactive protocol run.
>>=20
>=20
> Mostly for my own edification -  using Diffie-Hellman for authN (that a ke=
y was held) was effectively at the heart of the "tentative suggestion for an=
 alternative design" that you had much early in this thread?

Yes, exactly.

=E2=80=94 Neil=

--Apple-Mail-2D69D42E-FD3F-4BA1-BEB6-10B3C958AEED
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr"><br></div><div dir=3D"ltr"=
><blockquote type=3D"cite">On 27 Nov 2019, at 19:19, Brian Campbell &lt;bcam=
pbell@pingidentity.com&gt; wrote:<br><br></blockquote></div><blockquote type=
=3D"cite"><div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_quote"><div d=
ir=3D"ltr" class=3D"gmail_attr">On Wed, Nov 27, 2019 at 3:31 AM Neil Madden &=
lt;<a href=3D"mailto:neil.madden@forgerock.com" target=3D"_blank">neil.madde=
n@forgerock.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex"><div><div dir=3D"auto"><div dir=3D"ltr"><br><div dir=3D"ltr">Th=
at is true, but is IMO more of a hindrance than an advantage for a PoP schem=
e. The very fact that the signature is valid at every RS is why you need add=
itional measures to prevent cross-RS token reuse. This downside of signature=
s for authentication was pointed out by djb 18 years ago (<a href=3D"https:/=
/groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO7IYXOwJ" target=3D=
"_blank">https://groups.google.com/forum/m/#!msg/sci.crypt/73yb5a9pz2Y/LNgRO=
7IYXOwJ</a>), which is why most modern crypto protocols either use Diffie-He=
llman for authN (<a href=3D"https://noiseprotocol.org" target=3D"_blank">htt=
ps://noiseprotocol.org</a>) or sign a hash of an interactive handshake trans=
cript (TLS 1.3 -&nbsp;<a href=3D"https://tools.ietf.org/html/rfc8446#section=
-4.4.3" target=3D"_blank">https://tools.ietf.org/html/rfc8446#section-4.4.3<=
/a>) so that the signature is tightly bound to a specific interactive protoc=
ol run.</div><br></div></div></div></blockquote><div><br></div><div>Mostly f=
or my own edification -&nbsp; using Diffie-Hellman for authN (that a key was=
 held) was effectively at the heart of the "tentative suggestion for an alte=
rnative design" that you had much early in this thread?<br></div><div></div>=
</div></div></div></blockquote><br><div>Yes, exactly.</div><div><br></div><d=
iv>=E2=80=94 Neil</div></body></html>=

--Apple-Mail-2D69D42E-FD3F-4BA1-BEB6-10B3C958AEED--


From nobody Wed Nov 27 16:13:04 2019
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2877120BD9 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 16:13:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wui6Zq8fOQ8w for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 16:13:00 -0800 (PST)
Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640115.outbound.protection.outlook.com [40.107.64.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57FC2120B8F for <oauth@ietf.org>; Wed, 27 Nov 2019 16:13:00 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dKJuk4XQeCxsV3lk1THoe9WUyfDdqnmijfZPDgaSwjQIxtNkbGt6gI0VdRu2RxRC3hHToDUv8xjV6TIn06fVOY3weP0NnJCSpGd/+38lzDQCUfnUhu5tJYfy1eUpSvO4srt3Pk7CFQBISjg83OtmYplV1UWooVjwdyySmjDWxppmulqPiNzlnGbsH70NQDjGdbXQ98tAY+j9FFIagfq4glyCpIhKmVcuMNTzjyz4Gu0SnO9BYj8rqIZuPCBo5LaFRnO+uSW60PvT5gw8xFhxmDuZsdUl+QkqwWyFr5y7DH2LCD/8psvUflJzymMzTBEWYNMLA2hu2o57KfoihoMIfA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BP0Upl353FQ3pm7hjyY09yOcLzQrk9ETLySq8FQt0/4=; b=TzjMzHFXPKtNxvqjmJDdgj36rsKq2OhfoOmQSu97f3NRLJVxs/JmL+tosJQrnPODR5HhTay/c48sUwT6Z5/UoqRs6AP+ZahQYZse99jQ1qIG8Ysd4VrIuEKxeLisPWZPfWDoGnN91OiJDflJfwg+6waFMIhfqFB/XSWnhc2WV7pVljn5GdIHcorp7jX4+xT5Qtg4D8sYTcjPxbKvlwvVK0/dZPp2hpe3DIwINGaM510qaYV/fKh2McNa263xKqRH2Za5CVeRU8AApSXFV3w/owGy+3Un3PhzEyGdSI9vuF9NNj1mriibriDvz7cVgUxTHnC93/gXwma0pAB5BQ/trA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BP0Upl353FQ3pm7hjyY09yOcLzQrk9ETLySq8FQt0/4=; b=dBFznUCb5YuKHy7T2oh2+oowJitPFAUJRiHI1grW4qiw7XmQdUioSpnzisIsMdZQPk+FnAtwBTSilctS0ZlFVn08z5uNldQOUwKyGi8HWUm7wL0NPuqGWT8mNhSrFra+JRSVIqaU8prZ/0uDXKL6zjxDU2P1dPFMA1XrkSnPLSM=
Received: from DM6PR00MB0572.namprd00.prod.outlook.com (20.179.51.15) by DM6PR00MB0749.namprd00.prod.outlook.com (20.179.166.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2535.0; Thu, 28 Nov 2019 00:12:54 +0000
Received: from DM6PR00MB0572.namprd00.prod.outlook.com ([fe80::41c8:1ecf:fa37:fe35]) by DM6PR00MB0572.namprd00.prod.outlook.com ([fe80::41c8:1ecf:fa37:fe35%7]) with mapi id 15.20.2536.000; Thu, 28 Nov 2019 00:12:54 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
CC: "torsten@lodderstedt.net" <torsten@lodderstedt.net>, "ve7jtb@gmail.com" <ve7jtb@gmail.com>, Daniel Fett <fett@danielfett.de>, "isciurus@fb.com" <isciurus@fb.com>
Thread-Topic: Additional WGLC review of OAuth 2.0 Security Best Current Practice by an AAD developer
Thread-Index: AdWlgBjdExGYkpgnSi2uSxDOxh5hfg==
Date: Thu, 28 Nov 2019 00:12:54 +0000
Message-ID: <DM6PR00MB0572EE0273CC912EC73BEA05F5470@DM6PR00MB0572.namprd00.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=e122abea-70aa-45d8-83f4-00009a28abf0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-28T00:07:36Z;  MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; 
x-originating-ip: [50.47.84.162]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: f5a21a04-1adf-4ee5-d463-08d77397b74f
x-ms-traffictypediagnostic: DM6PR00MB0749:
x-microsoft-antispam-prvs: <DM6PR00MB074978ED0FDF61D0480E9278F5470@DM6PR00MB0749.namprd00.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0235CBE7D0
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(346002)(376002)(396003)(366004)(199004)(189003)(15650500001)(76116006)(2420400007)(2906002)(52536014)(5640700003)(7736002)(790700001)(6116002)(3846002)(66446008)(256004)(14444005)(66476007)(25786009)(64756008)(66556008)(66946007)(86362001)(6306002)(9686003)(71200400001)(71190400001)(8990500004)(55016002)(14454004)(4326008)(7110500001)(54896002)(7696005)(74316002)(316002)(22452003)(54906003)(8936002)(81166006)(81156014)(1730700003)(8676002)(26005)(99286004)(6506007)(6916009)(2351001)(186003)(102836004)(10090500001)(66066001)(66574012)(6436002)(10290500003)(2501003)(478600001)(5660300002)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR00MB0749; H:DM6PR00MB0572.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 2Demrb181nXlrj4p25RLg815AdN43PTeScCaVE0JpomFYRPiB7cX36D9UTYl9/MIEbmjuxOSuq82tfvaiFTOFO4Fv8mMaECh0BNttb+YeZlx4oJSrVkys0GrRHWHkPOVktDqdOJNymHas2X9EkUcv0A+rjlaW+ytpQPGm0WQw9t4KlDaysexYebH0yAL0NKaeBpbMlce7px5uX98GYkgw0iJUj1NWm4UgKrCwYmc6f22Q3k2vXRudJHVH50ODSHVhDZRHqH9dopsOyPNGHXRToniImacGtnHCWfJLkda5uL6m2BGBKpE/5XGyET6iT3DQjr/nyq7CGE6BQCFkJygPJorNZFjVvyJv0RqoB42XEjnJya9FaaStgKgCOXHpdAtZFL90mjg86mRXXDJZAOWzGatvLZlXorrq1YLw4F2eS3t/HuqZKyhyIp76tpbkQ1K
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_DM6PR00MB0572EE0273CC912EC73BEA05F5470DM6PR00MB0572namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f5a21a04-1adf-4ee5-d463-08d77397b74f
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2019 00:12:54.7093 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: h7VTJHp2rnT17/M2x0Wtd8gHlxg5pWg8LvPeNGkpS4pbpnNMpwXLT/xcH3grRrcKUdra8DJkGuZqy3mvYoYMSg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0749
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Yzw0Mk4Ke3yyCH0Oo7MmatXA_tg>
Subject: [OAUTH-WG] Additional WGLC review of OAuth 2.0 Security Best Current Practice by an AAD developer
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Nov 2019 00:13:03 -0000

--_000_DM6PR00MB0572EE0273CC912EC73BEA05F5470DM6PR00MB0572namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Please also add these WGLC comments that a Microsoft Azure Active Directory=
 (AAD) developer asked me to convey:


  1.  In 4.12, "Authorization servers MUST determine based on their risk as=
sessment whether to issue refresh tokens to a certain client [...]" I'm not=
 sure what this requirement requires in practice. AAD issues refresh_tokens=
 to all clients upon request and user consent and applies different lifetim=
e policies to different clients. We also routinely make risk assessments ab=
out all manner of things. Does AAD thereby comply with this guideline? Read=
ing the whole paragraph, I think the paragraph is trying to encourage OAuth=
 clients which use a RT when the RT is returned but use auth codes when the=
 RT is not returned. That's fine, but the current text comes off as imposin=
g a vague requirement on authorization servers. Edits inline - "Authorizati=
on servers MUST MAY dynamically determine based on their risk assessment wh=
ether to issue refresh tokens to a certain client.  If the authorization se=
rver decides not to issue refresh tokens, the client may SHOULD refresh acc=
ess tokens by utilizing other grant types, such as the authorization code g=
rant type.  In such a case, the authorization server may utilize cookies an=
d persistent grants to optimize the user experience."


  1.  In 4.12, the heading says "Authorization server MUST utilize one of t=
hese methods to detect refresh token replay for public clients" - however, =
it doesn't quite specify why refresh token replay is bad. The second paragr=
aph described the goal more precisely ("If an attacker is able to exfiltrat=
e and successfully replay [RTs]") - it's refresh token exfiltration that we=
 MUST mitigate, not refresh token replay. Browser based apps that desire mu=
ltiple access token should be able to use sender-constrained refresh tokens=
 on multiple simultaneous HTTP requests - and some AAD apps do exactly this=
 today. In practice, it's also difficult and undesirable to lock access to =
MSAL's RT cache - individual reads and writes are serialized, but { read, h=
ttp request, write } events are not serialized. Here, just replace "to dete=
ct refresh token replay" with "to mitigate refresh token exfiltration" and =
then under "refresh token rotation," explain that such ASes using RT rotati=
on to mitigate refresh token exfiltration MUST also forbid / prevent RT rep=
lay.


  1.  In 4.12, *Sender-constrained refresh tokens:* - sender-constrained to=
kens are absolutely valuable from a security perspective. However, without =
authenticating the sender, it's not necessarily an adequate protection for =
XSS. Some sender-constrained implementations (such as AAD's WIP spec for RT=
s) use un-attested keys and permit silent rebinding. Indeed, I think this w=
ill be common in browser based apps - attested keys have privacy implicatio=
ns leading to undesirable UX and rebinding prompts also lead to undesirable=
 UX. An XSS attacker in those scenarios could likely silently rebind to an =
attacker-controlled key. It'd be good for the spec to acknowledge these asp=
ects of sender-constrained tokens and make recommendations.
     *   It's these things that make us wary of moving from the implicit fl=
ow to RTs. The damage from exfiltrated RTs is much more severe, but the mit=
igations are less-specified by the BCPs, and thus seem less well-understood=
. Frankly, I think each method of mitigation is worth of its own subsection=
 with more discussion - 4.12.1, 4.12.2, etc.


  1.  In 4.12, *Refresh token rotation:* - in addition to Mike Jones' revie=
w comment. "The authorization server cannot determine which party submitted=
 the invalid refresh token, but it can revoke the active refresh token" is =
the guidance given around revoking stolen RTs. I think this guidance should=
 use an RFC2119 word in place of "can" - and that the guidance should be st=
ronger, e.g. "SHOULD" or "MUST", w.r.t revoking the active refresh token. R=
otating RTs doesn't do much any good as mitigation if the stolen RT remains=
 valid.


  1.  In 4.12, we'd like to see fixed-expiry RTs of ~1 day added as "one of=
 the methods to mitigate RT exfiltration for public clients" that ASes MUST=
 utilize one of. This is what we're implementing; we think it's sound; and =
we'd like to see the draft say so, to remove all doubt.


                                                       -- Mike



--_000_DM6PR00MB0572EE0273CC912EC73BEA05F5470DM6PR00MB0572namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1114667257;
	mso-list-type:hybrid;
	mso-list-template-ids:-850394706 67698703 67698713 67698715 67698703 67698=
713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Please also add these WGLC comments that a Microsoft=
 Azure Active Directory (AAD) developer asked me to convey:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<ol style=3D"margin-top:0in" start=3D"1" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 =
lfo1">In 4.12, &#8220;Authorization servers MUST determine based on their r=
isk assessment whether to issue refresh tokens to a certain client [&#8230;=
]&#8221; I&#8217;m not sure what this requirement requires in
 practice. AAD issues refresh_tokens to all clients upon request and user c=
onsent and applies different lifetime policies to different clients. We als=
o routinely make risk assessments about all manner of things. Does AAD ther=
eby comply with this guideline?
 Reading the whole paragraph, I think the paragraph is trying to encourage =
OAuth clients which use a RT when the RT is returned but use auth codes whe=
n the RT is not returned. That&#8217;s fine, but the current text comes off=
 as imposing a vague requirement on authorization
 servers. Edits <b>inline</b> &#8211; &#8220;Authorization servers <s>MUST<=
/s> <b>MAY dynamically</b> determine
<s>based on their risk assessment</s> whether to issue refresh tokens to a =
certain client.&nbsp; If the authorization server decides not to issue refr=
esh tokens, the client
<s>may</s> <b>SHOULD</b> refresh access tokens by utilizing other grant typ=
es, such as the authorization code grant type.&nbsp; In such a case, the au=
thorization server may utilize cookies and persistent grants to optimize th=
e user experience.&quot;<o:p></o:p></li></ol>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<ol style=3D"margin-top:0in" start=3D"2" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 =
lfo1">In 4.12, the heading says &#8220;Authorization server MUST utilize on=
e of these methods to detect refresh token replay for public clients&#8221;=
 &#8211; however, it doesn&#8217;t quite specify why refresh
 token replay is bad. The second paragraph described the goal more precisel=
y (&#8220;If an attacker is able to exfiltrate and successfully replay [RTs=
]&#8221;) &#8211; it&#8217;s refresh token
<i>exfiltration</i> that we MUST mitigate, not refresh token replay. Browse=
r based apps that desire multiple access token should be able to use sender=
-constrained refresh tokens on multiple simultaneous HTTP requests &#8211; =
and some AAD apps do exactly this today.
 In practice, it&#8217;s also difficult and undesirable to lock access to M=
SAL&#8217;s RT cache &#8211; individual reads and writes are serialized, bu=
t { read, http request, write } events are not serialized. Here, just repla=
ce &#8220;to detect refresh token replay&#8221; with &#8220;to mitigate
 refresh token exfiltration&#8221; and then under &#8220;refresh token rota=
tion,&#8221; explain that such ASes using RT rotation to mitigate refresh t=
oken exfiltration MUST also forbid / prevent RT replay.
<o:p></o:p></li></ol>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<ol style=3D"margin-top:0in" start=3D"3" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 =
lfo1">In 4.12, *Sender-constrained refresh tokens:* - sender-constrained to=
kens are absolutely valuable from a security perspective. However, without =
authenticating the sender, it&#8217;s not
 necessarily an adequate protection for XSS. Some sender-constrained implem=
entations (such as AAD&#8217;s WIP spec for RTs) use un-attested keys and p=
ermit silent rebinding. Indeed, I think this will be common in browser base=
d apps &#8211; attested keys have privacy implications
 leading to undesirable UX and rebinding prompts also lead to undesirable U=
X. An XSS attacker in those scenarios could likely silently rebind to an at=
tacker-controlled key. It&#8217;d be good for the spec to acknowledge these=
 aspects of sender-constrained tokens
 and make recommendations.<o:p></o:p></li><ol style=3D"margin-top:0in" star=
t=3D"1" type=3D"a">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level2 =
lfo1">It&#8217;s these things that make us wary of moving from the implicit=
 flow to RTs. The damage from exfiltrated RTs is much more severe, but the =
mitigations are less-specified by the BCPs,
 and thus seem less well-understood. Frankly, I think each method of mitiga=
tion is worth of its own subsection with more discussion &#8211; 4.12.1, 4.=
12.2, etc.<o:p></o:p></li></ol>
</ol>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<ol style=3D"margin-top:0in" start=3D"4" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 =
lfo1">In 4.12, *Refresh token rotation:* - in addition to Mike Jones&#8217;=
 review comment. &#8220;The authorization server cannot determine which par=
ty submitted the invalid refresh token, but it can
 revoke the active refresh token&#8221; is the guidance given around revoki=
ng stolen RTs. I think this guidance should use an RFC2119 word in place of=
 &#8220;can&#8221; &#8211; and that the guidance should be stronger, e.g. &=
#8220;SHOULD&#8221; or &#8220;MUST&#8221;, w.r.t revoking the active refres=
h token.
 Rotating RTs doesn&#8217;t do much any good as mitigation if the stolen RT=
 remains valid.<o:p></o:p></li></ol>
<p class=3D"MsoNormal" style=3D"margin-left:.25in"><o:p>&nbsp;</o:p></p>
<ol style=3D"margin-top:0in" start=3D"5" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 =
lfo1">In 4.12, we&#8217;d like to see fixed-expiry RTs of ~1 day added as &=
#8220;one of the methods to mitigate RT exfiltration for public clients&#82=
21; that ASes MUST utilize one of. This is what we&#8217;re
 implementing; we think it&#8217;s sound; and we&#8217;d like to see the dr=
aft say so, to remove all doubt.<o:p></o:p></li></ol>
<p class=3D"MsoListParagraph"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_DM6PR00MB0572EE0273CC912EC73BEA05F5470DM6PR00MB0572namp_--


