Re: [http-auth] WGLC on the MutualAuth drafts

大岩寛 <> Thu, 07 July 2016 14:14 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 6D24512D56C for <>; Thu, 7 Jul 2016 07:14:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id kvLmhPm5eCYs for <>; Thu, 7 Jul 2016 07:14:47 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id E73B012D561 for <>; Thu, 7 Jul 2016 07:14:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vDg5G7KKwPC4NMLt+uMVI/cHXShVqfZJYKtiVwsLnf8=; b=a8Jxon+s+4SoztX3E7A0/e98JAcKm37RE8ownkVuoUBnRRln2X/7UChQoidX6VHfMntlvAZsPcxbUo/WFUMuo2Ln0ehVwW3CwlL55WLcHmKnsFXOzsDLjGFTz2Ck+/4d0UkupnxYx5sP/46rssvpgttJFHemzvxDbB5cr8TwCc8=
Received: from ( by ( with Microsoft SMTP Server (TLS) id 15.1.534.14; Thu, 7 Jul 2016 14:14:43 +0000
Received: from ([]) by ([]) with mapi id 15.01.0534.020; Thu, 7 Jul 2016 14:14:43 +0000
From: 大岩寛 <>
To: Julian Reschke <>, Yoav Nir <>, httpauth mailing list <>
Thread-Topic: [http-auth] WGLC on the MutualAuth drafts
Date: Thu, 07 Jul 2016 14:14:43 +0000
Message-ID: <>
References: <> <> <> <> <> <>
In-Reply-To: <>
Accept-Language: ja-JP, en-US
Content-Language: ja-JP
authentication-results: spf=none (sender IP is );
x-originating-ip: []
x-ms-office365-filtering-correlation-id: f9a49a8d-d49b-4b74-4f14-08d3a6710ae1
x-microsoft-exchange-diagnostics: 1; TY1PR01MB0588; 6:Di7NBRvo/W53IgOCzYQPYyqC4BIymBwQn58Rn8kAeOuBE/sGW2+D/fA3tKk5d5WFrAabZ/YQr+aK4sweH/2YI1tUhJEJYXPSoumPjLkhLmwEyoTTBzBYJqELuIg3WWSVsTmgbjz9BnvnscL/OvQ+aGp9BUOBHk40b7nn8mUIU+MkAmCiDjQk/eGMmebQGkHo/5DyZwR0szSNx1AE9gTDMQCiAcBnCeo4p8ZE2y+PSlFtXf3fIRSrpACfdn8VKGKzGe23qzZNV5gPCKAqCTk5IaKBpf019kiyW3fv4Etou3F7s2HhQsNGiKCOw1U6LE9cqLT8wEDE3hKJ9ikRhGW6lQ==; 5:2/CNpcvez3myAY+Qck946BCRNItWghIXKupuppqJx0Ex2sed7SYu4OjfjgfakAVYEo+icWLB5kTuObLo2w+uuSwtHU5fQn3ZAJhZ73s+Rklo8S2lOuGHe9zs1yhvEH24xR4RWhGyUo9cdVYOFEB5sg==; 24:4S3mi2k0sFgrmbcnklv2iQCVEoF3iAfpN21xsouIRdBSMm2jAdcY2BX2tIiWFqV/jLRrIc+ZLtcfi3ucczNMSPT0IqNDUkH7ZQKIlQtxYmA=; 7:lbhEaBZMqNuM/zzr5yi9IZJI2Zk69GSqzqn0TBaOz2F6rBsny972ngX2wG4NooVXPmFQ6YxJzRJtpEU6jhMlS+gdsDjb1M7Ea8qDe37LOf18/H3YFubH2eaIrjjwqGr/GPvaiJTEveJUK2wk0n5IjH0g47WlyW+o9nZx6qiqUpkMLc3pRlzaNolzGGqLkG2mT85XR3qOnR7agA1ykXbEu6l3j3Lj8UlPguUWjXV+nbiYuxlrhBaIkwz6adbHoxRZ
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:TY1PR01MB0588;
x-microsoft-antispam-prvs: <>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:TY1PR01MB0588; BCL:0; PCL:0; RULEID:; SRVR:TY1PR01MB0588;
x-forefront-prvs: 0996D1900D
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(199003)(189002)(107886002)(85182001)(189998001)(87936001)(86362001)(2906002)(93886004)(3846002)(586003)(101416001)(102836003)(6116002)(106116001)(5002640100001)(105586002)(33656002)(50986999)(66066001)(106356001)(74482002)(97736004)(5001770100001)(10400500002)(122556002)(7846002)(81166006)(76176999)(54356999)(7696003)(8676002)(7736002)(5003600100003)(11100500001)(19580395003)(3660700001)(19580405001)(77096005)(81156014)(74316002)(2900100001)(76576001)(8666005)(9686002)(305945005)(2950100001)(8936002)(92566002)(3280700002)(68736007)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:TY1PR01MB0588;; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None ( does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jul 2016 14:14:43.2354 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 18a7fec8-652f-409b-8369-272d9ce80620
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY1PR01MB0588
Archived-At: <>
Subject: Re: [http-auth] WGLC on the MutualAuth drafts
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: HTTP authentication methods <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 07 Jul 2016 14:14:49 -0000

Dear Julian,

> > Dear Julian,
> >
> > My understanding of your message is that you'll just define the value
> > encoding of I18n string, and all RFCs referring it must say, for
> > example, "the value of parameter foo will be encoded by RFC5987bis,
> > like foo=UTF-8''caf%C3%89 ."
> > Is it right? If not, please forgive me and skip the rest of my message.
> Something like that.
> (did you want to say "foo*" here?)

Dropping of * is intentional, to mean "someone only uses encoded values,
without the field extending mechanism by appending *."

> The problem is that there isn't a generic parameter framework. For instance,
> header fields differ in whitespace and error handling.
> (I agree that it would be good if there was something like that, but that's
> a separate discussion)

(I agree it, as it was really tricky to write my draft regarding it :-)

> > The most important value of the current 5987 is that
> > denies almost all kinds of character encoding negotiations).
> We'll keep the recommendation to mark the use of the encoding by appending "*"
> to the parameter name, if that's what you're concerned about.

Hmm, what a "recommendation" means for me is important.
Restructuring the definitions is no matter and OK for me.

It can be optional (as it is currently), but at least
I need to be possible to say implementers, showing printed paper of RFC5987bis,
"OK, it's the "common" way written here, so let's implement 
 this translation as a common utility function."
If it looks like "someone invented to append *, it might be interesting",
it's too weak.

Yutaka OIWA, Ph.D.       Leader, Cyber Physical Architecture Research Group
                                  Information Technology Research Institute
    National Institute of Advanced Industrial Science and Technology (AIST)
                      Mail addresses: <>, <>
OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D  3139 8677 9BD2 4405 46B5]