Working Group Last Call: The Concealed HTTP Authentication Scheme
Mark Nottingham <mnot@mnot.net> Tue, 11 June 2024 19:56 UTC
Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00115C15199C for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 11 Jun 2024 12:56:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.857
X-Spam-Level:
X-Spam-Status: No, score=-2.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="J5eS4/w3"; dkim=pass (2048-bit key) header.d=w3.org header.b="V+fA8+vh"; dkim=pass (2048-bit key) header.d=mnot.net header.b="KjFHHXvR"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="YCITWwJY"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K2RMVES53qr5 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 11 Jun 2024 12:56:36 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C67DCC151998 for <httpbisa-archive-bis2Juki@ietf.org>; Tue, 11 Jun 2024 12:56:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:To:Cc:Date:Message-Id:Mime-Version:Content-Type:From:Reply-To :In-Reply-To:References; bh=1qiL6cu7mqfjU9SO7kFGb66RHrvks+geKD70TgIbZ2E=; b=J 5eS4/w3L48yBrGI8rtKaiuJGty8IEwFZpdCJjTACODVM2JaMqB8kQt8YeCRtJGr8VCXjOhWh2wC/v 8AX+HB5Ugars/Wi2Gyjy2qIEYCfBnCFyxPDyOligZNOH2dk2ssYesuBseRRm3V7tQbhAsPHs7hrRP 7vPLRbkwOXqK6hENdtSsxDgmBxAQR1weICU+AAK/1+485UlVSPr3pI9ulL6Od+TrHCCtF7FqZ1Q99 0uEW0IY8mXq5W2EpCLFIFsQpI3AU4UOrYoMn3GbtZJyurbKJqtr7MFv5cqh+M6YAnDDIc3gqekUwb g8o8iBk6zKTy0ZQrYen5l5YNL0zko5OeQ==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sH7af-00EcUI-2K for ietf-http-wg-dist@listhub.w3.org; Tue, 11 Jun 2024 19:55:33 +0000
Resent-Date: Tue, 11 Jun 2024 19:55:33 +0000
Resent-Message-Id: <E1sH7af-00EcUI-2K@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1sH7ae-00EcTM-1P for ietf-http-wg@listhub.w3.internal; Tue, 11 Jun 2024 19:55:32 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=To:Cc:Date:Message-Id:Subject:Mime-Version:Content-Type:From:Reply-To :In-Reply-To:References; bh=1qiL6cu7mqfjU9SO7kFGb66RHrvks+geKD70TgIbZ2E=; t=1718135732; x=1718999732; b=V+fA8+vhayNkrX/0b+nc8ET8aC7mufgX/1glyicKK0lERdG xczLnovA4cZrM1JD+JtmjPa4GWGeFIaTL+qmfxBRcbw0I6pdtQp1YodKTgtJzcT2k8J82ij/BGwaW tdr3Qz5K3uYI5uiUeYNjQGnm0kJyJ9I2y8g5iPqxqwlykxQZ9TgW2FP8QtYEB1Bv6Um55T/7WVCxT eMs6rcNM3344iAeiqCfblcfjZ80qbOI8FMU2lyinG1k5aZhF1sZRV1+lwodxlqEKE7FJoZXPmW4x7 eCp3KVfQUDqWlCjH9zpQ/sFGWXujW6R+UNriXz42EowqYK7lplAJ2XUiRpuWmuSw==;
Received-SPF: pass (pan.w3.org: domain of mnot.net designates 103.168.172.154 as permitted sender) client-ip=103.168.172.154; envelope-from=mnot@mnot.net; helo=fhigh3-smtp.messagingengine.com;
Received: from fhigh3-smtp.messagingengine.com ([103.168.172.154]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1sH7ad-00DxAk-1z for ietf-http-wg@w3.org; Tue, 11 Jun 2024 19:55:32 +0000
Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailfhigh.nyi.internal (Postfix) with ESMTP id 1E40011401B5; Tue, 11 Jun 2024 15:55:28 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Tue, 11 Jun 2024 15:55:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:message-id:mime-version:reply-to :subject:subject:to:to; s=fm2; t=1718135728; x=1718222128; bh=1q iL6cu7mqfjU9SO7kFGb66RHrvks+geKD70TgIbZ2E=; b=KjFHHXvRmJjVIA0ZTy 9wzS9IenuF90SOOaEZ49sPTquO5Fs3qcvXgYCpk5Mo9mkTCn6hgdjZvLHQPAl+x2 IwWDOZ8EI9nIVteX+sErsGDFOyVhukCdlWVme5emtCw4RYpzi9WMg4DTAMmxjdpx nX5fFa5Uwzj8Kre+ahwfp1jnw2gz9r8uPSqYfvu4ldxM+T1kB2wvydutLQ02knvV /2weB91FP9srdba7CktX5mEQKFjoQz6q06N0buYZt50+LhjSWcuwnvThbyuFCD26 p9wPPoFrJpGqAjKK56/RfFxcofFdV4bu5GQn5ZX+l6l7ho+6tg9KTJqhsSt2ar7j 4AeA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:message-id:mime-version:reply-to:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; t=1718135728; x=1718222128; bh=1qiL6cu7mqfjU 9SO7kFGb66RHrvks+geKD70TgIbZ2E=; b=YCITWwJYOb/xxK6pQ7VkM0XQcjp18 6l0ECVT99UWse5Lg0hb6+gYpjT5CObuK8bQVKeaqUk/FvPZPNCCYSWwgdxzv/Dx7 D86LD5re1FbN3wHINYEdpqjIod9aAf1dRUM9I3mhN7bjpRxHQYuWVIcEYMMReVj2 thQ81WxIHWGPtNDB9lFAMV8hRD8y1v/D4/uCzPhvR7hYLBMQuCs1egzTnVBk4CQv rKcYTbo9uKQG0MumIcRUcXS/qFFBr0XpJure0VqzCOm7k6QpyJNfxLkYGK2ESCzP E3sGYD3NOWYE4neyQxd0FBuVpV1pzfdF4BaUhERO+Xi1a53bUG1sMEf4A==
