[apps-discuss] Comment on draft-thomson-http-omnomnom-00
Cullen Jennings <fluffy@iii.ca> Sat, 23 July 2016 09:37 UTC
Return-Path: <fluffy@iii.ca>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 375F712D630 for <apps-discuss@ietfa.amsl.com>; Sat, 23 Jul 2016 02:37:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wnWuwwJW-a_o for <apps-discuss@ietfa.amsl.com>; Sat, 23 Jul 2016 02:37:42 -0700 (PDT)
Received: from smtp110.iad3a.emailsrvr.com (smtp110.iad3a.emailsrvr.com [173.203.187.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B67D812D672 for <apps-discuss@ietf.org>; Sat, 23 Jul 2016 02:37:37 -0700 (PDT)
Received: from smtp14.relay.iad3a.emailsrvr.com (localhost [127.0.0.1]) by smtp14.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id DBB13601C3; Sat, 23 Jul 2016 05:37:31 -0400 (EDT)
X-Auth-ID: fluffy@iii.ca
Received: by smtp14.relay.iad3a.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id 89B1B60142; Sat, 23 Jul 2016 05:37:31 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [10.61.167.19] ([UNAVAILABLE]. [173.38.220.59]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:587 (trex/5.5.4); Sat, 23 Jul 2016 05:37:31 -0400
From: Cullen Jennings <fluffy@iii.ca>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Sat, 23 Jul 2016 03:37:30 -0600
Message-Id: <3626798A-9358-43E3-B196-44290260BF95@iii.ca>
To: apps-discuss@ietf.org
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
X-Mailer: Apple Mail (2.3124)
Archived-At: <https://mailarchive.ietf.org/arch/msg/apps-discuss/PX_KDS5snhVKBTg701iRkguuJ-c>
Subject: [apps-discuss] Comment on draft-thomson-http-omnomnom-00
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/apps-discuss/>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Jul 2016 09:37:44 -0000
So the relevant text of this draft is Cookies that are set using insecure channels (i.e., HTTP over cleartext TCP), MUST have a short time limit on the time that they are persisted. Without specifying what a short time is, this seems like a pretty vacuous MUST. Perhaps an exact value could be provided.
- Re: [apps-discuss] Comment on draft-thomson-http-… Martin Thomson
- [apps-discuss] Comment on draft-thomson-http-omno… Cullen Jennings