Document Action: 'Mutual Authentication Protocol for HTTP' to Experimental RFC (draft-ietf-httpauth-mutual-11.txt)

The IESG <iesg-secretary@ietf.org> Fri, 06 January 2017 22:12 UTC

Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Document Action: 'Mutual Authentication Protocol for HTTP' to Experimental RFC (draft-ietf-httpauth-mutual-11.txt)
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <148374073752.17474.14854827129235366898.idtracker@ietfa.amsl.com>
Date: Fri, 06 Jan 2017 14:12:17 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/pgQkw3F4agLDoF4DBTabdIpq42Y>
Cc: draft-ietf-httpauth-mutual@ietf.org, httpauth-chairs@ietf.org, Kathleen.Moriarty.ietf@gmail.com, http-auth@ietf.org, The IESG <iesg@ietf.org>, rfc-editor@rfc-editor.org
Reply-To: ietf@ietf.org

The IESG has approved the following document:
- 'Mutual Authentication Protocol for HTTP'
  (draft-ietf-httpauth-mutual-11.txt) as Experimental RFC

This document is the product of the Hypertext Transfer Protocol
Authentication Working Group.

The IESG contact persons are Stephen Farrell and Kathleen Moriarty.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-httpauth-mutual/





Technical Summary

This document specifies a mutual authentication scheme for the
Hypertext Transfer Protocol (HTTP).  This scheme provides true mutual
authentication between an HTTP client and an HTTP server using
password-based authentication.  Unlike the Basic and Digest
authentication schemes, the Mutual authentication scheme specified in
this document assures the user that the server truly knows the user's
encrypted password.

Working Group Summary

  This document is one of the experimental documents submitted to the
  HTTP-Auth working group.

  With version -8 it is the consensus of the HTTP-Auth working group
  that this document is fit to be published as an experimental RFC.


Document Quality

   The proposed mutual authentication method has been reviewed by a fair
   number of participants.

   There is at least one known implementation of this protocol.

   The authors declared 2 IPRs:
   https://datatracker.ietf.org/ipr/search/?submit=draft&id=draft-ietf-httpauth-mutual


Personnel

   Shepherd: Rifaat Shekh-Yusef
   Area Director: Kathleen Moriarty

IANA Note

  This draft establishes two registries that require expert review per RFC5226.
     A registry for HTTP Mutual authentication algorithms and
     A registry for HTTP Mutual authentication host validation methods

Document Action: 'Mutual Authentication Protocol … The IESG