From nobody Wed Nov 27 18:48:43 2019
Return-Path: <kaduk@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0696120B0D for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 18:48:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kmMyt66IW6yv for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 18:48:39 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6887912097F for <oauth@ietf.org>; Wed, 27 Nov 2019 18:48:39 -0800 (PST)
Received: from mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAS2mXZL007974 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 27 Nov 2019 21:48:36 -0500
Date: Wed, 27 Nov 2019 18:48:33 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Message-ID: <20191128024833.GP32847@mit.edu>
References: <DM6PR00MB0572EE0273CC912EC73BEA05F5470@DM6PR00MB0572.namprd00.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
In-Reply-To: <DM6PR00MB0572EE0273CC912EC73BEA05F5470@DM6PR00MB0572.namprd00.prod.outlook.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/83y3awIaSZKZ7vZQWhBvOw4kwDk>
Subject: Re: [OAUTH-WG] Additional WGLC review of OAuth 2.0 Security Best Current Practice by an AAD developer
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Nov 2019 02:48:41 -0000

On Thu, Nov 28, 2019 at 12:12:54AM +0000, Mike Jones wrote:
> Please also add these WGLC comments that a Microsoft Azure Active Directo=
ry (AAD) developer asked me to convey:
>=20
>=20
>   1.  In 4.12, "Authorization servers MUST determine based on their risk =
assessment whether to issue refresh tokens to a certain client [...]" I'm n=
ot sure what this requirement requires in practice. AAD issues refresh_toke=
ns to all clients upon request and user consent and applies different lifet=
ime policies to different clients. We also routinely make risk assessments =
about all manner of things. Does AAD thereby comply with this guideline? Re=
ading the whole paragraph, I think the paragraph is trying to encourage OAu=
th clients which use a RT when the RT is returned but use auth codes when t=
he RT is not returned. That's fine, but the current text comes off as impos=
ing a vague requirement on authorization servers. Edits inline - "Authoriza=
tion servers MUST MAY dynamically determine based on their risk assessment =
whether to issue refresh tokens to a certain client.  If the authorization =
server decides not to issue refresh tokens, the client may SHOULD refresh a=
ccess tokens by utilizing other grant types, such as the authorization code=
 grant type.  In such a case, the authorization server may utilize cookies =
and persistent grants to optimize the user experience."

FYI...

Using HTML bold/strikethrough doesn't work very well in the text/plain
portion, which is the only one displayed in the official archives:
https://mailarchive.ietf.org/arch/msg/oauth/Yzw0Mk4Ke3yyCH0Oo7MmatXA_tg

-Ben


From nobody Wed Nov 27 23:42:38 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7039E12092C for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 23:42:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BOmMCKwU-_XI for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 23:42:34 -0800 (PST)
Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A6DE120271 for <oauth@ietf.org>; Wed, 27 Nov 2019 23:42:33 -0800 (PST)
Received: by mail-wr1-x429.google.com with SMTP id b18so29824702wrj.8 for <oauth@ietf.org>; Wed, 27 Nov 2019 23:42:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:subject:message-id:date :cc:to; bh=EUg0fEYNO6rDjhMZiAqfljguKSuXyvjxU3wHVf2j+14=; b=Wb4jrPVEwKPF87GYev3fnmmVLsY2/c14Bfs4aQWx2TluKlO9qb7iXw4pWgMjTgCgJo nz8nKNkrSUWnfJIY7q4VAnNLdoeNHwstBpF3vhHjW9moXezFpKtJIO2xnlPMqic84bMS ZiOSWbq3ODc2N7DXXtrA1kXuz01JAP3PrUHao=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:message-id:date:cc:to; bh=EUg0fEYNO6rDjhMZiAqfljguKSuXyvjxU3wHVf2j+14=; b=cNcl+yqld96mUjeRGJFNGVnMtfVUTxaOz83fosPpZcWKhyKIC02NlFs+XIAWMXMWXK IbXeJD5TMLCq7DbYhf0OOrYne35EIEN2IrVNC1efKiBGtp87H77SzW231ae1kwPTp31i hegE/4CMxFx0bOPlfANA7yz+ypddub7CAL5ceWLHv9XW/1Omya7+w180Pf/b7nXue7MG JMSWv89j+nDLXP43tBgNhFp3ebljJHgu8XeC4In0/mZNMRP7YkiuCYlEQHPYFVSVDopP BlIReZPayZV0CBGyZ71OxKrZCbXDYqwJ3nvYU/mcudFhClxuoUq9BkLqmSYEXeygsuH3 3nDQ==
X-Gm-Message-State: APjAAAWSa7jYCV5DSU2IcpqYbyTS5kjUuHBeh9lGAVJQvYToJV580lTJ TcwF69E+S7rUPubFSzTD4CeDIA==
X-Google-Smtp-Source: APXvYqxu2PFLramDKM0Gp+sY5HKcZQ2z0E1DAKirlYTHh0/u4WtOHWnIthtRz8He7Ptmw53ulwLeFw==
X-Received: by 2002:a5d:630d:: with SMTP id i13mr30655507wru.369.1574926951927;  Wed, 27 Nov 2019 23:42:31 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:9d35:32b:7c76:aa8b? ([2a01:4c8:1e:a0cd:9d35:32b:7c76:aa8b]) by smtp.gmail.com with ESMTPSA id g74sm9207210wme.5.2019.11.27.23.42.30 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 27 Nov 2019 23:42:30 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-CDC380CE-6801-471C-B895-52C1FA078B46
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Message-Id: <E584D766-74FC-4ED2-A15D-70CEF48BAE71@forgerock.com>
Date: Thu, 28 Nov 2019 07:42:29 +0000
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/9LKdUt9qWbKYVByzRpcrNQuQONw>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Nov 2019 07:42:37 -0000

--Apple-Mail-CDC380CE-6801-471C-B895-52C1FA078B46
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

=EF=BB=BF
> On 27 Nov 2019, at 20:30, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> =EF=BB=BF
> > That is true, but is IMO more of a hindrance than an advantage for a PoP=
 scheme. The very fact that the signature is valid at every RS is why you ne=
ed additional measures to prevent cross-RS token reuse.

> The other methods you mention require their own additional measures in the=
 form of key exchanges/handshakes. And you still need to prove possession of=
 that shared key somehow.

This is true. The difference being that the derived key can then be reused f=
or many requests. Because the key derivation is cryptographically tied to th=
is context the RS can=E2=80=99t replay these symmetric tokens anywhere else.=
=20

> In some cases, =E2=80=9Cderive a shared key and encrypt this blob=E2=80=9D=
 is easier; in some cases =E2=80=9Csign this blob declaring your audience=E2=
=80=9D is easier.

The ECDH scheme does challenge-response to ensure freshness. This was design=
ed to match the anti-replay measures in the DPoP draft but without requiring=
 the server store any state. If you don=E2=80=99t need replay protection (if=
 TLS is enough) then you can indeed just sign the audience, or for ECDH you c=
an do completely static ECDH between the client=E2=80=99s private key and th=
e RS=E2=80=99s public key to derive a shared key that is the same for all ti=
me (until key rotation). But in that case you may as well just return a symm=
etric key directly from the AS... attached to a macaroon, say.=20

> =20
> > The easiest way to use macaroons with asymmetric crypto is to make the m=
acaroon identifier be an encrypted random HMAC key that the RS can decrypt (=
or a derived key using diffie-hellman). You can concatenate multiple encrypt=
ed keys for multiple RSes. Alternatively in a closed ecosystem you can encry=
pt the random HMAC with a key stored in a KMS (such as AWS KMS) and grant ea=
ch RS decrypt permissions for that KMS key.
> =20
> Is the =E2=80=9Crandom HMAC key that the RS can decrypt=E2=80=9D the root k=
ey used to generate the macaroon? If so, how would you prevent one targeted R=
S from using the root key and macaroon identifier to construct an arbitrary m=
acaroon for replay against another targeted RS? If not, how does the targete=
d RS use the decrypted =E2=80=9Crandom HMAC key=E2=80=9D to validate the mac=
aroon? Is there a paper on this approach?

That is the easiest way to let the RS verify the macaroon on the assumption t=
hat the RS is trusted. I=E2=80=99m not aware of an alternative for asymmetri=
c crypto when the RS is untrusted other than using the signature-based macar=
oon variant or having per-RS keys.=20

I=E2=80=99m not really a fan of purely signature-based JWT access tokens bec=
ause those tokens often contain PII and so should really be encrypted to avo=
id leaking details to the client (or anyone else if the token does leak). Th=
is came up in the discussion of the JWT-based access tokens draft, which is w=
hy I proposed https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02 for u=
se in that draft. But if you=E2=80=99re doing encryption then you=E2=80=99re=
 already down the path of having per-RS access tokens (and keys) - the compa=
ct encoding of JWE only allows a single recipient.=20

> =20
> The KMS approach is just symmetric crypto mediated through a third party (=
and has the same centralization problem as validation at the AS).
> =20
> > Clients can then later start adding caveats=E2=80=A6, while RSes still d=
on't have to make any changes=E2=80=A6.
> > DPoP only effectively prevents cross-RS replay if all RSes implement it,=
 otherwise the ones that don't are still vulnerable.
> This is because macaroons bake the proof into the =E2=80=9Cbearer=E2=80=9D=
 token (which is no longer really a bearer token) in the Authorization heade=
r, whereas DPoP puts it in a separate header.

That=E2=80=99s not the only difference. The other is that the AS does the va=
lidation. If the client appended the DPoP claims to the access token and sig=
ned the whole thing, and then the RS took that and sent it to the AS introsp=
ection endpoint to validate it, then that would have the same advantage of n=
ot requiring any changes at the RS.=20

But if you do this then there=E2=80=99s no longer any reason to use public k=
ey signatures because the client and AS may as well agree a shared secret. (=
The AS can always impersonate a client anyway). At which point we=E2=80=99re=
 basically back using macaroons.=20

> draft-ietf-oauth-signed-http-request is another way to do this that doesn=E2=
=80=99t rely on macaroons.
> =20
> > Your previous point was that they require "non-trivial work to use ... a=
nd require developers to learn a new token format".
> By =E2=80=9Cnon-trivial work to use=E2=80=9D I was referring to work requi=
red from the working group, that I did not feel was being acknowledged.

Do you believe it=E2=80=99s a disproportionate amount of work compared to an=
y other draft the WG works on?

> Looking back over the thread, I think my objection stems from you referrin=
g to macaroons as an =E2=80=9Caccess token format=E2=80=9D when they=E2=80=99=
re really an applied cryptography pattern. The =E2=80=9Cformat=E2=80=9D part=
 would need to be defined by the working group. For what it=E2=80=99s worth,=
 I think it=E2=80=99d be interesting to explore if/how the pattern could be a=
pplied to the JWT format, or what tweaks would be necessary to make it work.=
 If we could describe a way to create macaroons that reuse the existing work=
 on JWTs, that would be pretty cool.

There are existing interoperable macaroon libraries right now that define a c=
ommon format [*]. Unless there was a compelling reason not to, I=E2=80=99d h=
ope we=E2=80=99d just standardize that.=20

[*] Actually they=E2=80=99ve gone through a couple of iterations. I believe t=
he =E2=80=9Clibmacaroons V2 binary=E2=80=9D format is what most now use.=20

> =20
> > That burden is significantly reduced when developers can just add a depe=
ndency and call a one-liner to add a caveat.
> Libraries can certainly reduce the amount of work required by developers (=
and here I mean client developers, RS developers, AS developers, and OAuth c=
lient and server library developers), but come with their own concerns (e.g.=
, platform availability, licensing, maintenance and reliability, etc.). It b=
ecomes one more dependency that developers have to consider.

I=E2=80=99m not really sure what your point is here. *Any* new addition to O=
Auth has to be implemented. Either that=E2=80=99s done with a library or you=
 write your own.=20

