From nobody Thu Feb 1 14:24:56 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A0E1112F092; Thu, 1 Feb 2018 14:24:54 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: unbearable@ietf.org, tokbind-chairs@ietf.org, ekr@rtfm.com, leifj@sunet.se X-Test-IDTracker: no X-IETF-IDTracker: 6.71.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151752389462.25785.3189474040065121361.idtracker@ietfa.amsl.com> Date: Thu, 01 Feb 2018 14:24:54 -0800 Archived-At: Subject: [Unbearable] tokbind - New Meeting Session Request for IETF 101 X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 22:24:54 -0000 A new meeting session request has just been submitted by Leif Johansson, a Chair of the tokbind working group. --------------------------------------------------------- Working Group Name: Token Binding Area Name: Security Area Session Requester: Leif Johansson Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: ace tls oauth secevent People who must be present: Eric Rescorla Stephen Farrell Leif Johansson Dirk Balfanz John Bradley Andrey Popov Mike Jones Resources Requested: Special Requests: --------------------------------------------------------- From nobody Thu Feb 1 14:29:48 2018 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD7B612F274 for ; Thu, 1 Feb 2018 14:29:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnt-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bx2-VzjPhZgO for ; Thu, 1 Feb 2018 14:29:44 -0800 (PST) Received: from mail-lf0-x22c.google.com (mail-lf0-x22c.google.com [IPv6:2a00:1450:4010:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A2C312ECF5 for ; Thu, 1 Feb 2018 14:29:44 -0800 (PST) Received: by mail-lf0-x22c.google.com with SMTP id t79so28629942lfe.3 for ; Thu, 01 Feb 2018 14:29:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnt-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=uws4kd/vMKJikTDoK7wAiEGS1zuaczkDPgyxKKvQqeQ=; b=tjO57DSlSxGHbkZIi0n+erHlhAL79ktrCxXRS0pk/24JCCMQHGT04rjRMFL0yM4U8S fYI1DTGBdpg65e7J+UEPFujm2Actu1NsEh10cJgVwX0vWOi1NJdA4Gv/cYvBCD6yU/+i ksEkbN5ZkwY4b1eokIoAo6lgYoevA80dKMjf7QuFfCvsyChDFv7/T7MGJKTA/DlmQRO1 0twYzixfqOlQncXdfSxtrMbjjoXet8vleFATP4ix7qS5DLUL5j1+uT0GFyuenE8/h8b/ Km/dykujeL8yjHJHuWV0VqOBC1dseowSAdboHYeZGO+dMvkTdnDPu4x4yNevzQkYcLx2 CNSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=uws4kd/vMKJikTDoK7wAiEGS1zuaczkDPgyxKKvQqeQ=; b=PvcUW4/qdoejcNUUrD7yYWZgt/eUS2hxncKRa8f8OFfKGmr1/h5AmZlDSite4wBsdS 4g1TgX4W5jH0ATCtXMA/FunATWdkdvEXiq3KtZp/Q1yGQ9tlSqXNDY/6Z1R/+TGr6VV6 WKSJOvEgaPvx72XQSb3KdBW+WeCJKbyopSyL7N3EQLyZVx89S3+nkJc6BfHQTQX03eSj Q60h1Zt8+nHaugDGs8aEsiL7f746TzwOgFcPxHcl4ZDn+3RMR+j9OT/KCIadAwG91Xky gV3ovZBAdZyzEYvLSsUgahFrJjHWgju8A57r2jRmrFf/suLTGZRghj0nIjMT+5/N47bF /+wg== X-Gm-Message-State: AKwxyteS97dQRLI2+oruNwIIE+sZZYkRFH9LA+S2OQHEfjrOexZXR9Qy BlH3uJ5RFQixDBCm+lEuqv0d1iivK8E= X-Google-Smtp-Source: AH8x225y+EASKAVpsBBFs+MZocBtmBsniggZFHVw7pwLfr4GkHEDcMrOCOreC/H3PxueroeRzsJylw== X-Received: by 10.46.41.194 with SMTP id p63mr16514503ljp.137.1517524182099; Thu, 01 Feb 2018 14:29:42 -0800 (PST) Received: from [10.0.0.129] (h-155-4-133-76.NA.cust.bahnhof.se. [155.4.133.76]) by smtp.gmail.com with ESMTPSA id n24sm112976lfi.18.2018.02.01.14.29.41 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 01 Feb 2018 14:29:41 -0800 (PST) To: unbearable@ietf.org References: <151752389462.25785.3189474040065121361.idtracker@ietfa.amsl.com> From: Leif Johansson Message-ID: Date: Thu, 1 Feb 2018 23:29:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <151752389462.25785.3189474040065121361.