Return-Path: X-Original-To: ietf-http-auth@osafoundation.org Delivered-To: ietf-http-auth@osafoundation.org Received: from laweleka.osafoundation.org (laweleka.osafoundation.org [204.152.186.98]) by leilani.osafoundation.org (Postfix) with ESMTP id 4D5677F543 for ; Fri, 18 May 2007 16:56:40 -0700 (PDT) Received: from localhost (laweleka.osafoundation.org [127.0.0.1]) by laweleka.osafoundation.org (Postfix) with ESMTP id E7B2B14220E for ; Fri, 18 May 2007 16:55:44 -0700 (PDT) X-Virus-Scanned: by amavisd-new and clamav at osafoundation.org X-Spam-Score: -1.426 X-Spam-Level: X-Spam-Status: No, score=-1.426 tagged_above=-50 required=4 tests=[AWL=-0.104, BAYES_00=-2.599, HTML_50_60=0.134, HTML_MESSAGE=0.001, SPF_FAIL=1.142] Received: from laweleka.osafoundation.org ([127.0.0.1]) by localhost (laweleka.osafoundation.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WBxnCOVdyC8K; Fri, 18 May 2007 16:55:43 -0700 (PDT) Received: from [192.168.1.101] (unknown [74.95.2.169]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by laweleka.osafoundation.org (Postfix) with ESMTP id 46EF7142206; Fri, 18 May 2007 16:55:40 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v752.3) To: HTTP Working Group , Message Notifications interest group discussion list , morg@ietf.org, wax@ietf.org, Apps Discuss , HTTP authentication list Message-Id: Content-Type: multipart/alternative; boundary=Apple-Mail-8--638126391 From: Lisa Dusseault Date: Fri, 18 May 2007 16:55:36 -0700 X-Mailer: Apple Mail (2.752.3) Subject: [Ietf-http-auth] BOF request deadline Monday X-BeenThere: ietf-http-auth@osafoundation.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: ietf-http-auth.osafoundation.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2007 23:56:42 -0000 --Apple-Mail-8--638126391 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed I've noticed some confusion around the deadlines for requesting BOFs and checked the dates myself. The cutoff date for "preliminary BOF proposals" is May 21. Between May 21 and June 11 the IESG and IAB discuss those proposals (we have a call scheduled May 29), and by June 11 we have *our* cutoff for scheduling a BOF that we've decided to put on the schedule. So we're supposed to know *something* about proposed BOFs by Monday, and have more details filled in by May 29. Hope this reaches people in time, Lisa On Apr 25, 2007, at 10:10 PM, Mark wrote: > > See ; the hard > cutoff for scheduling a BoF is June 11. > --Apple-Mail-8--638126391 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=ISO-8859-1

I've noticed some confusion = around the deadlines for requesting BOFs and checked the dates myself.=A0 = =A0The cutoff date for "preliminary BOF proposals"=A0 is May 21.=A0 = Between May 21 and June 11 the IESG and IAB discuss those proposals (we = have a call scheduled May 29), and by June 11 we have *our* cutoff for = scheduling a BOF that we've decided to put on the schedule.=A0 So we're = supposed to know *something* about proposed BOFs by Monday, and have = more details filled in by May 29.

Hope this reaches people in = time,

Lisa

On Apr 25, 2007, at 10:10 PM, = Mark wrote:

See <http://www.ietf= .org/meetings/69-cutoff_dates.html>; the hard cutoff for = scheduling a BoF is June 11.

= --Apple-Mail-8--638126391-- Return-Path: X-Original-To: ietf-http-auth@osafoundation.org Delivered-To: ietf-http-auth@osafoundation.org Received: from laweleka.osafoundation.org (laweleka.osafoundation.org [204.152.186.98]) by leilani.osafoundation.org (Postfix) with ESMTP id D02087F9F8 for ; Thu, 17 May 2007 17:52:02 -0700 (PDT) Received: from localhost (laweleka.osafoundation.org [127.0.0.1]) by laweleka.osafoundation.org (Postfix) with ESMTP id 8441C142206 for ; Thu, 17 May 2007 17:51:07 -0700 (PDT) X-Virus-Scanned: by amavisd-new and clamav at osafoundation.org X-Spam-Score: -2.198 X-Spam-Level: X-Spam-Status: No, score=-2.198 tagged_above=-50 required=4 tests=[AWL=0.403, BAYES_00=-2.599, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] Received: from laweleka.osafoundation.org ([127.0.0.1]) by localhost (laweleka.osafoundation.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y9bPFJWD5MZm for ; Thu, 17 May 2007 17:51:05 -0700 (PDT) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by laweleka.osafoundation.org (Postfix) with ESMTP id 482C41421FF for ; Thu, 17 May 2007 17:51:04 -0700 (PDT) Received: from root by ciao.gmane.org with local (Exim 4.43) id 1HoqfS-0005nT-Ne for ietf-http-auth@osafoundation.org; Fri, 18 May 2007 02:50:02 +0200 Received: from 1cust45.tnt5.hbg2.deu.da.uu.net ([149.225.16.45]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 18 May 2007 02:50:02 +0200 Received: from nobody by 1cust45.tnt5.hbg2.deu.da.uu.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 18 May 2007 02:50:02 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: ietf-http-auth@osafoundation.org From: Frank Ellermann Date: Fri, 18 May 2007 02:38:15 +0200 Organization: Lines: 34 Message-ID: <464CF576.36C8@xyzzy.claranet.de> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: 1cust45.tnt5.hbg2.deu.da.uu.net X-Mailer: Mozilla 3.0 (OS/2; U) Sender: news Cc: ietf-sasl@imc.org, ietf@ietf.org Subject: [Ietf-http-auth] Re: Last Call: draft-ietf-radext-rfc4590bis (RADIUS Extension for Digest Authentication) to Proposed Standard X-BeenThere: ietf-http-auth@osafoundation.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: ietf-http-auth.osafoundation.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2007 00:52:02 -0000 The IESG wrote: > The IESG has received a request from the RADIUS EXTensions WG (radext) > to consider the following document: > - 'RADIUS Extension for Digest Authentication ' > as a Proposed Standard Hi, this draft might be also interesting for the 2831bis (SASL) and 2617bis (HTTP-AUTH) folks. From a quick read I found that the I-D picked the "keep backslash as is" approach between client and proxy, trimming \\ and \" only at the RADIUS server. The other DIGEST-MD5 parameters are as always confusing, I don't see anything related to SASLprep in the draft (it's based on 2617). It mentions 2069 backwards compatibility based on the absence of "QoP", I'm not sure if that's correct for "md5-sess" without "QoP". The draft says that the length of NC is 10, shouldn't that be 8 ? The first example has no CNONCE and no NC, my script claims that this is a fatal error for qop=auth, isn't it ? RFC 2617 says that it MUST be sent for a non-empty qop. The password for the 4590 examples isn't shown, therefore I'm unable to check them, even after adjusting the code to treat qop=auth without CNONCE as 2069 fallback. Should I treat CNONCE as empty and make up an NC 00000001 ? Without SASLprep the draft IMO needs some "I18N considerations" about non-ASCII user names and passwords as mandated by BCP 18 (RFC 2277). Frank