February 2019 - WG-UMA - mailman.kantarainitiative.org

Deadline is today for OAuth Security Workshop proposals
by Eve Maler 18 Feb '19

18 Feb '19

https://sec.uni-stuttgart.de/events/osw2019 Is anyone thinking of attending? There is interest in getting an UMA tutorial there. At this point, while I’m still a “possible” on Prague, I’m very likely not making it to Stuttgart. I strongly encourage you to submit a proposal now if you’ve been thinking about it; we can help with content. Please ping me if you have questions. Eve (sent from my iPhone, possibly with Siri's "help": +1-425-345-6756)

1 0

Canceling this week's UMA call
by Eve Maler 13 Feb '19

13 Feb '19

I'm bearing down on getting the specs submitted today -- thanks to Thomas for the assistance. Stay tuned for links to that. Due to a heavy meeting schedule, I think it's best if I cancel tomorrow's call. (Perhaps I can use a bit of scavenged time to work on an early IETF presentation draft.) Sorry for the late notice. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Draft minutes of UMA telecon 2019-02-07
by Eve Maler 07 Feb '19

07 Feb '19

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-02-07 MinutesRoll call Quorum was reached. Approve minutes - - Approve minutes of UMA telecon 2019-01-17 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-01-17> Deferred. UMA business model If we link from a technical artifact, such as the PAT, to a "machine-readable device" such as a license, one big question is whether there is a "MUST understand" semantic required around the thing at the end of the link. Maybe insisting on machine readability is going too far because most implementers may not be ready for that. On the other hand, having that kind of language prepared could be an accelerator. To conclude for today: We can't ask report readers/implementers to be REQUIRED to understand what's at the end of the link without first writing that machine-readable stuff – but we might want to do that work and still not REQUIRE it to be interpreted. Also, if we do this work, it would probably be considered a spec vs. a simple report. So we need clarity on which thing we're building/documenting. For example, we can use the PAT as the first key artifact that would carry a link to a relevant device; would that device be machine-readable? Adrian notes that Justin R. has recently joined the W3C VC group. *AI:* David: Follow up with Eve (and Colin?) on the PIPC progress. IETF contribution plans - Review and approve new UMA2 Internet-Drafts intended for contribution (Thomas to produce prior to call) - Plan topics and presenters for a OAuth WG presentation: - Sender-constrained RPTs? - Comments on oauth-distributed draft? Eve spoke to Hannes a couple of weeks back, and has since exchanged email with Hannes and Rifaat. She has asked for 30 minutes of presentation time for a start; we'll work out exactly how much time as they get more requests in. Peter is looking at attending Prague in person. Eve may be able to atend. We'll figure out who may be in a position to present based on in-person vs. remote attendance. Eve is going to start a rough-draft presentation we can collaboratively work on. In the umagrant I-D, Figure 1 has broken line ends. We could rewrite it so that the diagram isn't so long, and just number the steps. In addition, we could at least expand the text lines to stretch to the full 80 characters where possible, to shorten the length of the diagram. Or even maximally, we could refactor how the same information is presented, in diagram or even diagram-plus-new-text form. For starters, let's at least fix the glitch. The umafederation I-D doesn't seem to be affected. *MOTION:* Cigdem moves, Sal seconds: Approve contributing the umagrant and umafederation I-Ds, with the umagrant Figure 1 lines fixed, to the IETF. *APPROVED* by unanimous consent. High assurance of the RO to the RqP Deferred. Attendees As of 18 Oct 2018, quorum <https://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 5 of 8. (Domenico, Peter, Sal, Andi, Maciej, Eve, Mike, Cigdem) 1. Domenico 2. Peter 3. Sal 4. Eve 5. Cigdem Non-voting participants: - Nancy - Prabath - Thomas - Scott - George - Adrian - David - Bjorn - Colin Guests: - VP Herisse (colleague of Nancy) Regrets: - Andi - Mike *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Fwd: [OAUTH-WG] 4th OAuth Security Workshop - Registration now open!
by Eve Maler 07 Feb '19

07 Feb '19

This is the security workshop I mentioned on today's call. You can see that they reserve a block of time for tutorials. If someone is thinking of going and may want to do an UMA tutorial, please speak up. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl ---------- Forwarded message --------- From: Daniel Fett <danielf+oauth(a)yes.com> Date: Thu, Feb 7, 2019 at 10:03 AM Subject: [OAUTH-WG] 4th OAuth Security Workshop - Registration now open! To: oauth(a)ietf.org <oauth(a)ietf.org> All, The registration for the 4th OAuth Security Workshop (March 20-22, Stuttgart) is now open. As usual, the workshop will feature interesting talks and discussions around OAuth, OpenID Connect, and related standards and technologies. This time, we also aim to offer tutorials on the morning of the first day and an unconference-style second day. Please register at https://sec.uni-stuttgart.de/events/osw2019 - early bird pricing is available until March 5. Please also consider submitting a proposal for a session (talk/discussion/...) or tutorial until February 18 (see link above). -Daniel _______________________________________________ OAuth mailing list OAuth(a)ietf.org https://www.ietf.org/mailman/listinfo/oauth

1 0

Candidate I-Ds of UMA specs
by Eve Maler 07 Feb '19

07 Feb '19

*Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Agenda for UMA telecon 2019-02-07
by Eve Maler 06 Feb '19

06 Feb '19

Cc'ing a couple of folks to draw attention to the "IETF contribution plans" agenda item. https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-02-07 Date and Time - *Thursdays 6am PT* - Screenshare and dial-in: https://global.gotomeeting.com/join/857787301 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Roll call - Approve minutes of UMA telecon 2019-01-17 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-01-17> - UMA business model (we will have "quorum" for it in first half-hour) - IETF contribution plans - Review and approve new UMA2 Internet-Drafts intended for contribution (Thomas to produce prior to call) - Plan topics and presenters for a OAuth WG presentation: - Sender-constrained RPTs? - Comments on oauth-distributed draft? - High assurance of the RO to the RqP (discuss if Peter is available) - AOB *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0