From nobody Fri Jul 5 11:46:01 2019 Return-Path: X-Original-To: unbearable@ietf.org Delivered-To: unbearable@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BA1C1120105; Fri, 5 Jul 2019 11:45:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: unbearable@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.98.2 Auto-Submitted: auto-generated Precedence: bulk Reply-To: unbearable@ietf.org Message-ID: <156235235868.22012.10354315259596940283@ietfa.amsl.com> Date: Fri, 05 Jul 2019 11:45:58 -0700 Archived-At: Subject: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-09.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.29 List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 18:45:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Token Binding WG of the IETF. Title : HTTPS Token Binding with TLS Terminating Reverse Proxies Author : Brian Campbell Filename : draft-ietf-tokbind-ttrp-09.txt Pages : 14 Date : 2019-07-05 Abstract: This document defines HTTP header fields that enable a TLS terminating reverse proxy to convey information to a backend server about the validated Token Binding Message received from a client, which enables that backend server to bind, or verify the binding of, cookies and other security tokens to the client's Token Binding key. This facilitates the reverse proxy and backend server functioning together as though they are a single logical server side deployment of HTTPS Token Binding. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-09 https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-ttrp-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 5 11:48:43 2019 Return-Path: X-Original-To: unbearable@ietfa.amsl.com Delivered-To: unbearable@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1B1C120105 for ; Fri, 5 Jul 2019 11:48:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jl7SQetXRsV7 for ; Fri, 5 Jul 2019 11:48:39 -0700 (PDT) Received: from mail-io1-xd34.google.com (mail-io1-xd34.google.com [IPv6:2607:f8b0:4864:20::d34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 776241200E6 for ; Fri, 5 Jul 2019 11:48:39 -0700 (PDT) Received: by mail-io1-xd34.google.com with SMTP id u19so21036282ior.9 for ; Fri, 05 Jul 2019 11:48:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FkO5U+D/cv6EvmYzb48lWAAZkzXL8j3ykmVCf0oOF/E=; b=WFJTk02RPKO8hv1hm+Zhx+AF7+48be6Ib+Ql3jun5/N/XdFqw7CWhF+qMcefdjBc88 qbKOxbVi3PvK36dEpBf0NNDDV/riyYoMccwagzpDVAwy5dwoV6TmbM7xs3u+8ggFl0Sx boQ1cu/eLvxW75N2Flr7a1UJPdEKVLeBIJ/sw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FkO5U+D/cv6EvmYzb48lWAAZkzXL8j3ykmVCf0oOF/E=; b=V6v9bExVePIfhlmmbly6mmFZf2AE63ds2jMvquLp9AmxcxSuc0NUomnyfgyQ1gOtD4 l6AqpiFGgwwXACOHsj2jDhLL14gPuUCxqgFLOm2cNwlV+Bb7OiRuIvE8ZiUhC5SsdXzU QkSiLB6mVpOMMba91YkAVKFbMfUD1rbQ1c8b3vRx84q6uMyNIoJEERA1PQCKeZhPaeFe DcxKxuAKfKiuLdheMtmix07e3Qlc6z3vT3n0GCsM58qXvS37myJ4VAtCFfL51bWTnDSf mee1ZJwSTkECfWqbMspgRImPOg4vE3/2lMp7iw7qvvSx/U1JC3iACvaUQesIoAeTtgVd mBYQ== X-Gm-Message-State: APjAAAX1S38HdJ14ZO3P9evHrEAXUxAndx+9Gnk5MTpXbEKqZDKiReev mPieszQFj80fM8zdBhSd6lvR1ZJVLDg1iCDmVz028wAXs0N14OzRD+EnM9PHtlb/rXaHzJvYZ7J HUlYVMw4AhUA6VxrmeSjy/yNFwQ== X-Google-Smtp-Source: APXvYqw6J2GmqEGV+RQAzzYBKGhkW5skAByhT5kP9susLIsikAeu169kZD/l7pXgCgGsKEZ2VAErgVkQrS1b68/EWBU= X-Received: by 2002:a6b:fd10:: with SMTP id c16mr5356843ioi.217.1562352518459; Fri, 05 Jul 2019 11:48:38 -0700 (PDT) MIME-Version: 1.0 References: <156235235868.22012.10354315259596940283@ietfa.amsl.com> In-Reply-To: <156235235868.22012.10354315259596940283@ietfa.amsl.com> From: Brian Campbell Date: Fri, 5 Jul 2019 14:48:12 -0400 Message-ID: To: IETF Tokbind WG Cc: i-d-announce@ietf.org Content-Type: multipart/alternative; boundary="000000000000e09165058cf38a95" Archived-At: Subject: Re: [Unbearable] I-D Action: draft-ietf-tokbind-ttrp-09.txt X-BeenThere: