Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 691F4129C89; Tue, 8 Nov 2016 00:56:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=aist.go.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dyHjOIXgPrZB; Tue, 8 Nov 2016 00:56:43 -0800 (PST) Received: from JPN01-OS2-obe.outbound.protection.outlook.com (mail-os2jpn01on0051.outbound.protection.outlook.com [104.47.92.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D350129C8B; Tue, 8 Nov 2016 00:56:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aist.go.jp; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=iLUwznzU5qaFK+ccla39WFkJAMKwzeA3S2+LM2JcrVA=; b=MZ9Z8piJTVMwSD6mkCj6WrpeLxNiU/95ij7NhitkjDbmmzxi2JbNHqzl+HKLvW99Qht5I8MTCjXuTB2f7aCRWO/WK0TtTR1qnSHMV6S9FgG/DiEmrdIOG6sliKZFL82F70SQ5RlCXL5QQ/Vz1oG9ji6k4Z8OJbqlgoHp4k2p1gA= Received: from TY1PR01MB0588.jpnprd01.prod.outlook.com (10.167.157.18) by TY1PR01MB0586.jpnprd01.prod.outlook.com (10.167.157.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Tue, 8 Nov 2016 08:56:39 +0000 Received: from TY1PR01MB0588.jpnprd01.prod.outlook.com ([10.167.157.18]) by TY1PR01MB0588.jpnprd01.prod.outlook.com ([10.167.157.18]) with mapi id 15.01.0693.016; Tue, 8 Nov 2016 08:56:39 +0000 From: =?utf-8?B?5aSn5bKp5a+b?= To: Alexey Melnikov , The IESG Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-httpauth-mutual-10: (with DISCUSS and COMMENT) Thread-Index: AQHSNcrlDn92ybNtU0qJdkTyqetj76DOy4uQ Date: Tue, 8 Nov 2016 08:56:38 +0000 Message-ID: References: <147817486515.22851.10839561696168688036.idtracker@ietfa.amsl.com> In-Reply-To: <147817486515.22851.10839561696168688036.idtracker@ietfa.amsl.com> Accept-Language: ja-JP, en-US Content-Language: ja-JP X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=y.oiwa@aist.go.jp; x-originating-ip: [150.29.149.249] x-ms-office365-filtering-correlation-id: 3be89c08-df05-4ffe-0e64-08d407b52714 x-microsoft-exchange-diagnostics: 1; TY1PR01MB0586; 7:OzeyD0wycUsM+m0Cp2IBHFdzL8P38ZwxZfiVL6wV8Tq+iw8VlyDFzYQHJkarbCrkIRPuFT373TWe0t672M+uwpZo68/BeegotphH9ex1MzfxZienQb6QBJIEl7hKeV/6h8UOuNd1o9/RMtjXtRKzO9gKdikNbJr45Rx+L79uv4NneHacryt+kBdnrPhUToD8aGNxwL1/5bVQWF8CJ+VDclZPpZKqGBWVXItWjnaLanniWZyZMBQ2TY9nWQY5vH4NprmfhNwYpPBmYVorD68QeyJdcVqQg4DNk8Chk8sXK/SUCXq6FzYEuBuRpr4eFV05faXO+w5zurZOYHv/jRxIMJ7wu3KOvQzHPv+vLQJdxrk= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:TY1PR01MB0586; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:TY1PR01MB0586; BCL:0; PCL:0; RULEID:; SRVR:TY1PR01MB0586; x-forefront-prvs: 01208B1E18 