Re: Call for adoption: draft-reschke-httpauth-auth-info-00

Julian Reschke <julian.reschke@gmx.de> Wed, 04 February 2015 16:51 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB2831A8AEF for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 4 Feb 2015 08:51:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.912
X-Spam-Level:
X-Spam-Status: No, score=-6.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8m_k5pp3CXlg for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 4 Feb 2015 08:51:18 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 985061A0A85 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Wed, 4 Feb 2015 08:51:18 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1YJ37R-0005YX-EE for ietf-http-wg-dist@listhub.w3.org; Wed, 04 Feb 2015 16:48:01 +0000
Resent-Date: Wed, 04 Feb 2015 16:48:01 +0000
Resent-Message-Id: <E1YJ37R-0005YX-EE@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtp (Exim 4.80) (envelope-from <julian.reschke@gmx.de>) id 1YJ37L-0005Xm-NX for ietf-http-wg@listhub.w3.org; Wed, 04 Feb 2015 16:47:55 +0000
Received: from mout.gmx.net ([212.227.15.15]) by lisa.w3.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from <julian.reschke@gmx.de>) id 1YJ37K-0003iS-H3 for ietf-http-wg@w3.org; Wed, 04 Feb 2015 16:47:55 +0000
Received: from [192.168.1.26] ([217.91.35.233]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0M7HGA-1XOUHJ3SdC-00x5c0; Wed, 04 Feb 2015 17:47:11 +0100
Message-ID: <54D24CFC.20709@gmx.de>
Date: Wed, 04 Feb 2015 17:46:52 +0100
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
CC: Amos Jeffries <squid3@treenet.co.nz>, ietf-http-wg@w3.org, Yutaka Oiwa <y.oiwa@aist.go.jp>, Alexey Melnikov <alexey.melnikov@isode.com>
References: <1BA93C83-91E9-4E7D-88CE-ADC8C39091C6@mnot.net> <CABkgnnXhg55e5N2O8yZJpTbz4qSm0-KpVApyDha_snetrFqvMw@mail.gmail.com> <54C9E419.1070407@greenbytes.de> <54CB7A4F.7090402@crf.canon.fr> <54CB7F48.4060800@gmx.de> <CAGL6epLUkFi6amhExWASqjS5Mvs1MVTJ1hDmhBTncznQV1GK1A@mail.gmail.com> <54CBFB6E.9070800@treenet.co.nz> <54CF7E9B.2060700@gmx.de> <CAGL6epL_XLY+ZeLPi3XVJsdaoSYFwhJuuy7zDeLspJ0tMfKvKw@mail.gmail.com>
In-Reply-To: <CAGL6epL_XLY+ZeLPi3XVJsdaoSYFwhJuuy7zDeLspJ0tMfKvKw@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Provags-ID: V03:K0:B3URSfcKKQ2L72OWvPy5Bv3vEJZaK0Bgfj7Uf9V52AI+as42Cxo ktQ9HiKgS3nDWDbkUiOkEpzDgwbsfFGKojl9Ltzao8nzXX2gpsTzCGYKcXUQxFK40IwYV63 vin4kL8sQYwsSW33KxM92zu+YawOOfirj0dcwiGaGtXDpr8fQDd3lkAKpRYzwMQgBdfmEtz +mFlV+/egHfyFUuM3NrFA==
X-UI-Out-Filterresults: notjunk:1;
Received-SPF: pass client-ip=212.227.15.15; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net
X-W3C-Hub-Spam-Status: No, score=-3.4
X-W3C-Hub-Spam-Report: AWL=-3.369, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001
X-W3C-Scan-Sig: lisa.w3.org 1YJ37K-0003iS-H3 f92120a0970dd90c0afb548bdf04b130
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Call for adoption: draft-reschke-httpauth-auth-info-00
Archived-At: <http://www.w3.org/mid/54D24CFC.20709@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/28753
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 2015-02-02 15:08, Rifaat Shekh-Yusef wrote:
> This document does not define any semantics associated with these
> header, which means that the document that uses these header will be the
> one that must address the information leak issue.
> I do not see why we would restrict a future use of these headers based
> on the Digest usage; this seems odd to me.
>
> Regards,
>   Rifaat

Well, the goal for me was not to define anything new, but just to 
extract what we have already into something that can be maintained 
separately from DIGEST. As such, Hervé's comment made sense to me, and I 
updated the editor's copy accordingly:

 
<http://greenbytes.de/tech/webdav/draft-ietf-httpbis-auth-info-latest-from-previous.diff.html>

Maybe other potential users of Auth-Info (Yutaka & Alexey) could state 
whether having this constraint would affect their ability to use 
Authentication-Info?

Assuming that is not the case, I'd like to declare victory, submit a new 
draft, and ask Mark to start a WGLC...

Best regards, Julian