Re: Call for Adoption: HTTP Unprompted Authentication

[Stephen Farrell <[e-mail]>]

Hiya,

On 07/02/2023 05:58, Mark Nottingham wrote:
> Hello everyone,
> 
> We first discussed this draft at IETF114[1],  saw implementation
> interest at IETF115, [2] and finally had some more list discussion.
> 
> This is a Call for Adoption for: 
> https://www.ietf.org/archive/id/draft-schinazi-httpbis-unprompted-auth-01.html
>
>  Please indicate (in response to this message) whether you support
> adoption, and whether you intend to implement.

I'm not sure.

Can someone clarify whether the u= field amounts
to a super-cookie or not, and if not, how that
might be the case?

If there's a good answer to the above, I'd support
adoption. If not, not.

Thanks,
S.

PS: This has something in common with RFC7486 which was
a (failed;-() attempt at a similar thing. I don't think
this draft needs to refer to that, but if the authors
weren't aware of it, they might be interested.


> 
> The CfA will last for two weeks.
> 
> Cheers,
> 
> 
> 1.
> https://httpwg.org/wg-materials/ietf114/minutes.html#transport-auth-david-schinazi
>
> 
1. https://httpwg.org/wg-materials/ietf115/minutes.html#unprompted-auth
> 
> -- Mark Nottingham   https://www.mnot.net/
> 
>