Re: [Unbearable] New and Updated I-Ds

Ø  Are you prosing that we adopt this as a working group document?
https://datatracker.ietf.org/doc/draft-popov-tokbind-negotiation/ is written in support of WG’s decision in Dallas to use a new TLS extension to negotiate Token Binding parameters (instead of ALPN). I hope that we can continue discussing this I-D on the mailing list and converge in Prague. If the WG agrees that this is the right approach overall, I think we should proceed with a call for adoption, with full expectation that the document will keep evolving.

Ø  I haven’t seen any feedback to this on the list.
There has been some discussion:
https://mailarchive.ietf.org/arch/msg/unbearable/R5uakIeHnd2dYMzdY1zToHbxBKo - the proposal to harmonize algorithm IDs between TBNEGO and TBPROTO;
https://mailarchive.ietf.org/arch/msg/unbearable/0w8_F0H63TWpAb9x_V8SorZT0lg - among others, an idea that multiple TB parameter sets could be negotiated, e.g. the server could return both rsa2048_pkcs1.5_sha256(0) and  ecdsap256_sha256.
On both of these, I’d like to see a degree of consensus from the WG, before making the changes.

Ø  If there are any issues with that, lets discuss it on the list before we get to Prague.
Yes, this would be awesome!

Cheers,

Andrei

From: John Bradley [mailto:ve7jtb@ve7jtb.com]
Sent: Sunday, July 5, 2015 1:27 PM
To: Andrei Popov
Cc: unbearable@ietf.org
Subject: Re: [Unbearable] New and Updated I-Ds

I haven’t seen any feedback to this on the list.

Are you prosing that we adopt this as a working group document?

If there are any issues with that, lets discuss it on the list before we get to Prague.

John B.

On Jun 16, 2015, at 4:30 PM, Andrei Popov <Andrei.Popov@microsoft.com<mailto:Andrei.Popov@microsoft.com>> wrote:

Also, please feel free to use GitHub to track issues and make pull requests: https://github.com/TokenBinding/Internet-Drafts

Now that we have TBNEGO I-D, I’ve closed a couple of issues related to the use of ALPN.

Cheers,

Andrei

From: Andrei Popov
Sent: Friday, May 29, 2015 4:54 PM
To: unbearable@ietf.org<mailto:unbearable@ietf.org>
Subject: New and Updated I-Ds

In Dallas we agreed to define a new TLS extension for Token Binding key parameters negotiation, instead of using ALPN.

Today I’ve submitted TLS Extension for Token Binding Protocol Negotiation  I-D: https://datatracker.ietf.org/doc/draft-popov-tokbind-negotiation/

I have also updated the Token Binding Protocol I-D: https://tools.ietf.org/html/draft-ietf-tokbind-protocol-01
The updated version has the following changes:
-          Removed ALPN negotiation text;
-          Added a Security Considerations sub-section discussing Token Binding key sharing between applications;
-          Minor edits, nits, etc.

Comments are very welcome!

Cheers,

Andrei
_______________________________________________
Unbearable mailing list
Unbearable@ietf.org<mailto:Unbearable@ietf.org>
https://www.ietf.org/mailman/listinfo/unbearable