IETF Logo Mail Archive

Re: [dispatch] A WG for HTTP API Building Blocks

Anders Rundgren <anders.rundgren.net@gmail.com> Wed, 15 July 2020 07:40 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: dispatch@ietfa.amsl.com
Delivered-To: dispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E53823A08A6 for <dispatch@ietfa.amsl.com>; Wed, 15 Jul 2020 00:40:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.201
X-Spam-Level:
X-Spam-Status: No, score=-0.201 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DEd0GbYXXz0h for <dispatch@ietfa.amsl.com>; Wed, 15 Jul 2020 00:40:40 -0700 (PDT)
Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9CD53A08A5 for <dispatch@ietf.org>; Wed, 15 Jul 2020 00:40:39 -0700 (PDT)
Received: by mail-wm1-x32f.google.com with SMTP id c80so4379552wme.0 for <dispatch@ietf.org>; Wed, 15 Jul 2020 00:40:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=liHpaFPoJN5Y2pSnfZ3e/qnutuLJAMRHE7RUQQ1UedM=; b=dHEtXpLsoowfLTQvQ/w6Ep0u369asBZ7DmKBvTClU1vboh+tmU7pDwECm2FN+IYYY1 iVPQ0fakKglMwTAIhXnBmbFVKsJjVzKzq0uN7anaXLc5tWGbo1kbuTVXMwZLd4uRGqIb nRXm9kUcbf8Ht51nWa/kErKrNlfBH8igTN8F1qyU12vRgEQOPHmiibBXi/GEOloS5QPP i1NnE/uflzNgpdC+BsF3T9ekvGCqOkql/7LrDKnLuW9V6KS615xv71NrUXlbfytt5H3c cr3lBzdHNZ6rBXqSDuC+RchITJzpev3w/t1nEqr7eZfLezAF+wOy8+HKj0WIekGVI7IM Si0Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=liHpaFPoJN5Y2pSnfZ3e/qnutuLJAMRHE7RUQQ1UedM=; b=eyvOLJAiXVjri6VetZvLpMqtDVl0WbtvcjcADwaoscvJF/+qDU2xJFgBL+n/Wn3MZv dDMve2gex52Enj9MYuATuZSfwldjqesSAvN7VGx7ZiCMJzKLBw5P1jIpTiE+oW/Nvsdj 25Uj/aDjHDD2ZLXoHukZVc+UZw8bcKYBFLTFwOuPs0qH2KF/xDFkYHYIPVw8uHVVwcym gS2/EB07idrLZtNQcbHAAZhoAJbfb0bZvTquBS4D+S2z2cfoJ3JUDtGU3M5Ff/w7hCQI /wk2vEjA1bqEdfq69DJGuvwzOP+vxRlq8rKuze3yNhs3xs48uGzJWKK0ST5muOb8KSZG w/+A==
X-Gm-Message-State: AOAM531tMokAag6r+XIcukIGRJzfKz6d/HrMZGWFSQHUgh1nymWoPXhP i4vqBrTrlkVlp2mRzG5nAHE/QVA2nNk=
X-Google-Smtp-Source: ABdhPJzIvEonNeWUJDGmGvXJPJEz7EfI13evTt+1/HAHWQVjnaL1kfH8+ilpEQqjflcqyT94rJMzXA==
X-Received: by 2002:a05:600c:2285:: with SMTP id 5mr7670033wmf.78.1594798837831; Wed, 15 Jul 2020 00:40:37 -0700 (PDT)
Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id p14sm2550357wrj.14.2020.07.15.00.40.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 15 Jul 2020 00:40:36 -0700 (PDT)
To: Mark Nottingham <mnot@mnot.net>
Cc: DISPATCH WG <dispatch@ietf.org>
References: <111A89F4-CBD6-4C63-A45A-C7458E7413FF@mnot.net> <CAHBDyN7BGsBJ4=+boBAAP5Z+ZT+pFfQ-iJtSa7qHNTP_bGyXeQ@mail.gmail.com> <7414026C-4726-4C8E-8C9C-60A81F5456B5@brianrosen.net> <506832AD-0C3C-43AA-B5A7-EB5E80A2A112@mnot.net>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
Message-ID: <56558cd0-b1e1-9be1-a07e-c4d62c133de9@gmail.com>
Date: Wed, 15 Jul 2020 09:40:34 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <506832AD-0C3C-43AA-B5A7-EB5E80A2A112@mnot.net>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dispatch/x058f9l1yIkT93bNfyy6Txb5rk0>
Subject: Re: [dispatch] A WG for HTTP API Building Blocks
X-BeenThere: dispatch@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DISPATCH Working Group Mail List <dispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dispatch>, <mailto:dispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dispatch/>
List-Post: <mailto:dispatch@ietf.org>
List-Help: <mailto:dispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dispatch>, <mailto:dispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jul 2020 07:40:41 -0000

A long time source of frustration has been and still is the case of "Signed HTTP Requests".
The limited progress in this space have forced other parties to step in, more recently including ETSI with Open Banking as initial target.
FWIW, I'm personally working on such a scheme that facilitate serialization which in turn enables counter-signing.  It is based on RFC 8785.

thanx,
Anders

v2.23.0 | Report a Bug | By Email