[Unbearable] Fwd: New Version Notification for draft-campbell-tokbind-tls-term-00.txt
Brian Campbell <bcampbell@pingidentity.com> Wed, 11 January 2017 21:01 UTC
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: unbearable@ietfa.amsl.com
Delivered-To: unbearable@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C7BC12945C for <unbearable@ietfa.amsl.com>; Wed, 11 Jan 2017 13:01:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HdUM9h_MkkVp for <unbearable@ietfa.amsl.com>; Wed, 11 Jan 2017 13:01:25 -0800 (PST)
Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA0D912985F for <unbearable@ietf.org>; Wed, 11 Jan 2017 13:01:25 -0800 (PST)
Received: by mail-io0-x22a.google.com with SMTP id l66so3225863ioi.1 for <unbearable@ietf.org>; Wed, 11 Jan 2017 13:01:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=DjB4Q8Lmx3XiVntIKdOD+CRVGjQoR8XGeVIqyZZbjtM=; b=M9H0lpwJARoQi7orsxmn0xNHgjMfnxAdviILEzwXpr/6DHDzYtVi0qmHtJY0OvbHl2 mxrO4WLFIAJerhf7P+CIQiaB9ZAFojV72bbrF3uHj5yetFQRfNXIMfTWMboqB/3ylwwH gFYUOelX9KK7prIigtOnRny3HJim8iU1Gh1BY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=DjB4Q8Lmx3XiVntIKdOD+CRVGjQoR8XGeVIqyZZbjtM=; b=I0GJerMkuTprxuLCiR40JQ14pbXgxTZCgKlpZPe9U+t/dnDo6EtjQTRV3NMzKWtwGE FJyV0yf9MO3q4qtmzgeNLL3auWH6CDsmBLFEim+kRhcb79Pps1dfnOegz2doCbnXHQ8l Nkn/y8JnvziLbWmiiE527mMZAVAgFlhw9TlH47kvCtExNzYNUI7PzfM/LR/aC4P9hDFr e/iYpLrvBokd+UDCuun4ilShCJ6t10JJJfXX6Corrn6lz7Wrl4DF4fvbteih35w5g/u2 fBxGFBZkpHNZ6xe4BpGnh1JT+64VzF2mAl0rNqp0jofpHzLD3j+6iU2Re7vEomr8wS99 SM1Q==
X-Gm-Message-State: AIkVDXItdh0SXlHwD8zFwrrjqqCDf6d5nWj/U/YhJv7AQQeH+lTLoW15ofpoYKUU1DGI8NnUlDgyQnU2tsQ13Yiq
X-Received: by 10.107.161.83 with SMTP id k80mr9788062ioe.47.1484168485080; Wed, 11 Jan 2017 13:01:25 -0800 (PST)
MIME-Version: 1.0
Received: by 10.79.31.5 with HTTP; Wed, 11 Jan 2017 13:00:54 -0800 (PST)
In-Reply-To: <CAAX2Qa0qotXJnvW+5XV_B68Dbt3hZAZqi71wh_gqMyny7rfFog@mail.gmail.com>
References: <148416636025.8139.11121446658834117013.idtracker@ietfa.amsl.com> <CAAX2Qa0qotXJnvW+5XV_B68Dbt3hZAZqi71wh_gqMyny7rfFog@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 11 Jan 2017 14:00:54 -0700
Message-ID: <CA+k3eCTp0_ENf8PAdd+dXDL4RRvU2D45gz294oCDFPiUA-610A@mail.gmail.com>
To: IETF Tokbind WG <unbearable@ietf.org>
Content-Type: multipart/alternative; boundary="001a1140fd3c5744a30545d7e7a0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/McRZ0QeBqG6uAFxIs3kUXCUygxE>
Subject: [Unbearable] Fwd: New Version Notification for draft-campbell-tokbind-tls-term-00.txt
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jan 2017 21:01:27 -0000
Hi Unbearable Folks, I've uploaded the below individual draft, which is an initial attempt at describing how Token Binding would work with HTTP applications behind TLS terminating reverse proxies. This is the document that at end of the meeting in Seoul I said I was going to work on. But despite it taking me a long time to write, it isn't very long so should be an easy and quick read. Feedback is of course welcome. Thanks, Brian ---------- Forwarded message ---------- From: <internet-drafts@ietf.org> Date: Wed, Jan 11, 2017 at 1:26 PM Subject: New Version Notification for draft-campbell-tokbind-tls-term-00.txt A new version of I-D, draft-campbell-tokbind-tls-term-00.txt has been successfully submitted by Brian Campbell and posted to the IETF repository. Name: draft-campbell-tokbind-tls-term Revision: 00 Title: HTTPS Token Binding and TLS Terminating Reverse Proxies Document date: 2017-01-11 Group: Individual Submission Pages: 7 URL: https://www.ietf.org/internet-drafts/draft-campbell-tokbind- tls-term-00.txt Status: https://datatracker.ietf.org/doc/draft-campbell-tokbind-tls -term/ Htmlized: https://tools.ietf.org/html/draft-campbell-tokbind-tls-term -00 Abstract: This document defines an HTTP header field that enables a TLS terminating reverse proxy to convey the information a backend server needs in order for it to process and validate a Token Binding Message sent by the client. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat
- [Unbearable] Fwd: New Version Notification for dr… Brian Campbell
- Re: [Unbearable] Fwd: New Version Notification fo… John Bradley
- Re: [Unbearable] Fwd: New Version Notification fo… Brian Campbell
- Re: [Unbearable] Fwd: New Version Notification fo… John Bradley