[kitten] SASL as authmode for HTTP and SIP

[Rick van Rein <[e-mail]>]

Hello Kitten,

Attached are two specs that we defined to add SASL to HTTP and SIP,
using the protocol specifics for each.

The HTTP-SASL spec is mature, and has been implemented for Apache (2x),
Nginx and FireFox.  Based on it, SIP-SASL is a new development.  In
both cases, there is a use case together with the Diameter relay for
SASL, allowing Realm Crossover so anyone can authenticate anyone's
home-grown identity.

The HTTP-SASL spec will hopefully be discussed in London.  For both,
I am also available for feedback in London.  If no feedback follows,
I will push for these in their respective protocol WGs.


Cheers,

Rick van Rein
InternetWide.org


   ----- 8< -------- 8< -------- 8< -------- 8< -------- 8< -----


A new version of I-D, draft-vanrein-httpauth-sasl-07.txt
has been successfully submitted by Rick van Rein and posted to the
IETF repository.

Name:		draft-vanrein-httpauth-sasl
Revision:	07
Title:		HTTP Authentication with SASL
Document date:	2022-10-14
Group:		Individual Submission
Pages:		14
URL:            https://www.ietf.org/archive/id/draft-vanrein-httpauth-sasl-07.txt
Status:         https://datatracker.ietf.org/doc/draft-vanrein-httpauth-sasl/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-vanrein-httpauth-sasl
Diff:           https://www.ietf.org/rfcdiff?url2=draft-vanrein-httpauth-sasl-07

Abstract:
   Most application-level protocols standardise their authentication
   exchanges under the SASL framework.  HTTP has taken another course,
   and often ends up replicating the work to allow individual
   mechanisms.  This specification adopts full SASL authentication into
   HTTP.


   ----- 8< -------- 8< -------- 8< -------- 8< -------- 8< -----


A new version of I-D, draft-vanrein-sipauth-sasl-01.txt
has been successfully submitted by Rick van Rein and posted to the
IETF repository.

Name:		draft-vanrein-sipauth-sasl
Revision:	01
Title:		SASL Authentication for SIP
Document date:	2022-10-14
Group:		Individual Submission
Pages:		13
URL:            https://www.ietf.org/archive/id/draft-vanrein-sipauth-sasl-01.txt
Status:         https://datatracker.ietf.org/doc/draft-vanrein-sipauth-sasl/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-vanrein-sipauth-sasl
Diff:           https://www.ietf.org/rfcdiff?url2=draft-vanrein-sipauth-sasl-01

Abstract:
   Many protocols benefit from "pluggable" authentication choice as a
   result of SASL authentication.  In the Session Initiation Protocol,
   the independent branch of HTTP Authentication has been elected.
   Recent progress has been made in bringing SASL to HTTP, but SIP has
   its own special considerations and needs its own embedding to gain
   the flexibility of SASL.