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8 Content-Language: sv Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Unbearable] tokbind - New Meeting Session Request for IETF 101 X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 22:29:47 -0000 On 2018-02-01 23:24, IETF Meeting Session Request Tool wrote: > > > A new meeting session request has just been submitted by Leif Johansson, a Chair of the tokbind working group. Pls suggest items for the agenda asap! Cheers Leif & John > > > --------------------------------------------------------- > Working Group Name: Token Binding > Area Name: Security Area > Session Requester: Leif Johansson > > Number of Sessions: 1 > Length of Session(s): 1.5 Hours > Number of Attendees: 50 > Conflicts to Avoid: > First Priority: ace tls oauth secevent > > > > > People who must be present: > Eric Rescorla > Stephen Farrell > Leif Johansson > Dirk Balfanz > John Bradley > Andrey Popov > Mike Jones > > Resources Requested: > > Special Requests: > > --------------------------------------------------------- > > _______________________________________________ > Unbearable mailing list > Unbearable@ietf.org > https://www.ietf.org/mailman/listinfo/unbearable > From nobody Mon Feb 26 08:38:40 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FA85124239; Mon, 26 Feb 2018 08:38:34 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.72.4 Auto-Submitted: auto-generated Precedence: bulk CC: ekr@rtfm.com, John Bradley , draft-ietf-tokbind-https@ietf.org, unbearable@ietf.org, tokbind-chairs@ietf.org, ve7jtb@ve7jtb.com Reply-To: ietf@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <151966311458.31492.5879365590755267294.idtracker@ietfa.amsl.com> Date: Mon, 26 Feb 2018 08:38:34 -0800 Archived-At: Subject: [Unbearable] Last Call: (Token Binding over HTTP) to Proposed Standard X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 16:38:35 -0000 The IESG has received a request from the Token Binding WG (tokbind) to consider the following document: - 'Token Binding over HTTP' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2018-03-12. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document describes a collection of mechanisms that allow HTTP servers to cryptographically bind security tokens (such as cookies and OAuth tokens) to TLS connections. We describe both first-party and federated scenarios. In a first- party scenario, an HTTP server is able to cryptographically bind the security tokens it issues to a client, and which the client subsequently returns to the server, to the TLS connection between the client and server. Such bound security tokens are protected from misuse since the server can generally detect if they are replayed inappropriately, e.g., over other TLS connections. Federated token bindings, on the other hand, allow servers to cryptographically bind security tokens to a TLS connection that the client has with a different server than the one issuing the token. This Internet-Draft is a companion document to The Token Binding Protocol. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-tokbind-https/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-tokbind-https/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Mon Feb 26 08:50:46 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C31F126CC4; Mon, 26 Feb 2018 08:50:44 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: unbearable@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.72.4 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151966384454.31386.1177711202602130184@ietfa.amsl.com> Date: Mon, 26 Feb 2018 08:50:44 -0800 Archived-At: Subject: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-03.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 16:50:44 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : HTTPS Token Binding with TLS Terminating Reverse Proxies Author : Brian Campbell Filename : draft-ietf-tokbind-ttrp-03.txt Pages : 12 Date : 2018-02-26 Abstract: This document defines HTTP header fields that enable a TLS terminating reverse proxy to convey information to a backend server about the validated Token Binding Message received from a client, which enables that backend server to bind, or verify the binding of, cookies and other security tokens to the client's Token Binding key. