From nobody Wed Aug 12 19:09:35 2015 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C48691B2F2E for ; Wed, 12 Aug 2015 19:09:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MJcRs60AIbCz for ; Wed, 12 Aug 2015 19:09:31 -0700 (PDT) Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-pu1apc01on0084.outbound.protection.outlook.com [104.47.126.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 645921A1B34 for ; Wed, 12 Aug 2015 19:09:31 -0700 (PDT) Received: from OS1PR01MB0200.jpnprd01.prod.outlook.com (10.161.230.139) by OS1PR01MB0197.jpnprd01.prod.outlook.com (10.161.229.17) with Microsoft SMTP Server (TLS) id 15.1.225.19; Thu, 13 Aug 2015 02:09:28 +0000 Received: from OS1PR01MB0200.jpnprd01.prod.outlook.com ([10.161.230.139]) by OS1PR01MB0200.jpnprd01.prod.outlook.com ([10.161.230.139]) with mapi id 15.01.0225.018; Thu, 13 Aug 2015 02:09:28 +0000 From: Yutaka OIWA To: "http-auth@ietf.org" Thread-Topic: (Mutual) issues to be disucussed (github URL) Thread-Index: AdDVbPi8CxLKZ6VTTK2H10RSV4YHyw== Date: Thu, 13 Aug 2015 02:09:28 +0000 Message-ID: Accept-Language: ja-JP, en-US Content-Language: ja-JP X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=y.oiwa@aist.go.jp; x-originating-ip: [150.29.157.99] x-microsoft-exchange-diagnostics: 1; OS1PR01MB0197; 5:yBtvFeh1QhFLg+tEdHwFhJDLlHJ4RNhqt/3desYDxjvuKu515s3MIIMfIE1lEr0uckQpduHiZo4/tiDbYC3B3pkXxqnVJeDOYdBcbkdH2ciB6U13d8xKa4vGZJZT0+lQ40jc+gtikvkfF5lqSo3dag==; 24:CBIgE06kDkynnUmlDbT60KAG5JKtT4B1X7kD/DoXaiLWVdmX9N7CpvsBGt9PI78b5/Dbti+gLay2aaqOp+lmPeZT6oFuNtY8Fe6Ed6UTmLs=; 20:nVQT8Dzsl7JUEs2MwLb57IsYgobE2DVBf/W9cSjENupiMhJ1pqkeCW+a3tz+y9bY4YZ6fx5GKRq8bUQO5MpR2A== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:OS1PR01MB0197; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(5005006)(3002001); SRVR:OS1PR01MB0197; BCL:0; PCL:0; RULEID:; SRVR:OS1PR01MB0197; x-forefront-prvs: 0667289FF8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(199003)(189002)(504964003)(19580395003)(107886002)(101416001)(50986999)(122556002)(87936001)(86362001)(40100003)(2656002)(106356001)(74482002)(64706001)(229853001)(66066001)(77156002)(450100001)(62966003)(2351001)(46102003)(54356999)(97736004)(5001920100001)(33656002)(5003600100002)(19580405001)(110136002)(74316001)(5001960100002)(5001860100001)(15975445007)(5001830100001)(2501003)(92566002)(105586002)(68736005)(102836002)(81156007)(2900100001)(5002640100001)(10400500002)(77096005)(4001540100001)(189998001)(76576001)(4001430100001); DIR:OUT; SFP:1101; SCL:1; SRVR:OS1PR01MB0197; H:OS1PR01MB0200.jpnprd01.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: aist.go.jp does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: aist.go.jp X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2015 02:09:28.2342 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 18a7fec8-652f-409b-8369-272d9ce80620 X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS1PR01MB0197 Archived-At: Cc: Mutual auth contact Subject: [http-auth] (Mutual) issues to be disucussed (github URL) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 02:09:33 -0000 Dear all interested in HTTPAUTH WG, We're constructing the issue list for the Mutual and related on github. https://github.com/yoiwa/httpauth-mutual/issues As a starting point, we'll put our previous issues listed for Dallas meetin= g. http://www.ietf.org/mail-archive/web/http-auth/current/msg02392.html We'll put these issues on the discussion table, possible two-or-three at once on this mailing list. Responses are welcome, either on the github (comments, pull-request, etc.) or on email (this mailing list, or personally). Thank