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(189002)(199003)(2950100002)(33656002)(8936002)(8666005)(42882006)(5660300001)(7846002)(9686002)(105586002)(8676002)(87936001)(3280700002)(66066001)(5001770100001)(189998001)(106356001)(106116001)(345774005)(68736007)(3660700001)(81156014)(81166006)(122556002)(101416001)(54356999)(50986999)(86362001)(76576001)(74316002)(85182001)(586003)(102836003)(230783001)(6116002)(2906002)(3846002)(2900100001)(92566002)(4326007)(77096005)(74482002)(305945005)(7736002)(7696004)(97736004)(76176999)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:TY1PR01MB0586; H:TY1PR01MB0588.jpnprd01.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: aist.go.jp does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: aist.go.jp X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2016 08:56:39.0171 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 18a7fec8-652f-409b-8369-272d9ce80620 X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY1PR01MB0586 Archived-At: Cc: "http-auth@ietf.org" , "draft-ietf-httpauth-mutual@ietf.org" , "httpauth-chairs@ietf.org" Subject: Re: [http-auth] Alexey Melnikov's Discuss on draft-ietf-httpauth-mutual-10: (with DISCUSS and COMMENT) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 08:56:45 -0000 RGVhciBBbGV4ZXk6DQoNClRoYW5rIHlvdSBmb3IgcmVhbGx5IHZhbHVhYmxlIGNvbW1lbnRzLg0K DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCj4gRElTQ1VTUzoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiANCj4gVGhp cyBpcyBnZW5lcmFsbHkgYSB3ZWxsIHdyaXR0ZW4gZG9jdW1lbnQuIEkgaGF2ZSBhIGNvdXBsZSBv ZiBpbXBvcnRhbnQgY29tbWVudHMNCj4gdGhhdCBJIHdvdWxkIGxpa2UgdG8gc2VlIGFkZHJlc3Nl ZCBhbmQgc2V2ZXJhbCBsZXNzIHNpZ25pZmljYW50IGNvbW1lbnRzLg0KPiANCj4gMSkgQXMgTWly amEgcG9pbnRlZCBvdXQsIHRoaXMgc3BlYyBuZWVkcyBuZWVkIHRvIHJlZ2lzdGVyICJNdXR1YWwi IEhUVFANCj4gQXV0aGVudGljYXRpb24gU2NoZW1lcyB3aXRoIElBTkENCg0KWWVzLCB3ZSdsbCBk byBpdC4NCg0KPiAyKSBJbiBTZWN0aW9uIDc6DQo+IA0KPiAgICBJZiBIVFRQIGlzIHVzZWQgb24g YSBub24tZW5jcnlwdGVkIGNoYW5uZWwgKFRDUCBhbmQgU0NUUCwgZm9yDQo+ICAgIGV4YW1wbGUp LCB0aGUgdmFsaWRhdGlvbiB0eXBlIE1VU1QgYmUgImhvc3QiLiAgSWYgSFRUUC9UTFMgW1JGQzI4 MThdDQo+ICAgIChIVFRQUykgaXMgdXNlZCB3aXRoIGEgc2VydmVyIGNlcnRpZmljYXRlLCB0aGUg dmFsaWRhdGlvbiB0eXBlIE1VU1QNCj4gICAgYmUgInRscy1zZXJ2ZXItZW5kLXBvaW50Ii4gIElm IEhUVFAvVExTIGlzIHVzZWQgd2l0aCBhbiBhbm9ueW1vdXMNCj4gICAgRGlmZmllLUhlbGxtYW4g a2V5IGV4Y2hhbmdlLCB0aGUgdmFsaWRhdGlvbiB0eXBlIE1VU1QgYmUgInRscy11bmlxdWUiDQo+ ICAgIChzZWUgdGhlIG5vdGUgYmVsb3cpLg0KPiANCj4gICAgSW1wbGVtZW50YXRpb25zIHN1cHBv