Re: Working Group Last Call: The Concealed HTTP Authentication Scheme

David Schinazi <dschinazi.ietf@gmail.com> Fri, 05 July 2024 21:57 UTC

Resent-Date: Fri, 05 Jul 2024 21:56:48 +0000
Resent-Message-Id: <E1sPqvA-005HuW-1C@mab.w3.org>
Received-SPF: pass (puck.w3.org: domain of gmail.com designates 2a00:1450:4864:20::134 as permitted sender) client-ip=2a00:1450:4864:20::134; envelope-from=dschinazi.ietf@gmail.com; helo=mail-lf1-x134.google.com;
MIME-Version: 1.0
References: <4270C5C8-23AA-456C-8AB4-A8B23E83224C@mnot.net> <3CCDDF59-8433-468A-A5D4-FDB1FA7A8E49@apple.com>
In-Reply-To: <3CCDDF59-8433-468A-A5D4-FDB1FA7A8E49@apple.com>
From: David Schinazi <dschinazi.ietf@gmail.com>
Date: Fri, 05 Jul 2024 14:56:29 -0700
Message-ID: <CAPDSy+6g1udDJX5AUuEZ8gpLEjt0mgtf_kwOzKEVSZxjbaeZvA@mail.gmail.com>
To: Tommy Pauly <tpauly@apple.com>
Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, David Oliver <david@guardianproject.info>, Jonathan Hoyland <jonathan.hoyland@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000075b2f7061c8723d5"
Subject: Re: Working Group Last Call: The Concealed HTTP Authentication Scheme
Archived-At: <https://www.w3.org/mid/CAPDSy+6g1udDJX5AUuEZ8gpLEjt0mgtf_kwOzKEVSZxjbaeZvA@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

Thank you Tommy.

I've submitted -08 to incorporate the editorial changes made during WGLC.
Diff at [1].

I looked into adding test vectors, however for this particular spec it
would be more work and less value than usual, because of the dependency on
the TLS key exporter. Since the three independent implementations were able
to successfully interop without them, I think it best to skip them here.

David

[1]
https://author-tools.ietf.org/iddiff?url2=draft-ietf-httpbis-unprompted-auth-08

On Fri, Jun 28, 2024 at 1:20 AM Tommy Pauly <tpauly@apple.com> wrote:

> Thanks to everyone who provided feedback! We believe we have consensus to
> move forward.
>
> Authors, please submit a new version that incorporates the WGLC comments.
> Please consider including a test vector, as Martin suggested, as well.
>
> Best,
> Tommy
>
> > On Jun 11, 2024, at 8:55 PM, Mark Nottingham <mnot@mnot.net> wrote:
> >
> > Working Group participants,
> >
> > This e-mail announces Working Group Last Call for revision 07 of the
> following document:
> >  https://datatracker.ietf.org/doc/draft-ietf-httpbis-unprompted-auth/
> >
> > There are no outstanding issues in GitHub, and the editors indicate that
> they believe it is ready.
> >
> > Please review the document and raise any issues you find (preferably on
> GitHub, but also acceptable on-list) and indicate whether you support
> publication (or object to it) in response to this message.
> >
> > Working Group Last Call will end on 27 June 2024.
> >
> > Cheers,
> >
> > --
> > Mark Nottingham   https://www.mnot.net/
> >
> >
>
>

Working Group Last Call: The Concealed HTTP Authe… Mark Nottingham
Re: Working Group Last Call: The Concealed HTTP A… Dennis Jackson
Re: Working Group Last Call: The Concealed HTTP A… David Schinazi
RE: Working Group Last Call: The Concealed HTTP A… Mike Bishop
Re: Working Group Last Call: The Concealed HTTP A… David Schinazi
Re: Working Group Last Call: The Concealed HTTP A… Watson Ladd
Re: Working Group Last Call: The Concealed HTTP A… Martin Thomson
Re: Working Group Last Call: The Concealed HTTP A… Tommy Pauly
Re: Working Group Last Call: The Concealed HTTP A… David Schinazi