From nobody Tue May 17 13:55:39 2016 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D54312D11C for ; Tue, 17 May 2016 13:55:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ww4MFj73aGX6 for ; Tue, 17 May 2016 13:55:36 -0700 (PDT) Received: from out.west.pexch112.icann.org (pfe112-ca-2.pexch112.icann.org [64.78.40.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 227F312D979 for ; Tue, 17 May 2016 13:55:36 -0700 (PDT) Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 17 May 2016 13:55:34 -0700 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1130.005; Tue, 17 May 2016 13:55:34 -0700 From: Andrew Mcconachie To: "http-auth@ietf.org" Thread-Topic: HOBA Client and Server(RFC 7486) Thread-Index: AQHRsH50dtV2Kd5fE0usauGCmBvgJw== Date: Tue, 17 May 2016 20:55:32 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.0.47.234] Content-Type: multipart/alternative; boundary="_000_F5235CE21EDA4B1A95026E873C3734CFicannorg_" MIME-Version: 1.0 Archived-At: Subject: [http-auth] HOBA Client and Server(RFC 7486) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 May 2016 20:55:37 -0000 --_000_F5235CE21EDA4B1A95026E873C3734CFicannorg_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmXZlIHdyaXR0ZW4gYSBIT0JBIGNsaWVudCBhbmQgc2VydmVyLiBCb3RoIGFyZSBsaWNlbnNl ZCB1bmRlciBHUEx2My4NCg0KVGhlIGNsaWVudCBpcyBhIEZpcmVmb3ggcGx1Z2luIHRoYXQgY2Fu IGJlIGRvd25sb2FkZWQgaGVyZToNCmh0dHBzOi8vYWRkb25zLm1vemlsbGEub3JnL2VuLVVTL2Zp cmVmb3gvYWRkb24vaG9iYS8NCg0KVGhlIHNlcnZlciBsaXZlcyBoZXJlIGN1cnJlbnRseToNCmh0 dHBzOi8vc3lub25vbWljLmNvbS9ob2JhDQoNCkNvZGUgZm9yIGJvdGggaXMgb24gR2l0aHViOg0K aHR0cHM6Ly9naXRodWIuY29tL3NtdXR0L0hPQkENCmh0dHBzOi8vZ2l0aHViLmNvbS9zbXV0dC9I T0JBLXNlcnZlcg0KDQpOZWl0aGVyIGNsaWVudCBub3Igc2VydmVyIGFyZSBnb2luZyB0byB3aW4g YW55IGF3YXJkcyBmb3IgVUkgZGVzaWduIDopIFRoZXnigJlyZSBib3RoIHJhdGhlciB1Z2x5LCBi dXQgdGhleSB3b3JrLg0KDQpJIGRpZCBzb21lIHRoaW5ncyBzbGlnaHRseSBkaWZmZXJlbnRseSB0 aGFuIFJGQyA3NDg2LiBUaGUgYmlnZ2VzdCBkaWZmZXJlbmNlIGlzIHRoYXQgSSB1c2VkIEpXSyBm b3IgcHVibGljIGtleSBmb3JtYXQgaW5zdGVhZCBvZiBQRU0uIFRoZXJlIGFyZSBhIGZldyBvdGhl ciBsaXR0bGUgdGhpbmdzIGFzIHdlbGwuDQoNClRoaXMgd2FzIGEgcGVyc29uYWwgcHJvamVjdCB1 bnJlbGF0ZWQgdG8gbXkgZGF5IGpvYi4NCg0KLS1BbmRyZXcNCg== --_000_F5235CE21EDA4B1A95026E873C3734CFicannorg_ Content-Type: text/html; charset="utf-8" Content-ID: <676A810470EF45459936BD7CF71472DB@pexch112.icann.org> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5J4oCZdmUg d3JpdHRlbiBhIEhPQkEgY2xpZW50IGFuZCBzZXJ2ZXIuIEJvdGggYXJlIGxpY2Vuc2VkIHVuZGVy IEdQTHYzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoZSBjbGllbnQgaXMgYSBGaXJlZm94IHBsdWdpbiB0 aGF0IGNhbiBiZSBkb3dubG9hZGVkIGhlcmU6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxhIGhyZWY9 Imh0dHBzOi8vYWRkb25zLm1vemlsbGEub3JnL2VuLVVTL2ZpcmVmb3gvYWRkb24vaG9iYS8iIGNs YXNzPSIiPmh0dHBzOi8vYWRkb25zLm1vemlsbGEub3JnL2VuLVVTL2ZpcmVmb3gvYWRkb24vaG9i YS88L2E+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5UaGUgc2VydmVyIGxpdmVzIGhlcmUgY3VycmVudGx5OjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YSBocmVmPSJodHRwczovL3N5bm9ub21pYy5jb20vaG9iYSIgY2xhc3M9IiI+aHR0cHM6 Ly9zeW5vbm9taWMuY29tL2hvYmE8L2E+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Db2RlIGZvciBib3RoIGlzIG9uIEdpdGh1Yjo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL3NtdXR0L0hPQkEi IGNsYXNzPSIiPmh0dHBzOi8vZ2l0aHViLmNvbS9zbXV0dC9IT0JBPC9hPjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vc211dHQvSE9CQS1zZXJ2ZXIiIGNs YXNzPSIiPmh0dHBzOi8vZ2l0aHViLmNvbS9zbXV0dC9IT0JBLXNlcnZlcjwvYT48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5laXRoZXIg Y2xpZW50IG5vciBzZXJ2ZXIgYXJlIGdvaW5nIHRvIHdpbiBhbnkgYXdhcmRzIGZvciBVSSBkZXNp Z24gOikgVGhleeKAmXJlIGJvdGggcmF0aGVyIHVnbHksIGJ1dCB0aGV5IHdvcmsuPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGRpZCBz b21lIHRoaW5ncyBzbGlnaHRseSBkaWZmZXJlbnRseSB0aGFuIFJGQyA3NDg2LiBUaGUgYmlnZ2Vz