you in advance for your cooperation. --=20 Yutaka OIWA, Ph.D. Cyber Physical Architecture Research Group Information Technology Research Institute National Institute of Advanced Industrial Science and Technology (AIST) Mail addresses: , OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D 3139 8677 9BD2 4405 46B5= ] From nobody Wed Aug 12 19:17:29 2015 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3E1B1B2F3D for ; Wed, 12 Aug 2015 19:17:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tb52pphJ6UON for ; Wed, 12 Aug 2015 19:17:26 -0700 (PDT) Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-pu1apc01on0068.outbound.protection.outlook.com [104.47.126.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8217C1B2F3C for ; Wed, 12 Aug 2015 19:17:25 -0700 (PDT) Received: from OS1PR01MB0200.jpnprd01.prod.outlook.com (10.161.230.139) by OS1PR01MB0200.jpnprd01.prod.outlook.com (10.161.230.139) with Microsoft SMTP Server (TLS) id 15.1.225.19; Thu, 13 Aug 2015 02:17:22 +0000 Received: from OS1PR01MB0200.jpnprd01.prod.outlook.com ([10.161.230.139]) by OS1PR01MB0200.jpnprd01.prod.outlook.com ([10.161.230.139]) with mapi id 15.01.0225.018; Thu, 13 Aug 2015 02:17:22 +0000 From: Yutaka OIWA To: "http-auth@ietf.org" Thread-Topic: [Mutual] (due Aug 28) Mutual auth issues (part 1) Thread-Index: AdDVbU8S0YCBqDw+RAOYwINxg2v0vg== Date: Thu, 13 Aug 2015 02:17:22 +0000 Message-ID: Accept-Language: ja-JP, en-US Content-Language: ja-JP X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=y.oiwa@aist.go.jp; x-originating-ip: [150.29.157.99] x-microsoft-exchange-diagnostics: 1; OS1PR01MB0200; 5:EOnCM73dQGFwyggxd1nRQbAorgInB19jzVT5K2JfmOrlEE2qLKdbY6KJaI4FTDLO2qe/ShwMkftfuEamMg7TVLWPwGClX4/VeYgbTJYqhu9NPHEo48LrQ1xA/NjDASlH2NP17LNgZEMiMZ2pFjS98w==; 24:0Lhx9jgOPhSrmJ0M/dBpe8MSDwX6XTBh7ACfxKzHwN7FKEZTF2Ak+PPAHgYHv0yWwH1jyHl9CX4JlCrZqi4mUwNMJ/Jh+MWInUCFtDn0j1U=; 20:VDAzullEao6nE0xgfFvW8BFRe8CjA6E0QLjbmYUPD2iW+dGYhH/ww30w0fFyvYSLsSTF0/UK7nWmpNz/Z7UZbw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:OS1PR01MB0200; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(5005006)(3002001); SRVR:OS1PR01MB0200; BCL:0; PCL:0; RULEID:; SRVR:OS1PR01MB0200; x-forefront-prvs: 0667289FF8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(189002)(199003)(87936001)(105586002)(2656002)(106356001)(2351001)(2501003)(50986999)(64706001)(86362001)(229853001)(40100003)(66066001)(5003600100002)(10400500002)(110136002)(189998001)(76576001)(92566002)(5002640100001)(101416001)(107886002)(5001960100002)(54356999)(77156002)(46102003)(19580395003)(74482002)(5001830100001)(5001860100001)(4001540100001)(5001920100001)(81156007)(15975445007)(68736005)(97736004)(62966003)(450100001)(74316001)(19580405001)(33656002)(122556002)(77096005)(2900100001)(102836002)(4001430100001); DIR:OUT; SFP:1101; SCL:1; SRVR:OS1PR01MB0200; H:OS1PR01MB0200.jpnprd01.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: aist.go.jp does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: aist.go.jp X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2015 02:17:22.7527 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 18a7fec8-652f-409b-8369-272d9ce80620 X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS1PR01MB0200 Archived-At: Cc: Mutual auth contact Subject: [http-auth] [Mutual] (due Aug 28) Mutual auth issues (part 1) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2015 02:17:28 -0000 Dear all HTTPAUTH WG members, I'd like to have your comments on the following three issues. Please make your initial response *before August 28*, or the WG will consider these issues as successfully resolved (as the