cnRpbmcgTXV0dWFsIGF1dGhlbnRpY2F0aW9uIG92ZXIgSFRUUFMgU0hPVUxEDQo+ICAgIHN1cHBv cnQgdGhlICJ0bHMtc2VydmVyLWVuZC1wb2ludCIgdmFsaWRhdGlvbi4gIFN1cHBvcnQgZm9yDQo+ ICAgICJ0bHMtdW5pcXVlIiB2YWxpZGF0aW9uIGlzIE9QVElPTkFMIGZvciBib3RoIHNlcnZlcnMg YW5kIGNsaWVudHMuDQo+IA0KPiBJIHRoaW5rIHRoZSB0d28gcGFyYWdyYXBocyBhcmUgaW4gY29u ZmxpY3QuIEZvciBleGFtcGxlLCB0aGUgZmlyc3Qgb25lIHNheXMNCj4gdGhhdCBpZiBUTFMgd2l0 aCBzZXJ2ZXIgY2VydGlmaWNhdGUgaXMgdXNlZCwgdGhlbiAidGxzLXNlcnZlci1lbmQtcG9pbnQi DQo+IE1VU1QgYmUgc3VwcG9ydGVkLiBCdXQgdGhlIHNlY29uZCBzYXlzIHRoYXQgaXQgaXMgU0hP VUxEIGJlIHN1cHBvcnRlZC4NCj4gDQo+IElmIHRoZSBpbnRlbnQgb2YgdGhlIGZpcnN0IHBhcmFn cmFwaCBpcyB0byBzYXkgd2hhdCBzaG91bGQgYXBwZWFyIHN5bnRhY3RpY2FsbHksDQo+IHdoaWxl IHRoZSBzZWNvbmQgcGFyYWdyYXBoIGV4cGxhaW5zIHdoYXQga2luZCBvZiB2YWxpZGF0aW9uIGlz IGFjdHVhbGx5DQo+IHJlcXVpcmVkLCBJIHRoaW5rIHRoaXMgc3RpbGwgY2FuIGJlIG1hZGUgY2xl YXJlci4NCj4gDQo+IEkgc3VnZ2VzdCB5b3UgZWl0aGVyIGRlbGV0ZSB0aGUgc2Vjb25kIG9mIHRo ZXNlIDIgcGFyYWdyYXBocywgb3IgeW91IG5lZWQgdG8NCj4gcmV3b3JkIHRleHQgaW4gdGhlIGZp cnN0IChhbmQgcG9zc2libHkgdGhlIHNlY29uZCkgdG8gc3BlY2lmeSBhIG5vbiBjb25mbGljdGlu Zw0KPiBzZXQgb2YgcmVxdWlyZW1lbnRzLg0KDQpXZSdsbCBjbGFyaWZ5IGl0IGJ5IHJlcGxhY2lu ZyB0aGUgc2Vjb25kIHNlbnRlbmNlIGJ5IGEgdGV4dCBzdWdnZXN0aW5nDQp0bHMtdW5pcXVlIGlz IG5vdCBsaWtlbHkgdG8gYmUgcmVxdWlyZWQgdG8gaW1wbGVtZW50LCBpbiBtb3N0IGNhc2VzLg0K DQoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBDT01NRU5UOg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNClRoYW5r IHlvdSBmb3IgbWFueSBpbXByb3ZlbWVudCBzdWdnZXN0aW9ucy4NCkZvciBzbyBtYW55IHN1Z2dl c3Rpb25zIHJlcGxhY2luZyBTSE9VTEQgd2l0aCBNVVNULCBtb3N0IG9mIHRoZXNlIHNlZW0NCnRv IGJlIGNvcnJlY3QuICBXZSdsbCByZXZpZXcgYWxsIG9mIHRoZXNlIGFnYWluIHRvIG1ha2UgYSBm aW5hbCBkZWNpc2lvbi4NCg0KPiAzLjIuMi4gIFN0cmluZ3MNCj4gDQo+ICAgIEFsbCBjaGFyYWN0 ZXIgc3RyaW5ncyBNVVNUIGJlIGVuY29kZWQgdG8gb2N0ZXQgc3RyaW5ncyB1c2luZyB0aGUNCj4g ICAgVVRGLTggZW5jb2RpbmcgW1JGQzM2MjldIGZvciB0aGUgSVNPIDEwNjQ2LTEgY2hhcmFjdGVy IHNldA0KPiAgICBbSVNPLjEwNjQ2LTEuMTk5M10uDQo+IA0KPiBUaGlzIGlzIHRoZSBzYW1lIGFz IFVuaWNvZGUgMS4xLiBVbmljb2RlIG5vdyByZWxlYXNlZCB2ZXJzaW9uIDkuMCEgSSBzdWdnZXN0 DQo+IHlvdSB1c2UgYSBVbmljb2RlIHJlZmVyZW5jZS4NCg0KV2UnbGwgZG8gaXQuDQoNCj4gICAg VGhlIG51bWJlcnMgcmVwcmVzZW50ZWQgYXMgYmFzZTY0LWZpeGVkLW51bWJlciBTSEFMTCBiZSBn ZW5lcmF0ZWQgYXMNCj4gICAgZm9sbG93czogZmlyc3QsIHRoZSBudW1iZXIgaXMgY29udmVydGVk IHRvIGEgYmlnLWVuZGlhbiByYWRpeC0yNTYNCj4gICAgYmluYXJ5IHJlcHJlc2VudGF0aW9uIGFz IGFuIG9jdGV0IHN0cmluZy4gIFRoZSBsZW5ndGggb2YgdGhlDQo+ICAgIHJlcHJlc2VudGF0aW9u IGlzIGRldGVybWluZWQgaW4gdGhlIHNhbWUgd2F5IGFzIG1lbnRpb25lZCBhYm92ZS4NCj4gICAg