Grant Negotiation and Authorization Protocol Resource Server Connections
draft-ietf-gnap-resource-servers-09

Thank you to Lars Eggert for the GENART review.

** Section 5.3.1
   Status  Whether or not the format is in active use.  Possible values
      are Active and Deprecated.

Is there any guidance to the DE on how an existing registry value would have its status changed?

Thank you for this document.

One question about the new IANA registries with Expert Review policy. They do contain a Reference field, which seems to imply that a specification should be publicly available. Experts guidelines are also given to check that the definition for each registered parameter is valid, which I assume would be in such a specification. However nowhere it is stated that the specification should be public (and stable?). 

You could do like in RFC 7595 and add some text covering the fact that the Expert should check the specification exists and "if no permanent, citable specification (...) is included, credible reasons for not providing it SHOULD be given." This gives more flexibility than Specification required, while covering the requirement on the specification.

The document status question in the shepherd writeup was not completed.

Thanks to Rich Salz for his ARTART review.

Possibly an odd question, which you can blame on my DKIM background, but in Section 3.3:

(BEGIN)
The RS signs the request with its own key and sends the value of the access token as the body of the request as a JSON object with the following members:

[...]

proof (string): RECOMMENDED. The proofing method used by the client instance to bind the token to the RS request. The value MUST be in the GNAP Key Proofing Methods registry.

[...]

{
    "access_token": "OS9M2PMHKUR64TB8N6BW7OZB8CDFONP219RP1LT0",
    "proof": "httpsig",
    "resource_server": "7C7C4AZ9KHRS6X63AJAO"
}
(END)

Is the RECOMMENDED referring to the presence of "proof", or its inclusion in what gets hashed for the signature?

Thanks to Rich Salz for the ARTART review.

Not my area of expertise, so balloting NoObj trusting my co-ADs.