IETF Logo Mail Archive

Re: agenda/charter brainstorming

Yoav Nir <ynir.ietf@gmail.com> Tue, 24 June 2014 19:36 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E2F51A0165 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 24 Jun 2014 12:36:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.653
X-Spam-Level:
X-Spam-Status: No, score=-7.653 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5EhoerUJFV2A for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 24 Jun 2014 12:36:13 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 850EC1A00D3 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 24 Jun 2014 12:36:13 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1WzWTD-00079Q-Hi for ietf-http-wg-dist@listhub.w3.org; Tue, 24 Jun 2014 19:33:31 +0000
Resent-Date: Tue, 24 Jun 2014 19:33:31 +0000
Resent-Message-Id: <E1WzWTD-00079Q-Hi@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <ynir.ietf@gmail.com>) id 1WzWSy-00078O-KR for ietf-http-wg@listhub.w3.org; Tue, 24 Jun 2014 19:33:16 +0000
Received: from mail-wg0-f42.google.com ([74.125.82.42]) by maggie.w3.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.72) (envelope-from <ynir.ietf@gmail.com>) id 1WzWSx-0007Yo-Nd for ietf-http-wg@w3.org; Tue, 24 Jun 2014 19:33:16 +0000
Received: by mail-wg0-f42.google.com with SMTP id z12so884522wgg.25 for <ietf-http-wg@w3.org>; Tue, 24 Jun 2014 12:32:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=18qPK8gD8cWiLrFJAkvjuhaFSZ59RS2SAn0d1p1IHMo=; b=WlfiLBlfziokiGAXYJGj8feFJYOoz8Ra8WQcy9DluLQFh6I2O+Cg1R7tT3VhvCY6GR tz6ev2gq2Y+/1gh7iLsU3KAE+V+crCa4HHiuAVBFHMcNRmZg3sZd2F6ouo81qxxpMn1M gpusZ0WKC928esV1o/aomaWdHh8XMNgZkCrVeAq39WXF8WGyI/8mdl8mSiubrf2RF/3z TgoFvKvAAmuf5BCC1tpq0oUVmpnEjrp3nc6bWs8U8p+Ai3nRsmHsttSKv5Qx2G4LlS5W WE8vukA/9yQY54wVc6+zLipHeQH09ypLaikRmqx+FIKBWexjyQX2OYOJ+VkwIwrrr02P xfgw==
X-Received: by 10.180.76.134 with SMTP id k6mr15195926wiw.49.1403638368383; Tue, 24 Jun 2014 12:32:48 -0700 (PDT)
Received: from [192.168.1.104] (bzq-84-109-50-18.red.bezeqint.net. [84.109.50.18]) by mx.google.com with ESMTPSA id wv8sm2464996wjb.1.2014.06.24.12.32.47 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 24 Jun 2014 12:32:47 -0700 (PDT)
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\))
From: Yoav Nir <ynir.ietf@gmail.com>
In-Reply-To: <A6F74280-7BF8-47F9-A818-47AAFBDB20A4@mnot.net>
Date: Tue, 24 Jun 2014 22:32:41 +0300
Cc: "Julian F. Reschke" <julian.reschke@gmx.de>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <E7346C67-7627-4CA9-8C48-9A26B5BFC49C@gmail.com>
References: <53A7E8BA.8090809@gmx.de> <A6F74280-7BF8-47F9-A818-47AAFBDB20A4@mnot.net>
To: Mark Nottingham <mnot@mnot.net>
X-Mailer: Apple Mail (2.1878.2)
Received-SPF: pass client-ip=74.125.82.42; envelope-from=ynir.ietf@gmail.com; helo=mail-wg0-f42.google.com
X-W3C-Hub-Spam-Status: No, score=-4.5
X-W3C-Hub-Spam-Report: AWL=-1.817, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001
X-W3C-Scan-Sig: maggie.w3.org 1WzWSx-0007Yo-Nd 232214affd216b9a79fdbcbae029daef
X-Original-To: ietf-http-wg@w3.org
Subject: Re: agenda/charter brainstorming
Archived-At: <http://www.w3.org/mid/E7346C67-7627-4CA9-8C48-9A26B5BFC49C@gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/24599
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On Jun 24, 2014, at 8:42 AM, Mark Nottingham <mnot@mnot.net> wrote:

> Hi Julian,
> 
> On 23 Jun 2014, at 6:43 pm, Julian Reschke <julian.reschke@gmx.de> wrote:
> 
>> 
>> 4) Session handling (or "avoiding cookies")
>> 
>> ...in case we find people, energy, and implementer interest.
> 
> That sounds very speculative. Draft?

http://tools.ietf.org/html/draft-williams-websec-session-continue-prob-00
http://tools.ietf.org/html/draft-williams-websec-session-continue-proto-00
http://tools.ietf.org/html/draft-abarth-cake-01
http://tools.ietf.org/html/draft-hallambaker-httpsession-02
http://tools.ietf.org/html/draft-hallambaker-httpintegrity-02
http://tools.ietf.org/html/draft-hammer-oauth-v2-mac-token-05


I could probably dig up a few more if I put my mind to it.

So people is easy, energy we might be able to find. Implementer interest?  I’m not sure it’s there.

Interesting reads on the subject: http://www.vsecurity.com/download/papers/WeaningTheWebOffOfSessionCookies.pdf

Yoav

v2.23.0 | Report a Bug | By Email