[kitten] Internet Draft: SASL for HTTP

Rick van Rein <rick@openfortress.nl> Thu, 03 February 2022 16:21 UTC

Date: Thu, 03 Feb 2022 16:21:22 +0000
From: Rick van Rein <rick@openfortress.nl>
To: kitten@ietf.org
Cc: Henri Manson <henri@mansoft.nl>
Message-ID: <20220203162122.GA342@openfortress.nl>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
User-Agent: Mutt/1.5.20 (2009-06-14)
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/DhmgyxWtMrrpuSk3HJPzw-y2pik>
Subject: [kitten] Internet Draft: SASL for HTTP
Precedence: list

Hello Kitten,

We are finishing our implementation work on HTTP-SASL and have
co-written the following specification.  This may be used with
the Diameter relay for SASL, posted a few days ago.

Before putting this before the HTTP WG, I would like to give
Kitten a chance to respond.

Earlier work to embed SASL into HTTP stranded on the need to
keep state on the server; we have added an "s2s" field that
can be used to store the full authentication state.

As before, this is written as Independent proposal, but if it
becomes a WG document then that is fine too.

Thanks,
 -Rick

----- Forwarded message from internet-drafts@ietf.org -----

Date: Thu, 03 Feb 2022 07:55:46 -0800
From: internet-drafts@ietf.org
To: Rick van Rein <rick@openfortress.nl>
Subject: New Version Notification for draft-vanrein-httpauth-sasl-06.txt


A new version of I-D, draft-vanrein-httpauth-sasl-06.txt
has been successfully submitted by Rick van Rein and posted to the
IETF repository.

Name:		draft-vanrein-httpauth-sasl
Revision:	06
Title:		HTTP Authentication with SASL
Document date:	2022-02-03
Group:		Individual Submission
Pages:		14
URL:            https://www.ietf.org/archive/id/draft-vanrein-httpauth-sasl-06.txt
Status:         https://datatracker.ietf.org/doc/draft-vanrein-httpauth-sasl/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-vanrein-httpauth-sasl
Diff:           https://www.ietf.org/rfcdiff?url2=draft-vanrein-httpauth-sasl-06

Abstract:
   Most application-level protocols standardise their authentication
   exchanges under the SASL framework.  HTTP has taken another course,
   and often ends up replicating the work to allow individual
   mechanisms.  This specification adopts full SASL authentication into
   HTTP.

                                                                                  


The IETF Secretariat



----- End forwarded message -----

[kitten] Internet Draft: SASL for HTTP Rick van Rein