IETF Logo Mail Archive

Re: [Unbearable] Token binding version (0, 10) support is global on google servers

Bill Cox <waywardgeek@google.com> Thu, 23 February 2017 21:49 UTC

Return-Path: <waywardgeek@google.com>
X-Original-To: unbearable@ietfa.amsl.com
Delivered-To: unbearable@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01587129B06 for <unbearable@ietfa.amsl.com>; Thu, 23 Feb 2017 13:49:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oz62Bh_CKeD5 for <unbearable@ietfa.amsl.com>; Thu, 23 Feb 2017 13:49:04 -0800 (PST)
Received: from mail-it0-x22d.google.com (mail-it0-x22d.google.com [IPv6:2607:f8b0:4001:c0b::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6800C12940A for <unbearable@ietf.org>; Thu, 23 Feb 2017 13:49:04 -0800 (PST)
Received: by mail-it0-x22d.google.com with SMTP id d9so7042230itc.0 for <unbearable@ietf.org>; Thu, 23 Feb 2017 13:49:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=m0lb4B/HeJDJdaYM0PRa0q7b7M6fe+yEhgNdTECCjbs=; b=eVFh7QbTWplX8QCc2EBTZNpAAfxrRTVSaXxBKDRLqWebZUv6a8pmwlx6mUf+I6yEWn zjMMbISiAms4Q2DAdweSxPPmcqaDU5nMQme2XOnoDe1ndBXVfaH83t+BpLhXyYmmf91V qYWOjK41PLBrVsmwIp4WPxKP3jM5Lt3LLlaS1c+7Pc+kZJ78yLBd3cW4QQ60ZlqahZZj vI3th1EWFtCes3Ahuu6KUZ73skdyDW3ELSH4YjRaE6VRafNRLvgKdTrnrx/T/Bued/HR d28wGjLGrdqJfL+imwVNEe4/p6C8G7IdmabFHPxsUQUu68Uy6cxhOJB0c38R/B15E0qE Cuiw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=m0lb4B/HeJDJdaYM0PRa0q7b7M6fe+yEhgNdTECCjbs=; b=fKi/NVrZ47l1ReQS8ddDaj8obe78inunT6P/EGQlDG1r/A992JUNPQ/iooTnUN0ipF ZlSDWArlY89T4jAiC6DpR2vtl/jujQrePdpTHQbMXyMaHDji7xjf2ogtCPruzSzU8klt mXZFiYa9fp4Nbnj5bQn0Mk/XkEAlT1wlfMJH1V+YBPlxPBqDeQoRV5FDe+MaSkDs8DY5 PthdF1HXunMYgGD9RXonDHhQM59Uo7FxpgrIVzwcNZCf/34q+yp5mbQnpLarjj6KT46D Dow9pgK3nrQ3HyFv6XIANraC6HaWK4degRg/NX55nrpmrgJ86NnKlccLA57RIzYX3xY9 /ZQQ==
X-Gm-Message-State: AMke39n3H8f33TeqpZhHf6TKiPmK9ctL8YyBnOfG1MjJ/mqWEC3Fj1ik8QsevCTxGEiq4NZfTlzNw+UpwG3C0c5E
X-Received: by 10.36.203.4 with SMTP id u4mr6292625itg.99.1487886543381; Thu, 23 Feb 2017 13:49:03 -0800 (PST)
MIME-Version: 1.0
Received: by 10.64.152.41 with HTTP; Thu, 23 Feb 2017 13:49:02 -0800 (PST)
In-Reply-To: <CAH9QtQFhBcoLqr9k_fT-cg9vF2Kts2MtS05doUx4ZdjAt0bLgQ@mail.gmail.com>
References: <CAH9QtQHiMNKTWkExDduH=huCzs=yVW+E7YM3Wnoh0DoeYUe08A@mail.gmail.com> <CAOVPt=vZWZyKow=4kSURgr-XSYQ-EDZun3uiCaCki5oWMKUYyA@mail.gmail.com> <BN3PR03MB232370AF08B306BBE51DA920B0710@BN3PR03MB2323.namprd03.prod.outlook.com> <CACdeXiJ7DF0RM=xrUtmQu9m5576Qpea15WQAZyV2=gf_i5ix+Q@mail.gmail.com> <CA+iA6ugV1TaKpMw7P236F6tcUGMB8Y4vHrEk4MtSoNZVemkphA@mail.gmail.com> <CAH9QtQFhBcoLqr9k_fT-cg9vF2Kts2MtS05doUx4ZdjAt0bLgQ@mail.gmail.com>
From: Bill Cox <waywardgeek@google.com>
Date: Thu, 23 Feb 2017 13:49:02 -0800
Message-ID: <CAH9QtQH-xAT=3k2gsDtEPOisW0v4aCwvPSe6x6iarNFzGQw83Q@mail.gmail.com>
To: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Content-Type: multipart/alternative; boundary="94eb2c0b0aa0e2db1305493994bb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/6FEdiPps3fAzVf3dwdVDZyK-AsQ>
Cc: Vinod Anupam <vanupam@google.com>, Pranav Kukreja <pranavk@microsoft.com>, Tokbind WG <unbearable@ietf.org>, token-binding-team <token-binding-team@google.com>, Nick Harper <nharper@google.com>
Subject: Re: [Unbearable] Token binding version (0, 10) support is global on google servers
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Feb 2017 21:49:06 -0000

The library now supports version (0, 10) through (0, 13).  However Google's
front-end currently still supports only (0, 10), and when it switches, it
will switch to only (0, 13)

On Thu, Feb 23, 2017 at 1:17 PM, Bill Cox <waywardgeek@google.com> wrote:

> On Thu, Feb 23, 2017 at 12:58 PM, Hans Zandbelt <
> hans.zandbelt@zmartzone.eu> wrote:
>
>> FYI: I'm working on a module for Apache HTTPd here:
>> https://github.com/zmartzone/mod_token_binding
>>
>> which relies on Google's token_bind library
>> https://github.com/google/token_bind
>>
>> any chance that that library is going to be upgraded to (0, 13) as well?
>>
>> Hans.
>>
>
> Yes, I'll do that now.  Note that Google servers will reject version (0,
> 10) going forward.  Hopefully this will be the last switch until version
> (1, 0).
>
> Bill
>

v2.30.2 | Report a Bug | By Email | System Status