Re: Interop for HTTP Signature Auth
Andrew Jones <ajones@digitalbazaar.com> Wed, 24 January 2024 16:20 UTC
Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6266CC14F721 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 24 Jan 2024 08:20:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.754
X-Spam-Level:
X-Spam-Status: No, score=-7.754 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=digitalbazaar.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lME7DSge21vy for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 24 Jan 2024 08:20:31 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31BF3C14F60F for <httpbisa-archive-bis2Juki@ietf.org>; Wed, 24 Jan 2024 08:20:31 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1rSfxf-0077gu-UA for ietf-http-wg-dist@listhub.w3.org; Wed, 24 Jan 2024 16:18:47 +0000
Resent-Date: Wed, 24 Jan 2024 16:18:47 +0000
Resent-Message-Id: <E1rSfxf-0077gu-UA@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <ajones@digitalbazaar.com>) id 1rSfxd-0077g1-Tq for ietf-http-wg@listhub.w3.org; Wed, 24 Jan 2024 16:18:45 +0000
Received: from mail-ot1-x330.google.com ([2607:f8b0:4864:20::330]) by titan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from <ajones@digitalbazaar.com>) id 1rSfxX-008Yeo-RO for ietf-http-wg@w3.org; Wed, 24 Jan 2024 16:18:45 +0000
Received: by mail-ot1-x330.google.com with SMTP id 46e09a7af769-6ddf26eba3cso3677648a34.0 for <ietf-http-wg@w3.org>; Wed, 24 Jan 2024 08:18:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digitalbazaar.com; s=google; t=1706113116; x=1706717916; darn=w3.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Ty08eKzZrbJAYQVwnFLwpKjCV6gD0Q0oBeeicZsddBg=; b=kmPMoJvKRDsmxH5Yw8AB1RjvLs6lU6V9vPrSbiQAWxAPoDwWbC4HhB9ILJa32wCctO ov+cQGkV1qwJEp3Qr5MOZ6mm5Db9Uufwyb4jBAzYJA10+Zp1VhtT/EPKL+L5xeCrzu8d aH6v2rWWoQmI6APtAi4N260MdgBWOu2QyI30TKFruzoUNl4zMRxFdzs1OUHRsK0eSU09 4uW8X81j59eZKQh0zrtodds70fTMuQz3pJpQOpZ5fc3UrSw4DZeJtNQ7GS1WQGvsZP52 +0f5Lf3plO/tK6WWnrz3sSjfgavDJB7j97mTMAOud5NsACZ9nVmPqOgXGYG2uZJujvZq mnOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1706113116; x=1706717916; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Ty08eKzZrbJAYQVwnFLwpKjCV6gD0Q0oBeeicZsddBg=; b=A1ihsMQpCSClpmfCZA8WTjcnma3Gxpa22Op0qaolV0aRmA6yzbG++c7Rbl0TzesOXn iY2eAQ6vx6h5g6Mqn8ho3m/ibTBoPNx3i/H1SybHhaHN9zDUHHyTyuYcBa64TkwTNV8p ErKp7fqrVqT2o8x5Ypxt+2CIf0YDDXDNfSPVMB957qTorRQVK05QX7c/5Giy4Uocj2Hy IXgp2hD4uu+czUolsXr4gCQEMqZITkI6xQXdchVHt87pCHtS/8qrgaioW6ZO+d4QXUKH fQychRQkqh853XZx4w+8kUDESJaF02jluqXWgO8mfc7rMuYovGzg6F2MTorglbjjdtsn vf2Q==
X-Gm-Message-State: AOJu0YxYgNNLnMV0xAqZIS7QZG7za6kbwUHaTN34Cu5gsWSM018olCRq aqEJlpR66LzVwL+sxLHbp2nTgMuRlixC94Na4vsB16Lg6n+5TPx+3xLYTRWBdVH5WH9rhFdVY0f EQixxA7naczE55Ug4whdWQo6ym7quhK9KQjbsNQ==
X-Google-Smtp-Source: AGHT+IGxqObG2S3SW2T1SVl9oKsIAEzPidj1+kWHfEOSu5Sfl66rX6FBoXRSO6I68XDdRD45StyRuLfELuYWHEjAvpY=
X-Received: by 2002:a05:6830:25d0:b0:6db:d232:7f40 with SMTP id d16-20020a05683025d000b006dbd2327f40mr1883466otu.0.1706113115933; Wed, 24 Jan 2024 08:18:35 -0800 (PST)
MIME-Version: 1.0
References: <CAPDSy+6+GEKYmd6WqCeJfeSvMJkf9CnXidmo2XMY2NYKcz1+-w@mail.gmail.com>
In-Reply-To: <CAPDSy+6+GEKYmd6WqCeJfeSvMJkf9CnXidmo2XMY2NYKcz1+-w@mail.gmail.com>
From: Andrew Jones <ajones@digitalbazaar.com>
Date: Wed, 24 Jan 2024 16:18:25 +0000
Message-ID: <CAF_w2PEtOw00XAViqkT8UgXVZo+0BzAxnLQZT4G8uKr1R+v3yA@mail.gmail.com>
To: David Schinazi <dschinazi.ietf@gmail.com>
Cc: HTTP Working Group <ietf-http-wg@w3.org>, François Michel <francois.michel@uclouvain.be>, Jonathan Hoyland <jonathan.hoyland@gmail.com>, David Oliver <david@guardianproject.info>
Content-Type: multipart/alternative; boundary="00000000000038e637060fb36acc"
Received-SPF: pass client-ip=2607:f8b0:4864:20::330; envelope-from=ajones@digitalbazaar.com; helo=mail-ot1-x330.google.com
X-W3C-Hub-DKIM-Status: validation passed: (address=ajones@digitalbazaar.com domain=digitalbazaar.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-6.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_WL=-1, WEIRD_PORT=0.001
X-W3C-Scan-Sig: titan.w3.org 1rSfxX-008Yeo-RO ca0989dc9352cabf453e73527b232b5f
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Interop for HTTP Signature Auth
Archived-At: <https://www.w3.org/mid/CAF_w2PEtOw00XAViqkT8UgXVZo+0BzAxnLQZT4G8uKr1R+v3yA@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51731
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>
congrats on interop. On Wed, Jan 24, 2024 at 12:57 AM David Schinazi <dschinazi.ietf@gmail.com> wrote: > Hi HTTP enthusiasts, > > I'm happy to report that today we accomplished > bidirectional interop between two independent > implementations of HTTP Signature Auth, Google > QUICHE in C++ [1] and François's in Go [2]. Both > have publicly accessible servers: François has one > that accepts any public key [3] and then we both have > ones that you'll need to send us public keys for [4, 5]. > I suggest trying François's server first, it displays > better debug information than mine :-) This also > helped us make minor editorial fixes to the document, > which we've shipped as -06 [6]. > > My sincere thanks to François for working on this. > We look forward to working with anyone else > interested in interop here. > > Cheers, > David > > [1] https://github.com/google/quiche > [2] https://github.com/francoismichel/http-signature-auth-go > [3] > https://httpsignature.francoismichel.be/signature/insecure/draft-ietf-httpbis-unprompted-auth-05 > [4] > https://httpsignature.francoismichel.be/signature/draft-ietf-httpbis-unprompted-auth-05 > [5] https://masque.uno:4321/ > [6] > https://www.ietf.org/archive/id/draft-ietf-httpbis-unprompted-auth-06.html >
- Interop for HTTP Signature Auth David Schinazi
- Re: Interop for HTTP Signature Auth Andrew Jones