Re: [core] draft-hartke-core-stateless

[Christian Amsüss <[e-mail]>]

Hello Klaus,

On Mon, Sep 10, 2018 at 04:07:48PM -0700, Jim Schaad wrote:
> Section 3.1 - I am not sure that I agree that the option should be unsafe to
> forward.  As long as a client and a server agree to deal with the option
> then it does not matter what any intermediate proxies might do.  Changing
> this modifies 3.2.2 as well

I also think that the option can be safe to forward -- as long as the
origin server replies with the "option part" of the token, the proxy
will return the full original request identity (token plus option part)
back.

Either way, one could add that a proxy is free to take responsibility of
the Extended-Token itself, make a note to insert it into the response,
and forward the request without any Extended-Token, relieving the origin
server of the responsibility to deal with the critical option. (I figure
that any non-constrained proxy would want to do that, as it limits the
way a Extended-Token request can fail).

Best regards
Christian`

-- 
I shouldn't have written all those tank programs.
  -- Kevin Flynn