Re: [apps-discuss] [saag] [websec] [kitten] HTTP authentication: the next generation

der Mouse <mouse@Rodents-Montreal.ORG> Thu, 06 January 2011 18:39 UTC

Return-Path: <mouse@Sparkle.Rodents-Montreal.ORG>
X-Original-To: apps-discuss@core3.amsl.com
Delivered-To: apps-discuss@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4CD5F3A6F43; Thu, 6 Jan 2011 10:39:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.792
X-Spam-Level:
X-Spam-Status: No, score=-8.792 tagged_above=-999 required=5 tests=[AWL=1.196, BAYES_00=-2.599, HELO_MISMATCH_ORG=0.611, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PImVhi95MZYY; Thu, 6 Jan 2011 10:39:23 -0800 (PST)
Received: from Sparkle.Rodents-Montreal.ORG (Sparkle.Rodents-Montreal.ORG [216.46.5.7]) by core3.amsl.com (Postfix) with ESMTP id CF3113A6F3A; Thu, 6 Jan 2011 10:39:22 -0800 (PST)
Received: (from mouse@localhost) by Sparkle.Rodents-Montreal.ORG (8.8.8/8.8.8) id NAA23900; Thu, 6 Jan 2011 13:35:40 -0500 (EST)
Date: Thu, 06 Jan 2011 13:35:40 -0500
From: der Mouse <mouse@Rodents-Montreal.ORG>
Message-Id: <201101061835.NAA23900@Sparkle.Rodents-Montreal.ORG>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Erik-Conspiracy: There is no Conspiracy - and if there were I wouldn't be part of it anyway.
X-Message-Flag: Microsoft: the company who gave us the botnet zombies.
X-Composition-Start-Date: Thu, 6 Jan 2011 13:19:53 -0500 (EST)
To: apps-discuss@ietf.org, websec@ietf.org, kitten@ietf.org, http-auth@ietf.org, saag@ietf.org, ietf-http-wg@w3.org
In-Reply-To: <4D0E8148.7060607@extendedsubset.com>
References: <4D02AF81.6000907@stpeter.im> <p06240809c928635499e8@10.20.30.150> <ADDEC353-8DE6-408C-BC75-A50B795E2F6C@checkpoint.com> <78BD0B98-0F20-478B-85F1-DBB45691EB0D@padl.com> <4D0479E3.4050508@gmail.com> <4D04D7D6.4090105@isode.com> <A23730A9-728B-4533-96D7-0B62496CC98A@checkpoint.com> <4D051731.1020400@isode.com> <4D054041.7010203@cisco.com> <0435D11C-DF55-464D-B23F-F5D114DEE2C3@checkpoint.com> <2229.1292235952.971571@puncture> <4D05FB8F.3070804@qbik.com> <2229.1292239384.281779@puncture> <96517E19-5DC7-47A0-8C21-C710F6F8F772@tzi.org> <2229.1292253372.639419@puncture> <AANLkTi=iGWnBtOgPhN9tRtaJTxQhvRkjq3p0UCkRdT8=@mail.gmail.com> <4D0DE882.50201@qbik.com> <AANLkTi=oscrJbRM2coa1+bZFB6W8t5vKcmEMGpDPvrf9@mail.gmail.com> <4D0E8148.7060607@extendedsubset.com>
X-Mailman-Approved-At: Fri, 07 Jan 2011 11:40:25 -0800
Subject: Re: [apps-discuss] [saag] [websec] [kitten] HTTP authentication: the next generation
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Jan 2011 18:39:24 -0000

> Look back far enough and you'll find all kinds of "electronic mail"
> services implementing the full range of peer and end user
> authentication, and sender-pays models.  There was no spam on those
> systems, or at least not enough that anyone felt like they needed a
> word for it.

There was basically no spam on open-Internet SMTP mail either, at the
time.  Certainly "no spam" by today's standards.

> Guess why we use the one we use today.

At the time, the services you deride weren't providing a significant
value-add.

Today?  They would be.  Perhaps not enough to make up for their costs;
probably not, in fact, or there'd be businesses arising in that space.

As a side note, it's interesting to see how well the early Internet
designers built; their systems are routinely being stressed several
orders of magnitude beyond what they were designed for, and are holding
up remarkably well.  The postal system did collapse when it started
suffering from spam; that's why the paper chain mail is actually
illegal in many jurisdictions - it took down the postal system, once
upon a time.  The telphone system would collapse if phone spam
outnumbered real calls by 10, 25, 100 to 1.  (Actually, in a sense they
already do.  I have a fax line set up, and get dozens of fax spams for
every real fax.  I've had to start adapting and applying my email spam
fighting techniques there....)

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		mouse@rodents-montreal.org
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B