dCBkaWZmZXJlbmNlIGlzIHRoYXQgSSB1c2VkIEpXSyBmb3IgcHVibGljIGtleSBmb3JtYXQgaW5z dGVhZCBvZiBQRU0uIFRoZXJlIGFyZSBhIGZldyBvdGhlciBsaXR0bGUgdGhpbmdzIGFzIHdlbGwu PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPlRoaXMgd2FzIGEgcGVyc29uYWwgcHJvamVjdCB1bnJlbGF0ZWQgdG8gbXkgZGF5 IGpvYi48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPi0tQW5kcmV3PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_F5235CE21EDA4B1A95026E873C3734CFicannorg_-- From nobody Tue May 17 14:11:39 2016 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B700A12D1D3 for ; Tue, 17 May 2016 14:11:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.727 X-Spam-Level: X-Spam-Status: No, score=-5.727 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJnpZ8DD7EZI for ; Tue, 17 May 2016 14:11:35 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1028112D1DF for ; Tue, 17 May 2016 14:11:35 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 9BAFCBE2D; Tue, 17 May 2016 22:11:33 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y5YET5gwY9Mv; Tue, 17 May 2016 22:11:32 +0100 (IST) Received: from [10.87.48.75] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id AD966BDD0; Tue, 17 May 2016 22:11:31 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1463519492; bh=RhCDG0N16LkrQTTx8hglT71xlxz3YdOJboVv84hONIw=; h=Subject:To:References:From:Date:In-Reply-To:From; b=37jC8rdZnxtKU4e/MjmgeGiS66kHJKiBUuJ9dEfXLQ7PBwyuiJDwgBA4aHSkxS2YF QU/qhXJXFCruqEeuf31VM+s/sub7jHsmeQ7yZsH6E9vT3JalVjhLuWxKS9FUjsWGT6 fEL3wePTM/QH8FUSTbK85J7i+UQrqICijcFPTohE= To: Andrew Mcconachie , "http-auth@ietf.org" References: From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <573B8903.8090605@cs.tcd.ie> Date: Tue, 17 May 2016 22:11:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040400070400020506000601" Archived-At: Subject: Re: [http-auth] HOBA Client and Server(RFC 7486) X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 May 2016 21:11:37 -0000 This is a cryptographically signed message in MIME format. --------------ms040400070400020506000601 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Excellent! (As I said earlier when Andrew mailed me off list:-) I'll take a peek when I get a chance. If making some changes meant the difference between this getting adopted or not, I'd be fine with most any change;-) Cheers, S. On 17/05/16 21:55, Andrew Mcconachie wrote: > I=E2=80=99ve written a HOBA client and server. Both are licensed under = GPLv3. >=20 > The client is a Firefox plugin that can be downloaded here: > https://addons.mozilla.org/en-US/firefox/addon/hoba/ >=20 > The server lives here currently: > https://synonomic.com/hoba >=20 > Code for both is on Github: > https://github.com/smutt/HOBA > https://github.com/smutt/HOBA-server >=20 > Neither client nor server are going to win any awards for UI design :) = They=E2=80=99re both rather ugly, but they work. >=20 > I did some things slightly differently than RFC 7486. The biggest diffe= rence is that I used JWK for public key format instead of PEM. There are = a few other little things as well. >=20 > This was a personal project unrelated to my day job. >=20 > --Andrew >=20 >=20 >=20 > _______________________________________________ > http-auth mailing list > http-auth@ietf.org > https://www.ietf.org/mailman/listinfo/http-auth >=20 --------------ms040400070400020506000601 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjA1MTcy MTExMzFaMC8GCSqGSIb3DQEJBDEiBCBw7D50NYPEcALvfdxKBWeY/se0QqO7wrxW3qULFCcr IzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQAy9acDsV95zssYrij97L8ngpgIYk0vVWGA+E/MDQJc8UKAKQNcYj4p DzB8DNf1/Ai8iN1pr3Qs++B4RD7HMrxzdLqxV9tt6bz2SAQgpqDL22IVKjsxFq5R6BcXXkNt CDL67K250ppUswHoXS8TgUSQHAEUDIl7vs93FPyakNgKPe8dVKsOaXGwtggF5noLkuZZkqg0 CT3SmfNBRWLhHZfCITRG+/Biz3ilFN3OA/idMppG33CnKSPxrKumX4ACdt+wQns80MSweKE5 