=E2=80=94 Neil=

--Apple-Mail-CDC380CE-6801-471C-B895-52C1FA078B46
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr">=EF=BB=BF<meta http-equiv=3D=
"content-type" content=3D"text/html; charset=3Dutf-8"><div dir=3D"ltr"><meta=
 http-equiv=3D"content-type" content=3D"text/html; charset=3Dutf-8"><div dir=
=3D"ltr"><meta http-equiv=3D"content-type" content=3D"text/html; charset=3Du=
tf-8"><div dir=3D"ltr">On 27 Nov 2019, at 20:30, Richard Backman, Annabelle &=
lt;richanna@amazon.com&gt; wrote:</div><div dir=3D"ltr"><blockquote type=3D"=
cite"><br></blockquote></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=
=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"Apple Color Emoji";
	panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle21
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1501194223;
	mso-list-type:hybrid;
	mso-list-template-ids:-2073949824 1725185614 67698691 67698693 6769=
8689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;
	mso-fareast-font-family:"Times New Roman";
	mso-bidi-font-family:Calibri;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:2079132414;
	mso-list-template-ids:-771604216;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level2
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level3
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level4
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level5
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level6
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level7
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level8
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
@list l1:level9
	{mso-level-number-format:bullet;
	mso-level-text:=EF=82=B7;
	mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;
	mso-ansi-font-size:10.0pt;
	font-family:Symbol;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1">
<p class=3D"MsoNormal">&gt; That is true, but is IMO more of a hindrance tha=
n an advantage for a PoP scheme. The very fact that the signature is valid a=
t every RS is why you need additional measures to prevent cross-RS token reu=
se.</p></div></div></blockquote><div><br></div><blockquote type=3D"cite"><di=
v dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"> The other m=
ethods you mention
 require their own additional measures in the form of key exchanges/handshak=
es. And you still need to prove possession of that shared key somehow. </p><=
/div></div></blockquote><div><br></div><div>This is true. The difference bei=
ng that the derived key can then be reused for many requests. Because the ke=
y derivation is cryptographically tied to this context the RS can=E2=80=99t r=
eplay these symmetric tokens anywhere else.&nbsp;</div><div><br></div><block=
quote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D=
"MsoNormal">In some cases, =E2=80=9Cderive a shared key and encrypt this blo=
b=E2=80=9D is easier; in some cases =E2=80=9Csign this blob declaring
 your audience=E2=80=9D is easier.</p></div></div></blockquote><div><br></di=
v><div>The ECDH scheme does challenge-response to ensure freshness. This was=
 designed to match the anti-replay measures in the DPoP draft but without re=
quiring the server store any state. If you don=E2=80=99t need replay protect=
ion (if TLS is enough) then you can indeed just sign the audience, or for EC=
DH you can do completely static ECDH between the client=E2=80=99s private ke=
y and the RS=E2=80=99s public key to derive a shared key that is the same fo=
r all time (until key rotation). But in that case you may as well just retur=
n a symmetric key directly from the AS... attached to a macaroon, say.&nbsp;=
</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><div class=3D"WordSecti=
on1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; The easiest way to use macaroons with asymmetric=
 crypto is to make the macaroon identifier be an encrypted random HMAC key t=
hat the RS can decrypt (or a derived key using diffie-hellman). You can conc=
atenate multiple encrypted keys for
 multiple RSes. Alternatively in a closed ecosystem you can encrypt the rand=
om HMAC with a key stored in a KMS (such as AWS KMS) and grant each RS decry=
pt permissions for that KMS key.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Is the =E2=80=9Crandom HMAC key that the RS can decry=
pt=E2=80=9D the root key used to generate the macaroon? If so, how would you=
 prevent one targeted RS from using the root key and macaroon identifier to c=
onstruct an arbitrary macaroon for replay against
 another targeted RS? If not, how does the targeted RS use the decrypted =E2=
=80=9Crandom HMAC key=E2=80=9D to validate the macaroon? Is there a paper on=
 this approach?</p></div></div></blockquote><div><br></div><div>That is the e=
asiest way to let the RS verify the macaroon on the assumption that the RS i=
s trusted. I=E2=80=99m not aware of an alternative for asymmetric crypto whe=
n the RS is untrusted other than using the signature-based macaroon variant o=
r having per-RS keys.&nbsp;</div><div><br></div><div>I=E2=80=99m not really a=
 fan of purely signature-based JWT access tokens because those tokens often c=
ontain PII and so should really be encrypted to avoid leaking details to the=
 client (or anyone else if the token does leak). This came up in the discuss=
ion of the JWT-based access tokens draft, which is why I proposed&nbsp;<a hr=
ef=3D"https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02">https://too=
ls.ietf.org/html/draft-madden-jose-ecdh-1pu-02</a>&nbsp;for use in that draf=
t. But if you=E2=80=99re doing encryption then you=E2=80=99re already down t=
he path of having per-RS access tokens (and keys) - the compact encoding of J=
WE only allows a single recipient.&nbsp;</div><div><br></div><blockquote typ=
e=3D"cite"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNorma=
l"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The KMS approach is just symmetric crypto mediated th=
rough a third party (and has the same centralization problem as validation a=
t the AS).</p></div></div></blockquote><blockquote type=3D"cite"><div dir=3D=
"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal"><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; Clients can then later start adding caveats=E2=80=
=A6, while RSes still don't have to make any changes=E2=80=A6.<o:p></o:p></p=
>
<p class=3D"MsoNormal">&gt; DPoP only effectively prevents cross-RS replay i=
f all RSes implement it, otherwise the ones that don't are still vulnerable.=
<o:p></o:p></p>
<p class=3D"MsoNormal">This is because macaroons bake the proof into the =E2=
=80=9Cbearer=E2=80=9D token (which is no longer really a bearer token) in th=
e Authorization header, whereas DPoP puts it in a separate header. </p></div=
></div></blockquote><div dir=3D"ltr"><br></div><div dir=3D"ltr">That=E2=80=99=
s not the only difference. The other is that the AS does the validation. If t=
he client appended the DPoP claims to the access token and signed the whole t=
hing, and then the RS took that and sent it to the AS introspection endpoint=
 to validate it, then that would have the same advantage of not requiring an=
y changes at the RS.&nbsp;</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">=
But if you do this then there=E2=80=99s no longer any reason to use public k=
ey signatures because the client and AS may as well agree a shared secret. (=
The AS can always impersonate a client anyway). At which point we=E2=80=99re=
 basically back using macaroons.&nbsp;</div><br><blockquote type=3D"cite"><d=
iv dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal">draft-ietf=
-oauth-signed-http-request is another way to do
 this that doesn=E2=80=99t rely on macaroons.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&gt; Your previous point was that they require "non-t=
rivial work to use ...&nbsp;and require developers to learn a new token form=
at".<o:p></o:p></p>
<p class=3D"MsoNormal">By =E2=80=9Cnon-trivial work to use=E2=80=9D I was re=
ferring to work required from the working group, that I did not feel was bei=
ng acknowledged. </p></div></div></blockquote><div dir=3D"ltr"><br></div><di=
v dir=3D"ltr">Do you believe it=E2=80=99s a disproportionate amount of work c=
ompared to any other draft the WG works on?</div><br><blockquote type=3D"cit=
e"><div dir=3D"ltr"><div class=3D"WordSection1"><p class=3D"MsoNormal">Looki=
ng back over the thread, I think my objection stems from you referring to ma=
caroons as an =E2=80=9C<span style=3D"color:black">access
 token format=E2=80=9D when they=E2=80=99re really an applied cryptography p=
attern. The =E2=80=9Cformat=E2=80=9D part would need to be defined by the wo=
rking group. For what it=E2=80=99s worth, I think it=E2=80=99d be interestin=
g to explore if/how the pattern could be applied to the JWT format, or what t=
weaks
 would be necessary to make it work. If we could describe a way to create ma=
caroons that reuse the existing work on JWTs, that would be pretty cool.</sp=
an></p></div></div></blockquote><div dir=3D"ltr"><br></div><div dir=3D"ltr">=
There are existing interoperable macaroon libraries right now that define a c=
ommon format [*]. Unless there was a compelling reason not to, I=E2=80=99d h=
ope we=E2=80=99d just standardize that.&nbsp;</div><div dir=3D"ltr"><br></di=
v><div dir=3D"ltr">[*] Actually they=E2=80=99ve gone through a couple of ite=
rations. I believe the =E2=80=9Clibmacaroons V2 binary=E2=80=9D format is wh=
at most now use.&nbsp;</div><br><blockquote type=3D"cite"><div dir=3D"ltr"><=
div class=3D"WordSection1"><p class=3D"MsoNormal"><span style=3D"color:black=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:black">&gt; </span>That burden i=
s significantly reduced when developers can just add a dependency and call a=
 one-liner to add a caveat.<o:p></o:p></p>
<p class=3D"MsoNormal">Libraries can certainly reduce the amount of work req=
uired by developers (and here I mean client developers, RS developers, AS de=
velopers, and OAuth client and server library developers), but come with the=
ir own concerns (e.g., platform
 availability, licensing, maintenance and reliability, etc.). It becomes one=
 more dependency that developers have to consider.</p><div><div>
</div>
</div>
</div>


</div></blockquote><br></div><div dir=3D"ltr">I=E2=80=99m not really sure wh=
at your point is here. *Any* new addition to OAuth has to be implemented. Ei=
ther that=E2=80=99s done with a library or you write your own.&nbsp;</div><d=
iv dir=3D"ltr"><br></div><div dir=3D"ltr">=E2=80=94 Neil</div></div></div></=
body></html>=

--Apple-Mail-CDC380CE-6801-471C-B895-52C1FA078B46--


From jorge@automattic.com  Wed Nov 27 06:53:45 2019
Return-Path: <jorge@automattic.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44F86120964 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 06:53:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.3
X-Spam-Level: 
X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=automattic.com header.b=sFkbZuV5; dkim=pass (1024-bit key) header.d=automattic.com header.b=sFkbZuV5
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UwvzRWANA6W8 for <oauth@ietfa.amsl.com>; Wed, 27 Nov 2019 06:53:43 -0800 (PST)
Received: from smtp1.lax.automattic.com (mail.automattic.com [192.0.64.46]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3834D120926 for <oauth@ietf.org>; Wed, 27 Nov 2019 06:53:43 -0800 (PST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp1.lax.automattic.com (Postfix) with ESMTP id 036D718E1315 for <oauth@ietf.org>; Wed, 27 Nov 2019 14:53:43 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at wordpress.com
Received: from smtp1.lax.automattic.com ([127.0.0.1]) by localhost (smtp1.lax.automattic.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jjri-LHzmrde for <oauth@ietf.org>; Wed, 27 Nov 2019 14:53:37 +0000 (UTC)
Received: from smtp-gw2.automattic.com (smtp-gw2.automattic.com [192.0.65.221]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp1.lax.automattic.com (Postfix) with ESMTPS id E716E18E140E for <oauth@ietf.org>; Wed, 27 Nov 2019 14:53:37 +0000 (UTC)
Received: from smtp-gw2.automattic.com (localhost.localdomain [127.0.0.1]) by smtp-gw2.automattic.com (Postfix) with ESMTP id D2594204FA for <oauth@ietf.org>; Wed, 27 Nov 2019 14:53:37 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=automattic.com; s=my5; t=1574866417; bh=L9bZkdOhskIZZbwvrZzfMjjAs848mfL8sNdkEfK1fR0=; h=From:Subject:Date:To:From; b=sFkbZuV5lHNa4stIUiEi3Mnf9ygYuWe8pkbLpLkjBtcBEvKugr8TbwaGteEX1ECGT tINd5BlEHFhVt+0szGR8QZbADbYGLugmn3HvXgiUTSziYBRyiXEm4RQq1OYb9I1Ux7 EKyujav5cEi3cf/dw5fGc6tGXyO9GRUJY18ahJzw=
Received: from mail-wr1-f72.google.com (mail-wr1-f72.google.com [209.85.221.72]) by smtp-gw2.automattic.com (Postfix) with ESMTP id 7EE492044E for <oauth@ietf.org>; Wed, 27 Nov 2019 14:53:37 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=automattic.com; s=my5; t=1574866417; bh=L9bZkdOhskIZZbwvrZzfMjjAs848mfL8sNdkEfK1fR0=; h=From:Subject:Date:To:From; b=sFkbZuV5lHNa4stIUiEi3Mnf9ygYuWe8pkbLpLkjBtcBEvKugr8TbwaGteEX1ECGT tINd5BlEHFhVt+0szGR8QZbADbYGLugmn3HvXgiUTSziYBRyiXEm4RQq1OYb9I1Ux7 EKyujav5cEi3cf/dw5fGc6tGXyO9GRUJY18ahJzw=
Received: by mail-wr1-f72.google.com with SMTP id d8so8333148wrq.12 for <oauth@ietf.org>; Wed, 27 Nov 2019 06:53:37 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=kucHtLxwyG8JlYZXJtSQqyJBaTiLb2JH8qaUW3nwQ0c=; b=d2Km2Ze+w8CnYC6BxbrM7AUFCUuWQ4XgN798iz/DEEJm68PMUU70RaBmUlm1+lIU4K tp7ZmLqzTcABHjtpthU52T86s7AmyU1J5wvOw+qAUEqzUKfKK01Vpee8hvny2jxow5N+ SmegoRVVfXUMihDRkyARhbR8SpZW98xCcMSxTiL6tBm3P/GAnANdKRTHwkXtpt+pDgA6 KfLkkHCRbH+BiMRr8Z/ZjisfQKzqguM9vc18FQ1HB/BWr3WRwQ0hDd/VuMzT2xDAAONk vyUKDrvMxwkQHNe1dh9lDLxaRD5+VbcHQWcZaj0WMdZW+M0OUCx9FAQf33H/IxbmRss0 KGTA==
X-Gm-Message-State: APjAAAW9+D0MTh2mJHedyVFDwuapXzrOcEMh1Sgm0pvja2/Gk+JA5odV +JjbpIP36c7QgD24cYc6SqG0jwzfkRPuo2m/+nvUwuNMOjwLpWClAsQ+vyIuJPKVxHNxNo61jZt ziQKUVFre9Ej6CvsikNhNxQ==
X-Received: by 2002:adf:ec8f:: with SMTP id z15mr25708712wrn.128.1574866416281;  Wed, 27 Nov 2019 06:53:36 -0800 (PST)
X-Google-Smtp-Source: APXvYqzQBfPAlgGBeFPIZMXWK2Kdk8ufC6Lg9PR8l5aGjN/sswlALCkqqjJA4apeDxruxT93mDNfiw==
X-Received: by 2002:adf:ec8f:: with SMTP id z15mr25708692wrn.128.1574866415938;  Wed, 27 Nov 2019 06:53:35 -0800 (PST)
Received: from [192.168.1.12] (36.red-193-153-135.dynamicip.rima-tde.net. [193.153.135.36]) by smtp.gmail.com with ESMTPSA id a2sm20111979wrt.79.2019.11.27.06.53.34 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 27 Nov 2019 06:53:35 -0800 (PST)
From: Jorge Bernal <jorge@automattic.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Message-Id: <3A49525F-7E00-477E-9090-F247785B9E97@automattic.com>
Date: Wed, 27 Nov 2019 15:53:32 +0100
To: oauth@ietf.org
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/-HIQYdle2wmL5_DoPh5c-245-mE>
Subject: [OAUTH-WG] draft-ietf-oauth-security-topics: Migration strategies for deprecated password grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Nov 2019 09:33:26 -0000

Hi all,

We are currently discussing[1] an implementation of oAuth for WordPress =
and
what this would mean for our mobile apps[2].

It was noted that the new recommendation will completely discourage the =
use of
the password grant. While I agree in principle that this is a good thing
overall, we will have to find a migration path.=20

Going through meeting minutes[3] I noticed this was already in your =
radar, but
I haven=E2=80=99t been able to find any further mention:

> Need to provide alternatives to lots of folks using this grant

As I mention on our discussion, our reality is that we have thousands of
existing users for whom we only have passwords, and we would need a =
migration
path to obtain tokens for those users. Without the password grant, I =
don=E2=80=99t see
a clear way to do that without asking users to log in again.

Besides that, I expect a transitional period where we will also need to =
keep
the user=E2=80=99s password to be able to interact with legacy APIs that =
don=E2=80=99t support
the use of a token yet. Again, I don't see a way forward that doesn't =
involve
asking users to log in twice.

I would appreciate any further insights or guidelines about migrating =
existing
credentials and supporting legacy APIs while we transition.

Thanks,
  Koke

[1] https://github.com/WP-API/authentication/issues/1
[2] https://apps.wordpress.com/mobile/
[3] =
https://tools.ietf.org/wg/oauth/minutes?item=3Dminutes-104-oauth-00.html

--
Jorge Bernal | jbernal@gmail.com | jorge@automattic.com
Mobile Engineer @ Automattic | http://automattic.com/

http://koke.me/ | http://twitter.com/koke




--
Jorge Bernal | jbernal@gmail.com | jorge@automattic.com
Mobile Engineer @ Automattic | http://automattic.com/

http://koke.me/ | http://twitter.com/koke


From nobody Thu Nov 28 02:40:47 2019
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2304E120133 for <oauth@ietfa.amsl.com>; Thu, 28 Nov 2019 02:40:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3YlCyvP1UXXA for <oauth@ietfa.amsl.com>; Thu, 28 Nov 2019 02:40:44 -0800 (PST)
Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52C38120132 for <oauth@ietf.org>; Thu, 28 Nov 2019 02:40:44 -0800 (PST)
Received: by mail-wm1-x331.google.com with SMTP id n5so11122077wmc.0 for <oauth@ietf.org>; Thu, 28 Nov 2019 02:40:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=mxUs7I27EurhXljqMSs3vqpkwpsnKAW54zCmzThEZGA=; b=oGlQW+wfr+9eMdPWdvIYSFz1OWU9DkGRSkUftvTDjzWrbWIzcs/m5Oqa5EptUen6sY 71wmGigeQPyt5lyQkFeGRnlbOD4TvIHcprV0js2eG4jKBcEXC4C73QzR8spuu6f3Luto eTkzTgrHkuG3kwMMd3LwN6XmOh0RHVQiMr9XREZYVwM5j6+8lOBlZmaPz8jWfa7ruPBK ND8TJ3YiGTxhHXQVsFoJ0mluIAheX+oZqMzwLIp18mNz7sKv+7+yBuEW2qFybBccsVxV mbHeE7Za8Jm+vHGfDGJQ5ObRUJzxFPB73UwIpHgCfwPzdJLvm0d8RhECm3Qy65+rVj+p zCpA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=mxUs7I27EurhXljqMSs3vqpkwpsnKAW54zCmzThEZGA=; b=uliwoB62PecARm/rPBmkZR+Od4iYLsN1jmngyEUzoY0Z5dOC9vJTf5NxaApQ1G+IDD NEjldgOaKh/O2Ao4Jas9CDQujeTfbbkgLBqaaZ3lppB8KvCDZ7/m8FjQhLDTnrTT+WZn egoRvJHJCFefGVQ85Y6zyFhHWn5N4JXggDHmYmueYGbnwYLWOr9WKEV3jagy3CvafTOw K9w0Qf9xMCjycjTVhkz2ZplcdygPkAzpQySGxu1mh0rnwEEU0WORyFZ8nk+0nkt07q5R JgF3oZpo0XleNT/XXOO9XPhoIUXjzVyALNqugyK4sIsU2XvFaoBaZumq7F9RmT0QduqJ oGig==
X-Gm-Message-State: APjAAAUPGNiuPerR1WVB4m9Xf/lhi2qbhWB9FWZxpPa6+vtT0N5fy78Q EtiTkicW/9bYiiMTkB+ti3cOgQ==
X-Google-Smtp-Source: APXvYqwqt9pyijHo459wdmg3PRMw1z7lduDe7Dz4H1mqwAbLmui1oELbNXFFMnPkMbrAiVtC3LvG8Q==
X-Received: by 2002:a05:600c:210b:: with SMTP id u11mr8982151wml.170.1574937642172;  Thu, 28 Nov 2019 02:40:42 -0800 (PST)
Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id l10sm24863511wrg.90.2019.11.28.02.40.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 28 Nov 2019 02:40:41 -0800 (PST)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Message-Id: <33429332-8648-4D94-AD79-2824ECC39A8E@lodderstedt.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_0A971E5D-9D36-4FC5-951E-94BF0EFA7462"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Thu, 28 Nov 2019 11:40:27 +0100
In-Reply-To: <13df62f4-e53f-6a35-443d-2a88db741e55@sec.uni-stuttgart.de>
Cc: "Peck, Michael A" <mpeck@mitre.org>, Benjamin Kaduk <kaduk@mit.edu>, "oauth@ietf.org" <oauth@ietf.org>
To: Pedram Hosseyni <pedram.hosseyni@sec.uni-stuttgart.de>
References: <fc5c22c1-7459-0337-4a27-5f666bd271ad@sec.uni-stuttgart.de> <20191126155116.GW32847@mit.edu> <2ad7e9d7-ac6f-aef2-afa8-36ce4b30fac2@sec.uni-stuttgart.de> <31267_1574793090_5DDD6F81_31267_173_1_20191126183109.GZ32847@mit.edu> <A6A5B0CC-FC91-48D9-A7EC-79163EF08F55@mitre.org> <13df62f4-e53f-6a35-443d-2a88db741e55@sec.uni-stuttgart.de>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/x1nvjqGUHw66VjSKWGvm45dalNE>
Subject: Re: [OAUTH-WG] [EXT] Re: WGLC review of draft-ietf-oauth-security-topics-13
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Nov 2019 10:40:47 -0000

--Apple-Mail=_0A971E5D-9D36-4FC5-951E-94BF0EFA7462
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi,

> On 27. Nov 2019, at 15:04, Pedram Hosseyni =
<pedram.hosseyni@sec.uni-stuttgart.de> wrote:
>=20
> Hi Mike,
>=20
> > Wouldn't most RSs only trust access tokens from a single AS anyways?
>=20
> At the last OSW, there was broad agreement that this is typically the =
case. Otherwise, the mitigation that we suggested in the paper would not =
prevent the attack.
>=20
> > Would it be reasonable for the document to recommend that clients =
designate a specific AS for each RS that the client accesses (and not =
allow the user to select a different AS)? Would that help prevent the =
attack?
>=20
> In principle, this should prevent the attack. However, this would =
require the client to identify the correct AS for each RS, which might =
not always be possible (e.g., in more dynamic settings) and more =
complicated than just delegating this decision to the RS.
>=20
> Any opinions (also from other OAuth WG members) on this?

