<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"\@MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:JA;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#002060;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#002060">Some OAuth specs are being developed that need to use parameters defined by OpenID Connect Dynamic Registration. The errata 2 draft at
</span><a href="http://openid.net/specs/openid-connect-registration-1_0-29.html#DynRegContents">http://openid.net/specs/openid-connect-registration-1_0-29.html#DynRegContents</a><span style="color:#002060"> already contains the registration requests for those
parameters.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#002060"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#002060">We’d been waiting to submit the registration requests to IANA until errata 2 was done, but given that may be a little bit off looking at the open issues, it seems prudent to submit the registrations to IANA now.
The IANA process for this registry already explicitly allows early registrations of stable parameters – and these certainly are stable. We defined them years ago.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#002060"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#002060">Unless I hear objections, I’ll plan to submit the requests to IANA early next week.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#002060"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#002060"> -- Mike<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#002060"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Mike Jones
<br>
<b>Sent:</b> Thursday, November 05, 2015 4:05 PM<br>
<b>To:</b> oauth@ietf.org<br>
<b>Subject:</b> Inaccuracy in last point in JWSREQ presentation about registering request_object_signing_alg<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The last bullet of the last slide of <a href="https://www.ietf.org/proceedings/94/slides/slides-94-oauth-5.pdf">
https://www.ietf.org/proceedings/94/slides/slides-94-oauth-5.pdf</a> says:<o:p></o:p></p>
<p class="MsoNormal"> Section 7<o:p></o:p></p>
<p class="MsoNormal"> – False statement:<o:p></o:p></p>
<p class="MsoNormal"> ● The request_object_signing_alg OAuth Dynamic Client Registration Metadata is pending registration by OpenID Connect Dynamic Registration specification.<o:p></o:p></p>
<p class="MsoNormal"> ● The registry doesn't have it and Connect's Registration "makes no requests of IANA"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This not false. (I didn’t say so from the microphone in the room in the interest of time.)
<a href="http://openid.net/specs/openid-connect-registration-1_0-29.html#DynRegContents">
http://openid.net/specs/openid-connect-registration-1_0-29.html#DynRegContents</a>, the current errata 2 draft version, contains the registration request for request_object_signing_alg. It has not yet been submitted to IANA but it will be soon.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> -- Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>