VGhlbiwgdGhlIHN0cmluZyBpcyBlbmNvZGVkIHVzaW5nIHRoZSBCYXNlIDY0IGVuY29kaW5nIFtS RkM0NjQ4XQ0KPiANCj4gSSBhc3N1bWUgeW91IG1lYW50IFNlY3Rpb24gNCBhbHBoYWJldCBhbmQg bm90IFNlY3Rpb24gNSBhbHBoYWJldCBmcm9tIHRoaXMgUkZDLg0KPiBQbGVhc2UgYWRkIHNlY3Rp b24gcmVmZXJlbmNlIHRvIHRoZSBhYm92ZS4NCg0KR29vZCBwb2ludCB0byBjbGFyaWZ5IGl0J3Mg YSBCQVNFNjQsIG5vdCBhIGZpbGVzeXN0ZW0tc2FmZSB2YXJpYW50Lg0KVGhhbmsgeW91Lg0KDQo+ ICAgIFdoZW4gdGhlIGNsaWVudCBpcyBhIFdlYiBicm93c2VyIHdpdGggYW55IHNjcmlwdGluZyBj YXBhYmlsaXRpZXMsIHRoZQ0KPiANCj4gQ2FuIHlvdSBleHBsYWluIHdoeSBzY3JpcHRpbmcgY2Fw YWJpbGl0aWVzIGFyZSBpbXBvcnRhbnQgaGVyZT8NCg0KSSdsbCBhZGQgc29tZSBub3RpY2UgYWJv dXQgc2VjdXJpdHkgY29uY2VybiBoZXJlLg0KVGhlIHNlY29uZCBwYXJhZ3JhcGggZGVzY3JpYmVz IHBvc3NpYmxlIHVzZSBvZiBtdXR1YWwgdXNlciBhdXRoZW50aWNhdGlvbg0KYXMgYSByZXBsYWNl bWVudCBmb3IgaG9zdCBpZGVudGl0eSB2ZXJpZmljYXRpb24uDQoNCj4gSW4gU2VjdGlvbiA5Og0K PiANCj4gICAgSW4gYm90aCBjYXNlcywgaXQgaXMgdGhlIHNlbmRlcidzIGR1dHkgdG8gY29ycmVj dGx5IHByZXBhcmUgdGhlDQo+ICAgIGNoYXJhY3RlciBzdHJpbmdzLiAgSWYgYW55IG5vbi1ub3Jt YWxpemVkIGNoYXJhY3RlciBzdHJpbmcgaXMNCj4gICAgcmVjZWl2ZWQgZnJvbSB0aGUgb3RoZXIg cGVlciBvZiB0aGUgY29tbXVuaWNhdGlvbiwgcmVjaXBpZW50cyBNQVkNCj4gICAgZWl0aGVyIHVz ZSBpdCBhcyBhIGJhcmUgVVRGLTggc3RyaW5nIHdpdGhvdXQgYW55IHByZXBhcmF0aW9uLCBwZXJm b3JtDQo+ICAgIGFueSBhcHByb3ByaWF0ZSBwcmVwYXJhdGlvbnMgKHdoaWNoIG1heSBjYXVzZSBh dXRoZW50aWNhdGlvbg0KPiAgICBmYWlsdXJlKSwgb3IgcmVqZWN0IGFueSBpbGwtcHJlcGFyZWQg aW5wdXRzIGZyb20gdGhlIHNlbmRlciBhbmQNCj4gICAgcmVzcG9uZCBhcyBhIGNvbW11bmljYXRp b24gZXJyb3IuDQo+IA0KPiBJIHRoaW5rIHlvdSBhcmUgZ2l2aW5nIHRvbyBtYW55IGNob2ljZXMg d2hpY2ggbWlnaHQgY2F1c2UgaW50ZXJvcGVyYWJpbGl0eQ0KPiBpc3N1ZXMuDQo+IEV2ZW4gcmVk dWNpbmcgdGhlIGNob2ljZXMgZnJvbSAzIHRvIDIgd291bGQgaGVscCBoZXJlLg0KDQpPSy4gIFRo ZSBwb2ludCBpcyB0aGF0IHRoZSAicmVjaXBpZW50IiBoYXMgZnJlZWRvbSB0aGVyZToNCml0IE1B WSBhY2NlcHQgYW5kIGl0IE1BWSByZWplY3QuDQoNCj4gSW4gU2VjdGlvbiAxNToNCj4gDQo+IEl0 IHdvdWxkIGJlIGdvb2QgdG8gYmUgYWJsZSB0byBiaW5kIGV4dGVuc2lvbiBkYXRhIHRvIHNoYXJl ZCBzZWNyZXQgY29uc3RydWN0ZWQNCj4gYnkgYm90aCBwYXJ0aWVzLg0KPiANCg0KLS0gDQpZdXRh a2EgT0lXQSwgUGguRC4gICAgICAgTGVhZGVyLCBDeWJlciBQaHlzaWNhbCBBcmNoaXRlY3R1cmUg UmVzZWFyY2ggR3JvdXANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJbmZvcm1h dGlvbiBUZWNobm9sb2d5IFJlc2VhcmNoIEluc3RpdHV0ZQ0KICAgIE5hdGlvbmFsIEluc3RpdHV0 ZSBvZiBBZHZhbmNlZCBJbmR1c3RyaWFsIFNjaWVuY2UgYW5kIFRlY2hub2xvZ3kgKEFJU1QpDQog ICAgICAgICAgICAgICAgICAgICAgTWFpbCBhZGRyZXNzZXM6IDx5Lm9pd2FAYWlzdC5nby5qcD4s IDx5dXRha2FAb2l3YS5qcD4NCk9wZW5QR1A6IGlkWzQ0MDU0NkI1XSBmcFs3QzlGIDcyM0EgNzU1 OSAzMjQ2IDIyOUQgIDMxMzkgODY3NyA5QkQyIDQ0MDUgNDZCNV0NCg==