Re: [apps-discuss] Status of draft-ietf-appsawg-http-forwarded-04.txt

[Stephen Farrell <[e-mail]>]

On 07/02/2012 05:13 PM, Alexey Melnikov wrote:
> Hi Stephen,
> 
> On 01/07/2012 14:39, Stephen Farrell wrote:
>> On 06/27/2012 04:00 PM, Alexey Melnikov wrote:
>>> Dear WG participants,
>>>
>>> The Working Group Last Call for this document has ended and there were a
>>> couple of updates to it to address issues (-03 and -04). I believe all
>>> issues were addressed, but it would be good for the WG to check the
>>> latest version and confirm that. If one of your issues is not addressed
>>> (and especially if it wasn't replied to), please let me know.
>>>
>>> In the meantime, I've started working on the shepherding write-up before
>>> asking our AD Barry to review and initiate IETF Last Call for the
>>> document.
>> I've only looked at 8.3, but I believe the privacy considerations
>> section is wrong when it says that standardising this has no new
>> privacy impact.
>>
>> One argument given is that a direct connection would expose the
>> client IP anyway, but that's not comparing this proposal against
>> today's reality, which ought to be the point.
>>
>> I also think the text in that section seems to be trying to sell
>> this as having no privacy impact, and I just don't think that is
>> the case.
> 
> Can you suggest some specific text or at least reraise this issue during
> IETF LC?

Fair question.

I can raise it during IETF LC, sure. Not sure if I'll get a chance
to draft proposed text, but if I do, I will;-)

Cheers,
S.