[http-auth] [Request for Reviews] HTTPAUTHprep

Yutaka OIWA <y.oiwa@aist.go.jp> Wed, 05 March 2014 14:35 UTC

Return-Path: <y.oiwa@aist.go.jp>
X-Original-To: http-auth@ietfa.amsl.com
Delivered-To: http-auth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEAA31A020A for <http-auth@ietfa.amsl.com>; Wed, 5 Mar 2014 06:35:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.279
X-Spam-Level:
X-Spam-Status: No, score=-2.279 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ieJBbxsHaZ_Y for <http-auth@ietfa.amsl.com>; Wed, 5 Mar 2014 06:35:48 -0800 (PST)
Received: from na3sys010aog105.obsmtp.com (na3sys010aog105.obsmtp.com [74.125.245.78]) by ietfa.amsl.com (Postfix) with ESMTP id D5D301A022A for <http-auth@ietf.org>; Wed, 5 Mar 2014 06:35:40 -0800 (PST)
Received: from mail-ve0-f173.google.com ([209.85.128.173]) (using TLSv1) by na3sys010aob105.postini.com ([74.125.244.12]) with SMTP ID DSNKUxc2Ob+dgg0xrwhBvMBZlwLvk1M3gZF1@postini.com; Wed, 05 Mar 2014 06:35:37 PST
Received: by mail-ve0-f173.google.com with SMTP id oy12so1105836veb.18 for <http-auth@ietf.org>; Wed, 05 Mar 2014 06:35:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aist.go.jp; s=google; h=mime-version:from:date:message-id:subject:to:content-type; bh=cPMb4EPD2WYGbgc1BLB596GO7ONsf0B5JHY1BbtImkk=; b=SJdHBtx3M7jMXT6gBTl5tg77TiCf/cMM3Df1i4fKDKzYoho20R2oU7hmg0jJA7VeA3 TneG4s07mDxEZPxlChvskxBnjH+hsa+aoNX76/KtP/ZPnsKn00LuozfnP9T3bEnrcZyF uVbYeMN8RHdF3kCRn2LYFUmEfO6Fi89N9Qwuc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=cPMb4EPD2WYGbgc1BLB596GO7ONsf0B5JHY1BbtImkk=; b=OkvxOUS+Gko+nsghvBSUWJYluiWtBZcQWGbJQs4XYAwNWMrfD9PA+d6eIa9USp3WEu dXjxaQWOWyrYSJA0OWmGYUP+HFjBW7y5OpJkJ9BCq+NSxp4RtyF8/1B8+CUSODwpwpnv AReHkeXvBEiHUY0q2DDbos51QYhbUv34zzSMXA/4qNUjBftVnnK/bGPzWpUGcnzVy4PG P2sEdbxK9eX87U8qrRVZFoKE22T1UrG+I9XUNXKEjaHuAXoMoVE3FqAgUKfEQD8PLfCy 1s+ESmAwFKIUNfXndeLRa+1CJSBTsliqULCnCn1UbBTRTgMQdVOEVYPb6IPHcV7ne1wf fBQg==
X-Gm-Message-State: ALoCoQkrdLC5R7GVwCkgGxLuT/Nkewu88aJ+K8VPJJGYqvD1MaKR75jnWH5upNunOkNt2hsoAF4tqVyiQ5nhPczdZx0Llc+ruD+duobW22CupsvZ4+EWq8D5cC7UIbl31j/P0A7m683gHmvrefB8LkdYAaSmKSHvWA==
X-Received: by 10.220.99.72 with SMTP id t8mr349854vcn.10.1394030136801; Wed, 05 Mar 2014 06:35:36 -0800 (PST)
X-Received: by 10.220.99.72 with SMTP id t8mr349843vcn.10.1394030136618; Wed, 05 Mar 2014 06:35:36 -0800 (PST)
MIME-Version: 1.0
Received: by 10.58.100.227 with HTTP; Wed, 5 Mar 2014 06:35:16 -0800 (PST)
From: Yutaka OIWA <y.oiwa@aist.go.jp>
Date: Wed, 05 Mar 2014 23:35:16 +0900
Message-ID: <CAMeZVwuGj4C6WNiJ3qxAVckFSqegCJQA6Sh9QcSjougH0-iuZg@mail.gmail.com>
To: "http-auth@ietf.org" <http-auth@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: http://mailarchive.ietf.org/arch/msg/http-auth/momcK0X6ab909UxUvF8Vv3l9ocU
Subject: [http-auth] [Request for Reviews] HTTPAUTHprep
X-BeenThere: http-auth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: HTTP authentication methods <http-auth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/http-auth>, <mailto:http-auth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-auth/>
List-Post: <mailto:http-auth@ietf.org>
List-Help: <mailto:http-auth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-auth>, <mailto:http-auth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Mar 2014 14:35:54 -0000

Dear all in HTTPAUTH WG,

As I talked in the Monday's WG session, I'd like to have inputs from
the HTTPAUTH WG about the string normalization requirements and
applicability for HTTP authentication.

http://tools.ietf.org/html/draft-oiwa-precis-httpauthprep-00
is my current draft, which are to be updated sooner after
discussion with PRECIS WG people planned within this month.

In the draft, Section 2 contains PRECIS-specific rule definition
for the string preparation (including Unicode normalization and beyond).
I'd like to have review comments especially for all OTHER sections,
in particular for Section 3 (Applicability Notes).
# Of course, reviews for Section 2 are also very welcome if possible.

Thank you in advance for your cooperation.

-- 
Yutaka OIWA, Ph.D.                 Leader, System Life-cycle Research Group
                               Research Institute for Secure Systems (RISEC)
     National Institute of Advanced Industrial Science and Technology (AIST)
                       Mail addresses: <y.oiwa@aist.go.jp>, <yutaka@oiwa.jp>
OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D  3139 8677 9BD2 4405 46B5]