IETF Logo Mail Archive

[websec] DISCUSS positions on draft-ietf-websec-key-pinning

Barry Leiba <barryleiba@computer.org> Thu, 14 August 2014 15:47 UTC

Return-Path: <barryleiba.mailing.lists@gmail.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 068791A6F14; Thu, 14 Aug 2014 08:47:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YIzMUgg1oP4B; Thu, 14 Aug 2014 08:47:19 -0700 (PDT)
Received: from mail-ig0-x22b.google.com (mail-ig0-x22b.google.com [IPv6:2607:f8b0:4001:c05::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25BA91A0770; Thu, 14 Aug 2014 08:47:19 -0700 (PDT)
Received: by mail-ig0-f171.google.com with SMTP id l13so13979621iga.4 for <multiple recipients>; Thu, 14 Aug 2014 08:47:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:cc:content-type; bh=xR5gpQDOrYT05BfX9HcnbpZkVkME+T7grZcK83XSztk=; b=GZuB/1eBQpCySo6rT3AUIbTylOL17B6GnOLlsi1gCfDFcC1aZ1O37cnuXjUK13iQN9 g7c/5am+r7BWBO015L+z7mMO6zxvAnpEoB0PanUFLFvdy49886zF7/sRRtxhIKm89eYh Cf2hucLfOTKZi2kzu4IWasqxwggpxROQ5D43B/pd7VTsecYjCoX3moQ6zu2FyTL73WBv F3/yKy47NeIsVuNnt5/WzZy6Zy2eYpniM0dz5KuwFn2LRYWoHt50UJ89hGgngX17aoXP sorRR/zICSHPp/oJp4QsTuXwA1qfNbCkKHdRsxWxeCH3ShmkTUIAEC+YrAAvYts03ZXw GxNQ==
MIME-Version: 1.0
X-Received: by 10.50.80.116 with SMTP id q20mr60779613igx.22.1408031238527; Thu, 14 Aug 2014 08:47:18 -0700 (PDT)
Sender: barryleiba.mailing.lists@gmail.com
Received: by 10.107.163.148 with HTTP; Thu, 14 Aug 2014 08:47:18 -0700 (PDT)
Date: Thu, 14 Aug 2014 11:47:18 -0400
X-Google-Sender-Auth: xSwm2k1c1fs4smCYQq94WYuBkrM
Message-ID: <CAC4RtVDiy-QbHNREsm07+iPzjDiZ1q5GjowZCBnP63nw1ezTAw@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
To: IETF WebSec WG <websec@ietf.org>, draft-ietf-websec-key-pinning.all@tools.ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/websec/GlNgJQ4mexXTOAQ6y3QlC-TRW0M
Cc: IESG <iesg@ietf.org>
Subject: [websec] DISCUSS positions on draft-ietf-websec-key-pinning
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec/>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2014 15:47:21 -0000

Websec folks, and especially the document authors:
We have several DISCUSS ballots on the key-pinning doc (from Stephen,
Kathleen, and Ted):

   http://datatracker.ietf.org/doc/draft-ietf-websec-key-pinning/ballot/

...and I have seen no response from the authors on them.  Please
respond soonest, and have the necessary discussions to resolve them.
Please also consider and respond to the non-blocking comments from
Alissa, Pete, and Richard.

Yoav, please stay on top of this and do the necessary prodding to keep
this moving.

Thanks,
Barry

v2.23.0 | Report a Bug | By Email