IETF Logo Mail Archive

Re: Authentication over HTTP

"Nicolas Mailhot" <nicolas.mailhot@laposte.net> Wed, 17 July 2013 11:14 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BAF221F9C70 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 17 Jul 2013 04:14:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g7Io4v8PaiEZ for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 17 Jul 2013 04:14:03 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id D4FA721F9AC6 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Wed, 17 Jul 2013 04:14:03 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1UzPfy-0006nM-IW for ietf-http-wg-dist@listhub.w3.org; Wed, 17 Jul 2013 11:13:42 +0000
Resent-Date: Wed, 17 Jul 2013 11:13:42 +0000
Resent-Message-Id: <E1UzPfy-0006nM-IW@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <nicolas.mailhot@laposte.net>) id 1UzPfo-0006kp-Mc for ietf-http-wg@listhub.w3.org; Wed, 17 Jul 2013 11:13:32 +0000
Received: from smtpout6.laposte.net ([193.253.67.231] helo=smtpout.laposte.net) by maggie.w3.org with esmtp (Exim 4.72) (envelope-from <nicolas.mailhot@laposte.net>) id 1UzPfn-0001rJ-Lx for ietf-http-wg@w3.org; Wed, 17 Jul 2013 11:13:32 +0000
Received: from arekh.dyndns.org ([88.174.226.208]) by mwinf8512-out with ME id 1PD41m0044WQcrc03PD4FU; Wed, 17 Jul 2013 13:13:04 +0200
Received: from localhost (localhost [127.0.0.1]) by arekh.dyndns.org (Postfix) with ESMTP id D3A852E3F8A for <ietf-http-wg@w3.org>; Wed, 17 Jul 2013 13:13:03 +0200 (CEST)
X-Virus-Scanned: amavisd-new at arekh.dyndns.org
Received: from arekh.dyndns.org ([127.0.0.1]) by localhost (arekh.okg [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QBd9kD80IfTP for <ietf-http-wg@w3.org>; Wed, 17 Jul 2013 13:13:02 +0200 (CEST)
Received: from arekh.dyndns.org (localhost [127.0.0.1]) by arekh.dyndns.org (Postfix) with ESMTP for <ietf-http-wg@w3.org>; Wed, 17 Jul 2013 13:13:02 +0200 (CEST)
Received: from 192.196.142.21 (SquirrelMail authenticated user nim) by arekh.dyndns.org with HTTP; Wed, 17 Jul 2013 13:13:02 +0200
Message-ID: <4dadb2a6cb2ea3d9e96a680a26c09480.squirrel@arekh.dyndns.org>
In-Reply-To: <alpine.LRH.2.01.1307162329540.26279@egate.xpasc.com>
References: <CE0AD74C.22464%Josh.Howlett@ja.net> <51E5428D.7010008@treenet.co.nz> <CAK3OfOg9JZbcnZhHSNrfSViNeV+wyctwYzSKhXpjGf3f_gP+VQ@mail.gmail.com> <51E632CB.9010107@treenet.co.nz> <alpine.LRH.2.01.1307162329540.26279@egate.xpasc.com>
Date: Wed, 17 Jul 2013 13:13:02 +0200
From: Nicolas Mailhot <nicolas.mailhot@laposte.net>
To: 'HTTP Working Group' <ietf-http-wg@w3.org>
User-Agent: SquirrelMail/1.4.22-10.fc19
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Received-SPF: pass client-ip=193.253.67.231; envelope-from=nicolas.mailhot@laposte.net; helo=smtpout.laposte.net
X-W3C-Hub-Spam-Status: No, score=-3.4
X-W3C-Hub-Spam-Report: AWL=-3.053, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.394, SPF_PASS=-0.001
X-W3C-Scan-Sig: maggie.w3.org 1UzPfn-0001rJ-Lx f4f1bcbb36a5e03faffad910414659e3
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Authentication over HTTP
Archived-At: <http://www.w3.org/mid/4dadb2a6cb2ea3d9e96a680a26c09480.squirrel@arekh.dyndns.org>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/18821
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

>> 2) "HTTP auth is broken". Aka the headers dont let me login user X to
>> proxy A
>> and proxy B at the same time, in the same chain, with different
>> credentials
>> all controlled by user X ... seem to be making a few wrong assumptions
>> about
>> how HTTP works there. Go away and do (1) instead the user-application ha
>> sa
>> lot more control over end-to-end pathways in application layer.
>>
>> What am I missing?

That we have standards to permit interoperability, and go away and do it
elsewhere is the perfect interop killer?

-- 
Nicolas Mailhot

v2.23.0 | Report a Bug | By Email