Re: [http-auth] [Mutual] (due Aug 28) Mutual auth issues (part 1)

Hi,

Sent from my iPad
> On 13 Aug 2015, at 03:17, Yutaka OIWA <y.oiwa@aist.go.jp> wrote:
> 
> ==== draft-ietf-httpauth-mutual ====
> 
> = Section 3.1 =
> 
> [P1] Is adoption of RFC5987 OK?
> https://github.com/yoiwa/httpauth-mutual/issues/1

Yes, this sounds sensible.
> 
> [P2] The encoding is fixed to UTF-8, without any language.
>     (justification: it is not an on-line negotiable parameter,
>      and the new protocol does not need to consider older
>      clients.)
> https://github.com/yoiwa/httpauth-mutual/issues/2

I agree this is the right approach.

> = Section 4: Messages =
> 
> [P3] Are the reserved parameter names making sense?
> https://github.com/yoiwa/httpauth-mutual/issues/3

This question is a bit harder to answer. Overall I think they make sense.
"auth-domain" might be named better as "auth-scope", but I don't have a strong preference, especially if you already have deployed implementation of the draft.

Best Regards,
Alexey

> Thank you for your cooperation.
> 
> -- 
> Yutaka OIWA, Ph.D.               Cyber Physical Architecture Research Group
>                                  Information Technology Research Institute
>    National Institute of Advanced Industrial Science and Technology (AIST)
>                      Mail addresses: <y.oiwa@aist.go.jp>, <yutaka@oiwa.jp>
> OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D  3139 8677 9BD2 4405 46B5]
> 
> _______________________________________________
> http-auth mailing list
> http-auth@ietf.org
> https://www.ietf.org/mailman/listinfo/http-auth