Re: [http-auth] BoF in Atlanta

Julian Reschke <julian.reschke@gmx.de> Sat, 13 October 2012 10:49 UTC

Return-Path: <julian.reschke@gmx.de>
X-Original-To: http-auth@ietfa.amsl.com
Delivered-To: http-auth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA75521F8534 for <http-auth@ietfa.amsl.com>; Sat, 13 Oct 2012 03:49:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.543
X-Spam-Level:
X-Spam-Status: No, score=-103.543 tagged_above=-999 required=5 tests=[AWL=-0.944, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l046EvTTinnF for <http-auth@ietfa.amsl.com>; Sat, 13 Oct 2012 03:49:52 -0700 (PDT)
Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23]) by ietfa.amsl.com (Postfix) with SMTP id 83B4221F8533 for <http-auth@ietf.org>; Sat, 13 Oct 2012 03:49:51 -0700 (PDT)
Received: (qmail invoked by alias); 13 Oct 2012 10:49:49 -0000
Received: from p5DD94FF7.dip.t-dialin.net (EHLO [192.168.178.36]) [93.217.79.247] by mail.gmx.net (mp029) with SMTP; 13 Oct 2012 12:49:49 +0200
X-Authenticated: #1915285
X-Provags-ID: V01U2FsdGVkX1+54bweUB257eOD6UR55oIZOl3ZyZUc0/mD31T4gH ZTk7JmcLpM/XKn
Message-ID: <50794742.3010902@gmx.de>
Date: Sat, 13 Oct 2012 12:49:38 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121010 Thunderbird/16.0.1
MIME-Version: 1.0
To: Lucy Lynch <llynch@civil-tongue.net>
References: <8AEEA404-CC7C-4487-BE7D-99CBAA8BC48F@checkpoint.com> <alpine.BSF.2.00.1210121102540.14872@hiroshima.bogus.com>
In-Reply-To: <alpine.BSF.2.00.1210121102540.14872@hiroshima.bogus.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Y-GMX-Trusted: 0
Cc: "http-auth@ietf.org" <http-auth@ietf.org>
Subject: Re: [http-auth] BoF in Atlanta
X-BeenThere: http-auth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: HTTP authentication methods <http-auth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/http-auth>, <mailto:http-auth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-auth>
List-Post: <mailto:http-auth@ietf.org>
List-Help: <mailto:http-auth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-auth>, <mailto:http-auth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Oct 2012 10:49:53 -0000

On 2012-10-12 20:07, Lucy Lynch wrote:
> On Fri, 5 Oct 2012, Yoav Nir wrote:
>
>> Hi all
>>
>> The preliminary agenda is now posted at
>> https://datatracker.ietf.org/meeting/85/agenda.txt , as well as at
>> http://tools.ietf.org/agenda/85/
>>
>> Either way, we are currently scheduled to meet at 13:00 on Wednesday,
>> 7-Nov, in Grand Ballroom D. We have 1.5 hours to go. Note that we
>> cannot guarantee that the scheduling will not change, but it is not
>> likely to, and we'll do our best to keep it on Wednesday.
>>
>> We propose the following agenda:
>> - 13:00-13:05 Blue sheets, Note Well and agenda bashing
>> - 13:05-13:20 Introduction and problem statement
>> - 13:20-14:00 (Short!!!) presentations on the candidates
>> - 14:00-14:30 Charter hack, and the usual BoF questions
>>
>> People with candidate documents, who wish to present at the session
>> should do the following:
>
> just as an aide mémoire the following documents have been mentioned
> on the BOF thread:
>
> - draft-oiwa-*
> - draft-farrell-httpbis-hoba
> - draft-melnikov-httpbis-scram-auth
> - draft-williams-httpbis-auth-classification
> - draft-ahrens-httpbis-digest-auth-update (sean)
>
> - Note: Actually, please include draft-williams-http-rest-auth
> (RESTauth, successor to REST-GSS) and remove
> draft-williams-httpbis-auth-classification. (nico)
>
> - What about Negotiate? Its already an informational RFC but I have
> a hunch that work has been done on it since it was published.
> Somebody should ask (nudge-nudge) MSFT... (leif)
>
> - http://www.w3.org/2012/webcrypto/WebCryptoAPI/ (harry)
>
> - There is a proposal in HTML5 for enhancing form support of HTTP which
> includes 'mapping' username\passwords into the same XHR.open()
> functionality. Also included is a method for clearing the auth cache
> on successful response which integrates with a HTTP request for server
> notification and cookie clearing:
> http://www.w3.org/wiki/User:Cjones/ISSUE-195 (cameron)
>
> Also -
>
> - active discussion on I18n but no documents listed
> ...

http://greenbytes.de/tech/webdav/draft-reschke-basicauth-enc-06.html

Best regards, Julian