Relevant IETF 121 Sessions: OAuth, DNS

Hi Folks!

I've been a lurker here on the list for a bit, but never introduced myself.
I'm Bryan Newbold, I work at Bluesky on the AT Protocol ("atproto"). I
previously worked at the Internet Archive, and was involved with the
dweb events they have organized over the years, and contributed to the dat
protocol. I'm using my work email here for convenience, but can also be
reached at my personal email bnewbold@robocracy.org.

I wanted to cross-pollinate a couple sessions next week at the IETF which
might be of interest to folks here, around auth and identity systems. I
hope this is appropriate and in the spirit of coordination between
standards groups. The complete agenda/schedule is at
https://datatracker.ietf.org/meeting/121/agenda

The first are some OAuth sessions:
https://datatracker.ietf.org/meeting/121/materials/agenda-121-dnsop-01

Aaron Pareki will be presenting updates to the "OAuth Client ID Metadata
Document" draft (
https://datatracker.ietf.org/doc/draft-parecki-oauth-client-id-metadata-document/).
Emelia Smith is a co-author and I believe this work originally came out of
plans and ideas for client/server OAuth in the ActivityPub ecosystem. We
ended up adopting this draft for the atproto OAuth profile.

There is also a session on "OAuth 2.1" which might be relevant to the
overall direction of the OAuth ecosystem.

The second are some sessions in the DNSOP working group:
https://datatracker.ietf.org/meeting/121/materials/agenda-121-dnsop-01

My co-authors and I will be presenting on "Integration of DNS Domain Names
into Application Environments" (
https://datatracker.ietf.org/doc/draft-sheth-dns-integration/). This
touches on using domain names as "handles" in social applications. We also
had a session at the recent W3C TPAC on this topic (
https://www.w3.org/events/meetings/4063788d-6e26-4d19-8898-d7ceb448fca9/),
which I probably should have mentioned on this list ahead of time.

There is also a related draft (
https://datatracker.ietf.org/doc/draft-ietf-dnsop-domain-verification-techniques/)
around the mechanics of how to verify associations between a domain and
account or service.

--bryan
https://social.coop/@bnewbold