X-ME-Sender: <xms:r6toZrB6xaozqIoIwLZme1Bkp7DAdiGTiHT3vEzMkFt9xVSYQO9DEw> <xme:r6toZhh5hSQ39h9rvhjwVHkkfql8VjhOxCzEgWek_KyFJ8g9Ov0Xd17qTprRZYh6E 3QcvaLLdA1HI1w13Q>
X-ME-Received: <xmr:r6toZml3IOFHFgpGCyed3Cg78BdwRLFO52NBeIy_IACOZJRvHrsCc-zPmufx0OAplb-5edS1WBES-gD5AI9y64bcGeuQE3pGcFekOvEHBjU5aRj7u3QVZ33b>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrfeduvddgudegudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefhtgfgggfukfffvefvofesthhqmhdthhdtvdenucfhrhhomhepofgrrhhk ucfpohhtthhinhhghhgrmhcuoehmnhhothesmhhnohhtrdhnvghtqeenucggtffrrghtth gvrhhnpeetvdefffeikeegkeegudefveevvdejffelleeuueelveegtdekheevveffteff keenucffohhmrghinhepihgvthhfrdhorhhgpdhmnhhothdrnhgvthenucevlhhushhtvg hrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmnhhothesmhhnohhtrdhn vght
X-ME-Proxy: <xmx:r6toZtyZym1QgkWQtfLwlGGovemnhk5lQNc-CYlJdH_V1k8gmxaE3g> <xmx:r6toZgTvkqC04kD8RWCqxbdnMpgNKcfbwVtH4QTEyL9H9WywoM9Eeg> <xmx:r6toZgb547EBaQc-r3r_8BRbt7vU8uthN8CksddBq5zCbLskv1i-zQ> <xmx:r6toZhT98cc6aQ6k9ZIU4yJEBePMHO_JgU37inKXM9tpX8X3kJtdvA> <xmx:sKtoZmc5lCM4LcWjSJvDJluqzugtPMmc5Am-tgFWv959z26Z49LQW0W9>
Feedback-ID: ie6694242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 11 Jun 2024 15:55:26 -0400 (EDT)
From: Mark Nottingham <mnot@mnot.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.600.62\))
Message-Id: <4270C5C8-23AA-456C-8AB4-A8B23E83224C@mnot.net>
Date: Wed, 12 Jun 2024 05:55:24 +1000
Cc: Tommy Pauly <tpauly@apple.com>
To: HTTP Working Group <ietf-http-wg@w3.org>
X-Mailer: Apple Mail (2.3774.600.62)
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=mnot.net), signature is good
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=messagingengine.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-9.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sH7ad-00DxAk-1z 614e160bd008d1f381d1e7fcc327628f
X-Original-To: ietf-http-wg@w3.org
Subject: Working Group Last Call: The Concealed HTTP Authentication Scheme
Archived-At: <https://www.w3.org/mid/4270C5C8-23AA-456C-8AB4-A8B23E83224C@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51992
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>
Working Group participants, This e-mail announces Working Group Last Call for revision 07 of the following document: https://datatracker.ietf.org/doc/draft-ietf-httpbis-unprompted-auth/ There are no outstanding issues in GitHub, and the editors indicate that they believe it is ready. Please review the document and raise any issues you find (preferably on GitHub, but also acceptable on-list) and indicate whether you support publication (or object to it) in response to this message. Working Group Last Call will end on 27 June 2024. Cheers, -- Mark Nottingham https://www.mnot.net/
- Working Group Last Call: The Concealed HTTP Authe… Mark Nottingham
- Re: Working Group Last Call: The Concealed HTTP A… Dennis Jackson
- Re: Working Group Last Call: The Concealed HTTP A… David Schinazi
- RE: Working Group Last Call: The Concealed HTTP A… Mike Bishop
- Re: Working Group Last Call: The Concealed HTTP A… David Schinazi
- Re: Working Group Last Call: The Concealed HTTP A… Watson Ladd
- Re: Working Group Last Call: The Concealed HTTP A… Martin Thomson
- Re: Working Group Last Call: The Concealed HTTP A… Tommy Pauly
- Re: Working Group Last Call: The Concealed HTTP A… David Schinazi