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-03 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-ttrp-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Feb 26 11:08:43 2018 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E870B1270AB for ; Mon, 26 Feb 2018 11:08:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.44 X-Spam-Level: X-Spam-Status: No, score=-2.44 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yD6nXRAn6AJY for ; Mon, 26 Feb 2018 11:08:39 -0800 (PST) Received: from mail-it0-x235.google.com (mail-it0-x235.google.com [IPv6:2607:f8b0:4001:c0b::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EC94124239 for ; Mon, 26 Feb 2018 11:08:39 -0800 (PST) Received: by mail-it0-x235.google.com with SMTP id w63so12058057ita.3 for ; Mon, 26 Feb 2018 11:08:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=h0N/RBUxJthrWhjjXaV/WT12vQyJSQQVLaxHvm8j1Ak=; b=A+zzW06B6i2eYB86rnWj4aZmsXZcahaTAUdjs/CmyQWvGRy0lPudqjgPnJDIoKBuX7 pbyosobYaXHL2QLX01l6z/Dccc8cjjz9gvzEAA6MrqOTdnr9NM/90whuR9fJud7GEJJJ rcvwLchxzOYki8X5ZruZCu9gIVMiocNz+XnVE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=h0N/RBUxJthrWhjjXaV/WT12vQyJSQQVLaxHvm8j1Ak=; b=l6VYSfLRQAX72W3ln0hX8Ja9ZCpvP6x2Wo1xfpFL5lAZX+oVjoBlTQdx0Bd0fQVPqQ OVDa8Eo/zwx9HhqpwMqSkkNKrDs4vgAhGGQ9g95S8O8g1us/fwc4Y9Nly5MKhGTXJ9W1 enbDbHz73sC63ocVaY/Iq2XNmkt70Lsgze4KfIQR40OKlUm7kxw7t61u39262ZCh3a4/ lFWgu16O0ODApnozNhwZbTUisV3UAXsWk0ptezAE1AwyHjyYqgfOsjHrvbT76nmVQr3V yZbpr11bb2eEjwz9F6e5aXPmFqlQ3TNHKeD/toRJfq0vlqX7MJ5OdZEPyPHeEjt2QTG9 /y6A== X-Gm-Message-State: APf1xPAtX6RvNNBnVT0G5tvfUcoq1XizkprriVCVZvSG/S/2Iz17FfWZ XB1Is1+0nxrch+j+jAdSV2pOWI2RNCzPsvuwnOz1/6g17IMbEHWWgRCaw1NjmpQhibnPzqEOfjD vCGB+I5MqrV6EaygKTLbm X-Google-Smtp-Source: AG47ELteyEq47do47m62V03/ridZxVnP4++OXpgJulFZZ8AGJQzinPnP22K3WptKYtfJ7w7Ngsw8sJPQYgCKQVjUptY= X-Received: by 10.36.164.74 with SMTP id v10mr13533904iti.25.1519672118629; Mon, 26 Feb 2018 11:08:38 -0800 (PST) MIME-Version: 1.0 Received: by 10.2.73.200 with HTTP; Mon, 26 Feb 2018 11:08:08 -0800 (PST) In-Reply-To: <151966384454.31386.1177711202602130184@ietfa.amsl.com> References: <151966384454.31386.1177711202602130184@ietfa.amsl.com> From: Brian Campbell Date: Mon, 26 Feb 2018 12:08:08 -0700 Message-ID: To: IETF Tokbind WG Content-Type: multipart/alternative; boundary="f403045fba74ce90890566223cc0" Archived-At: Subject: [Unbearable] Fwd: I-D Action: draft-ietf-tokbind-ttrp-03.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 19:08:42 -0000 --f403045fba74ce90890566223cc0 Content-Type: text/plain; charset="UTF-8" A new draft of "HTTPS Token Binding with TLS Terminating Reverse Proxies" has been published. The only substantive change is the addition of a header and encoding/formatting to allow for additional token binding types (other than provided and referred) to be conveyed from the TTRP to the backend application(s). That is functionality that had been requested during both the Singapore and Prague meetings. I'd balked at adding it for a while because of some skepticism about its usefulness in practice, not wanting to bloat the document, and lack of clarity around whether or not there is (rough) consensus for it. I'm still somewhat skeptical but, after making the addition, I don't think the document bloat is particularly bad. So at this point I'm looking to better gauge the consensus or lack thereof for supporting additional token binding types in the TTRP draft. ---------- Forwarded message ---------- From: Date: Mon, Feb 26, 2018 at 9:50 AM Subject: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-03.txt To: i-d-announce@ietf.org Cc: unbearable@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : HTTPS Token Binding with TLS Terminating Reverse Proxies Author : Brian Campbell Filename : draft-ietf-tokbind-ttrp-03.txt Pages : 12 Date : 2018-02-26 Abstract: This document defines HTTP header fields that enable a TLS terminating reverse proxy to convey information to a backend server about the validated Token Binding Message received from a client, which enables that backend server to bind, or verify the binding of, cookies and other security tokens to the client's Token Binding key. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-03 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-ttrp-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ Unbearable mailing list Unbearable@ietf.org https://www.ietf.org/mailman/listinfo/unbearable -- *CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.* --f403045fba74ce90890566223cc0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