I think one can observe all possible combinations of AS and RS in the =
wild.=20

In the traditional OAuth setup, there is a 1:1 relationship between RS =
and AS.=20

There are also deployments where a single RS works with multiple ASs, =
e.g. because those ASs represent different portions of the overall user =
base. In this case, the RS determines the base set of ASs and the user =
selects the AS to be used from that base set.=20

As far as I understand, in UMA any AS can provide access tokens to any =
RS as long as the relationship had been set up by the user beforehand.  =20=


best,
Torsten.=20

>=20
> Best regards,
> Pedram
>=20
>=20
> On 26.11.19 21:08, Peck, Michael A wrote:
>> Hi Pedram,
>>=20
>> I understand why a client would need to allow use of multiple =
authorization servers if the client needs to access various resource =
servers each of which may trust different ASs (e.g. the client supports =
accessing resources at multiple cloud storage services).
>>=20
>> However, how common is the case that a client would need to allow =
selecting from multiple authorization servers for accessing a particular =
resource server?
>>=20
>> Would it be reasonable for the document to recommend that clients =
designate a specific AS for each RS that the client accesses (and not =
allow the user to select a different AS)? Would that help prevent the =
attack? Wouldn't most RSs only trust access tokens from a single AS =
anyways?
>>=20
>> Thanks,
>> Mike
>>=20
>> =EF=BB=BFOn 11/26/19, 1:32 PM, "OAuth on behalf of Benjamin Kaduk" =
<oauth-bounces@ietf.org on behalf of kaduk@mit.edu> wrote:
>>=20
>>     Hi Pedram,
>>          Thanks for confirming that the scenario is as I was trying =
to understand
>>     it.  I don't think it's universal that all clients will give =
transitive
>>     access from the user to the accessed resource, though it's =
certainly
>>     common; the lack of exposition on that point is what I had been =
stumbling
>>     on.
>>          -Ben
>>          On Tue, Nov 26, 2019 at 06:33:04PM +0100, Pedram Hosseyni =
wrote:
>>     > Hi Ben,
>>     >
>>     > The attacker uses the (honest) client shown in Figure 4 as a =
regular
>>     > user. For example, the client might provide access to a cloud =
storage
>>     > via its website, i.e., by using the clients' website, a user =
can access
>>     > her files stored at the resource server.
>>     >
>>     > I'll try to clarify the attack with a simplified example.
>>     >
>>     > Let's assume that the client supports two authorization servers
>>     > AS_honest and AS_attacker. Intuitively, if the attacker phishes =
an
>>     > access token created by AS_honest for an honest user (Alice), =
one would
>>     > expect that sender-constraining the access token (e.g., via =
mTLS)
>>     > prevents the attacker from using this access token.
>>     >
>>     > The overall goal of the attacker is to use the =
sender-constrained access
>>     > token (which he cannot use directly at the resource server) to =
access
>>     > Alices cloud storage.
>>     >
>>     > The attack works as follows:
>>     >
>>     > First, the attacker visits the website of the client. Usually, =
the
>>     > attacker would now choose an AS, and after successful =
authentication,
>>     > access his files stored in the cloud. When selecting the AS, =
the
>>     > attacker chooses AS_attacker. In Step 5 of Figure 4, =
AS_attacker now
>>     > provides the phished access token. As this token is bound to =
this
>>     > client, the client can use it at the resource server for =
getting access
>>     > to the cloud storage of Alice. As the attacker is using the =
client
>>     > (through the clients' website), he now gets access to these =
files
>>     > (stored at the RS).
>>     >
>>     > Please let me know if you have any other questions.
>>     >
>>     > Best regards,
>>     > Pedram
>>     >
>>     >
>>     > On 26.11.19 16:51, Benjamin Kaduk wrote:
>>     > > Hi Pedram,
>>     > >
>>     > > On Thu, Nov 21, 2019 at 02:50:52PM +0100, Pedram Hosseyni =
wrote:
>>     > >> Also, for this or the next version of this document, the =
Cuckoo's Token
>>     > >> attack (see Section IV-A of http://arxiv.org/abs/1901.11520/ =
), should
>>     > >> be addressed. We also discussed this issue extensively at =
the last OSW
>>     > >> in Stuttgart.
>>     > > I took a look at the paper, and I'm not sure I'm properly =
understanding the
>>     > > "Cuckoo's Token" attack.  Looking at Figure 4 of the paper to =
have
>>     > > something concrete to refer to, I assume that the client, as =
a white box,
>>     > > is presumed to be honest.  Since the access token is bound to =
the client, I
>>     > > assume that the attacker has to return the phished access =
token to the same
>>     > > client that originally (honestly) got it, as otherwise the =
token will not
>>     > > be usable at the RS.  The paper concludes that in step 6, the =
client gets
>>     > > access to the honest resource owner's resources, and =
furthermore that the
>>     > > attacker has access to those resources through the client.  =
It's that last
>>     > > part that I'm not sure I understand -- if the client is =
honest, why would
>>     > > it return resource information to the attacker?  The best I =
can come up
>>     > > with is that there's some sense of a "session" between the =
user and client,
>>     > > such that the client links its resource accesses with the =
"session" on
>>     > > behalf of which the access occurs, and is willing to return =
such
>>     > > information back to the user only on the "linked session".  =
(The
>>     > > countermeasure makes sense and is a good practice, of =
course.)
>>     > >
>>     > > Thanks,
>>     > >
>>     > > Ben
>>     >
>>     > --
>>     > Pedram Hosseyni, M.Sc.
>>     > Room V38 2.438
>>     > Institute of Information Security - SEC
>>     > Universit=C3=A4t Stuttgart
>>     > Universit=C3=A4tsstra=C3=9Fe 38
>>     > D-70569 Stuttgart
>>     > Germany
>>     > Phone: +49 711 685 88454
>>     > https://sec.uni-stuttgart.de
>>     >
>>          _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org
>>     https://www.ietf.org/mailman/listinfo/oauth
>>    =20
> --=20
> Pedram Hosseyni, M.Sc.
> Room V38 2.438
> Institute of Information Security - SEC
> Universit=C3=A4t Stuttgart
> Universit=C3=A4tsstra=C3=9Fe 38
> D-70569 Stuttgart
> Germany
> Phone: +49 711 685 88454
> https://sec.uni-stuttgart.de
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_0A971E5D-9D36-4FC5-951E-94BF0EFA7462
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_0A971E5D-9D36-4FC5-951E-94BF0EFA7462--


From nobody Fri Nov 29 01:37:01 2019
Return-Path: <taka@authlete.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB418120888 for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 01:36:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level: 
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=authlete-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5LuJ0HW5YDr7 for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 01:36:57 -0800 (PST)
Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8233C120817 for <oauth@ietf.org>; Fri, 29 Nov 2019 01:36:57 -0800 (PST)
Received: by mail-wm1-x335.google.com with SMTP id l1so13460844wme.2 for <oauth@ietf.org>; Fri, 29 Nov 2019 01:36:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=authlete-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=veBdqcYt/w8nujK+QickquITBjcePNNz9rpmiPte2Hk=; b=a3+H/juh4n9Bp0wtQLhEmvY3QKWvbhGWx3iFhG1T+ZEVVA+Uxj+bmp+JImUllcIwIx KV2YRDHfY9xkR8QprpkKERdZJbySvJ1LrqGW72JNUCCK6fHo0eJN4fuA4v0n3ypxaCrZ SepnV/qZmpLnZlFxTCoOk4gm33nmC4nO+XnFbCOUpJ0s7pk/LDlxmNdckMl+NeoRQiEE qZK3eps9zWvUsMeZmIDEm8Nyp53mkOsPo+x0Ktw5L/eJItvoAbenLiMn31I9PA06s4Dk O6pABrBtFSg/dVc7OTOuQ0zNQZAt3OsUxgvnsA2DRKeMCltctZYGfxfb7BPaI+Oz9eLH 88Pw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=veBdqcYt/w8nujK+QickquITBjcePNNz9rpmiPte2Hk=; b=T+AOOnPy+dtlNC4mghRT/U4SSFSN58czBxvFPNsM1qlMSdO8vNEexAplMr113ldwYH 6R+6+XfN6R4f3qporu5+naIPKY4OlbsqaPpMVWIUvEGtc7qa4iTWo+R449JKwn7ZqZJA IwyxiD44GWt1RSpUjbK9H8ARvoTdzFJk2xcY9jELy1cTAkugYdID/DSCJ37MDLMrL0oE ydaXsmJIcm/bokblvtO1qcie61zovGEFScvsH+gBFX47pEyPprF2C75+Ik8SaG34NxbU TdmfA1OwAR1nKE73voXAvEqbMXtPi/hoUNjpGIC87sce6k8lubOFDXzgWaCKTzh6Vj/z vM8Q==
X-Gm-Message-State: APjAAAVfQP6qXFVEeVeleXhM6hQAE+KhJosf8BH6NZfmc5NySKi2XHqH pM6hNywoAs+SaZWGOjB4j7O5ahF3VRCJAz8NZki/CTeIyko=
X-Google-Smtp-Source: APXvYqw3vuEpFkh7kToklfTNkdbjwGHWJROdItrqx8uOIegehjUVjaF/4VFOGZvt1J9WM/qu9kC0L1B137B40roWVv0=
X-Received: by 2002:a1c:a141:: with SMTP id k62mr2336329wme.98.1575020215207;  Fri, 29 Nov 2019 01:36:55 -0800 (PST)
MIME-Version: 1.0
References: <CALAqi_-Ku6Hh3DQDXGR+83Q8jofMzVBcW=7GUnFFzsoG+Ka_1g@mail.gmail.com> <CA+k3eCRRW9oLfdmBXsccc_BVd-Ne8qOR5A4HftpSMkMt2JZLRg@mail.gmail.com> <CALAqi_9s+jXDwfb-HK+sguijR6=R6cPgJMwXhSkU52YQcEkX2A@mail.gmail.com> <C73AECC4-5BD0-4939-A51A-8FF57DDE18D6@lodderstedt.net>
In-Reply-To: <C73AECC4-5BD0-4939-A51A-8FF57DDE18D6@lodderstedt.net>
From: Takahiko Kawasaki <taka@authlete.com>
Date: Fri, 29 Nov 2019 18:36:43 +0900
Message-ID: <CAHdPCmPAAZjWUc9u2Z6=smYzmT+dyRxTCKy7Cg=MieUQ+rFaxQ@mail.gmail.com>
To: oauth <oauth@ietf.org>
Cc: Filip Skokan <panva.ip@gmail.com>, Nat Sakimura <nat.sakimura@oidf.org>,  Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: multipart/alternative; boundary="000000000000715193059878f835"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/b1syJ3ywCNZCkVC02uwuRkmLBG4>
Subject: Re: [OAUTH-WG] JWT Secured Authorization Request (JAR) vs OIDC request object
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Nov 2019 09:37:00 -0000

--000000000000715193059878f835
Content-Type: text/plain; charset="UTF-8"

I'm sorry for this late response, but I'm also afraid that the requirement
"the authorization server supporting this specification MUST only use the
parameters included in the request object." in Section 6 of the draft 20
<https://tools.ietf.org/html/draft-ietf-oauth-jwsreq-20> is problematic.

What I'd like to point out in addition to Filip's concerns is "error
handling before the request object is parsed successfully".


   1. If it is not allowed to refer to client_id outside the request
   object, errors that may occur before the request object is parsed
   successfully cannot be reported to the redirect URI (which is either
   explicitly specified by redirect_uri or the default redirect URI for the
   client) because it is impossible to check if the redirect URI has been
   registered for the client.
   2. If it is not allowed to refer to response_type outside the request
   object, it is impossible to determine the default position for response
   parameters (the query part and the fragment part) before the request object
   is parsed successfully.
   3. If it is not allowed to refer to response_mode outside the request
   object, errors that may occur before the request object is parsed
   successfully cannot be reported to the redirect URI in the way the client
   wished (query, fragment, form_post, query.jwt, fragment.jwt or
   form_post.jwt).
   4. If it is not allowed to refer to state outside the request object,
   the state cannot be included in error reporting caused by errors that
   may occur before the request object is parsed successfully.


Decent authorization server implementations try to report errors to the
redirect URI whenever possible. If it is not allowed to refer to parameters
outside the request object, the program waiting for a response at the place
pointed to by the redirect URI will never receive
error=invalid_request_object when the cause is "the request object failed
to be parsed".

I haven't found any convincing reasons yet that can justify introducing the
requirement that dares to break the backward compatibility. For me, the
following requirement in FAPI Part 2
<https://openid.net/specs/openid-financial-api-part-2-ID2.html>, 5.2.2.
<https://openid.net/specs/openid-financial-api-part-2-ID2.html#authorization-server>,
10. seems a good compromise.

shall require that all parameters are present inside the signed request
object passed in the request or request_uri parameter;



Best Regards,
Takahiko Kawasaki
Authlete, Inc.



On Thu, Aug 29, 2019 at 5:04 PM Torsten Lodderstedt <torsten@lodderstedt.net>
wrote:

>
>
> > Am 28.08.2019 um 23:23 schrieb Filip Skokan <panva.ip@gmail.com>:
> >
> > - allows merging request object and regular parameters with request
> object taking precedence since it is a very useful feature when having
> pre-signed request object that's not one time use and clients using it wish
> to vary state/nonce per-request.
>
> +1_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--000000000000715193059878f835
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I&#39;m sorry for this late response, but I&#39;m also afr=
aid that the requirement &quot;the authorization server supporting this spe=
cification MUST only use the parameters included in the request object.&quo=
t; in Section 6 of the <a href=3D"https://tools.ietf.org/html/draft-ietf-oa=
uth-jwsreq-20">draft 20</a> is problematic.<div><br></div><div>What I&#39;d=
 like to point out in addition to Filip&#39;s concerns is &quot;error handl=
ing before the request object is parsed successfully&quot;.</div><div><br><=
/div><div><ol><li>If it is not allowed to refer to <font face=3D"monospace"=
>client_id</font> outside the request object, errors that may occur before =
the request object is parsed successfully cannot be reported to the redirec=
t URI (which is either explicitly specified by <font face=3D"monospace">red=
irect_uri</font> or the default redirect URI for the client) because it is =
impossible to check if the redirect URI has been registered for the client.=
</li><li>If it is not allowed to refer to <font face=3D"monospace">response=
_type</font> outside the request object, it is impossible to determine the =
default position for response parameters (the query part and the fragment p=
art) before the request object is parsed successfully.</li><li>If it is not=
 allowed to refer to <font face=3D"monospace">response_mode</font> outside =
the request object, errors that may occur before the request object is pars=
ed successfully cannot be reported to the redirect URI in the way the clien=
t wished (<font face=3D"monospace">query</font>, <font face=3D"monospace">f=
ragment</font>, <font face=3D"monospace">form_post</font>, <font face=3D"mo=
nospace">query.jwt</font>, <font face=3D"monospace">fragment.jwt</font> or =
<font face=3D"monospace">form_post.jwt</font>).</li><li>If it is not allowe=
d to refer to <font face=3D"monospace">state</font> outside the request obj=
ect, the <font face=3D"monospace">state</font> cannot be included in error =
reporting caused by errors that may occur before the request object is pars=
ed successfully.</li></ol></div><div><br></div><div>Decent authorization se=
rver implementations try to report errors to the redirect URI whenever poss=
ible. If it is not allowed to refer to parameters outside the request objec=
t, the program waiting for a response at the place pointed to by the redire=
ct URI will never receive <font face=3D"monospace">error=3Dinvalid_request_=
object</font>=C2=A0when the cause is &quot;the request object failed to be =
parsed&quot;.</div><div><br></div><div>I haven&#39;t found any convincing r=
easons yet that can justify introducing the requirement that dares to break=
 the backward compatibility. For me, the following requirement in <a href=
=3D"https://openid.net/specs/openid-financial-api-part-2-ID2.html">FAPI Par=
t 2</a>, <a href=3D"https://openid.net/specs/openid-financial-api-part-2-ID=
2.html#authorization-server">5.2.2.</a>, 10. seems a good compromise.</div>=
<div><br></div><blockquote style=3D"margin:0 0 0 40px;border:none;padding:0=
px"><div>shall require that all parameters are present inside the signed re=
quest object passed in the <font face=3D"monospace">request</font> or <font=
 face=3D"monospace">request_uri</font> parameter;</div></blockquote><div><b=
r></div><div><br></div><div>Best Regards,</div><div>Takahiko Kawasaki</div>=
<div>Authlete, Inc.</div><div><br></div><div><br></div></div><br><div class=
=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Aug 29, 2019=
 at 5:04 PM Torsten Lodderstedt &lt;<a href=3D"mailto:torsten@lodderstedt.n=
et">torsten@lodderstedt.net</a>&gt; wrote:<br></div><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex"><br>
<br>
&gt; Am 28.08.2019 um 23:23 schrieb Filip Skokan &lt;<a href=3D"mailto:panv=
a.ip@gmail.com" target=3D"_blank">panva.ip@gmail.com</a>&gt;:<br>
&gt; <br>
&gt; - allows merging request object and regular parameters with request ob=
ject taking precedence since it is a very useful feature when having pre-si=
gned request object that&#39;s not one time use and clients using it wish t=
o vary state/nonce per-request.<br>
<br>
+1_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--000000000000715193059878f835--


