[Ietf-http-auth] Discussion and Review of draft-hartman-webauth-phishing

[Sam Hartman <[e-mail]>]

Alexey, I've completed a number of revisions to draft-hartman-webauth-phishing and believe that the document is ready for review and discussion prior to a second publication request and last call.

There have been fairly significant text changes although I think the
core concepts and requirements remain the same.  As such, we need
significant re-review from those who have reviewed previous versions.

In addition, two points require explicit consensus discussion.  First,
section 1.1 contains a purpose statement that I believe would need to
be included in an IETF wide last call and would need to achieve
community consensus.  Secondly, the requirement for mutual
authentication has been somewhat contentious; I believe we need
explicit discussion of that requirement.

I think the best thing to do at this point is to ask for review from
the http working group, saag, secdir, and apps discussion list and
direct comments to ietf-http-auth.  Then once you're satisfied, we
take this back to Lisa.

Does that sound reasonable?

--- Begin Message ---

--- End Message ---