Subject: Re: [Ace] Options for Transporting Access Tokens

From: Ludwig Seitz <[email-masked]>
Date: Tue, 12 Apr 2016 11:44:20 +0200

On 2016-03-02 18:42, Hannes Tschofenig wrote:
> Hi all,
>
> in the ACE architecture there needs to be the option to pass the access
> token from the client to the resource server. It turns out that there
> are various options to do so (each with pros & cons).
>
> Here is the list we discussed at the interim meeting:
> = POST to a well-known or discoverable resource (e.g. /authz-info)
> = Use a dedicated CoAP option
> = Use TLS supplemental data (RFC 4680)
> = Use psk_identity (DCAF)
> = Define new TLS certificate type (similar to RPK)
> = Use ticket extension (RFC 5077)
>
> Here are the slides from the ACE virtual interim meeting providing
> further background information:
> https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-2.pdf
>
> Since we are still in the phase of exploring options and finding new
> options we soliciting your input without setting a specific deadline.
>
> Ciao
> Hannes & Kepeng
>
>
>
> _______________________________________________
> Ace mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/ace
>

Hello, I've created a quick and dirty draft to support token transport 
via RFC 5077. Comments are welcome.

/Ludwig

> A new version of I-D, draft-seitz-ace-ticket-token-transfer-00.txt
> has been successfully submitted by Ludwig Seitz and posted to the
> IETF repository.
>
> Name: draft-seitz-ace-ticket-token-transfer
> Revision: 00
> Title: Transporing access tokens in session resumption tickets draft-seitz-ace-ticket-token-transfer-00 (TTT) Abstract
> Document date: 2016-04-12
> Group: Individual Submission
> Pages: 6
> URL: https://www.ietf.org/internet-drafts/draft-seitz-ace-ticket-token-transfer-00.txt
> Status: https://datatracker.ietf.org/doc/draft-seitz-ace-ticket-token-transfer/
> Htmlized: https://tools.ietf.org/html/draft-seitz-ace-ticket-token-transfer-00
>
>
> Abstract:
> This memo presents a method of transferring an access token from a
> client to a resource server in a (D)TLS handshake, based on Session
> Resumption without Server-Side State (RFC 5077).
>
>
>
>
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>

-- 
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelevägen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se