ay3knPmh/1hI5sq7RCKoFh1NXH0yy2yXHKnHSFG9MYxh85bqti4Q/MXkswMFLNzRdDWW9BKD AAAAAAAA --------------ms040400070400020506000601-- From nobody Tue May 24 23:59:55 2016 Return-Path: X-Original-To: http-auth@ietf.org Delivered-To: http-auth@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F2F412D642; Tue, 24 May 2016 23:59:51 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160525065951.14129.93587.idtracker@ietfa.amsl.com> Date: Tue, 24 May 2016 23:59:51 -0700 Archived-At: Cc: http-auth@ietf.org Subject: [http-auth] I-D Action: draft-ietf-httpauth-mutual-07.txt X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2016 06:59:51 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Hypertext Transfer Protocol Authentication of the IETF. Title : Mutual Authentication Protocol for HTTP Authors : Yutaka Oiwa Hajime Watanabe Hiromitsu Takagi Kaoru Maeda Tatsuya Hayashi Yuichi Ioku Filename : draft-ietf-httpauth-mutual-07.txt Pages : 54 Date : 2016-05-24 Abstract: This document specifies a mutual authentication scheme for the Hypertext Transfer Protocol (HTTP). This scheme provides true mutual authentication between an HTTP client and an HTTP server using password-based authentication. Unlike the Basic and Digest authentication schemes, the Mutual authentication scheme specified in this document assures the user that the server truly knows the user's encrypted password. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-httpauth-mutual/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-httpauth-mutual-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-httpauth-mutual-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed May 25 00:00:39 2016 Return-Path: X-Original-To: http-auth@ietf.org Delivered-To: http-auth@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A54D12D14D; Wed, 25 May 2016 00:00:38 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160525070038.18321.18698.idtracker@ietfa.amsl.com> Date: Wed, 25 May 2016 00:00:38 -0700 Archived-At: Cc: http-auth@ietf.org Subject: [http-auth] I-D Action: draft-ietf-httpauth-mutual-algo-05.txt X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2016 07:00:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Hypertext Transfer Protocol Authentication of the IETF. Title : Mutual Authentication Protocol for HTTP: KAM3-based Cryptographic Algorithms Authors : Yutaka Oiwa Hajime Watanabe Hiromitsu Takagi Kaoru Maeda Tatsuya Hayashi Yuichi Ioku Filename : draft-ietf-httpauth-mutual-algo-05.txt Pages : 16 Date : 2016-05-24 Abstract: This document specifies cryptographic algorithms for use with the Mutual user authentication method for the Hyper-text Transport Protocol (HTTP). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-httpauth-mutual-algo/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-httpauth-mutual-algo-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-httpauth-mutual-algo-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed May 25 00:01:12 2016 Return-Path: X-Original-To: http-auth@ietf.org Delivered-To: http-auth@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EFCF12DA60; Wed, 25 May 2016 00:01:10 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160525070110.18269.55909.idtracker@ietfa.amsl.com> Date: Wed, 25 May 2016 00:01:10 -0700 Archived-At: Cc: http-auth@ietf.org Subject: [http-auth] I-D Action: draft-ietf-httpauth-extension-06.txt X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2016 07:01:10 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Hypertext Transfer Protocol Authentication of the IETF. Title : HTTP Authentication Extensions for Interactive Clients Authors : Yutaka Oiwa Hajime Watanabe Hiromitsu Takagi Tatsuya Hayashi Yuichi Ioku Filename : draft-ietf-httpauth-extension-06.txt Pages : 26 Date : 2016-05-24 Abstract: This document specifies extensions of HTTP