From: John Bradley <ve7jtb@ve7jtb.com>
Message-Id: <B93CDAC1-BACA-4103-AB53-AE7AD0D6C7A0@ve7jtb.com>
Content-Type: multipart/signed;
 boundary="Apple-Mail=_59DD084F-2C2C-4544-9FA7-FC5B1F40AE78";
 protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Date: Mon, 6 Feb 2017 21:07:32 -0300
In-Reply-To: <CY1PR0301MB08424BA2CDD90B2B8B7934948C430@CY1PR0301MB0842.namprd03.prod.outlook.com>
To: Andrei Popov <Andrei.Popov@microsoft.com>
References: <4ab4ab60-3798-d227-8f91-d310b5b3e9c7@KingsMountain.com>
 <CY1PR0301MB0842D89387876FDA7713DF578C400@CY1PR0301MB0842.namprd03.prod.outlook.com>
 <6801C875-65FA-4C4F-B45B-59AD7D734845@ve7jtb.com>
 <CY1PR0301MB08424BA2CDD90B2B8B7934948C430@CY1PR0301MB0842.namprd03.prod.outlook.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/0kL9tnxCeq2_jaSiYrDeRWVVW7U>
Cc: IETF TokBind WG <unbearable@ietf.org>, Dirk Balfanz <balfanz@google.com>, 
 =JeffH Hodges <Jeff.Hodges@KingsMountain.com>
Subject: Re: [Unbearable] HTTPSTB updates and respin WGLC
Precedence: list


--Apple-Mail=_59DD084F-2C2C-4544-9FA7-FC5B1F40AE78
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Thanks for the update.

Lets get this done before you ship Creators update:).

John B.

> On Feb 6, 2017, at 9:01 PM, Andrei Popov <Andrei.Popov@microsoft.com> =
wrote:
>=20
> Hi John,
>=20
> I believe Jeff is working on another PR, then once that's merged we =
should be able to publish the 3 updated I-Ds.
>=20
> Cheers,
>=20
> Andrei
>=20
> -----Original Message-----
> From: John Bradley [mailto:ve7jtb@ve7jtb.com]=20
> Sent: Monday, February 6, 2017 3:52 PM
> To: Andrei Popov <Andrei.Popov@microsoft.com>
> Cc: =3DJeffH Hodges <Jeff.Hodges@KingsMountain.com>; Dirk Balfanz =
<balfanz@google.com>; IETF TokBind WG <unbearable@ietf.org>
> Subject: Re: [Unbearable] HTTPSTB updates and respin WGLC
>=20
> When do you think you guys can push =E2=80=9Cfinal" versions for the =
WG?
>=20
> I am hoping we can have these specs wrapped up by Chicago.
>=20
> John B.
>> On Feb 6, 2017, at 3:30 PM, Andrei Popov <Andrei.Popov@microsoft.com> =
wrote:
>>=20
>>> Though, in the plural case, would using "keys" rather than "key =
pairs"=20
>> work for you?
>>=20
>> This is just aesthetic preference; I can live with either phrasing...
>>=20
>> -----Original Message-----
>> From: Unbearable [mailto:unbearable-bounces@ietf.org] On Behalf Of =
=3DJeffH
>> Sent: Monday, February 6, 2017 10:17 AM
>> To: Andrei Popov <Andrei.Popov@microsoft.com>; Dirk Balfanz =
<balfanz@google.com>
>> Cc: IETF TokBind WG <unbearable@ietf.org>
>> Subject: Re: [Unbearable] HTTPSTB updates and respin WGLC
>>=20
>> cf: =
<https://www.ietf.org/mail-archive/web/unbearable/current/msg01147.html>
>> [ i suspect Dirk had not seen Andrei's email prior to merging PR #92 =
]
>>=20
>> Andrei wrote on Fri, 3 Feb 2017 01:51:23 +0000:
>>>=20
>>> A few editorial suggestions below.
>>>=20
>>>> I think this needs to be rephrased:
>>>> The Token Binding ID of a TLS connection is constructed using  >> =
the public key OF a private-public key pair, OF which  >> the client =
proves possession OF the private key to  >> the server.
>>> Perhaps better to just split this into two sentences:
>>>=20
>>> The Token Binding ID of a TLS connection is constructed using the  > =
public key of a private-public key pair.
>>> The client proves possession of the corresponding private key.
>>=20
>> thx, queued.
>>=20
>>=20
>>>> (clients use different Token Binding key pairs for different...
>>>> The scoping for those Token Binding key pairs generated by Web  >> =
browsers in...
>>>> browsers MAY use different key pair scoping rules.
>>>> For privacy reasons, clients use different Token Binding key pairs  =
>> of the Token Binding key pair. It is possible that the Token  >> =
<section title=3D"Scoping of Token Binding Key Pairs"...
>>>> [...]
>>>=20
>>> While not wrong, all these key pairs seem unnecessary. The Token  > =
Binding key is asymmetric, so clearly it has a private and public  > =
component.
>>=20
>> It seems inaccurate and potentially confusing to speak of a singular =
"token binding key" when we have explicitly termed it a "private-public =
key pair", and it is indeed two separate (although related) artifacts.
>>=20
>> Though, in the plural case, would using "keys" rather than "key =
pairs"=20
>> work for you?
>>=20
>>>> contains both: a proof of possession of the provided Token Binding  =
>> ID, as well as a proof of possession of the referred Token Binding  =
>> ID  > It's a proof of possession of a Token Binding key, I think.
>>=20
>> ok, queued, thx again.
>>=20
>> =3DJeffH
>>=20
>> _______________________________________________
>> Unbearable mailing list
>> Unbearable@ietf.org
>> https://www.ietf.org/mailman/listinfo/unbearable
>>=20
>> _______________________________________________
>> Unbearable mailing list
>> Unbearable@ietf.org
>> https://www.ietf.org/mailman/listinfo/unbearable
>=20


--Apple-Mail=_59DD084F-2C2C-4544-9FA7-FC5B1F40AE78
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_59DD084F-2C2C-4544-9FA7-FC5B1F40AE78--