[saag] HTTP-Auth report

Yoav Nir <ynir.ietf@gmail.com> Wed, 22 July 2015 17:37 UTC

From: Yoav Nir <ynir.ietf@gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <B0C7E220-6138-49C0-9C91-447B3AB5BEEF@gmail.com>
Date: Wed, 22 Jul 2015 19:36:26 +0200
To: Security Area Advisory Group <saag@ietf.org>
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
Archived-At: <http://mailarchive.ietf.org/arch/msg/saag/k5UUxDgxWOHtO3jf3XHyTp6sTnA>
Subject: [saag] HTTP-Auth report
Precedence: list

Hi

The HTTP-Auth group met on Monday. We have a set of three documents for the MutualAuth authentication method and its algorithm framework, and the work on that has stalled. The group has resolved to attempt an aggressive model of resolving these issues on the mailing list. We also have another document - SCRAM - which is nearing completion and should reach WGLC before the next IETF.

We also heard presentation for two potential new authentication methods, but for now we are not taking them on, at least until we see some progress on the existing documents.

One other thing: Matt Lepinsky has stepped down as WG chair after taking on a teaching position. I’d like to take this opportunity to thank Matt for the time spent chairing HTTP-Auth and wish him luck.

Yoav

[saag] HTTP-Auth report Yoav Nir