authentication framework for interactive clients. Recently, fundamental features of HTTP- level authentication are insufficient for complex requirements of various Web-based applications. This forces these applications to implement their own authentication frameworks using HTML Forms and other means, which becomes one of the hurdles against introducing secure authentication mechanisms handled jointly by servers and user- agent. The extended framework fills gaps between Web application requirements and HTTP authentication provisions to solve the above problems, while maintaining compatibility against existing Web and non-Web uses of HTTP authentications. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-httpauth-extension/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-httpauth-extension-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-httpauth-extension-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri May 27 11:13:02 2016 Return-Path: X-Original-To: http-auth@ietfa.amsl.com Delivered-To: http-auth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6BAF12DCD0 for ; Fri, 27 May 2016 11:13:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GrLCBq1ka7hK for ; Fri, 27 May 2016 11:12:58 -0700 (PDT) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EEA1A12DCEC for ; Fri, 27 May 2016 11:09:26 -0700 (PDT) Received: by mail-wm0-x232.google.com with SMTP id z87so2283947wmh.0 for ; Fri, 27 May 2016 11:09:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=1+2Zq72vT5YcxNuHzHjYAhe2Hg4oT/duc2Ouq5Sk7mo=; b=h4xIXY+UdjLtUusq4vKpq983mf2zAN2ev3IThMn2oCiDhOb+AEiX1g+uIyUxUFLMpL XqnTsiL20JeQM+YJ3mflNzjXxg1m0oYDwm0OfyPNUCRPxOQ4b5lTkOKxdZX1n1/BzEjR mRX30z8XAvys/kPZyVI4QmzQCIthOsf8g3Hdbbea6DExnWrsjqZxVABzJt/2OWsaNBWm zo4WATkgB5JicIa0Z7mHdyYc20KT4FYlEbRj3aGQcZYw1sGSHznUm8247EZn12gx4t6v dKjXxQR2VPHn9D9oZ6Tvv3ofahucAmnFvZm+VN1/woDalGTTcYZTZaCaOQC2ZOLfAPkn 4brw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=1+2Zq72vT5YcxNuHzHjYAhe2Hg4oT/duc2Ouq5Sk7mo=; b=dyGDeZ2byZ1fT6hBAh/9iSrSzLNWZevNw/Uge+u3F25qgwzqEj2sQ+pEYpGANyhhvp 0oYXu9m11OZN90XMlPqzwNpxPYVxvCzp36LXfOFhJGYI+9TnauVQbn8MVig9APY9HpQf Us+/b9bY8U+TgB/ZPTStEBzu2GP8BDRGUGjEkpaWDI+ofPhgVeT1AV2/X9DFGzg6+U+v tkotigzLKyAApdopKSuXgm5qnThH3VrWBDpBjlMVxIXvoSL8d0EwT7mcPw+1ZkspMut+ J0BZlHtMUwXptV1HL/UIjCYHMRvXUH5kr2GTUI5HuIuB/JJfxogv4ntxK9qsvNkQnffW gxpQ== X-Gm-Message-State: ALyK8tIpAz6nOGEnuxHWIhC7IFhY2pkipGoahaujDXr//ASrW5thpKYEMNou3fn/cAJ8jA== X-Received: by 10.28.92.18 with SMTP id q18mr11041460wmb.48.1464372565262; Fri, 27 May 2016 11:09:25 -0700 (PDT) Received: from [192.168.1.14] ([46.120.57.147]) by smtp.gmail.com with ESMTPSA id b207sm9778656wmb.0.2016.05.27.11.09.23 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 27 May 2016 11:09:24 -0700 (PDT) From: Yoav Nir Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <2DBE893A-434D-4B67-BF12-AEFBDE7A23B7@gmail.com> Date: Fri, 27 May 2016 21:09:24 +0300 To: httpauth mailing list Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [http-auth] WGLC on the MutualAuth drafts X-BeenThere: http-auth@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: HTTP authentication methods List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 May 2016 18:13:01 -0000 Hi. The authors of the MutualAuth documents have published the latest = versions of these drafts: - draft-ietf-httpauth-mutual-07 - draft-ietf-httpauth-mutual-algo-05 - draft-ietf-httpauth-extension-06 These latest versions incorporate the changes discussed at the meeting = in Buenos Aires. This message is to begin working group last call on this set of = documents. Because these are three documents, we will extend the WGLC = beyond the customary 2 weeks.=20 So please review these documents and send any comments and suggestions = to the list. WGLC will end on June 17th. Regards, Rifaat and Yoav