Subject: [tram] [Errata Held for Document Update] RFC7635 (4923)

From: RFC Errata System <[email-masked]>
Date: Thu, 14 Jan 2021 05:59:29 -0800 (PST)

The following errata report has been held for document update 
for RFC7635, "Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid4923

--------------------------------------
Status: Held for Document Update
Type: Technical

Reported by: Mészáros Mihály <[email-masked]>
Date Reported: 2017-02-03
Held by: Magnus Westerlund (IESG)

Section: Appendix B.

Original Text
-------------
          "key":"v51N62OM65kyMvfTI08O"

Corrected Text
--------------
        "key": "ew0KICAgICJrdHkiOiJvY3QiLA0KICAgICJ
raWQiOiJpZDEyMyIsDQogICAgImFsZyI6IkhTMjU2IiwNCiAgIC
AiayI6IlpvUlNPckZ6Tl9GelVBNVhLTVlvVkh5emZmNW9SSnhsL
UlYUnR6dEo2dUUiDQp9"

Notes
-----
"key" according https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution-02#section-4.2
"The 'key' parameter either contains a plain JWK structure or a JWK encrypted with a JWE."

According Example Figure 2. "key" in draft-ietf-oauth-pop-key-distribution-02#section-4.2 
It seems they missed to write plain JWK MUST be base64 format.
So according the example coorected the above sentence:

"The 'key' parameter either contains a plain BASE64 ENCODED JWK structure or a JWK encrypted with a JWE."

Anyhow in RFC7635 Appendix B. the
"key" seems to be not in base64 (JWK) or JWE encrypted JWK format. 
(Base64 decoded key value string is "Salted__"....)

--------------------------------------
RFC7635 (draft-ietf-tram-turn-third-party-authz-16)
--------------------------------------
Title               : Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
Publication Date    : August 2015
Author(s)           : T. Reddy, P. Patil, R. Ravindranath, J. Uberti
Category            : PROPOSED STANDARD
Source              : TURN Revised and Modernized
Area                : Transport
Stream              : IETF
Verifying Party     : IESG