From nobody Sun Jan 7 21:14:26 2018 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9BCF126CC4 for ; Sun, 7 Jan 2018 21:14:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.651 X-Spam-Level: X-Spam-Status: No, score=-1.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MiwAi40yGEIt for ; Sun, 7 Jan 2018 21:14:24 -0800 (PST) Received: from m69-170.mailgun.net (m69-170.mailgun.net [166.78.69.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 335341205F1 for ; Sun, 7 Jan 2018 21:14:24 -0800 (PST) DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=github.com; q=dns/txt; s=mailo; t=1515388463; h=Content-Transfer-Encoding: Content-Type: Mime-Version: Subject: Message-ID: To: Reply-To: From: Date: Sender; bh=v32CmR3qTZFG3xGNfoGYzaRA41g05/9/b0qLgWtqTBY=; b=VlpUARNBq9hkjHvjMg5YGulSGtk0kxn3kPaxzneofZfZIbGanVoNRQzlvh/US8BcwONpA/iW h0Z7pU6Dn8k2HC/9yFxxOnee8UuONFfUemckhYGOm/9nbmAB9txSj24BD05mA/GeRsmMBYix KJnr7d5oHsfIuknKVct7p+Tkw80= X-Mailgun-Sending-Ip: 166.78.69.170 X-Mailgun-Sid: WyIzMTNlNyIsICJ1bmJlYXJhYmxlQGlldGYub3JnIiwgIjQwZiJd Sender: dirk=balfanz.net@github.com Received: from github.com (Unknown [192.30.252.34]) by mxa.mailgun.org with ESMTP id 5a52fe2f.7f182435cd20-smtp-out-n03; Mon, 08 Jan 2018 05:14:23 -0000 (UTC) Date: Sun, 07 Jan 2018 21:14:22 -0800 From: balfanz Reply-To: balfanz To: unbearable@ietf.org Message-ID: <5a52fe2e5d1dc_11752abb91d6fc14208a8@hookshot-fe-7191cb1.cp1-iad.github.net.mail> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="--==_mimepart_5a52fe2e5cd4a_11752abb91d6fc142074f"; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: [Unbearable] [TokenBinding/Internet-Drafts] 30e1e9: Starting revision 12 X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 05:14:26 -0000 ----==_mimepart_5a52fe2e5cd4a_11752abb91d6fc142074f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Branch: refs/heads/master Home: https://github.com/TokenBinding/Internet-Drafts Commit: 30e1e993723ba8fc3882b11e4b83c62e483e9e39 https://github.com/TokenBinding/Internet-Drafts/commit/30e1e993723ba8fc3882b11e4b83c62e483e9e39 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: R draft-ietf-tokbind-https-11.xml A draft-ietf-tokbind-https-12.xml Log Message: ----------- Starting revision 12 Commit: 7b1d41c34182005c48d64d6bcf01dd07c8cf2369 https://github.com/TokenBinding/Internet-Drafts/commit/7b1d41c34182005c48d64d6bcf01dd07c8cf2369 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M draft-ietf-tokbind-https-12.xml Log Message: ----------- Adding references to HTTPS RFC. Commit: 032e134d296d6f2fe4a6762beb236c38ea04f177 https://github.com/TokenBinding/Internet-Drafts/commit/032e134d296d6f2fe4a6762beb236c38ea04f177 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M draft-ietf-tokbind-https-12.xml Log Message: ----------- Adding a real example of a token binding header Commit: 07e01e2e2b17ef5bd31cf6c836d4bed9f302ce8e https://github.com/TokenBinding/Internet-Drafts/commit/07e01e2e2b17ef5bd31cf6c836d4bed9f302ce8e Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M draft-ietf-tokbind-https-12.xml Log Message: ----------- clarifying that there can't be more than one TokenBinding structure of each type in the TokenBindingMessage. Commit: 44b6124bb696c151167a935358d03048f61bf2e8 https://github.com/TokenBinding/Internet-Drafts/commit/44b6124bb696c151167a935358d03048f61bf2e8 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M draft-ietf-tokbind-https-12.xml Log Message: ----------- adding a simple ladder diagram explaining the general setup of federation support in Token Binding. Compare: https://github.com/TokenBinding/Internet-Drafts/compare/b10996b6da65...44b6124bb696 ----==_mimepart_5a52fe2e5cd4a_11752abb91d6fc142074f-- From nobody Sun Jan 7 21:19:02 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 70337126CC4; Sun, 7 Jan 2018 21:18:57 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: unbearable@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151538873741.11274.12307605410447965239@ietfa.amsl.com> Date: Sun, 07 Jan 2018 21:18:57 -0800 Archived-At: Subject: [Unbearable] I-D Action: draft-ietf-tokbind-https-12.