[Ohai] [Technical Errata Reported] RFC9458 (7781)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 25 January 2024 02:47 UTC

To: mt@lowentropy.net, caw@heapingbits.net, rdd@cert.org, paul.wouters@aiven.io, rlb@ipv.sx, shivankaulsahib@gmail.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: d@ngould.dev, ohai@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240125024719.1F596E7C65@rfcpa.amsl.com>
Date: Wed, 24 Jan 2024 18:47:19 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/ohai/Xm_Aq9gX2kBxIkI6MQZXtDfmU-0>
Subject: [Ohai] [Technical Errata Reported] RFC9458 (7781)
Precedence: list

The following errata report has been submitted for RFC9458,
"Oblivious HTTP".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7781

--------------------------------------
Type: Technical
Reported by: Dan Gould <d@ngould.dev>

Section: Appendix A

Original Text
-------------
   The AEAD Seal() function is then used to encrypt the response, which
   is added to the randomized nonce value to produce the Encapsulated
   Response:

   c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f
   857fbd

   The Oblivious Gateway Resource constructs a response with the same
   content:

   HTTP/1.1 200 OK
   Date: Wed, 27 Jan 2021 04:45:07 GMT
   Cache-Control: private, no-store
   Content-Type: message/ohttp-res
   Content-Length: 38

   <content is the Encapsulated Response>

Corrected Text
--------------
   The AEAD Seal() function is then used to encrypt the response, which
   is added to the randomized nonce value to produce the Encapsulated
   Response:

   c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f
   857fbd

   The Oblivious Gateway Resource constructs a response with the same
   content:

   HTTP/1.1 200 OK
   Date: Wed, 27 Jan 2021 04:45:07 GMT
   Cache-Control: private, no-store
   Content-Type: message/ohttp-res
   Content-Length: 35

   <content is the Encapsulated Response>

Notes
-----
The Content-Length header in the example response is set to 38 while the given Encapsulated Response (c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f
857fbd) has a length of 35

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9458 (draft-ietf-ohai-ohttp-10)
--------------------------------------
Title               : Oblivious HTTP
Publication Date    : January 2024
Author(s)           : M. Thomson, C. A. Wood
Category            : PROPOSED STANDARD
Source              : Oblivious HTTP Application Intermediation
Area                : Security
Stream              : IETF
Verifying Party     : IESG

[Ohai] [Technical Errata Reported] RFC9458 (7781) RFC Errata System