From nobody Fri Nov 29 12:41:25 2019
Return-Path: <prvs=229e5e0e7=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 297EB120850 for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 12:41:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level: 
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A6qWhC0ruJ2p for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 12:41:20 -0800 (PST)
Received: from smtp-fw-2101.amazon.com (smtp-fw-2101.amazon.com [72.21.196.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AF59120823 for <oauth@ietf.org>; Fri, 29 Nov 2019 12:41:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1575060080; x=1606596080; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=37fq+DNMqFLQAuosYfNJ2k8IiSjnR5kTE1zMzZQJOVg=; b=XoDDo0X1G3rmxCgkQ/C+qaYWDBnDIerHvrylOOJrNtRC9V1LqSO9aj9z 0DWMLOaSpdfMZ5K6t3bIueGUNQNG5Slw7FrPLojvGxLXVQORSftx9EsQb lHFUc+sGxN9mPDk/h9zcTaIFFnrBVvvqi8AVBvUQlM5mLHx7POkHSuMPj 8=;
IronPort-SDR: LkABZtSmYEdsEjyXTsQJ9YUt2Ba+7SzBxNKdmXnDYN2jHUSBYebzUnpHxkVRvWhS6WkSoZLh9h hfZmpdU0HeuA==
X-IronPort-AV: E=Sophos;i="5.69,258,1571702400"; d="scan'208,217";a="6396592"
Received: from iad6-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-2a-e7be2041.us-west-2.amazon.com) ([10.124.125.2]) by smtp-border-fw-out-2101.iad2.amazon.com with ESMTP; 29 Nov 2019 20:41:17 +0000
Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan2.pdx.amazon.com [10.170.41.162]) by email-inbound-relay-2a-e7be2041.us-west-2.amazon.com (Postfix) with ESMTPS id 4AF02A21FF; Fri, 29 Nov 2019 20:41:17 +0000 (UTC)
Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 29 Nov 2019 20:41:16 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 29 Nov 2019 20:41:16 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 29 Nov 2019 20:41:16 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVpb9/NjuSebJ9c06bnJG1CogdFqeiGRUA
Date: Fri, 29 Nov 2019 20:41:16 +0000
Message-ID: <DB3E2D47-0023-4C8E-BC74-7DCBE177CB0C@amazon.com>
References: <E584D766-74FC-4ED2-A15D-70CEF48BAE71@forgerock.com>
In-Reply-To: <E584D766-74FC-4ED2-A15D-70CEF48BAE71@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.161.7]
Content-Type: multipart/alternative; boundary="_000_DB3E2D4700234C8EBC747DCBE177CB0Camazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/-TPgfIYdj0fV9CnWC6d9LI9O_ZQ>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Nov 2019 20:41:23 -0000

--_000_DB3E2D4700234C8EBC747DCBE177CB0Camazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_DB3E2D4700234C8EBC747DCBE177CB0Camazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <B61FE4C35AD630408CCBD5076F788736@amazon.com>
Content-Transfer-Encoding: base64
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==

--_000_DB3E2D4700234C8EBC747DCBE177CB0Camazoncom_--


From nobody Fri Nov 29 14:13:24 2019
Return-Path: <prvs=229e5e0e7=richanna@amazon.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB6001200DE for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 14:13:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.8
X-Spam-Level: 
X-Spam-Status: No, score=-11.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kZWxx-QMEkEN for <oauth@ietfa.amsl.com>; Fri, 29 Nov 2019 14:13:17 -0800 (PST)
Received: from smtp-fw-33001.amazon.com (smtp-fw-33001.amazon.com [207.171.190.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEAE8120052 for <oauth@ietf.org>; Fri, 29 Nov 2019 14:13:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1575065598; x=1606601598; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=q8uttDCgMEFpsc+J/faTCQ+fiLV0gUqZCjtlA/QXbgQ=; b=tanoqcjsiUI8BO3pjcN2ZtLJ8Pz5ZaAchRW63JP8rujfh81dxtXxF8e8 b8IVZPzbNQ4MCxcIKeOsY2tImhhg2kNYKL0JGAqHnH08YX6Gac/mL6OlT 5cF5miBk09SxgkGgks3Ambo6ljG9cXR8WjVsr1n3T1IYWx1icoioIGFxe Q=;
IronPort-SDR: K4rc97tP5OahgRA3vgpKPMpbC21nenSSVJcFDaJIjL/xhpwnvQK6WMcqAr2ySWCzylK6smueni MCwor429X2bg==
X-IronPort-AV: E=Sophos; i="5.69,258,1571702400"; d="scan'208,217"; a="12019877"
Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP; 29 Nov 2019 22:13:06 +0000
Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com (Postfix) with ESMTPS id 55213A2000; Fri, 29 Nov 2019 22:13:04 +0000 (UTC)
Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 29 Nov 2019 22:13:04 +0000
Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 29 Nov 2019 22:13:04 +0000
Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 29 Nov 2019 22:13:04 +0000
From: "Richard Backman, Annabelle" <richanna@amazon.com>
To: Neil Madden <neil.madden@forgerock.com>
CC: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
Thread-Index: AQHVpb9/NjuSebJ9c06bnJG1CogdFqeiMrqA
Date: Fri, 29 Nov 2019 22:13:04 +0000
Message-ID: <863A2C3D-FA2A-472C-B9FE-D9B3D99A5812@amazon.com>
References: <E584D766-74FC-4ED2-A15D-70CEF48BAE71@forgerock.com>
In-Reply-To: <E584D766-74FC-4ED2-A15D-70CEF48BAE71@forgerock.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/10.1d.0.190908
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.43.161.7]
Content-Type: multipart/alternative; boundary="_000_863A2C3DFA2A472CB9FED9B3D99A5812amazoncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/1U_Z5a9oOitkJrk1mECS0TSggik>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Nov 2019 22:13:21 -0000

--_000_863A2C3DFA2A472CB9FED9B3D99A5812amazoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