A new draft of "HTTPS Token Binding with TLS Terminating= Reverse Proxies" has been published. The only substantive change is the addition of a header and encoding/form= atting to allow for additional token binding types (other than provided and= referred) to be conveyed from the TTRP to the backend application(s). That= is functionality that had been requested during both the Singapore and Pra= gue meetings. I'd balked at adding it for a while because of some skept= icism about its usefulness in practice, not wanting to bloat the document, = and lack of clarity around whether or not there is (rough) consensus for it= . I'm still somewhat skeptical but, after making the addition, I don= 9;t think the document bloat is particularly bad. So at this point I'm = looking to better gauge the consensus or lack thereof for suppor= ting additional token binding types in the TTRP draft.


---------- Forwarded message --= --------
From: <= internet-draf= ts@ietf.org>
Date: Mon, Feb 26, 2018 at 9:50 AM
Subject= : [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-03.txt
To: i-d-announce@ietf.org<= br>Cc: unbearable@= ietf.org



A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Token Binding WG of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= HTTPS Token Binding with TLS Terminating Reverse Proxies
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Author=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Bria= n Campbell
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-tokbind-ttrp-03.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 12
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2018-02-26

Abstract:
=C2=A0 =C2=A0This document defines HTTP header fields that enable a TLS
=C2=A0 =C2=A0terminating reverse proxy to convey information to a backend s= erver
=C2=A0 =C2=A0about the validated Token Binding Message received from a clie= nt,
=C2=A0 =C2=A0which enables that backend server to bind, or verify the bindi= ng of,
=C2=A0 =C2=A0cookies and other security tokens to the client's Token Bi= nding key.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/dra= ft-ietf-tokbind-ttrp/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-to= kbind-ttrp-03
https://datatracker.ietf.org/do= c/html/draft-ietf-tokbind-ttrp-03

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-tokbind-ttrp-03


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
Unbearable mailing list
Unbearable@ietf.or= g
https://www.ietf.org/mailman/listinfo/unbearabl= e


<= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --f403045fba74ce90890566223cc0-- From nobody Tue Feb 27 15:21:49 2018 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D17012EB7A; Tue, 27 Feb 2018 15:11:28 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: unbearable@ietf.org, ekr@rtfm.com X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151977308824.5200.12268672384153432194.idtracker@ietfa.amsl.com> Date: Tue, 27 Feb 2018 15:11:28 -0800 Archived-At: Subject: [Unbearable] tokbind - Requested session has been scheduled for IETF 101 X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.22 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:11:28 -0000 Dear Leif Johansson, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. tokbind Session 1 (1:30:00) Wednesday, Afternoon Session II 1520-1650 Room Name: Viscount size: 175 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Token Binding Area Name: Security Area Session Requester: Leif Johansson Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: ace tls oauth secevent People who must be present: Eric Rescorla Stephen Farrell Leif Johansson Dirk Balfanz John Bradley Andrey Popov Mike Jones Resources Requested: Special Requests: ---------------------------------------------------------