WG Chair said in the Prague meeting.) We appreciate your responses in any of the following form: * on the github issue tracking system (comments, pull-request etc.) * on this mailing list * on the private email We'll summarize comments on the medium above, and send it to this mailing list. (Please be understood that your comments on the private email may be included in the summary and published.) =3D=3D=3D=3D draft-ietf-httpauth-mutual =3D=3D=3D=3D =3D Section 3.1 =3D [P1] Is adoption of RFC5987 OK? https://github.com/yoiwa/httpauth-mutual/issues/1 [P2] The encoding is fixed to UTF-8, without any language. (justification: it is not an on-line negotiable parameter, and the new protocol does not need to consider older clients.) https://github.com/yoiwa/httpauth-mutual/issues/2 =3D Section 4: Messages =3D [P3] Are the reserved parameter names making sense? https://github.com/yoiwa/httpauth-mutual/issues/3 Thank you for your cooperation. --=20 Yutaka OIWA, Ph.D. Cyber Physical Architecture Research Group Information Technology Research Institute National Institute of Advanced Industrial Science and Technology (AIST) Mail addresses: , OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D 3139 8677 9BD2 4405 46B5= ] From nobody Fri Aug 14 22:33:09 2015 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E1021A8713 for ; Fri, 14 Aug 2015 22:33:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.851 X-Spam-Level: X-Spam-Status: No, score=-0.851 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CjClsjIY-xgd for ; Fri, 14 Aug 2015 22:33:07 -0700 (PDT) Received: from mx02.posteo.de (mx02.posteo.de [89.146.194.165]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E029E1A6F3F for ; Fri, 14 Aug 2015 22:33:06 -0700 (PDT) Received: from dovecot04.posteo.de (unknown [185.67.36.27]) by mx02.posteo.de (Postfix) with ESMTPS id EC51425B17CF; Sat, 15 Aug 2015 07:33:03 +0200 (CEST) Received: from mail.posteo.de (localhost [127.0.0.1]) by dovecot04.posteo.de (Postfix) with ESMTPSA id 3mtVf73CCJzFpW3; Sat, 15 Aug 2015 07:33:03 +0200 (CEST) Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: text/plain; charset=utf-8 From: Sophie Bremer In-Reply-To: Date: Sat, 15 Aug 2015 07:34:28 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <1CC8E622-E8E2-474E-B7BF-CACB84E176DD@netzkonform.de> References: To: Yutaka OIWA X-Mailer: Apple Mail (2.1085) Archived-At: Cc: Mutual auth contact , "http-auth@ietf.org" Subject: Re: [http-auth] [Mutual] (due Aug 28) Mutual auth issues (part 1) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Aug 2015 05:33:09 -0000 Hi Yutaka, answers below: > =3D=3D=3D=3D draft-ietf-httpauth-mutual =3D=3D=3D=3D >=20 > =3D Section 3.1 =3D >=20 > [P1] Is adoption of RFC5987 OK? > https://github.com/yoiwa/httpauth-mutual/issues/1 It looks good. Even so pwd-hash*=3DUTF-8''ABCDEF or other token values = do not make sense, the involved parties should support it in favor of = future flexibility. > [P2] The encoding is fixed to UTF-8, without any language. > (justification: it is not an on-line negotiable parameter, > and the new protocol does not need to consider older > clients.) > https://github.com/yoiwa/httpauth-mutual/issues/2 This makes implementation at the low level easier, so I find it = reasonable. > =3D Section 4: Messages =3D >=20 > [P3] Are the reserved parameter names making sense? > https://github.com/yoiwa/httpauth-mutual/issues/3 -- 4.3 401-KEX-S1 path: (non-mandatory, string) specifies which path in the URI space the same authentication is expected to be applied. The value is a space-separated list of URIs, in the same format as it was