FW: New Version Notification for draft-thomson-http2-client-certs-02.txt
Mike Bishop <Michael.Bishop@microsoft.com> Mon, 14 March 2016 22:09 UTC
Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BBB912D6BC for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 14 Mar 2016 15:09:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.022
X-Spam-Level:
X-Spam-Status: No, score=-7.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bU8ZroNMeB52 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 14 Mar 2016 15:09:50 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FA4A12D55B for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 14 Mar 2016 15:09:49 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1afabW-00058j-Bk for ietf-http-wg-dist@listhub.w3.org; Mon, 14 Mar 2016 22:04:46 +0000
Resent-Date: Mon, 14 Mar 2016 22:04:46 +0000
Resent-Message-Id: <E1afabW-00058j-Bk@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <Michael.Bishop@microsoft.com>) id 1afabN-00057u-Bj for ietf-http-wg@listhub.w3.org; Mon, 14 Mar 2016 22:04:37 +0000
Received: from mail-bl2on0148.outbound.protection.outlook.com ([65.55.169.148] helo=na01-bl2-obe.outbound.protection.outlook.com) by lisa.w3.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from <Michael.Bishop@microsoft.com>) id 1afabL-0003qp-38 for ietf-http-wg@w3.org; Mon, 14 Mar 2016 22:04:36 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9O2XVhHY2eB50ZXe/dcvdJMSbTOrXvb/kgnmyqNHGG8=; b=daVm+gg4N0lQxwK03sU1V3xPHkxC/rgCCzR9ts3D03t7/2NaTVjgFQYZBW5iJyeiV1uiAOeYLOLQdijLX920oGIaiwRUxhSZsoz4XX6HuOCYEPLOAzslIvtTLTt1C+RrU1E0JjLbYuwziD6jeXjvptUVtroeRdZ3wHjSJFZLUJc=
Received: from CH1PR03MB1916.namprd03.prod.outlook.com (10.164.115.156) by CH1PR03MB1913.namprd03.prod.outlook.com (10.164.115.153) with Microsoft SMTP Server (TLS) id 15.1.403.16; Mon, 14 Mar 2016 22:04:08 +0000
Received: from CH1PR03MB1916.namprd03.prod.outlook.com ([10.164.115.156]) by CH1PR03MB1916.namprd03.prod.outlook.com ([10.164.115.156]) with mapi id 15.01.0403.017; Mon, 14 Mar 2016 22:04:07 +0000
From: Mike Bishop <Michael.Bishop@microsoft.com>
To: "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
Thread-Topic: New Version Notification for draft-thomson-http2-client-certs-02.txt
Thread-Index: AQHRfjyi3yr4H+jN50WnA+gU4+4NzJ9ZfeYA
Date: Mon, 14 Mar 2016 22:04:07 +0000
Message-ID: <CH1PR03MB1916DB5A6660C214B7F907A787880@CH1PR03MB1916.namprd03.prod.outlook.com>
References: <20160314215823.18851.67265.idtracker@ietfa.amsl.com>
In-Reply-To: <20160314215823.18851.67265.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: w3.org; dkim=none (message not signed) header.d=none;w3.org; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [2001:4898:80e8:b::24b]
x-ms-office365-filtering-correlation-id: d3721909-9666-4158-d163-08d34c5490cf
x-microsoft-exchange-diagnostics: 1; CH1PR03MB1913; 5:x8RhZxWQKrGs3mKACv0jJP/788/WMkSS8COWXiwrpcJU8FfBrLzo9VKeVTmPpcDQ/CyfFlR/+Ptq+uiyK62lclAxyxkiMI3hy6+ACqi0fTM0QiPuGv9LPyHfdGRKnUzk8XZExZOB8HkNCINnrtiX4Q==; 24:VFxt6uMXaz5dubqBgL/OQEzL5/pU1zyqyoZy2ds/LG/Nsgfilz9uzFx2WYpFFi1N4eehDFgIjDQrBMinEKADOyCua2nZBHE48A8JKM77quU=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CH1PR03MB1913;
x-microsoft-antispam-prvs: <CH1PR03MB191328778EBE5CBE89060E4B87880@CH1PR03MB1913.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(61426038)(61427038); SRVR:CH1PR03MB1913; BCL:0; PCL:0; RULEID:; SRVR:CH1PR03MB1913;
x-forefront-prvs: 0881A7A935
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377424004)(13464003)(377454003)(2351001)(10090500001)(76576001)(586003)(99286002)(450100001)(5640700001)(102836003)(86362001)(230783001)(6116002)(81166005)(106116001)(92566002)(1220700001)(1096002)(87936001)(5008740100001)(15650500001)(54356999)(5005710100001)(76176999)(10400500002)(122556002)(2906002)(2501003)(33656002)(50986999)(10290500002)(15975445007)(5002640100001)(3660700001)(3280700002)(77096005)(5003600100002)(2900100001)(2950100001)(74316001)(19580405001)(19580395003)(8990500004)(107886002)(110136002)(189998001); DIR:OUT; SFP:1102; SCL:1; SRVR:CH1PR03MB1913; H:CH1PR03MB1916.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Mar 2016 22:04:07.8312 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH1PR03MB1913
Received-SPF: pass client-ip=65.55.169.148; envelope-from=Michael.Bishop@microsoft.com; helo=na01-bl2-obe.outbound.protection.outlook.com
X-W3C-Hub-Spam-Status: No, score=-3.9
X-W3C-Hub-Spam-Report: AWL=-2.397, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, W3C_NW=0.5
X-W3C-Scan-Sig: lisa.w3.org 1afabL-0003qp-38 b7c32d8f4b4a423c0d0e3c812190b9ec
X-Original-To: ietf-http-wg@w3.org
Subject: FW: New Version Notification for draft-thomson-http2-client-certs-02.txt
Archived-At: <http://www.w3.org/mid/CH1PR03MB1916DB5A6660C214B7F907A787880@CH1PR03MB1916.namprd03.prod.outlook.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/31257
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>
The changes here are not nearly as substantial as in the last version; this officially submits the changes we made based on list feedback following the previous draft. -----Original Message----- From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] Sent: Monday, March 14, 2016 2:58 PM To: Martin Thomson <martin.thomson@gmail.com>; Mike Bishop <Michael.Bishop@microsoft.com> Subject: New Version Notification for draft-thomson-http2-client-certs-02.txt A new version of I-D, draft-thomson-http2-client-certs-02.txt has been successfully submitted by Mike Bishop and posted to the IETF repository. Name: draft-thomson-http2-client-certs Revision: 02 Title: Reactive Certificate-Based Client Authentication in HTTP/2 Document date: 2016-03-14 Group: Individual Submission Pages: 19 URL: https://www.ietf.org/internet-drafts/draft-thomson-http2-client-certs-02.txt Status: https://datatracker.ietf.org/doc/draft-thomson-http2-client-certs/ Htmlized: https://tools.ietf.org/html/draft-thomson-http2-client-certs-02 Diff: https://www.ietf.org/rfcdiff?url2=draft-thomson-http2-client-certs-02 Abstract: Some HTTP servers provide a subset of resources that require additional authentication to interact with. HTTP/1.1 servers rely on TLS renegotiation that is triggered by a request to a protected resource. HTTP/2 made this pattern impossible by forbidding the use of TLS renegotiation. While TLS 1.3 provides an alternate mechanism to obtain client certificates, this mechanism does not map well to usage in TLS 1.2. This document describes a how client authentication might be requested by a server as a result of receiving a request to a protected resource. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat