Re: Straw-man charter for http-bis -- call for errata/clarifications to 2617

["Robert Sayre" <[e-mail]>]

On 5/31/07, Mark Nottingham <[e-mail]> wrote:
>
> Robert's draft is orthogonal to a 2617 update; the idea of that is to
> address the need for MTI security.

My draft is orthogonal to things that are unimplementable, because it
seeks to document what has actually happened, and why it did. It may
be possible to design an MTI scheme for HTTP. So far, the text in my
draft leads me to believe that HTTP authentication is wedged between
graphic design, scalability, and security in such a way that
implementors of a given protocol will never be able to agree on shared
trade-offs. But I have only written what I know. I'm sure the document
can be augmented and corrected.

> It would be interesting to compile issues for 2617 as well, to see
> what the scope of work would be. If we can keep the scope to errata
> and clarifications (i.e., not introducing new schemes), it might be
> doable.

My feeling is that the current schemes can be updated by documenting
the internationalization behavior of popular implementations, but
nothing else is worth doing.

-- 

Robert Sayre

"I would have written a shorter letter, but I did not have the time."