[Unbearable] Review by Michael Jones of draft-ietf-tokbind-negotiation-07
Mike Jones <Michael.Jones@microsoft.com> Thu, 16 March 2017 04:45 UTC
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: unbearable@ietfa.amsl.com
Delivered-To: unbearable@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A60A120025 for <unbearable@ietfa.amsl.com>; Wed, 15 Mar 2017 21:45:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level:
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s5ZbU8Bq05Sg for <unbearable@ietfa.amsl.com>; Wed, 15 Mar 2017 21:45:56 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0119.outbound.protection.outlook.com [104.47.32.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19A8112002E for <unbearable@ietf.org>; Wed, 15 Mar 2017 21:45:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OnmbEEZwFtpvbbmMYwjvbDrL4CpPAZ/KatlnaSa6OSQ=; b=XownuVh0V9az7wr68WFvEcftfOWPN0kJAoS7Lbkl1GeXEnbRy72jJQSVxu7AYB5xcZfInoSGN3jQnCUkDyPVZNqFpiYgJcFCDpe5kacpxg2nlhHtzcTnal2DDMFREgh8E0l1sAKJPAc3m2TianRBtCO/pkliLdNPcMoEcrpkLJ0=
Received: from CY4PR21MB0504.namprd21.prod.outlook.com (10.172.122.14) by CY4PR21MB0501.namprd21.prod.outlook.com (10.172.122.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.991.0; Thu, 16 Mar 2017 04:45:52 +0000
Received: from CY4PR21MB0504.namprd21.prod.outlook.com ([10.172.122.14]) by CY4PR21MB0504.namprd21.prod.outlook.com ([10.172.122.14]) with mapi id 15.01.0991.003; Thu, 16 Mar 2017 04:45:52 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "unbearable@ietf.org" <unbearable@ietf.org>
Thread-Topic: Review by Michael Jones of draft-ietf-tokbind-negotiation-07
Thread-Index: AdKeDzCEBsP0dS3pRFeu21szpSzsLA==
Date: Thu, 16 Mar 2017 04:45:52 +0000
Message-ID: <CY4PR21MB0504A66CFD1671D2C943DE69F5260@CY4PR21MB0504.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [50.47.93.167]
x-microsoft-exchange-diagnostics: 1; CY4PR21MB0501; 7:IZbZvaAjm4H0tsiWVAS22246pwE8FELN8KQMG8mXr3t1NAfAaSCRa766UPVlMPff7xkOU3UN/pXsfgf82blE7nN4yI+HrEtkQDj1UsouCT+x3K8T2oXwX4Lwun8pp2l/CUYy0gtmxaqosedd1X2InliaCAzLxtQyl3DsIw2XaQOcG9Fk6J/Mmv7axZG8Ku8fIHlr9w05V7M5hD0IZnR9+iTg/IkjPbb9JTA5BglAQW0ZCkj0qLx7QKaM8m+eO9O2JJZu3lpd3WUqxcSQYV5A6SAKDTfSGlmZ9ZOL3D7APaG/LN0m2xzgaB7KGuROXd/R5T1ZNfG85lv5iYQyKj+uE03+WlW0zpgovhB5374XKfQ=
x-ms-office365-filtering-correlation-id: 4cb6f547-3f30-4fc0-d257-08d46c27534e
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254030)(48565401081); SRVR:CY4PR21MB0501;
x-microsoft-antispam-prvs: <CY4PR21MB0501843A4BB4C0DC4DE049C2F5260@CY4PR21MB0501.namprd21.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(8121501046)(5005006)(93006012)(93001012)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041248)(20161123562025)(20161123558025)(20161123555025)(20161123564025)(20161123560025)(6072148); SRVR:CY4PR21MB0501; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0501;
x-forefront-prvs: 024847EE92
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39410400002)(39850400002)(39860400002)(39840400002)(39450400003)(66066001)(99286003)(3280700002)(6916009)(9686003)(2351001)(230783001)(86612001)(81166006)(50986999)(55016002)(110136004)(25786008)(6116002)(1730700003)(102836003)(6436002)(790700001)(53936002)(2906002)(6506006)(5640700003)(54896002)(77096006)(7696004)(86362001)(8676002)(2501003)(38730400002)(3846002)(6306002)(5660300001)(8990500004)(33656002)(10090500001)(97736004)(3660700001)(5630700001)(54356999)(8936002)(122556002)(189998001)(74316002)(10290500002)(5005710100001)(2900100001)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0501; H:CY4PR21MB0504.namprd21.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0504A66CFD1671D2C943DE69F5260CY4PR21MB0504namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2017 04:45:52.0879 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0501
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/-0XqZuSn9sFOdg2X8GHNAGh7jbI>
Subject: [Unbearable] Review by Michael Jones of draft-ietf-tokbind-negotiation-07
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Mar 2017 04:45:58 -0000
These were the only things I found that I'd suggest changing in this specification.
Section 3: Delete the comma from "The server that supports Token Binding and receives a client hello message containing the "token_binding" extension, will include the "token_binding" extension in the server hello if all of the following conditions are satisfied".
Section 6: Change "TokenBinding" to "Token Binding".
-- Mike