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 05:18:57 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : Token Binding over HTTP Authors : Andrei Popov Magnus Nyström Dirk Balfanz Adam Langley Nick Harper Jeff Hodges Filename : draft-ietf-tokbind-https-12.txt Pages : 24 Date : 2018-01-07 Abstract: This document describes a collection of mechanisms that allow HTTP servers to cryptographically bind security tokens (such as cookies and OAuth tokens) to TLS connections. We describe both first-party and federated scenarios. In a first- party scenario, an HTTP server is able to cryptographically bind the security tokens it issues to a client, and which the client subsequently returns to the server, to the TLS connection between the client and server. Such bound security tokens are protected from misuse since the server can generally detect if they are replayed inappropriately, e.g., over other TLS connections. Federated token bindings, on the other hand, allow servers to cryptographically bind security tokens to a TLS connection that the client has with a different server than the one issuing the token. This Internet-Draft is a companion document to The Token Binding Protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-https/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-https-12 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-https-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-https-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Jan 7 21:20:53 2018 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8788B126BF7 for ; Sun, 7 Jan 2018 21:20:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.651 X-Spam-Level: X-Spam-Status: No, score=-1.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWckiaSMvbkN for ; Sun, 7 Jan 2018 21:20:51 -0800 (PST) Received: from m69-169.mailgun.net (m69-169.mailgun.net [166.78.69.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 553801205F1 for ; Sun, 7 Jan 2018 21:20:51 -0800 (PST) DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=github.com; q=dns/txt; s=mailo; t=1515388850; h=Content-Transfer-Encoding: Content-Type: Mime-Version: Subject: Message-ID: To: Reply-To: From: Date: Sender; bh=Ug84+nxCfle4SNWZscsIjFGlKPR0EOvMmqttGuAiWuA=; b=am/qzrrDH/ADKi+9rgM0iz27RqVX4ZuaZ5q1Jp12CiU7qDNcbI1N0l3OOKXsR2OtDIQHVJ8W zz9ZWBgozU7fPTl5Tih7ZASAvFAze8/+qIQLMQPqqXCF+jA4XdTP+4eeCyWpBz2zHylPfuu3 J0bH9LZeJBb7dc8YYA1h+QdK6Lk= X-Mailgun-Sending-Ip: 166.78.69.169 X-Mailgun-Sid: WyIzMTNlNyIsICJ1bmJlYXJhYmxlQGlldGYub3JnIiwgIjQwZiJd Sender: dirk=balfanz.net@github.com Received: from github.com (Unknown [192.30.252.39]) by mxa.mailgun.org with ESMTP id 5a52ffb2.7f762c182390-smtp-out-n03; Mon, 08 Jan 2018 05:20:50 -0000 (UTC) Date: Sun, 07 Jan 2018 21:20:49 -0800 From: balfanz Reply-To: balfanz To: unbearable@ietf.org Message-ID: <5a52ffb18c3ad_1fdb2b0fc4929c041039f@hookshot-fe-da92815.cp1-iad.github.net.mail> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="--==_mimepart_5a52ffb18bef3_1fdb2b0fc4929c04103863"; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: [Unbearable] [TokenBinding/Internet-Drafts] 59789d: typos X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 05:20:52 -0000 ----==_mimepart_5a52ffb18bef3_1fdb2b0fc4929c04103863 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Branch: refs/heads/master Home: https://github.com/TokenBinding/Internet-Drafts Commit: 59789d84c51afddca08a60bb6591c058c023f807 https://github.com/TokenBinding/Internet-Drafts/commit/59789d84c51afddca08a60bb6591c058c023f807 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M draft-ietf-tokbind-https-12.xml Log Message: ----------- typos Commit: 06e106a6626af03227e87289573670cf0c85e716 https://github.com/TokenBinding/Internet-Drafts/commit/06e106a6626af03227e87289573670cf0c85e716 Author: balfanz Date: 2018-01-07 (Sun, 07 Jan 2018) Changed paths: M README.md Log Message: ----------- bump README references to tokbind-https to revision 12. Compare: https://github.com/TokenBinding/Internet-Drafts/compare/44b6124bb696...06e106a6626a ----==_mimepart_5a52ffb18bef3_1fdb2b0fc4929c04103863-- From nobody Mon Jan 29 15:24:09 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DDE3412FB4F; Mon, 29 Jan 2018 15:24:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: unbearable@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151726824185.27316.10674826848872024680@ietfa.amsl.com> Date: Mon, 29 Jan 2018 15:24:01 -0800 Archived-At: Subject: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-02.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 23:24:02 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : HTTPS Token Binding with TLS Terminating Reverse Proxies Author : Brian Campbell Filename : draft-ietf-tokbind-ttrp-02.txt Pages : 11 Date : 2018-01-29 Abstract: This document defines common HTTP header fields that enable a TLS terminating reverse proxy to convey information about the validated Token Binding Message sent by the client to a backend server, which enables that backend server to bind, or verify the binding of, cookies and other security tokens to the client's Token Binding key. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-02 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-ttrp-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jan 29 15:46:03 2018 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A467D12EB22 for ; Mon, 29 Jan 2018 15:46:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MuUrEs9Le5op for ; Mon, 29 Jan 2018 15:45:59 -0800 (PST) Received: from mail-it0-x236.google.com (mail-it0-x236.google.com [IPv6:2607:f8b0:4001:c0b::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21EC4126DC2 for ; Mon, 29 Jan 2018 15:45:59 -0800 (PST) Received: by mail-it0-x236.google.com with SMTP id h129so5079669ita.2 for ; Mon, 29 Jan 2018 15:45:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=g8vgtZIJMO7OFrrLT1W9+VKX2Zpw5ZTs1+d0zVtK1L0=; b=GbEn2Dmp/CxgiPYxcqFU4hHzndBXFP6jmfWmVZRLEYtSBqu06He/dXYnaVqrnJ5nOX 8Cz6UXFsegChqF2zdmq646j6WID8K+bK3gzpWyrceSkm7WD0I7FohsXSJAYUxToGRV43 NLpcBJQUL7oFTdpgDjVzzBJQv9zRhg3ubXfuQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=g8vgtZIJMO7OFrrLT1W9+VKX2Zpw5ZTs1+d0zVtK1L0=; b=EblDb0jHLxbVDXpryR79X7ozHmlcFKsdI2Z03yWV8wXXTH34zb0kcESIqPh8sO+6Zn WGPjLyiI/UH1N42jhLFGxqUqGfJd7HUbSLs8xd+XwY4IhTcuryvrZXYNldlngY/BVw/k 8Y+Mz2DA6bJyiNEcSemrmqvK5oGyfuo+jvy4Q73KgpI3aylPeGH9QuVmHA4I1a1z+isC OSY+0fv9V8H6Jm9nKbQE7j+31OYwu4cYk5EhHqQhholbTnRcBLPqT3A2e6wYFIvnMLbZ 4YSB7sgBz6SwH39D4obX4tsfWFxzi0U/8SwMzod884SDXTgkPoGGrIX+cCikj5ywOp2Q YK0w== X-Gm-Message-State: AKwxytdNHqZgDF0JJXCRk5yUKo49aaMfTFUH2OSVdXqnyNfTzOfUNF8w oV4TsyG13a22+WTnxiawB/1h8zOyb0oehbvH+50iGq8sMwvMkRQHev/FGLV0yWds6jWlU1HqNDE MG2FlDW4d3OmEWpbXg1cAybU= X-Google-Smtp-Source: AH8x225fXR0EqhGGUg768o5A/LC6IbqmJIy3FT7m+vY7IzRo7+V/e/TGiDV2Fvw61x5WvWVDze3kHK1c3rrPEgqzYGg= X-Received: by 10.36.246.70 with SMTP id u67mr13843510ith.29.1517269558017; Mon, 29 Jan 2018 15:45:58 -0800 (PST) MIME-Version: 1.0 Received: by 10.2.108.210 with HTTP; Mon, 29 Jan 2018 15:45:27 -0800 (PST) In-Reply-To: <151726824185.27316.10674826848872024680@ietfa.amsl.com> References: <151726824185.27316.10674826848872024680@ietfa.amsl.com> From: Brian Campbell Date: Mon, 29 Jan 2018 16:45:27 -0700 Message-ID: To: IETF Tokbind WG Content-Type: multipart/alternative; boundary="94eb2c03411a08e1170563f2d9e5" Archived-At: Subject: [Unbearable] Fwd: I-D Action: draft-ietf-tokbind-ttrp-02.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 23:46:01 -0000 --94eb2c03411a08e1170563f2d9e5 Content-Type: text/plain; charset="UTF-8" A new draft of "HTTPS Token Binding with TLS Terminating Reverse Proxies" has been published (just a few days before impending expiration). There are no functional changes, just editorial, formatting, etc.. The changes, copied from the Document History appendix, are listed below for a quick overview. draft-ietf-tokbind-ttrp-02 - Add to the Acknowledgements. - Update references for Token Binding negotiation, protocol, and https. - Use the boilerplate from RFC 8174. - Reformat the "HTTP Header Fields and Processing Rules" section to make the header names more prominent and move the encoding definitions earlier. ---------- Forwarded message ---------- From: Date: Mon, Jan 29, 2018 at 4:24 PM Subject: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-02.txt To: i-d-announce@ietf.org Cc: unbearable@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : HTTPS Token Binding with TLS Terminating Reverse Proxies Author : Brian Campbell Filename : draft-ietf-tokbind-ttrp-02.txt Pages : 11 Date : 2018-01-29 Abstract: This document defines common HTTP header fields that enable a TLS terminating reverse proxy to convey information about the validated Token Binding Message sent by the client to a backend server, which enables that backend server to bind, or verify the binding of, cookies and other security tokens to the client's Token Binding key. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-02 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-ttrp-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ Unbearable mailing list Unbearable@ietf.org https://www.ietf.org/mailman/listinfo/unbearable -- *CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.* --94eb2c03411a08e1170563f2d9e5 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
A new draft of "HTTPS Token Binding with TLS Terminating= Reverse Proxies" has been published (just a few days befor= e=C2=A0im= pending expiration). There are no functional changes, just editorial, formatting, etc.. <= /span>The changes, copied from the Document History appendix, are listed below for a quick overview.

