tags:

views:

65

answers:

1
+7  Q: 

How do you comment on an RFC?

I have some comments about the OAuth draft RFC (specifically about some errors it contains), but I'm not sure what the accepted way is to make them.

There's an email address at the bottom, so do I simply send mail there with the comments, or is there some IETF tool I should know about for tracking comments/issues?

+5  A: 

The OAuth mailing list would be my first guess. I found this through the IETF home page.

Thomas  2010-04-06 15:34:55
With all due respect, I'm not really looking for a guess, I'm looking for feedback from people familiar with the process. I know that people involved in the RFC process can be very particular and picky, and I don't want to start off on the wrong foot.
Greg Beech  2010-04-06 16:02:46
Nevertheless, Thomas' answer is right (and I know the IETF, even if I never wrote a RFC myself). On the working group mailing list, you will find everyone (including the authors).Since this particular document has already been accepted by IESG, and will soon be published at a RFC, it may be safer to copy your comments to the RFC editor [email protected] to minimize the risk of the publication of a faulty document.
bortzmeyer  2010-04-06 20:22:06
@borzmeyer - OK thanks, I'll do both. @Thomas - good guess, thanks :-)
Greg Beech  2010-04-07 10:04:04

related questions

XSRF protection in an AJAX style app
Can OAuth be used to schedule Twitter status updates in the future?
2 legged oauth - looking for information
How to get Uri.EscapeDataString to comply with RFC 3986
OAuth - lexicographical byte value ordering in c#
OpenID authentication from an installed application
What is excatly the technology stack defining Web APIs?
Problem with Google Hybrid Protocol (OpenID + OAuth) Demo
How to integrate google's Step2 with acegi security in the Grails Framework?
OAuth alternative?
OAuth? ,OpenID? Neither? Which one should my site support?
Twitter oAuth callbackUrl - localhost development
Example of a good Webservice
Sorting by key and value in case keys are equal
What does the oauth guide mean by "8 bit array"?
Using OAuth for server-to-server authentication?
Getting 401 on Twitter OAuth POST requests
How do I develop against OAuth locally?
Can OAuth work with mobile phone applications?
Security of REST authentication schemes
How do you manage api keys
How can I verify a Google authentication API access token?
How do you debug an ASP.Net application accessing an OAuth secured API?
oAuth REST and C# What's the missing piece
PHP Tutorial for OpenId and OAuth