New I-D: RESTauth (forget GSS)

Nico Williams <nico@cryptonector.com> Sat, 11 August 2012 07:43 UTC

Resent-Date: Sat, 11 Aug 2012 07:41:17 +0000
Resent-Message-Id: <E1T06Jx-0003Pn-VC@frink.w3.org>
MIME-Version: 1.0
Date: Sat, 11 Aug 2012 02:40:30 -0500
Message-ID: <CAK3OfOi0TsS9oJWzEHSfFSs6kV0yPvPkDnC-J6LcrJo=W=vx8Q@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: text/plain; charset="UTF-8"
Received-SPF: none client-ip=208.97.132.145; envelope-from=nico@cryptonector.com; helo=homiemail-a31.g.dreamhost.com
Subject: New I-D: RESTauth (forget GSS)
Archived-At: <http://www.w3.org/mid/CAK3OfOi0TsS9oJWzEHSfFSs6kV0yPvPkDnC-J6LcrJo=W=vx8Q@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

Well, I've re-written REST-GSS as RESTful authentication but without
reference to GSS.  Those of you who panned GSS will be glad to see
that the new I-D is much simpler than the old one, no doubt.

It's not close to complete, of course, but I'll be polishing it off in
the next couple of weeks.  In particular I want to make sure to
complete sections on how to adapt existing authentication mechanisms
from SSHv2, IKEv2, SASL, GSS, and others into RESTauth, partly to
ensure that there's a large array of usable mechanism specifications,
and partly to showcase the ease with which mechanisms can be
added/adapted to RESTauth.

You can find the I-D here:

http://tools.ietf.org/html/draft-williams-http-rest-auth-00

Nico
--

New I-D: RESTauth (forget GSS) Nico Williams