specified in domain parameter [RFC2617] for the Digest authentications. -- What is the reason to use the parameter name "path" instead of "domain"? Wiktionary says: -- domain =E2=80=8E(plural domains) =E2=80=A2 A geographic area owned or controlled by a single = person or organization. The king ruled his domain harshly. =E2=80=A2 A field or sphere of activity, influence or expertise. Dealing with complaints isn't really my domain: get in touch with = customer services. His domain is English history. =E2=80=A2 A group of related items, topics, or subjects. -- I am in favor of the name "domain" for continuity between authentication = specs as you may have guessed by now. :) > Thank you for your cooperation. Regards, Sophie From nobody Sat Aug 22 02:21:11 2015 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B01ED1A1F70 for ; Sat, 22 Aug 2015 02:21:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IspSz_Fx4NMm for ; Sat, 22 Aug 2015 02:21:09 -0700 (PDT) Received: from waldorf.isode.com (waldorf.isode.com [217.34.220.150]) by ietfa.amsl.com (Postfix) with ESMTP id 35FBA1A1EF2 for ; Sat, 22 Aug 2015 02:21:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1440235268; d=isode.com; s=selector; i=@isode.com; bh=Y5EfyrNHVmKaLVS+toPbIl9/kSfLtsXjD27cvQfnWQo=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=rylvMAp9Dz5sSf3XezVm1NMUOoJm34USsrz3dqATwkcbON2eUQLQaJiJr4v53LMfxUjrmj +/fVRFn+q6g4lzMSBI/aF4T/U+Fbw8QitcWYva1pyVwAQl11QOtkpp/L1issFpH75UumHC xoVDy2tc/ARrpdz5Z9F99t8mp9REIkI=; Received: from [192.168.0.6] (cpc5-nmal20-2-0-cust24.19-2.cable.virginm.net [92.234.84.25]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id ; Sat, 22 Aug 2015 10:21:08 +0100 X-SMTP-Protocol-Errors: PIPELINING From: Alexey Melnikov X-Mailer: iPad Mail (12F69) In-Reply-To: Date: Sat, 22 Aug 2015 10:25:15 +0100 Message-Id: <6A52CFE1-381A-4143-AF98-D332D600592C@isode.com> References: To: Yutaka OIWA MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Archived-At: Cc: Mutual auth contact , "http-auth@ietf.org" Subject: Re: [http-auth] [Mutual] (due Aug 28) Mutual auth issues (part 1) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Aug 2015 09:21:10 -0000 Hi, Sent from my iPad > On 13 Aug 2015, at 03:17, Yutaka OIWA wrote: >=20 > =3D=3D=3D=3D draft-ietf-httpauth-mutual =3D=3D=3D=3D >=20 > =3D Section 3.1 =3D >=20 > [P1] Is adoption of RFC5987 OK? > https://github.com/yoiwa/httpauth-mutual/issues/1 Yes, this sounds sensible. >=20 > [P2] The encoding is fixed to UTF-8, without any language. > (justification: it is not an on-line negotiable parameter, > and the new protocol does not need to consider older > clients.) > https://github.com/yoiwa/httpauth-mutual/issues/2 I agree this is the right approach. > =3D Section 4: Messages =3D >=20 > [P3] Are the reserved parameter names making sense? > https://github.com/yoiwa/httpauth-mutual/issues/3 This question is a bit harder to answer. Overall I think they make sense. "auth-domain" might be named better as "auth-scope", but I don't have a stro= ng preference, especially if you already have deployed implementation of the= draft. Best Regards, Alexey > Thank you for your cooperation. >=20 > --=20 > Yutaka OIWA, Ph.D. Cyber Physical Architecture Research Grou= p > Information Technology Research Institute= > National Institute of Advanced Industrial Science and Technology (AIST)= > Mail addresses: , = > OpenPGP: id[440546B5] fp[7C9F 723A 7559 3246 229D 3139 8677 9BD2 4405 46B= 5] >=20 > _______________________________________________ > http-auth mailing list > http-auth@ietf.org > https://www.ietf.org/mailman/listinfo/http-auth