draft-ietf-tokbind-ttrp-02

  • Add to the Acknowledgements.<= /li>
  • Update references for Token= Binding negotiation, protocol, and https.
  • Use the boilerplate from RFC 8174.
  • Reformat the "HTTP= Header Fields and Processing Rules" section to make the header names = more prominent and move the encoding definitions earlier.

    ---------- Forwarded message -----= -----
    From: <internet-drafts@= ietf.org>
    Date: Mon, Jan 29, 2018 at 4:24 PM
    Subject: [= Unbearable] I-D Action: draft-ietf-tokbind-ttrp-02.txt
    To: i-d-announce@ietf.org
    = Cc: unbearable@iet= f.org



    A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
    This draft is a work item of the Token Binding WG of the IETF.

    =C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= HTTPS Token Binding with TLS Terminating Reverse Proxies
    =C2=A0 =C2=A0 =C2=A0 =C2=A0 Author=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Bria= n Campbell
    =C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-tokbind-ttrp-02.txt
    =C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 11
    =C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2018-01-29

    Abstract:
    =C2=A0 =C2=A0This document defines common HTTP header fields that enable a = TLS
    =C2=A0 =C2=A0terminating reverse proxy to convey information about the vali= dated
    =C2=A0 =C2=A0Token Binding Message sent by the client to a backend server, = which
    =C2=A0 =C2=A0enables that backend server to bind, or verify the binding of,=
    =C2=A0 =C2=A0cookies and other security tokens to the client's Token Bi= nding key.


    The IETF datatracker status page for this draft is:
    https://datatracker.ietf.org/doc/dra= ft-ietf-tokbind-ttrp/

    There are also htmlized versions available at:
    https://tools.ietf.org/html/draft-ietf-to= kbind-ttrp-02
    https://datatracker.ietf.org/do= c/html/draft-ietf-tokbind-ttrp-02

    A diff from the previous version is available at:
    https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-tokbind-ttrp-02


    Please note that it may take a couple of minutes from the time of submissio= n
    until the htmlized version and diff are available at tools.ietf.org.

    Internet-Drafts are also available by anonymous FTP at:
    ftp://ftp.ietf.org/internet-drafts/

    _______________________________________________
    Unbearable mailing list
    Unbearable@ietf.or= g
    https://www.ietf.org/mailman/listinfo/unbearabl= e


    • <= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --94eb2c03411a08e1170563f2d9e5--