[OAUTH-WG] JOSE/JWT Security Update Presentation

[Mike Jones]

Yaron Sheffer had asked me to give an update on JOSE/JWT security to the SecEvent working group. As promised during our working group meeting Monday, that presentation is attached. At the microphone, Kathleen suggested that we may want to collect information about best practices for implementers and deployers and write a BCP containing them. She said that JWT is being used in many places in the IETF at this point.

-- Mike

[Dave Tonge]

Thanks Mike

I agree with all the next steps, we need some articles to help combat the
FUD that is being spread.
Is there any action on who will write those articles?

Dave

Post by Mike Jones
Yaron Sheffer had asked me to give an update on JOSE/JWT security to the
SecEvent working group. As promised during our working group meeting
Monday, that presentation is attached. At the microphone, Kathleen
suggested that we may want to collect information about best practices for
implementers and deployers and write a BCP containing them. She said that
JWT is being used in many places in the IETF at this point.
-- Mike
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth

[Dick Hardt]

Mike, Yaron Cheffer and myself have volunteered to write a JWT BCP. It is a
topic on the agenda in the OAuth meeting currently underway.

Post by Dave Tonge
Thanks Mike
I agree with all the next steps, we need some articles to help combat the
FUD that is being spread.
Is there any action on who will write those articles?
Dave

Post by Mike Jones
Yaron Sheffer had asked me to give an update on JOSE/JWT security to the
SecEvent working group. As promised during our working group meeting
Monday, that presentation is attached. At the microphone, Kathleen
suggested that we may want to collect information about best practices for
implementers and deployers and write a BCP containing them. She said that
JWT is being used in many places in the IETF at this point.
-- Mike
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth

--
Dave Tonge
_______________________________________________
OAuth mailing list
https://www.ietf.org/mailman/listinfo/oauth