unbearable@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 18:48:42 -0000 --000000000000e09165058cf38a95 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Just published -09 with no changes from -08 or -07 so as to have a non expired draft up while awaiting the shepherd writeup. On Fri, Jul 5, 2019 at 2:46 PM wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Token Binding WG of the IETF. > > Title : HTTPS Token Binding with TLS Terminating Revers= e > Proxies > Author : Brian Campbell > Filename : draft-ietf-tokbind-ttrp-09.txt > Pages : 14 > Date : 2019-07-05 > > Abstract: > This document defines HTTP header fields that enable a TLS > terminating reverse proxy to convey information to a backend server > about the validated Token Binding Message received from a client, > which enables that backend server to bind, or verify the binding of, > cookies and other security tokens to the client's Token Binding key. > This facilitates the reverse proxy and backend server functioning > together as though they are a single logical server side deployment > of HTTPS Token Binding. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tokbind-ttrp/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-09 > https://datatracker.ietf.org/doc/html/draft-ietf-tokbind-ttrp-09 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-tokbind-ttrp-09 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > Unbearable mailing list > Unbearable@ietf.org > https://www.ietf.org/mailman/listinfo/unbearable > --=20 _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged= =20 material for the sole use of the intended recipient(s). Any review, use,=20 distribution or disclosure by others is strictly prohibited.=C2=A0 If you h= ave=20 received this communication in error, please notify the sender immediately= =20 by e-mail and delete the message and any file attachments from your=20 computer. Thank you._ --000000000000e09165058cf38a95 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Just published -09 with no changes from -08 or -07 so as t= o have a non expired draft up while awaiting the shepherd writeup.
On Fri, J= ul 5, 2019 at 2:46 PM <inter= net-drafts@ietf.org> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Token Binding WG of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= HTTPS Token Binding with TLS Terminating Reverse Proxies
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Author=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Bria= n Campbell
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-tokbind-ttrp-09.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 14
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2019-07-05

Abstract:
=C2=A0 =C2=A0This document defines HTTP header fields that enable a TLS
=C2=A0 =C2=A0terminating reverse proxy to convey information to a backend s= erver
=C2=A0 =C2=A0about the validated Token Binding Message received from a clie= nt,
=C2=A0 =C2=A0which enables that backend server to bind, or verify the bindi= ng of,
=C2=A0 =C2=A0cookies and other security tokens to the client's Token Bi= nding key.
=C2=A0 =C2=A0This facilitates the reverse proxy and backend server function= ing
=C2=A0 =C2=A0together as though they are a single logical server side deplo= yment
=C2=A0 =C2=A0of HTTPS Token Binding.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ie= tf-tokbind-ttrp/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-tokbind= -ttrp-09
https://datatracker.ietf.org/doc/htm= l/draft-ietf-tokbind-ttrp-09

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=3Ddr= aft-ietf-tokbind-ttrp-09


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
Unbearable mailing list
Unbearable@ietf.or= g
https://www.ietf.org/mailman/listinfo/unbearable=

<= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --000000000000e09165058cf38a95--