Re: [http-state] SCS I-D document

Thanks for the draft.  I'm not sure I quite understood what problem
this protocol addresses or how it addresses that problem.  Maybe
including some example protocol traces with an explanation of what's
going on would be helpful?  For example,
<http://tools.ietf.org/html/draft-ietf-httpstate-cookie-22#section-3.1>
shows some example uses of the cookie protocol.

Adam

On Tue, Feb 22, 2011 at 12:22 PM, tho <tho@koanlogic.com> wrote:
> Hello all,
>
> we have just uploaded the following I-D:
>
> http://www.ietf.org/id/draft-secure-cookie-session-protocol-00.txt
>
> The draft describes a tiny cryptographic protocol layered on top of cookies, that can be used to handle session state in cases where the origin server doesn't want to, or simply can't, use local storage.
>
> It targets web server applications deployed on embedded devices with small or no disk, as well as distributed/parallel web apps that could benefit from the lack of a centralized data store or some other peering mechanism to maintain clients' state.
>
> We were wondering if the draft could be taken as a working item by the http-state WG, in which case we're available to drive the related editing, implementation and interoperability activities.
>
> In this respect, we've implemented a beta version of the protocol in one of our products, and are currently working on a reference implementation which will be licensed as Public Domain, BSD or GPL'd software, depending on the linked crypto toolkit.
>
> The source code can be found at http://github.com/koanlogic/libscs and is open to contribution from anyone who wants to join: we have just setup the libscs-dev mailing list (http://koanlogic.com/cgi-bin/mailman/listinfo/libscs-dev) to coordinate the code development.
>
> Any comment is very welcome !
>
> t.
> _______________________________________________
> http-state mailing list
> http-state@ietf.org
> https://www.ietf.org/mailman/listinfo/http-state
>