[websec] Regarding RFC 6797

Robert Linder <Robert.Vuj.Linder@outlook.com> Fri, 04 May 2018 20:11 UTC

Return-Path: <Robert.Vuj.Linder@outlook.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A71712D955 for <websec@ietfa.amsl.com>; Fri, 4 May 2018 13:11:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outlook.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y9vyIlNz0eE1 for <websec@ietfa.amsl.com>; Fri, 4 May 2018 13:11:57 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-oln040092065032.outbound.protection.outlook.com [40.92.65.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C12281200C1 for <websec@ietf.org>; Fri, 4 May 2018 13:11:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=s/9gVLZfRMBUNRWXqwEDGba/VnnBhlWMexHaTxU4g1M=; b=XQjdCXJ59Z7/LpYRudJX+qmcJtr8R6Q3dRTmv26VlJygQ/j+O2yjmYQ9nFW+8FeZJfDyJrlZjOGf1EYOKsEBitKdybwVORm26yhUkaVZwOahuLMYBFAJCwp0nuZ98s8nFHV5qYHPyq7sXUuN4J85T68oWggUAFBnK9DsGSZOOkRb/MLLK2zPHz0Ji+8UCpIkHysBhgDzWM2flx+LZ2yr8edhD+48hMb6RL2zjwgab1ewCUIyxS1tshKnppBDiO8cp8DlXrM83YN3nugJSMo8HCycJdgCeG/U3Cd3EKgwOfZnPbx2gRv4V2eKbohjrw6eiDs48pVbLvSc45wrWeho3A==
Received: from VE1EUR01FT036.eop-EUR01.prod.protection.outlook.com (10.152.2.53) by VE1EUR01HT205.eop-EUR01.prod.protection.outlook.com (10.152.3.234) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.715.13; Fri, 4 May 2018 20:11:54 +0000
Received: from CWXP265MB0312.GBRP265.PROD.OUTLOOK.COM (10.152.2.59) by VE1EUR01FT036.mail.protection.outlook.com (10.152.3.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.715.13 via Frontend Transport; Fri, 4 May 2018 20:11:54 +0000
Received: from CWXP265MB0312.GBRP265.PROD.OUTLOOK.COM ([fe80::5523:b422:fe62:edda]) by CWXP265MB0312.GBRP265.PROD.OUTLOOK.COM ([fe80::5523:b422:fe62:edda%13]) with mapi id 15.20.0715.024; Fri, 4 May 2018 20:11:53 +0000
From: Robert Linder <Robert.Vuj.Linder@outlook.com>
To: "websec@ietf.org" <websec@ietf.org>
Thread-Topic: Regarding RFC 6797
Thread-Index: AQHT4+QVi9rO06JEP0CuaMChnEmmGQ==
Date: Fri, 04 May 2018 20:11:53 +0000
Message-ID: <CWXP265MB03125F1F074DBA2FDA1E1D2BB1860@CWXP265MB0312.GBRP265.PROD.OUTLOOK.COM>
Accept-Language: sv-SE, en-US
Content-Language: sv-SE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:C2514A717907CDE0A685528C75189CDDE6E7D5BF3A8979979C0B113D682CFC30; UpperCasedChecksum:FF0168E479A7988AEE2801A0EDAE8E7E1D7B395BB889BBC38750EB0327980FFD; SizeAsReceived:6785; Count:43
x-tmn: [9HR48thwQmO8p4ByQZrSIDYQZvzwC/kt]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VE1EUR01HT205; 7:XYWNgSMqQ9dksDAJe/qBPSZZwHu2lD/bJQpTp5zY1O5qRW4hQIdVD7HSXwFqnW0fYPKfyfcRvzYIG/5xMT6W/N+d8QLPEgSDu+rqTBFktm3LoQqag+qM918tfiOF1a0SttuMaS4gqhj92WbLbcpWqUPNkYhG6f/YEPTZvOcq7ejNk7BwE0A57UEwBrvmd5ngFtdvRmNR5nFJvu5d3vivR9ttyto54tAEZjGVV3j5+PVgvhpC9d0K1e+h5ayAqLf5
x-incomingheadercount: 43
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1603101448)(1601125374)(1701031045); SRVR:VE1EUR01HT205;
x-ms-traffictypediagnostic: VE1EUR01HT205:
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(444000031); SRVR:VE1EUR01HT205; BCL:0; PCL:0; RULEID:; SRVR:VE1EUR01HT205;
x-forefront-prvs: 06628F7CA4
x-forefront-antispam-report: SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:VE1EUR01HT205; H:CWXP265MB0312.GBRP265.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:;
x-microsoft-antispam-message-info: zh/CGrMYuC4ktaALI45AUirvcZPrXgO4rqkbkXV77TMvyRqxdK6ocZX7LdXSYmCK/+Vj2dOFy+gtodiM949MvDMaAGBc5A7j13SjHXHG38P5LiLqh6VZjRbgVeJ6VdP6IfAzqqugQRRQ+iiCF1gklZec6DqYnKUfSx6eOafOP6N9xAXNDw0MJwJwUQPkXeA/
Content-Type: multipart/alternative; boundary="_000_CWXP265MB03125F1F074DBA2FDA1E1D2BB1860CWXP265MB0312GBRP_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 0a95625b-34fe-45fd-8b3a-08d5b1fb4796
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
X-MS-Exchange-CrossTenant-Network-Message-Id: 0a95625b-34fe-45fd-8b3a-08d5b1fb4796
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 May 2018 20:11:53.7030 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT205
Archived-At: <https://mailarchive.ietf.org/arch/msg/websec/ppdrAjyHg09iM-PGETV2uUuKTyo>
X-Mailman-Approved-At: Mon, 07 May 2018 08:13:14 -0700
Subject: [websec] Regarding RFC 6797
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/websec/>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 May 2018 23:36:30 -0000

Hi,

I would like to propose the addition of the ”immutable” directive (similar to that of RFC 8246) for the HSTS header field (RFC 6797).

Best Regards,
Robert Linder