PiBUaGF0IGlzIHRoZSBlYXNpZXN0IHdheSB0byBsZXQgdGhlIFJTIHZlcmlmeSB0aGUgbWFjYXJv
b24gb24gdGhlIGFzc3VtcHRpb24gdGhhdCB0aGUgUlMgaXMgdHJ1c3RlZC4gSeKAmW0gbm90IGF3
YXJlIG9mIGFuIGFsdGVybmF0aXZlIGZvciBhc3ltbWV0cmljIGNyeXB0byB3aGVuIHRoZSBSUyBp
cyB1bnRydXN0ZWQgb3RoZXIgdGhhbiB1c2luZyB0aGUgc2lnbmF0dXJlLWJhc2VkIG1hY2Fyb29u
IHZhcmlhbnQgb3IgaGF2aW5nIHBlci1SUyBrZXlzLg0KDQpJdCBvY2N1cnJlZCB0byBtZSB0aGF0
IG15IHByZXZpb3VzIGV4YW1wbGUgb2YgaG93IHRvIGRvIGxheWVyaW5nIHdpdGggSldUcyB3YXMg
bmVlZGxlc3NseSBjb21wbGljYXRlZC4gWW91IGNhbiBwcmV2ZW50IHJlbW92YWwgb2YgbGF5ZXJl
ZCBjb25zdHJhaW50cyBieSBjb25zdHJhaW5pbmcgZWFjaCBpbm5lciBsYXllciB0byByZXF1aXJl
IGEgd3JhcHBlci4gQ29uc2lkZXIgYSAiZm9vYmFyIiBjbGFpbSB0aGF0IHNwZWNpZmllcyBhIHB1
YmxpYyBrZXkgYW5kIGluZGljYXRlcyB0aGF0IHRoZSB0b2tlbiBtdXN0IGJlIHByZXNlbnRlZCB3
cmFwcGVkIHdpdGhpbiBhIEpXUyBzaWduZWQgd2l0aCB0aGUgY29ycmVzcG9uZGluZyBwcml2YXRl
IGtleS4gVGhlIHdyYXBwZXIgSldTIG1heSBpbnRyb2R1Y2UgYWRkaXRpb25hbCBjb25zdHJhaW50
cywgYW5kIG1heSBvciBtYXkgbm90IHBlcm1pdCB0aGUgcmVjaXBpZW50IHRvIHByZXNlbnQgdGhl
IGFjY2VzcyB0b2tlbiB0byBvdGhlcnMsIGRlcGVuZGluZyBvbiB0aGUgdmFsdWUgb2YgdGhlICJm
b29iYXIiIGNsYWltLiBGb3IgZXhhbXBsZToNCg0KVGhlIEFTIGdlbmVyYXRlcyBhbiBhY2Nlc3Mg
dG9rZW4sIHdpdGggYSBwdWJsaWMga2V5IHJlZ2lzdGVyZWQgYnkgdGhlIGNsaWVudCBhcyB0aGUg
dmFsdWUgb2YgdGhlICJmb29iYXIiIGNsYWltLiBUaGlzIHJlZ2lzdHJhdGlvbiBjb3VsZOKAmXZl
IGhhcHBlbmVkIHZpYSBhIGRldiBjb25zb2xlLCBkeW5hbWljIGNsaWVudCByZWcuLCBvciBhcyBw
YXJ0IG9mIHRoZSB0b2tlbiByZXF1ZXN0Lg0KPGF0XzA+ID0gSldTKDxBUyBwcml2YXRlIGtleT4s
IHsNCiAgICAiaXNzIjogImFzLmV4YW1wbGUuY29tIiwNCiAgICAiY2xpZW50X2lkIjogIi4uLiIs
DQogICAgInVzZXJfaWQiOiAiLi4uIiwNCiAgICAic2NvcGUiOiAiYSBiIiwNCiAgICAiZXhwIjog
PG5vdyArIDEgaG91cj4sDQogICAgImZvb2JhciI6IDxjbGllbnQgcHVibGljIGtleT4NCn0pDQoN
ClRvIGNhbGwgcnMxLmV4YW1wbGUuY29tLCB0aGUgY2xpZW50IHdyYXBzIHRoZSB0b2tlbiBpbiBh
IEpXUyBzaWduZWQgd2l0aCB0aGUgY2xpZW504oCZcyBwcml2YXRlIGtleS4gVGhleSBmdXJ0aGVy
IHJlc3RyaWN0IHRoZSBzY29wZSBhbmQgZXhwaXJhdGlvbiB0aW1lLCBhbmQgYXV0aG9yaXplIHRo
ZSBSUyB0byB1c2UgdGhlIHRva2VuIHdpdGggb3RoZXIgUlNlcyBieSBzZXR0aW5nIHRoZSB2YWx1
ZSBvZiB0aGUgImZvb2JhciIgY2xhaW0gdG8gdGhlIFJT4oCZcyBwdWJsaWMga2V5Lg0KPGF0XzE+
ID0gSldTKDxjbGllbnQgcHJpdmF0ZSBrZXk+LCB7DQogICAgInRva2VuIjogPGF0XzA+LA0KICAg
ICJhdWQiOiAicnMxLmV4YW1wbGUuY29tIiwNCiAgICAiZXhwIjogPG5vdyArIDUgc2Vjb25kcz4s
DQogICAgInNjb3BlIjogImEgYiIsDQogICAgImZvb2JhciI6IDxSUzEgcHVibGljIGtleT4NCn0p
DQoNClRvIGNhbGwgcnMyLmV4YW1wbGUuY29tLCByczEuZXhhbXBsZS5jb20gd3JhcHMgdGhlIHRv
a2VuIGluIGEgSldTIHNpZ25lZCB3aXRoIHRoZSBSU+KAmXMgcHJpdmF0ZSBrZXkuIFRoZSBSUyBw
cm9oaWJpdHMgcnMyLmV4YW1wbGUuY29tIGZyb20gZnVydGhlciB1c2Ugb2YgdGhlIHRva2VuIGJ5
IHNldHRpbmcgdGhlICJmb29iYXIiIGNsYWltIHRvIG51bGwuDQo8YXRfMj4gPSBKV1MoPFJTMSBw
cml2YXRlIGtleT4sIHsNCiAgICAidG9rZW4iOiA8YXRfMT4sDQogICAgImF1ZCI6ICJyczIuZXhh
bXBsZS5jb20iLA0KICAgICJzY29wZSI6ICJiIiwNCiAgICAiZm9vYmFyIjogbnVsbA0KfSkNCg0K
U2ltaWxhcmx5LCB0aGUgY2xpZW50IGNhbiBjYWxsIHJzMi5leGFtcGxlLmNvbSB3aXRoIGEgdG9r
ZW4gdGhhdCBpcyByZXN0cmljdGVkIGZyb20gZnVydGhlciB1c2UuDQo8YXRfMz4gPSBKV1MoPGNs
aWVudCBwcml2YXRlIGtleT4sIHsNCiAgICAidG9rZW4iOiA8YXRfMD4sDQogICAgImF1ZCI6ICJy
czIuZXhhbXBsZS5jb20iLA0KICAgICJleHAiOiA8bm93ICsgNSBzZWNvbmRzPiwNCiAgICAic2Nv
cGUiOiAiYiIsDQogICAgImZvb2JhciI6IG51bGwNCn0pDQoNCg0KVGhpcyBwYXR0ZXJuIGFsbG93
cyBmb3IgbGF5ZXJlZCBjb25zdHJhaW50cywgbG9jYWwgaW50cm9zcGVjdGlvbiwgYW5kIGxvY2Fs
IHZhbGlkYXRpb24uIFRoZSByZXF1aXJlbWVudHMgKHRoYXQgSeKAmXZlIGlkZW50aWZpZWQpIGFy
ZSB0aGF0Og0KDQogIDEuICBUaGUgY2xpZW50IG11c3QgcmVnaXN0ZXIgYSBwdWJsaWMga2V5IHdp
dGggdGhlIEFTICh0aGlzIGNvdWxkIGJlIGRvbmUgZHVyaW5nIHRoZSB0b2tlbiByZXF1ZXN0KS4N
CiAgMi4gIFRoZSBBUyBtdXN0IGtub3cgd2hldGhlciBvciBub3QgdG8gZ2l2ZSB0aGUgY2xpZW50
IGEgcGxhaW4gYmVhcmVyIHRva2VuIG9yIGEgdG9rZW4gd2l0aCB0aGUgImZvb2JhciIgY2xhaW0g
KHByZXNlbnRhdGlvbiBvZiBhIGtleSBwb3NzZXNzaW9uIHByb29mIGluIHRoZSB0b2tlbiByZXF1
ZXN0IGNvdWxkIGJlIGVub3VnaCkuDQogIDMuICBBbnkgcmVjaXBpZW50IHRoYXQgd2lzaGVzIHRv
IHZhbGlkYXRlIHRoZSB0b2tlbiBtdXN0IGhhdmUgdGhlIHB1YmxpYyBrZXkgZm9yIHRoZSBBUy4N
CiAgNC4gIEFueSByZWNpcGllbnQgdGhhdCB3aXNoZXMgdG8gYWRkIGEgbGF5ZXIgbXVzdCBoYXZl
IGEgcHVibGljIGtleSB0aGF0IGlzIGtub3duIHRvIGl0cyBjYWxsZXJzLg0KICA1LiAgQW55IHJl
Y2lwaWVudCB0aGF0IHBlcmZvcm1zIGxvY2FsIHZhbGlkYXRpb24gbXVzdCB1bmRlcnN0YW5kIHRo
ZSBtZWFuaW5nIG9mIHRoZSAiZm9vYmFyIiBjbGFpbS4NCg0KSSBoYXZlbuKAmXQgdGhvdWdodCB0
b28gZGVlcGx5IG9uIHRoaXMgc28gSSB3b3VsZG7igJl0IGNvbnNpZGVyIHRoZSBpZGVhIGZ1bGx5
IGJha2VkLCBidXQgSeKAmW0gY3VyaW91cyB0byBoZWFyIHlvdXIgdGhvdWdodHMgb24gaXQuDQoN
CuKAkw0KQW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbg0KQVdTIElkZW50aXR5DQoNCg0KRnJvbTog
TmVpbCBNYWRkZW4gPG5laWwubWFkZGVuQGZvcmdlcm9jay5jb20+DQpEYXRlOiBXZWRuZXNkYXks
IE5vdmVtYmVyIDI3LCAyMDE5IGF0IDExOjQzIFBNDQpUbzogIlJpY2hhcmQgQmFja21hbiwgQW5u
YWJlbGxlIiA8cmljaGFubmFAYW1hem9uLmNvbT4NCkNjOiBCcmlhbiBDYW1wYmVsbCA8YmNhbXBi
ZWxsQHBpbmdpZGVudGl0eS5jb20+LCBvYXV0aCA8b2F1dGhAaWV0Zi5vcmc+DQpTdWJqZWN0OiBS
ZTogW09BVVRILVdHXSBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWZldHQtb2F1
dGgtZHBvcC0wMy50eHQNCg0KT24gMjcgTm92IDIwMTksIGF0IDIwOjMwLCBSaWNoYXJkIEJhY2tt
YW4sIEFubmFiZWxsZSA8cmljaGFubmFAYW1hem9uLmNvbT4gd3JvdGU6DQoNCj4gVGhhdCBpcyB0
cnVlLCBidXQgaXMgSU1PIG1vcmUgb2YgYSBoaW5kcmFuY2UgdGhhbiBhbiBhZHZhbnRhZ2UgZm9y
IGEgUG9QIHNjaGVtZS4gVGhlIHZlcnkgZmFjdCB0aGF0IHRoZSBzaWduYXR1cmUgaXMgdmFsaWQg
YXQgZXZlcnkgUlMgaXMgd2h5IHlvdSBuZWVkIGFkZGl0aW9uYWwgbWVhc3VyZXMgdG8gcHJldmVu
dCBjcm9zcy1SUyB0b2tlbiByZXVzZS4NCg0KVGhlIG90aGVyIG1ldGhvZHMgeW91IG1lbnRpb24g
cmVxdWlyZSB0aGVpciBvd24gYWRkaXRpb25hbCBtZWFzdXJlcyBpbiB0aGUgZm9ybSBvZiBrZXkg
ZXhjaGFuZ2VzL2hhbmRzaGFrZXMuIEFuZCB5b3Ugc3RpbGwgbmVlZCB0byBwcm92ZSBwb3NzZXNz
aW9uIG9mIHRoYXQgc2hhcmVkIGtleSBzb21laG93Lg0KDQpUaGlzIGlzIHRydWUuIFRoZSBkaWZm
ZXJlbmNlIGJlaW5nIHRoYXQgdGhlIGRlcml2ZWQga2V5IGNhbiB0aGVuIGJlIHJldXNlZCBmb3Ig
bWFueSByZXF1ZXN0cy4gQmVjYXVzZSB0aGUga2V5IGRlcml2YXRpb24gaXMgY3J5cHRvZ3JhcGhp
Y2FsbHkgdGllZCB0byB0aGlzIGNvbnRleHQgdGhlIFJTIGNhbuKAmXQgcmVwbGF5IHRoZXNlIHN5
bW1ldHJpYyB0b2tlbnMgYW55d2hlcmUgZWxzZS4NCg0KSW4gc29tZSBjYXNlcywg4oCcZGVyaXZl
IGEgc2hhcmVkIGtleSBhbmQgZW5jcnlwdCB0aGlzIGJsb2LigJ0gaXMgZWFzaWVyOyBpbiBzb21l
IGNhc2VzIOKAnHNpZ24gdGhpcyBibG9iIGRlY2xhcmluZyB5b3VyIGF1ZGllbmNl4oCdIGlzIGVh
c2llci4NCg0KVGhlIEVDREggc2NoZW1lIGRvZXMgY2hhbGxlbmdlLXJlc3BvbnNlIHRvIGVuc3Vy
ZSBmcmVzaG5lc3MuIFRoaXMgd2FzIGRlc2lnbmVkIHRvIG1hdGNoIHRoZSBhbnRpLXJlcGxheSBt
ZWFzdXJlcyBpbiB0aGUgRFBvUCBkcmFmdCBidXQgd2l0aG91dCByZXF1aXJpbmcgdGhlIHNlcnZl
ciBzdG9yZSBhbnkgc3RhdGUuIElmIHlvdSBkb27igJl0IG5lZWQgcmVwbGF5IHByb3RlY3Rpb24g
KGlmIFRMUyBpcyBlbm91Z2gpIHRoZW4geW91IGNhbiBpbmRlZWQganVzdCBzaWduIHRoZSBhdWRp
ZW5jZSwgb3IgZm9yIEVDREggeW91IGNhbiBkbyBjb21wbGV0ZWx5IHN0YXRpYyBFQ0RIIGJldHdl
ZW4gdGhlIGNsaWVudOKAmXMgcHJpdmF0ZSBrZXkgYW5kIHRoZSBSU+KAmXMgcHVibGljIGtleSB0
byBkZXJpdmUgYSBzaGFyZWQga2V5IHRoYXQgaXMgdGhlIHNhbWUgZm9yIGFsbCB0aW1lICh1bnRp
bCBrZXkgcm90YXRpb24pLiBCdXQgaW4gdGhhdCBjYXNlIHlvdSBtYXkgYXMgd2VsbCBqdXN0IHJl
dHVybiBhIHN5bW1ldHJpYyBrZXkgZGlyZWN0bHkgZnJvbSB0aGUgQVMuLi4gYXR0YWNoZWQgdG8g
YSBtYWNhcm9vbiwgc2F5Lg0KDQoNCg0KPiBUaGUgZWFzaWVzdCB3YXkgdG8gdXNlIG1hY2Fyb29u
cyB3aXRoIGFzeW1tZXRyaWMgY3J5cHRvIGlzIHRvIG1ha2UgdGhlIG1hY2Fyb29uIGlkZW50aWZp
ZXIgYmUgYW4gZW5jcnlwdGVkIHJhbmRvbSBITUFDIGtleSB0aGF0IHRoZSBSUyBjYW4gZGVjcnlw
dCAob3IgYSBkZXJpdmVkIGtleSB1c2luZyBkaWZmaWUtaGVsbG1hbikuIFlvdSBjYW4gY29uY2F0
ZW5hdGUgbXVsdGlwbGUgZW5jcnlwdGVkIGtleXMgZm9yIG11bHRpcGxlIFJTZXMuIEFsdGVybmF0
aXZlbHkgaW4gYSBjbG9zZWQgZWNvc3lzdGVtIHlvdSBjYW4gZW5jcnlwdCB0aGUgcmFuZG9tIEhN
QUMgd2l0aCBhIGtleSBzdG9yZWQgaW4gYSBLTVMgKHN1Y2ggYXMgQVdTIEtNUykgYW5kIGdyYW50
IGVhY2ggUlMgZGVjcnlwdCBwZXJtaXNzaW9ucyBmb3IgdGhhdCBLTVMga2V5Lg0KDQpJcyB0aGUg
4oCccmFuZG9tIEhNQUMga2V5IHRoYXQgdGhlIFJTIGNhbiBkZWNyeXB04oCdIHRoZSByb290IGtl
eSB1c2VkIHRvIGdlbmVyYXRlIHRoZSBtYWNhcm9vbj8gSWYgc28sIGhvdyB3b3VsZCB5b3UgcHJl
dmVudCBvbmUgdGFyZ2V0ZWQgUlMgZnJvbSB1c2luZyB0aGUgcm9vdCBrZXkgYW5kIG1hY2Fyb29u
IGlkZW50aWZpZXIgdG8gY29uc3RydWN0IGFuIGFyYml0cmFyeSBtYWNhcm9vbiBmb3IgcmVwbGF5
IGFnYWluc3QgYW5vdGhlciB0YXJnZXRlZCBSUz8gSWYgbm90LCBob3cgZG9lcyB0aGUgdGFyZ2V0
ZWQgUlMgdXNlIHRoZSBkZWNyeXB0ZWQg4oCccmFuZG9tIEhNQUMga2V54oCdIHRvIHZhbGlkYXRl
IHRoZSBtYWNhcm9vbj8gSXMgdGhlcmUgYSBwYXBlciBvbiB0aGlzIGFwcHJvYWNoPw0KDQpUaGF0
IGlzIHRoZSBlYXNpZXN0IHdheSB0byBsZXQgdGhlIFJTIHZlcmlmeSB0aGUgbWFjYXJvb24gb24g
dGhlIGFzc3VtcHRpb24gdGhhdCB0aGUgUlMgaXMgdHJ1c3RlZC4gSeKAmW0gbm90IGF3YXJlIG9m
IGFuIGFsdGVybmF0aXZlIGZvciBhc3ltbWV0cmljIGNyeXB0byB3aGVuIHRoZSBSUyBpcyB1bnRy
dXN0ZWQgb3RoZXIgdGhhbiB1c2luZyB0aGUgc2lnbmF0dXJlLWJhc2VkIG1hY2Fyb29uIHZhcmlh
bnQgb3IgaGF2aW5nIHBlci1SUyBrZXlzLg0KDQpJ4oCZbSBub3QgcmVhbGx5IGEgZmFuIG9mIHB1
cmVseSBzaWduYXR1cmUtYmFzZWQgSldUIGFjY2VzcyB0b2tlbnMgYmVjYXVzZSB0aG9zZSB0b2tl
bnMgb2Z0ZW4gY29udGFpbiBQSUkgYW5kIHNvIHNob3VsZCByZWFsbHkgYmUgZW5jcnlwdGVkIHRv
IGF2b2lkIGxlYWtpbmcgZGV0YWlscyB0byB0aGUgY2xpZW50IChvciBhbnlvbmUgZWxzZSBpZiB0
aGUgdG9rZW4gZG9lcyBsZWFrKS4gVGhpcyBjYW1lIHVwIGluIHRoZSBkaXNjdXNzaW9uIG9mIHRo
ZSBKV1QtYmFzZWQgYWNjZXNzIHRva2VucyBkcmFmdCwgd2hpY2ggaXMgd2h5IEkgcHJvcG9zZWQg
aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1hZGRlbi1qb3NlLWVjZGgtMXB1LTAy
IGZvciB1c2UgaW4gdGhhdCBkcmFmdC4gQnV0IGlmIHlvdeKAmXJlIGRvaW5nIGVuY3J5cHRpb24g
dGhlbiB5b3XigJlyZSBhbHJlYWR5IGRvd24gdGhlIHBhdGggb2YgaGF2aW5nIHBlci1SUyBhY2Nl
c3MgdG9rZW5zIChhbmQga2V5cykgLSB0aGUgY29tcGFjdCBlbmNvZGluZyBvZiBKV0Ugb25seSBh
bGxvd3MgYSBzaW5nbGUgcmVjaXBpZW50Lg0KDQoNClRoZSBLTVMgYXBwcm9hY2ggaXMganVzdCBz
eW1tZXRyaWMgY3J5cHRvIG1lZGlhdGVkIHRocm91Z2ggYSB0aGlyZCBwYXJ0eSAoYW5kIGhhcyB0
aGUgc2FtZSBjZW50cmFsaXphdGlvbiBwcm9ibGVtIGFzIHZhbGlkYXRpb24gYXQgdGhlIEFTKS4N
Cg0KPiBDbGllbnRzIGNhbiB0aGVuIGxhdGVyIHN0YXJ0IGFkZGluZyBjYXZlYXRz4oCmLCB3aGls
ZSBSU2VzIHN0aWxsIGRvbid0IGhhdmUgdG8gbWFrZSBhbnkgY2hhbmdlc+KApi4NCj4gRFBvUCBv
bmx5IGVmZmVjdGl2ZWx5IHByZXZlbnRzIGNyb3NzLVJTIHJlcGxheSBpZiBhbGwgUlNlcyBpbXBs
ZW1lbnQgaXQsIG90aGVyd2lzZSB0aGUgb25lcyB0aGF0IGRvbid0IGFyZSBzdGlsbCB2dWxuZXJh
YmxlLg0KVGhpcyBpcyBiZWNhdXNlIG1hY2Fyb29ucyBiYWtlIHRoZSBwcm9vZiBpbnRvIHRoZSDi
gJxiZWFyZXLigJ0gdG9rZW4gKHdoaWNoIGlzIG5vIGxvbmdlciByZWFsbHkgYSBiZWFyZXIgdG9r
ZW4pIGluIHRoZSBBdXRob3JpemF0aW9uIGhlYWRlciwgd2hlcmVhcyBEUG9QIHB1dHMgaXQgaW4g
YSBzZXBhcmF0ZSBoZWFkZXIuDQoNClRoYXTigJlzIG5vdCB0aGUgb25seSBkaWZmZXJlbmNlLiBU
aGUgb3RoZXIgaXMgdGhhdCB0aGUgQVMgZG9lcyB0aGUgdmFsaWRhdGlvbi4gSWYgdGhlIGNsaWVu
dCBhcHBlbmRlZCB0aGUgRFBvUCBjbGFpbXMgdG8gdGhlIGFjY2VzcyB0b2tlbiBhbmQgc2lnbmVk
IHRoZSB3aG9sZSB0aGluZywgYW5kIHRoZW4gdGhlIFJTIHRvb2sgdGhhdCBhbmQgc2VudCBpdCB0
byB0aGUgQVMgaW50cm9zcGVjdGlvbiBlbmRwb2ludCB0byB2YWxpZGF0ZSBpdCwgdGhlbiB0aGF0
IHdvdWxkIGhhdmUgdGhlIHNhbWUgYWR2YW50YWdlIG9mIG5vdCByZXF1aXJpbmcgYW55IGNoYW5n
ZXMgYXQgdGhlIFJTLg0KDQpCdXQgaWYgeW91IGRvIHRoaXMgdGhlbiB0aGVyZeKAmXMgbm8gbG9u
Z2VyIGFueSByZWFzb24gdG8gdXNlIHB1YmxpYyBrZXkgc2lnbmF0dXJlcyBiZWNhdXNlIHRoZSBj
bGllbnQgYW5kIEFTIG1heSBhcyB3ZWxsIGFncmVlIGEgc2hhcmVkIHNlY3JldC4gKFRoZSBBUyBj
YW4gYWx3YXlzIGltcGVyc29uYXRlIGEgY2xpZW50IGFueXdheSkuIEF0IHdoaWNoIHBvaW50IHdl
4oCZcmUgYmFzaWNhbGx5IGJhY2sgdXNpbmcgbWFjYXJvb25zLg0KDQoNCmRyYWZ0LWlldGYtb2F1
dGgtc2lnbmVkLWh0dHAtcmVxdWVzdCBpcyBhbm90aGVyIHdheSB0byBkbyB0aGlzIHRoYXQgZG9l
c27igJl0IHJlbHkgb24gbWFjYXJvb25zLg0KDQo+IFlvdXIgcHJldmlvdXMgcG9pbnQgd2FzIHRo
YXQgdGhleSByZXF1aXJlICJub24tdHJpdmlhbCB3b3JrIHRvIHVzZSAuLi4gYW5kIHJlcXVpcmUg
ZGV2ZWxvcGVycyB0byBsZWFybiBhIG5ldyB0b2tlbiBmb3JtYXQiLg0KQnkg4oCcbm9uLXRyaXZp
YWwgd29yayB0byB1c2XigJ0gSSB3YXMgcmVmZXJyaW5nIHRvIHdvcmsgcmVxdWlyZWQgZnJvbSB0
aGUgd29ya2luZyBncm91cCwgdGhhdCBJIGRpZCBub3QgZmVlbCB3YXMgYmVpbmcgYWNrbm93bGVk
Z2VkLg0KDQpEbyB5b3UgYmVsaWV2ZSBpdOKAmXMgYSBkaXNwcm9wb3J0aW9uYXRlIGFtb3VudCBv
ZiB3b3JrIGNvbXBhcmVkIHRvIGFueSBvdGhlciBkcmFmdCB0aGUgV0cgd29ya3Mgb24/DQoNCg0K
TG9va2luZyBiYWNrIG92ZXIgdGhlIHRocmVhZCwgSSB0aGluayBteSBvYmplY3Rpb24gc3RlbXMg
ZnJvbSB5b3UgcmVmZXJyaW5nIHRvIG1hY2Fyb29ucyBhcyBhbiDigJxhY2Nlc3MgdG9rZW4gZm9y
bWF04oCdIHdoZW4gdGhleeKAmXJlIHJlYWxseSBhbiBhcHBsaWVkIGNyeXB0b2dyYXBoeSBwYXR0
ZXJuLiBUaGUg4oCcZm9ybWF04oCdIHBhcnQgd291bGQgbmVlZCB0byBiZSBkZWZpbmVkIGJ5IHRo
ZSB3b3JraW5nIGdyb3VwLiBGb3Igd2hhdCBpdOKAmXMgd29ydGgsIEkgdGhpbmsgaXTigJlkIGJl
IGludGVyZXN0aW5nIHRvIGV4cGxvcmUgaWYvaG93IHRoZSBwYXR0ZXJuIGNvdWxkIGJlIGFwcGxp
ZWQgdG8gdGhlIEpXVCBmb3JtYXQsIG9yIHdoYXQgdHdlYWtzIHdvdWxkIGJlIG5lY2Vzc2FyeSB0
byBtYWtlIGl0IHdvcmsuIElmIHdlIGNvdWxkIGRlc2NyaWJlIGEgd2F5IHRvIGNyZWF0ZSBtYWNh
cm9vbnMgdGhhdCByZXVzZSB0aGUgZXhpc3Rpbmcgd29yayBvbiBKV1RzLCB0aGF0IHdvdWxkIGJl
IHByZXR0eSBjb29sLg0KDQpUaGVyZSBhcmUgZXhpc3RpbmcgaW50ZXJvcGVyYWJsZSBtYWNhcm9v
biBsaWJyYXJpZXMgcmlnaHQgbm93IHRoYXQgZGVmaW5lIGEgY29tbW9uIGZvcm1hdCBbKl0uIFVu
bGVzcyB0aGVyZSB3YXMgYSBjb21wZWxsaW5nIHJlYXNvbiBub3QgdG8sIEnigJlkIGhvcGUgd2Xi
gJlkIGp1c3Qgc3RhbmRhcmRpemUgdGhhdC4NCg0KWypdIEFjdHVhbGx5IHRoZXnigJl2ZSBnb25l
IHRocm91Z2ggYSBjb3VwbGUgb2YgaXRlcmF0aW9ucy4gSSBiZWxpZXZlIHRoZSDigJxsaWJtYWNh
cm9vbnMgVjIgYmluYXJ54oCdIGZvcm1hdCBpcyB3aGF0IG1vc3Qgbm93IHVzZS4NCg0KDQoNCj4g
VGhhdCBidXJkZW4gaXMgc2lnbmlmaWNhbnRseSByZWR1Y2VkIHdoZW4gZGV2ZWxvcGVycyBjYW4g
anVzdCBhZGQgYSBkZXBlbmRlbmN5IGFuZCBjYWxsIGEgb25lLWxpbmVyIHRvIGFkZCBhIGNhdmVh
dC4NCkxpYnJhcmllcyBjYW4gY2VydGFpbmx5IHJlZHVjZSB0aGUgYW1vdW50IG9mIHdvcmsgcmVx
dWlyZWQgYnkgZGV2ZWxvcGVycyAoYW5kIGhlcmUgSSBtZWFuIGNsaWVudCBkZXZlbG9wZXJzLCBS
UyBkZXZlbG9wZXJzLCBBUyBkZXZlbG9wZXJzLCBhbmQgT0F1dGggY2xpZW50IGFuZCBzZXJ2ZXIg
bGlicmFyeSBkZXZlbG9wZXJzKSwgYnV0IGNvbWUgd2l0aCB0aGVpciBvd24gY29uY2VybnMgKGUu
Zy4sIHBsYXRmb3JtIGF2YWlsYWJpbGl0eSwgbGljZW5zaW5nLCBtYWludGVuYW5jZSBhbmQgcmVs
aWFiaWxpdHksIGV0Yy4pLiBJdCBiZWNvbWVzIG9uZSBtb3JlIGRlcGVuZGVuY3kgdGhhdCBkZXZl
bG9wZXJzIGhhdmUgdG8gY29uc2lkZXIuDQoNCknigJltIG5vdCByZWFsbHkgc3VyZSB3aGF0IHlv
dXIgcG9pbnQgaXMgaGVyZS4gKkFueSogbmV3IGFkZGl0aW9uIHRvIE9BdXRoIGhhcyB0byBiZSBp
bXBsZW1lbnRlZC4gRWl0aGVyIHRoYXTigJlzIGRvbmUgd2l0aCBhIGxpYnJhcnkgb3IgeW91IHdy
aXRlIHlvdXIgb3duLg0KDQrigJQgTmVpbA0K

