Re: [http-auth] I-D Action: draft-ietf-httpauth-scram-auth-12.txt

Hi Alexey,

Can you please address the following nits:
https://www.ietf.org/tools/idnits?url=https://www.ietf.org/archive/id/draft-ietf-httpauth-scram-auth-12.txt

Also, can you please change the Intended status to Experimental.

Thanks,
 Rifaat

On Sat, Nov 28, 2015 at 10:49 AM, <internet-drafts@ietf.org> wrote:

>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
>  This draft is a work item of the Hypertext Transfer Protocol
> Authentication Working Group of the IETF.
>
>         Title           : Salted Challenge Response (SCRAM) HTTP
> Authentication Mechanism
>         Author          : Alexey Melnikov
>         Filename        : draft-ietf-httpauth-scram-auth-12.txt
>         Pages           : 19
>         Date            : 2015-11-28
>
> Abstract:
>    The authentication mechanism most widely deployed and used by
>    Internet application protocols is the transmission of clear-text
>    passwords over a channel protected by Transport Layer Security (TLS).
>    There are some significant security concerns with that mechanism,
>    which could be addressed by the use of a challenge response
>    authentication mechanism protected by TLS.  Unfortunately, the HTTP
>    Digest challenge response mechanism presently on the standards track
>    failed widespread deployment, and have had success only in limited
>    use.
>
>    This specification describes a family of HTTP authentication
>    mechanisms called the Salted Challenge Response Authentication
>    Mechanism (SCRAM), which addresses security concerns with HTTP Digest
>    and meets the deployability requirements.  When used in combination
>    with TLS or an equivalent security layer, a mechanism from this
>    family could improve the status-quo for HTTP authentication.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-httpauth-scram-auth/
>
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-httpauth-scram-auth-12
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-httpauth-scram-auth-12
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> http-auth mailing list
> http-auth@ietf.org
> https://www.ietf.org/mailman/listinfo/http-auth
>