Web Authorization Protocol
charter-ietf-oauth-06

[Ballot comment]
Nice charter. I agree with Eric that it is great to see the statement on the much-needed "extensions for authorization of automated agents working on behalf of users."

I think it would be useful to clarify what is meant by "EU Wallet Initiative". Is this the EU Digital Identity Wallet? As this is an effort outside of the IETF, consider adding a link, e.g., https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487738/EU+Digital+Identity+Wallet+Home, in order to avoid any confusion.

[Ballot comment]
I like the clarity of the charter and the will to tackle `extensions for authorization of automated agents working on behalf of users` ;-)

[Ballot comment]
Hi all,

Thank you for preparing this updated version of the charter.

Please find below some few comments:

# Agents

CURRENT:
  As automated agents increasingly act on behalf of users, organizations, or both, these delegation patterns become increasingly involved and complex.

## Does the WG intend to work on identifying specifics of such schemes?

## Does the WG intend to publish applicability documents to show how existing OAuth Framework can be used in such contexts?

## The excerpt above exacerbates the need for having OAuth troubleshooting mechanisms and good error reporting. I suggest to add an item for operations/deployment considerations (and troubleshooting, in particular) under work program.

# Restriction?

CURRENT:
  The working group is now tackling these topics which will be published as Standards Track or BCPs:

This statement would exclude that the WG can refresh work such as https://www.rfc-editor.org/rfc/inline-errata/rfc6819.html  (that would, for example, integrate existing errata or considerations that may be specific to the complex delegation patterns listed above). I would argue for some flexibility here.

Cheers,
Med

Added milestone "Submit 'Request by JWS ver.1.0 for OAuth 2.0' to the IESG for consideration as a Proposed Standard", due February 2016, from current group milestones

[Ballot comment]

FWIW, I was at the Yokohama OAuth meeting where this
was discussed, and there was fairly clear consensus in the
room to do this work and people willing to do it.

I'm not sure if this really needs external review. I'd be
fine if we just did it, but haven't checked if there's some
reason to want to shoot it out to new-work.

[Ballot comment]
This is a charter update to reflect work that has been going on and new work the group intends to adopt.  The chairs are putting out calls for adoption now for some documents related to this new charter, and they will add milestones for those once that happens.