--_000_863A2C3DFA2A472CB9FED9B3D99A5812amazoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <691AEDF358DF1640891D7BAF2CBB2758@amazon.com>
Content-Transfer-Encoding: base64
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--_000_863A2C3DFA2A472CB9FED9B3D99A5812amazoncom_--


From nobody Sat Nov 30 00:03:42 2019
Return-Path: <neil.madden@forgerock.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1FB2120045 for <oauth@ietfa.amsl.com>; Sat, 30 Nov 2019 00:03:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level: 
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BmL4tciWrasE for <oauth@ietfa.amsl.com>; Sat, 30 Nov 2019 00:03:36 -0800 (PST)
Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBABC12000F for <oauth@ietf.org>; Sat, 30 Nov 2019 00:03:35 -0800 (PST)
Received: by mail-wr1-x434.google.com with SMTP id g17so5667236wro.2 for <oauth@ietf.org>; Sat, 30 Nov 2019 00:03:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=content-transfer-encoding:from:mime-version:date:message-id:subject :in-reply-to:references:to:cc; bh=e2ZPVCKJOj234J821DZO+gigs6pPLa0Qidui7MrejMA=; b=avVX/YJY5bRn7axcd45iQePQAIp72y13dRW/CLb8vXAwppySvK94Fp7q6PCfste14b PKRs9crpROJJ6c5WOhm1HbQWWXoQC22t83e6rjIQsmvJ3Tt2iIODYG1XA7WZFbz8jYxA TyTmlj78H7ipQdAJmTZl7kEm6fB/o0SeyoUbY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :message-id:subject:in-reply-to:references:to:cc; bh=e2ZPVCKJOj234J821DZO+gigs6pPLa0Qidui7MrejMA=; b=FlcGtnp6chvDMyBwhdaXVpnniRDHcOwpWn7E4viNpgyWmWPlbOsqq/PDdI6jPahDkA RpcCNtYbnR/TY6o2XMwAnLs1+pV7EFkbBYVbdjx27Q5ybNLGsySc4q7LzaK6tE4yg23z BstN5VK6/vq/+eD55qvt4sSyj2ArIc0lDWftpm4d9kJ3njq33tFYkg/2DWwuP73oiIm2 HxaCcNY2GTf6MxQvqFXA7yVweWw+ddKprICd9Je7YfENpC+5Wf9Grgcqqadi2zTaGnGp Mc1gye8HocQDiY4VeMJq03abjWJmuGxv0d6FgcSef++L0vOoYYb1Tynn4IrNcwh66QPO Tueg==
X-Gm-Message-State: APjAAAUv8B9JgYPDwROfcn8oYhcxgkuNWVGdJBEUuuAg/UjToq6Np9BI OcdNYgwVcBSVHGyIeRqeKqEPKQ==
X-Google-Smtp-Source: APXvYqxQbsKpSsHG6TSWqQYktrsZlMFGjvSqrn/EAU2iZMaXSCIU7nbJfVn2a3AFAKkygmQ+kKjjMg==
X-Received: by 2002:adf:e301:: with SMTP id b1mr57801827wrj.280.1575101013918;  Sat, 30 Nov 2019 00:03:33 -0800 (PST)
Received: from ?IPv6:2a01:4c8:1e:a0cd:50d8:7c74:ca37:84a2? ([2a01:4c8:1e:a0cd:50d8:7c74:ca37:84a2]) by smtp.gmail.com with ESMTPSA id d18sm32267856wrm.85.2019.11.30.00.03.32 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 30 Nov 2019 00:03:32 -0800 (PST)
Content-Type: multipart/alternative; boundary=Apple-Mail-C0A8722B-9AA6-422D-BF32-7AB424D55779
Content-Transfer-Encoding: 7bit
From: Neil Madden <neil.madden@forgerock.com>
Mime-Version: 1.0 (1.0)
Date: Sat, 30 Nov 2019 08:03:31 +0000
Message-Id: <04D23E63-0D2C-4CBA-B671-3433FC76AE24@forgerock.com>
In-Reply-To: <863A2C3D-FA2A-472C-B9FE-D9B3D99A5812@amazon.com>
References: <863A2C3D-FA2A-472C-B9FE-D9B3D99A5812@amazon.com>
To: "Richard Backman, Annabelle" <richanna@amazon.com>
Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
X-Mailer: iPhone Mail (17A878)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/RAl3jHG_YoXCIftYaUNYt4U7MLA>
Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop-03.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Nov 2019 08:03:40 -0000

--Apple-Mail-C0A8722B-9AA6-422D-BF32-7AB424D55779
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

I think that is probably secure, although I=E2=80=99d like to see a formal p=
roof of correctness like the ones for macaroons in https://cs.nyu.edu/media/=
publications/TR2013-962.pdf. There are often subtle details to these things.=
=20

Using chained public key signatures in this way goes back to SDSI (http://pe=
ople.csail.mit.edu/rivest/sdsi11.html#secoverview) and has more recently bee=
n used in Vanadium under the name =E2=80=9Cblessings=E2=80=9D: https://vanad=
ium.github.io/concepts/security.html

It has some nice properties, but it is very expensive in terms of CPU costs a=
nd size of tokens. It also requires every hop to add a signature even if the=
y=E2=80=99re not adding any new caveats. This is very secure but can add a l=
ot of overhead, and of course means that all parties have to be aware of thi=
s format/protocol.=20

I still think it=E2=80=99s much easier and more efficient to just use HMAC-b=
ased macaroons in most cases. You can upgrade them to PoP tokens by appendin=
g a =E2=80=9Ccnf=E2=80=9D caveat (eg for mTLS). And you can still do things l=
ike the =E2=80=9Cphantom token=E2=80=9D pattern where a macaroon-based =E2=80=
=9Cby ref=E2=80=9D token is received by an API gateway, introspected, and th=
en replaced with an equivalent (but short-lived) signed JWT for consumption b=
y backend microservices.=20

=E2=80=94 Neil

>> On 29 Nov 2019, at 22:13, Richard Backman, Annabelle <richanna@amazon.com=
> wrote:
> =EF=BB=BF
> > That is the easiest way to let the RS verify the macaroon on the assumpt=
ion that the RS is trusted. I=E2=80=99m not aware of an alternative for asym=
metric crypto when the RS is untrusted other than using the signature-based m=
acaroon variant or having per-RS keys.=20
> =20
> It occurred to me that my previous example of how to do layering with JWTs=
 was needlessly complicated. You can prevent removal of layered constraints b=
y constraining each inner layer to require a wrapper. Consider a "foobar" cl=
aim that specifies a public key and indicates that the token must be present=
ed wrapped within a JWS signed with the corresponding private key. The wrapp=
er JWS may introduce additional constraints, and may or may not permit the r=
ecipient to present the access token to others, depending on the value of th=
e "foobar" claim. For example:
> =20
> The AS generates an access token, with a public key registered by the clie=
nt as the value of the "foobar" claim. This registration could=E2=80=99ve ha=
ppened via a dev console, dynamic client reg., or as part of the token reque=
st.
> <at_0> =3D JWS(<AS private key>, {
>     "iss": "as.example.com",
>     "client_id": "...",
>     "user_id": "...",
>     "scope": "a b",
>     "exp": <now + 1 hour>,
>     "foobar": <client public key>
> })
> =20
> To call rs1.example.com, the client wraps the token in a JWS signed with t=
he client=E2=80=99s private key. They further restrict the scope and expirat=
ion time, and authorize the RS to use the token with other RSes by setting t=
he value of the "foobar" claim to the RS=E2=80=99s public key.
> <at_1> =3D JWS(<client private key>, {
>     "token": <at_0>,
>     "aud": "rs1.example.com",
>     "exp": <now + 5 seconds>,
>     "scope": "a b",
>     "foobar": <RS1 public key>
> })
> =20
> To call rs2.example.com, rs1.example.com wraps the token in a JWS signed w=
ith the RS=E2=80=99s private key. The RS prohibits rs2.example.com from furt=
her use of the token by setting the "foobar" claim to null.
> <at_2> =3D JWS(<RS1 private key>, {
>     "token": <at_1>,
>     "aud": "rs2.example.com",
>     "scope": "b",
>     "foobar": null
> })
> =20
> Similarly, the client can call rs2.example.com with a token that is restri=
cted from further use.
> <at_3> =3D JWS(<client private key>, {
>     "token": <at_0>,
>     "aud": "rs2.example.com",
>     "exp": <now + 5 seconds>,
>     "scope": "b",
>     "foobar": null
> })
> =20
> =20
> This pattern allows for layered constraints, local introspection, and loca=
l validation. The requirements (that I=E2=80=99ve identified) are that:
> The client must register a public key with the AS (this could be done duri=
ng the token request).
> The AS must know whether or not to give the client a plain bearer token or=
 a token with the "foobar" claim (presentation of a key possession proof in t=
he token request could be enough).
> Any recipient that wishes to validate the token must have the public key f=
or the AS.
> Any recipient that wishes to add a layer must have a public key that is kn=
own to its callers.
> Any recipient that performs local validation must understand the meaning o=
f the "foobar" claim.
> =20
> I haven=E2=80=99t thought too deeply on this so I wouldn=E2=80=99t conside=
r the idea fully baked, but I=E2=80=99m curious to hear your thoughts on it.=

> =20
> =E2=80=93=20
> Annabelle Richard Backman
> AWS Identity
> =20
> =20
> From: Neil Madden <neil.madden@forgerock.com>
> Date: Wednesday, November 27, 2019 at 11:43 PM
> To: "Richard Backman, Annabelle" <richanna@amazon.com>
> Cc: Brian Campbell <bcampbell@pingidentity.com>, oauth <oauth@ietf.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-fett-oauth-dpop=
-03.txt
> =20
> On 27 Nov 2019, at 20:30, Richard Backman, Annabelle <richanna@amazon.com>=
 wrote:
> =20
> > That is true, but is IMO more of a hindrance than an advantage for a PoP=
 scheme. The very fact that the signature is valid at every RS is why you ne=
ed additional measures to prevent cross-RS token reuse.
> =20
> The other methods you mention require their own additional measures in the=
 form of key exchanges/handshakes. And you still need to prove possession of=
 that shared key somehow.
> =20
> This is true. The difference being that the derived key can then be reused=
 for many requests. Because the key derivation is cryptographically tied to t=
his context the RS can=E2=80=99t replay these symmetric tokens anywhere else=
.=20
> =20
> In some cases, =E2=80=9Cderive a shared key and encrypt this blob=E2=80=9D=
 is easier; in some cases =E2=80=9Csign this blob declaring your audience=E2=
=80=9D is easier.
> =20
> The ECDH scheme does challenge-response to ensure freshness. This was desi=
gned to match the anti-replay measures in the DPoP draft but without requiri=
ng the server store any state. If you don=E2=80=99t need replay protection (=
if TLS is enough) then you can indeed just sign the audience, or for ECDH yo=
u can do completely static ECDH between the client=E2=80=99s private key and=
 the RS=E2=80=99s public key to derive a shared key that is the same for all=
 time (until key rotation). But in that case you may as well just return a s=
ymmetric key directly from the AS... attached to a macaroon, say.=20
>=20
>=20
> =20
> > The easiest way to use macaroons with asymmetric crypto is to make the m=
acaroon identifier be an encrypted random HMAC key that the RS can decrypt (=
or a derived key using diffie-hellman). You can concatenate multiple encrypt=
ed keys for multiple RSes. Alternatively in a closed ecosystem you can encry=
pt the random HMAC with a key stored in a KMS (such as AWS KMS) and grant ea=
ch RS decrypt permissions for that KMS key.
> =20
> Is the =E2=80=9Crandom HMAC key that the RS can decrypt=E2=80=9D the root k=
ey used to generate the macaroon? If so, how would you prevent one targeted R=
S from using the root key and macaroon identifier to construct an arbitrary m=
acaroon for replay against another targeted RS? If not, how does the targete=
d RS use the decrypted =E2=80=9Crandom HMAC key=E2=80=9D to validate the mac=
aroon? Is there a paper on this approach?
> =20
> That is the easiest way to let the RS verify the macaroon on the assumptio=
n that the RS is trusted. I=E2=80=99m not aware of an alternative for asymme=
tric crypto when the RS is untrusted other than using the signature-based ma=
caroon variant or having per-RS keys.=20
> =20
> I=E2=80=99m not really a fan of purely signature-based JWT access tokens b=
ecause those tokens often contain PII and so should really be encrypted to a=
void leaking details to the client (or anyone else if the token does leak). T=
his came up in the discussion of the JWT-based access tokens draft, which is=
 why I proposed https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02 fo=
r use in that draft. But if you=E2=80=99re doing encryption then you=E2=80=99=
re already down the path of having per-RS access tokens (and keys) - the com=
pact encoding of JWE only allows a single recipient.=20
> =20
> =20
> The KMS approach is just symmetric crypto mediated through a third party (=
and has the same centralization problem as validation at the AS).
> =20
> > Clients can then later start adding caveats=E2=80=A6, while RSes still d=
on't have to make any changes=E2=80=A6.
> > DPoP only effectively prevents cross-RS replay if all RSes implement it,=
 otherwise the ones that don't are still vulnerable.
> This is because macaroons bake the proof into the =E2=80=9Cbearer=E2=80=9D=
 token (which is no longer really a bearer token) in the Authorization heade=
r, whereas DPoP puts it in a separate header.
> =20
> That=E2=80=99s not the only difference. The other is that the AS does the v=
alidation. If the client appended the DPoP claims to the access token and si=
gned the whole thing, and then the RS took that and sent it to the AS intros=
pection endpoint to validate it, then that would have the same advantage of n=
ot requiring any changes at the RS.=20
> =20
> But if you do this then there=E2=80=99s no longer any reason to use public=
 key signatures because the client and AS may as well agree a shared secret.=
 (The AS can always impersonate a client anyway). At which point we=E2=80=99=
re basically back using macaroons.=20
>=20
>=20
> draft-ietf-oauth-signed-http-request is another way to do this that doesn=E2=
=80=99t rely on macaroons.
> =20
> > Your previous point was that they require "non-trivial work to use ... a=
nd require developers to learn a new token format".
> By =E2=80=9Cnon-trivial work to use=E2=80=9D I was referring to work requi=
red from the working group, that I did not feel was being acknowledged.
> =20
> Do you believe it=E2=80=99s a disproportionate amount of work compared to a=
ny other draft the WG works on?
>=20
>=20
> Looking back over the thread, I think my objection stems from you referrin=
g to macaroons as an =E2=80=9Caccess token format=E2=80=9D when they=E2=80=99=
re really an applied cryptography pattern. The =E2=80=9Cformat=E2=80=9D part=
 would need to be defined by the working group. For what it=E2=80=99s worth,=
 I think it=E2=80=99d be interesting to explore if/how the pattern could be a=
pplied to the JWT format, or what tweaks would be necessary to make it work.=
 If we could describe a way to create macaroons that reuse the existing work=
 on JWTs, that would be pretty cool.
> =20
> There are existing interoperable macaroon libraries right now that define a=
 common format [*]. Unless there was a compelling reason not to, I=E2=80=99d=
 hope we=E2=80=99d just standardize that.=20
> =20
> [*] Actually they=E2=80=99ve gone through a couple of iterations. I believ=
e the =E2=80=9Clibmacaroons V2 binary=E2=80=9D format is what most now use.=20=

