[Unbearable] [TokenBinding/Internet-Drafts] 2c5681: Starting v16 of ...-https

Dirk Balfanz <dirk@balfanz.net> Wed, 23 May 2018 15:15 UTC

Return-Path: <bounce+3a3868.40f-unbearable=ietf.org@github.com>
X-Original-To: unbearable@ietfa.amsl.com
Delivered-To: unbearable@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5A0E1270B4 for <unbearable@ietfa.amsl.com>; Wed, 23 May 2018 08:15:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.663
X-Spam-Level:
X-Spam-Status: No, score=-1.663 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i7KSjekjuQ1p for <unbearable@ietfa.amsl.com>; Wed, 23 May 2018 08:15:18 -0700 (PDT)
Received: from m69-169.mailgun.net (m69-169.mailgun.net [166.78.69.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A76811270A7 for <unbearable@ietf.org>; Wed, 23 May 2018 08:15:18 -0700 (PDT)
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=github.com; q=dns/txt; s=mailo; t=1527088518; h=Content-Transfer-Encoding: Content-Type: Mime-Version: Subject: Message-ID: To: Reply-To: From: Date: Sender; bh=/gVivYpGKqjGzQklp0AeUjIj6Eyyx2n//CdZq7zsKG8=; b=RUpvyFYHtGQYTFkyGkf1qHsAPEQ5NlENk+B/G/ESn9Hd5PFgyk0pLykeZcz0bD3GrxvmSb/r oaWu4rQ2DotTPtJSBdIB+to1uHg2ZbcqS5ZHq99ow/p81C1tE8vWQ8CVI7qcyt7Aqh0m3H0C QnHU7aL70O6OOi6CKckqco3R6L8=
X-Mailgun-Sending-Ip: 166.78.69.169
X-Mailgun-Sid: WyIzMTNlNyIsICJ1bmJlYXJhYmxlQGlldGYub3JnIiwgIjQwZiJd
Sender: dirk=balfanz.net@github.com
Received: from github.com (Unknown [192.30.252.35]) by mxa.mailgun.org with ESMTP id 5b058585.7f3c49b6b870-smtp-out-n01; Wed, 23 May 2018 15:15:17 -0000 (UTC)
Date: Wed, 23 May 2018 08:15:17 -0700
From: Dirk Balfanz <dirk@balfanz.net>
Reply-To: Dirk Balfanz <dirk@balfanz.net>
To: unbearable@ietf.org
Message-ID: <5b05858574481_76862b0be3df7c0c5912c@hookshot-fe-d252ca1.cp1-iad.github.net.mail>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="--==_mimepart_5b05858574074_76862b0be3df7c0c590d2"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/-sTkOg6_H3lFdlgXs8jKtHlGStQ>
Subject: [Unbearable] [TokenBinding/Internet-Drafts] 2c5681: Starting v16 of ...-https
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 May 2018 15:15:21 -0000

  Branch: refs/heads/master
  Home:   https://github.com/TokenBinding/Internet-Drafts
  Commit: 2c5681b7c746377a472bbdfe5e33e574252a6e70
      https://github.com/TokenBinding/Internet-Drafts/commit/2c5681b7c746377a472bbdfe5e33e574252a6e70
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    R draft-ietf-tokbind-https-15.xml
    A draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Starting v16 of ...-https


  Commit: cd5dd563eb6f9a0eaaa060fc09553ca715a92937
      https://github.com/TokenBinding/Internet-Drafts/commit/cd5dd563eb6f9a0eaaa060fc09553ca715a92937
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Clarifying that user agents MUST discard Token Binding keys along with cookies in certain situations.


  Commit: 39978b9a2364e35d36b80494d9c9806a10b44e5d
      https://github.com/TokenBinding/Internet-Drafts/commit/39978b9a2364e35d36b80494d9c9806a10b44e5d
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Breaking paragraph 3 in Section 2 into two sentences to allow for easier parsing.


  Commit: 844241e180711f54cb77da786a3ba48e11396bca
      https://github.com/TokenBinding/Internet-Drafts/commit/844241e180711f54cb77da786a3ba48e11396bca
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Clarifying that backslashes aren't part of the actual encoded message - just there for readability.


  Commit: 5ad03b6b620b009f7e369ba1df986b91a542a633
      https://github.com/TokenBinding/Internet-Drafts/commit/5ad03b6b620b009f7e369ba1df986b91a542a633
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Re-wording of some sentences in Section 2.1 to ease parsing.


  Commit: 4504c4807f64e0b88f4bdfb2fe6d2e0d9266846c
      https://github.com/TokenBinding/Internet-Drafts/commit/4504c4807f64e0b88f4bdfb2fe6d2e0d9266846c
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-22 (Tue, 22 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Some re-wording in Section 5.2


  Commit: cc5b74b1ac7a46771c56f4eb3717c4529e266f17
      https://github.com/TokenBinding/Internet-Drafts/commit/cc5b74b1ac7a46771c56f4eb3717c4529e266f17
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Clarifying that Security Consideration 7.1. is closely related to a Security Consideration in the tokbind-protocol spec.


  Commit: 395fac1af08bce2d695d3439efd7e91732fc8ae0
      https://github.com/TokenBinding/Internet-Drafts/commit/395fac1af08bce2d695d3439efd7e91732fc8ae0
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Removing a Security Consideration that applies only to the tokbind-negotiation spec, and is indeed already mentioned there.


  Commit: b8b510549a2275fb9155ac8308c4bda7d2ebab07
      https://github.com/TokenBinding/Internet-Drafts/commit/b8b510549a2275fb9155ac8308c4bda7d2ebab07
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Removing a comma in Section 8.3


  Commit: 37a94a38a705a39d9372cc8986c139e5e1155988
      https://github.com/TokenBinding/Internet-Drafts/commit/37a94a38a705a39d9372cc8986c139e5e1155988
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  fixed typo


  Commit: fb107f52f69a0bc9d480c2bf33d4e3f9cc023a93
      https://github.com/TokenBinding/Internet-Drafts/commit/fb107f52f69a0bc9d480c2bf33d4e3f9cc023a93
  Author: Dirk Balfanz <dirk@balfanz.net>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M draft-ietf-tokbind-https-16.xml

  Log Message:
  -----------
  Clarifying the meaning of "etld+1", with citation.


Compare: https://github.com/TokenBinding/Internet-Drafts/compare/55ce86a26c23...fb107f52f69a
      **NOTE:** This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.