Re: [websec] Session Continuation = Session Bound State?
Tobias Gondrom <tobias.gondrom@gondrom.org> Tue, 19 March 2013 08:58 UTC
Return-Path: <tobias.gondrom@gondrom.org>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0A4521F88E2 for <websec@ietfa.amsl.com>; Tue, 19 Mar 2013 01:58:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -95.212
X-Spam-Level:
X-Spam-Status: No, score=-95.212 tagged_above=-999 required=5 tests=[AWL=0.151, BAYES_00=-2.599, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DE=0.35, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4LY4-4ZORrBt for <websec@ietfa.amsl.com>; Tue, 19 Mar 2013 01:58:35 -0700 (PDT)
Received: from lvps176-28-13-69.dedicated.hosteurope.de (lvps176-28-13-69.dedicated.hosteurope.de [176.28.13.69]) by ietfa.amsl.com (Postfix) with ESMTP id BB8BC21F88CA for <websec@ietf.org>; Tue, 19 Mar 2013 01:58:34 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=MKsPgR7/+ic1k+ynNNcc3vt3vhFeAU3PJMoPHb/7PbcNoVfFx+/4AtufdmJJyDIDRHsPgoUNpfDy04uvzVdKLr/49s4RV9N5+jE396lkXVw/MvC4ousgMWVkajz9Wuc/; h=Received:Received:Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:X-Enigmail-Version:Content-Type:Content-Transfer-Encoding;
Received: (qmail 29974 invoked from network); 19 Mar 2013 09:58:33 +0100
Received: from d1-162-57-143-118-on-nets.com (HELO ?10.8.18.138?) (118.143.57.162) by lvps176-28-13-69.dedicated.hosteurope.de with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 19 Mar 2013 09:58:33 +0100
Message-ID: <514828B5.9090604@gondrom.org>
Date: Tue, 19 Mar 2013 16:58:29 +0800
From: Tobias Gondrom <tobias.gondrom@gondrom.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130308 Thunderbird/17.0.4
MIME-Version: 1.0
To: ynir@checkpoint.com
References: <CAMm+Lwge7VBNWvWG01UN4j9=1nB+b8prusSVxgOpOcNLbZT8Sg@mail.gmail.com> <D771EC64-65A1-4EE1-A511-3FE750257E71@checkpoint.com>
In-Reply-To: <D771EC64-65A1-4EE1-A511-3FE750257E71@checkpoint.com>
X-Enigmail-Version: 1.5.1
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: websec@ietf.org
Subject: Re: [websec] Session Continuation = Session Bound State?
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Mar 2013 08:58:36 -0000
Session Management sounds good to me. (And we could change the name anytime over the evolution of the draft.) Best regards, Tobias On 18/03/13 20:14, Yoav Nir wrote: > I'm kind of partial to "session management" > > On Mar 13, 2013, at 11:49 PM, Phillip Hallam-Baker <hallam@gmail.com> wrote: > >> The main substantive query that seemed to be raised in the meeting was >> what we are going to call this session continuation thing. I am not >> that worried about confusion with HTTP-Auth. Folk who know, know. >> >> But one of the objectives here is to replace cookies. So choosing a >> name that positions the spec as a successor to authentication cookies >> is actually quite important. >> >> >> How about Session Bound State as the term of art? >> >> -- >> Website: http://hallambaker.com/ > > _______________________________________________ > websec mailing list > websec@ietf.org > https://www.ietf.org/mailman/listinfo/websec
- [websec] Session Continuation = Session Bound Sta… Phillip Hallam-Baker
- Re: [websec] Session Continuation = Session Bound… Yoav Nir
- Re: [websec] Session Continuation = Session Bound… Tobias Gondrom
- Re: [websec] Session Continuation = Session Bound… Harry Halpin
- Re: [websec] Session Continuation = Session Bound… Nico Williams
- [websec] Starting work on Session Continuation/Bo… Yoav Nir
- Re: [websec] Session Continuation = Session Bound… Richard Barnes