>=20
>=20
> =20
> > That burden is significantly reduced when developers can just add a depe=
ndency and call a one-liner to add a caveat.
> Libraries can certainly reduce the amount of work required by developers (=
and here I mean client developers, RS developers, AS developers, and OAuth c=
lient and server library developers), but come with their own concerns (e.g.=
, platform availability, licensing, maintenance and reliability, etc.). It b=
ecomes one more dependency that developers have to consider.
> =20
> I=E2=80=99m not really sure what your point is here. *Any* new addition to=
 OAuth has to be implemented. Either that=E2=80=99s done with a library or y=
ou write your own.=20
> =20
> =E2=80=94 Neil

--Apple-Mail-C0A8722B-9AA6-422D-BF32-7AB424D55779
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div dir=3D"ltr"><meta http-equiv=3D"conten=
t-type" content=3D"text/html; charset=3Dutf-8"><div dir=3D"ltr">I think that=
 is probably secure, although I=E2=80=99d like to see a formal proof of corr=
ectness like the ones for macaroons in&nbsp;<a href=3D"https://cs.nyu.edu/me=
dia/publications/TR2013-962.pdf">https://cs.nyu.edu/media/publications/TR201=
3-962.pdf</a>. There are often subtle details to these things.&nbsp;</div><d=
iv dir=3D"ltr"><br></div><div dir=3D"ltr">Using chained public key signature=
s in this way goes back to SDSI (<a href=3D"http://people.csail.mit.edu/rive=
st/sdsi11.html#secoverview">http://people.csail.mit.edu/rivest/sdsi11.html#s=
ecoverview</a>) and has more recently been used in Vanadium under the name =E2=
=80=9Cblessings=E2=80=9D:&nbsp;<a href=3D"https://vanadium.github.io/concept=
s/security.html">https://vanadium.github.io/concepts/security.html</a></div>=
<div dir=3D"ltr"><br></div><div dir=3D"ltr">It has some nice properties, but=
 it is very expensive in terms of CPU costs and size of tokens. It also requ=
ires every hop to add a signature even if they=E2=80=99re not adding any new=
 caveats. This is very secure but can add a lot of overhead, and of course m=
eans that all parties have to be aware of this format/protocol.&nbsp;</div><=
div dir=3D"ltr"><br></div><div dir=3D"ltr">I still think it=E2=80=99s much e=
asier and more efficient to just use HMAC-based macaroons in most cases. You=
 can upgrade them to PoP tokens by appending a =E2=80=9Ccnf=E2=80=9D caveat (=
eg for mTLS). And you can still do things like the =E2=80=9Cphantom token=E2=
=80=9D pattern where a macaroon-based =E2=80=9Cby ref=E2=80=9D token is rece=
ived by an API gateway, introspected, and then replaced with an equivalent (=
but short-lived) signed JWT for consumption by backend microservices.&nbsp;<=
/div><div dir=3D"ltr"><br></div><div dir=3D"ltr">=E2=80=94 Neil</div><div di=
r=3D"ltr"><br><blockquote type=3D"cite">On 29 Nov 2019, at 22:13, Richard Ba=
ckman, Annabelle &lt;richanna@amazon.com&gt; wrote:<br><br></blockquote></di=
v><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Courier;
	panose-1:2 0 5 0 0 0 0 0 0 0;}
@font-face
	{font-family:"MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@MS Mincho";
	panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle21
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle22
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:89856235;
	mso-list-type:hybrid;
	mso-list-template-ids:1349692564 67698703 67698713 67698715 6769870=
3 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1">
<p class=3D"MsoNormal">&gt; That is the easiest way to let the RS verify the=
 macaroon on the assumption that the RS is trusted. I=E2=80=99m not aware of=
 an alternative for asymmetric crypto when the RS is untrusted other than us=
ing the signature-based macaroon variant or
 having per-RS keys.&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">It occurred to me that my previous example of how to d=
o layering with JWTs was needlessly complicated. You can prevent removal of l=
ayered constraints by constraining each inner layer to require a wrapper. Co=
nsider a
<span style=3D"font-family:Courier">"foobar"</span> claim that specifies a p=
ublic key and indicates that the token must be presented wrapped within a JW=
S signed with the corresponding private key. The wrapper JWS may introduce a=
dditional constraints, and may
 or may not permit the recipient to present the access token to others, depe=
nding on the value of the
<span style=3D"font-family:Courier">"foobar"</span> claim. For example:<o:p>=
</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The AS generates an access token, with a public key r=
egistered by the client as the value of the
<span style=3D"font-family:Courier">"foobar"</span> claim. This registration=
 could=E2=80=99ve happened via a dev console, dynamic client reg., or as par=
t of the token request.<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&lt;at_0&gt; =3D J=
WS(&lt;AS private key&gt;, {<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "iss": "as.example.com",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "client_id": "...",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "user_id": "...",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "scope": "a b",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "exp": &lt;now + 1 hour&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "foobar": &lt;client public key&gt;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">})<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier"><o:p>&nbsp;</o:p>=
</span></p>
<p class=3D"MsoNormal">To call rs1.example.com, the client wraps the token i=
n a JWS signed with the client=E2=80=99s private key. They further restrict t=
he scope and expiration time, and authorize the RS to use the token with oth=
er RSes by setting the value of the
<span style=3D"font-family:Courier">"foobar"</span> claim to the RS=E2=80=99=
s public key.<span style=3D"font-family:Courier"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&lt;at_1&gt; =3D J=
WS(&lt;client private key&gt;, {<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "token": &lt;at_0&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "aud": "rs1.example.com",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "exp": &lt;now + 5 seconds&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "scope": "a b",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "foobar": &lt;RS1 public key&gt;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">})<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier"><o:p>&nbsp;</o:p>=
</span></p>
<p class=3D"MsoNormal">To call rs2.example.com, rs1.example.com wraps the to=
ken in a JWS signed with the RS=E2=80=99s private key. The RS prohibits rs2.=
example.com from further use of the token by setting the
<span style=3D"font-family:Courier">"foobar"</span> claim to null.<span styl=
e=3D"font-family:Courier"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&lt;at_2&gt; =3D J=
WS(&lt;RS1 private key&gt;, {<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "token": &lt;at_1&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "aud": "rs2.example.com",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "scope": "b",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "foobar": null<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">})<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier"><o:p>&nbsp;</o:p>=
</span></p>
<p class=3D"MsoNormal">Similarly, the client can call rs2.example.com with a=
 token that is restricted from further use.<span style=3D"font-family:Courie=
r"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&lt;at_3&gt; =3D J=
WS(&lt;client private key&gt;, {<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "token": &lt;at_0&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "aud": "rs2.example.com",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "exp": &lt;now + 5 seconds&gt;,<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "scope": "b",<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">&nbsp;&nbsp;&nbsp=
; "foobar": null<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier">})<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier"><o:p>&nbsp;</o:p>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"font-family:Courier"><o:p>&nbsp;</o:p>=
</span></p>
<p class=3D"MsoNormal">This pattern allows for layered constraints, local in=
trospection, and local validation. The requirements (that I=E2=80=99ve ident=
ified) are that:<o:p></o:p></p>
<ol style=3D"margin-top:0in" start=3D"1" type=3D"1">
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 l=
fo1">The client must register a public key with the AS (this could be done d=
uring the token request).<o:p></o:p></li><li class=3D"MsoListParagraph" styl=
e=3D"margin-left:0in;mso-list:l0 level1 lfo1">The AS must know whether or no=
t to give the client a plain bearer token or a token with the
<span style=3D"font-family:Courier">"foobar"</span> claim (presentation of a=
 key possession proof in the token request could be enough).<o:p></o:p></li>=
<li class=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 l=
fo1">Any recipient that wishes to validate the token must have the public ke=
y for the AS.<o:p></o:p></li><li class=3D"MsoListParagraph" style=3D"margin-=
left:0in;mso-list:l0 level1 lfo1">Any recipient that wishes to add a layer m=
ust have a public key that is known to its callers.<o:p></o:p></li><li class=
=3D"MsoListParagraph" style=3D"margin-left:0in;mso-list:l0 level1 lfo1">Any r=
ecipient that performs local validation must understand the meaning of the
<span style=3D"font-family:Courier">"foobar"</span> claim.<o:p></o:p></li></=
ol>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">I haven=E2=80=99t thought too deeply on this so I wou=
ldn=E2=80=99t consider the idea fully baked, but I=E2=80=99m curious to hear=
 your thoughts on it.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">=E2=80=93&nbsp;<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">Annabelle Richard Ba=
ckman<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt">AWS Identity<o:p></o=
:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:12.0pt;color:black">From:=
 </span></b><span style=3D"font-size:12.0pt;color:black">Neil Madden &lt;nei=
l.madden@forgerock.com&gt;<br>
<b>Date: </b>Wednesday, November 27, 2019 at 11:43 PM<br>
<b>To: </b>"Richard Backman, Annabelle" &lt;richanna@amazon.com&gt;<br>
<b>Cc: </b>Brian Campbell &lt;bcampbell@pingidentity.com&gt;, oauth &lt;oaut=
h@ietf.org&gt;<br>
<b>Subject: </b>Re: [OAUTH-WG] New Version Notification for draft-fett-oauth=
-dpop-03.txt<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal">On 27 Nov 2019, at 20:30, Richard Backman, Annabelle &=
lt;richanna@amazon.com&gt; wrote:<o:p></o:p></p>
</div>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</blockquote>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">&gt; That is true, but is IMO more of a hindrance tha=
n an advantage for a PoP scheme. The very fact that the signature is valid a=
t every RS is why you need additional measures to prevent cross-RS token reu=
se.<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">The other methods you mention require their own addit=
ional measures in the form of key exchanges/handshakes. And you still need t=
o prove possession of that shared key somehow.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">This is true. The difference being that the derived k=
ey can then be reused for many requests. Because the key derivation is crypt=
ographically tied to this context the RS can=E2=80=99t replay these symmetri=
c tokens anywhere else.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">In some cases, =E2=80=9Cderive a shared key and encry=
pt this blob=E2=80=9D is easier; in some cases =E2=80=9Csign this blob decla=
ring your audience=E2=80=9D is easier.<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">The ECDH scheme does challenge-response to ensure fre=
shness. This was designed to match the anti-replay measures in the DPoP draf=
t but without requiring the server store any state. If you don=E2=80=99t nee=
d replay protection (if TLS is enough)
 then you can indeed just sign the audience, or for ECDH you can do complete=
ly static ECDH between the client=E2=80=99s private key and the RS=E2=80=99s=
 public key to derive a shared key that is the same for all time (until key r=
otation). But in that case you may as well just
 return a symmetric key directly from the AS... attached to a macaroon, say.=
&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">&gt; The easiest way to use macaroons with asymmetric=
 crypto is to make the macaroon identifier be an encrypted random HMAC key t=
hat the RS can decrypt (or a derived key using diffie-hellman). You can conc=
atenate multiple encrypted keys for
 multiple RSes. Alternatively in a closed ecosystem you can encrypt the rand=
om HMAC with a key stored in a KMS (such as AWS KMS) and grant each RS decry=
pt permissions for that KMS key.<o:p></o:p></p>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">Is the =E2=80=9Crandom HMAC key that the RS can decry=
pt=E2=80=9D the root key used to generate the macaroon? If so, how would you=
 prevent one targeted RS from using the root key and macaroon identifier to c=
onstruct an arbitrary macaroon for replay against
 another targeted RS? If not, how does the targeted RS use the decrypted =E2=
=80=9Crandom HMAC key=E2=80=9D to validate the macaroon? Is there a paper on=
 this approach?<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">That is the easiest way to let the RS verify the maca=
roon on the assumption that the RS is trusted. I=E2=80=99m not aware of an a=
lternative for asymmetric crypto when the RS is untrusted other than using t=
he signature-based macaroon variant or
 having per-RS keys.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I=E2=80=99m not really a fan of purely signature-base=
d JWT access tokens because those tokens often contain PII and so should rea=
lly be encrypted to avoid leaking details to the client (or anyone else if t=
he token does leak). This came up in the
 discussion of the JWT-based access tokens draft, which is why I proposed&nb=
sp;<a href=3D"https://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02">htt=
ps://tools.ietf.org/html/draft-madden-jose-ecdh-1pu-02</a>&nbsp;for use in t=
hat draft. But if you=E2=80=99re doing encryption
 then you=E2=80=99re already down the path of having per-RS access tokens (a=
nd keys) - the compact encoding of JWE only allows a single recipient.&nbsp;=
<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">The KMS approach is just symmetric crypto mediated th=
rough a third party (and has the same centralization problem as validation a=
t the AS).<o:p></o:p></p>
</div>
</blockquote>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">&gt; Clients can then later start adding caveats=E2=80=
=A6, while RSes still don't have to make any changes=E2=80=A6.<o:p></o:p></p=
>
<p class=3D"MsoNormal">&gt; DPoP only effectively prevents cross-RS replay i=
f all RSes implement it, otherwise the ones that don't are still vulnerable.=
<o:p></o:p></p>
<p class=3D"MsoNormal">This is because macaroons bake the proof into the =E2=
=80=9Cbearer=E2=80=9D token (which is no longer really a bearer token) in th=
e Authorization header, whereas DPoP puts it in a separate header.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">That=E2=80=99s not the only difference. The other is t=
hat the AS does the validation. If the client appended the DPoP claims to th=
e access token and signed the whole thing, and then the RS took that and sen=
t it to the AS introspection endpoint
 to validate it, then that would have the same advantage of not requiring an=
y changes at the RS.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">But if you do this then there=E2=80=99s no longer any=
 reason to use public key signatures because the client and AS may as well a=
gree a shared secret. (The AS can always impersonate a client anyway). At wh=
ich point we=E2=80=99re basically back using macaroons.&nbsp;<o:p></o:p></p>=

</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">draft-ietf-oauth-signed-http-request is another way t=
o do this that doesn=E2=80=99t rely on macaroons.<o:p></o:p></p>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal">&gt; Your previous point was that they require "non-t=
rivial work to use ...&nbsp;and require developers to learn a new token form=
at".<o:p></o:p></p>
<p class=3D"MsoNormal">By =E2=80=9Cnon-trivial work to use=E2=80=9D I was re=
ferring to work required from the working group, that I did not feel was bei=
ng acknowledged.
<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Do you believe it=E2=80=99s a disproportionate amount=
 of work compared to any other draft the WG works on?<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal">Looking back over the thread, I think my objection st=
ems from you referring to macaroons as an =E2=80=9C<span style=3D"color:blac=
k">access token format=E2=80=9D when they=E2=80=99re really an applied crypt=
ography pattern. The =E2=80=9Cformat=E2=80=9D part would need to be defined
 by the working group. For what it=E2=80=99s worth, I think it=E2=80=99d be i=
nteresting to explore if/how the pattern could be applied to the JWT format,=
 or what tweaks would be necessary to make it work. If we could describe a w=
ay to create macaroons that reuse the existing
 work on JWTs, that would be pretty cool.</span><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">There are existing interoperable macaroon libraries r=
ight now that define a common format [*]. Unless there was a compelling reas=
on not to, I=E2=80=99d hope we=E2=80=99d just standardize that.&nbsp;<o:p></=
o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">[*] Actually they=E2=80=99ve gone through a couple of=
 iterations. I believe the =E2=80=9Clibmacaroons V2 binary=E2=80=9D format i=
s what most now use.&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><span style=3D"color:black">&nbsp;</span><o:p></o:p><=
/p>
<p class=3D"MsoNormal"><span style=3D"color:black">&gt; </span>That burden i=
s significantly reduced when developers can just add a dependency and call a=
 one-liner to add a caveat.<o:p></o:p></p>
<p class=3D"MsoNormal">Libraries can certainly reduce the amount of work req=
uired by developers (and here I mean client developers, RS developers, AS de=
velopers, and OAuth client and server library developers), but come with the=
ir own concerns (e.g., platform
 availability, licensing, maintenance and reliability, etc.). It becomes one=
 more dependency that developers have to consider.<o:p></o:p></p>
</div>
</blockquote>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I=E2=80=99m not really sure what your point is here. *=
Any* new addition to OAuth has to be implemented. Either that=E2=80=99s done=
 with a library or you write your own.&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">=E2=80=94 Neil<o:p></o:p></p>
</div>
</div>
</div>
</div>


</div></blockquote></div></body></html>=

--Apple-Mail-C0A8722B-9AA6-422D-BF32-7AB424D55779--

