< draft-ietf-tokbind-ttrp-08.txt   draft-ietf-tokbind-ttrp-09.txt >
Internet Engineering Task Force B. Campbell Internet Engineering Task Force B. Campbell
Internet-Draft Ping Identity Internet-Draft Ping Identity
Intended status: Standards Track April 15, 2019 Intended status: Standards Track July 5, 2019
Expires: October 17, 2019 Expires: January 6, 2020
HTTPS Token Binding with TLS Terminating Reverse Proxies HTTPS Token Binding with TLS Terminating Reverse Proxies
draft-ietf-tokbind-ttrp-08 draft-ietf-tokbind-ttrp-09
Abstract Abstract
This document defines HTTP header fields that enable a TLS This document defines HTTP header fields that enable a TLS
terminating reverse proxy to convey information to a backend server terminating reverse proxy to convey information to a backend server
about the validated Token Binding Message received from a client, about the validated Token Binding Message received from a client,
which enables that backend server to bind, or verify the binding of, which enables that backend server to bind, or verify the binding of,
cookies and other security tokens to the client's Token Binding key. cookies and other security tokens to the client's Token Binding key.
This facilitates the reverse proxy and backend server functioning This facilitates the reverse proxy and backend server functioning
together as though they are a single logical server side deployment together as though they are a single logical server side deployment
skipping to change at page 1, line 37 skipping to change at page 1, line 37
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet- working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/. Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on October 17, 2019. This Internet-Draft will expire on January 6, 2020.
Copyright Notice Copyright Notice
Copyright (c) 2019 IETF Trust and the persons identified as the Copyright (c) 2019 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of (https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
skipping to change at page 12, line 21 skipping to change at page 12, line 21
The author would like to thank the following people for their various The author would like to thank the following people for their various
contributions to the specification: Vinod Anupam, Dirk Balfanz, John contributions to the specification: Vinod Anupam, Dirk Balfanz, John
Bradley, William Denniss, Nick Harper, Jeff Hodges, Subodh Iyengar, Bradley, William Denniss, Nick Harper, Jeff Hodges, Subodh Iyengar,
Leif Johansson, Michael B. Jones, Yoav Nir, James Manger, Andrei Leif Johansson, Michael B. Jones, Yoav Nir, James Manger, Andrei
Popov, Eric Rescorla, Piotr Sikora, Martin Thomson, and Hans Zandbelt Popov, Eric Rescorla, Piotr Sikora, Martin Thomson, and Hans Zandbelt
Appendix B. Document History Appendix B. Document History
[[ to be removed by the RFC Editor before publication as an RFC ]] [[ to be removed by the RFC Editor before publication as an RFC ]]
draft-ietf-tokbind-ttrp-09
o Publishing with no changes from -07/-08 to have a non expired
version up while still awaiting the shepherd writeup.
draft-ietf-tokbind-ttrp-08 draft-ietf-tokbind-ttrp-08
o Avoid impending expiration (while awaiting the shepherd writeup) o Avoid impending expiration (while awaiting the shepherd writeup)
by publishing with no changes from -07. by publishing with no changes from -07.
draft-ietf-tokbind-ttrp-07 draft-ietf-tokbind-ttrp-07
o Update TLS 1.3 reference to RFC 8446. o Update TLS 1.3 reference to RFC 8446.
o Update the references to the core token binding specs, which are o Update the references to the core token binding specs, which are
skipping to change at page 12, line 48 skipping to change at page 13, line 5
draft-ietf-tokbind-ttrp-05 draft-ietf-tokbind-ttrp-05
o Editorial updates. o Editorial updates.
o Change one character in the last example to help emphasize the o Change one character in the last example to help emphasize the
case-insensitivity of hex. case-insensitivity of hex.
o Add a TLS Versions and Best Practices section with BCP195 and also o Add a TLS Versions and Best Practices section with BCP195 and also
mention of ietf-tokbind-tls13 and ietf-tls-tls13. mention of ietf-tokbind-tls13 and ietf-tls-tls13.
draft-ietf-tokbind-ttrp-04
o Add an example with Sec-Other-Token-Binding-ID. o Add an example with Sec-Other-Token-Binding-ID.
o Use the HEXDIG core ABNF rule for EncodedTokenBindingType and o Use the HEXDIG core ABNF rule for EncodedTokenBindingType and
mention case-insensitive in the text. mention case-insensitive in the text.
o Minor editorial fixes. o Minor editorial fixes.
o Add to the Acknowledgements and remove the 'and others' bit. o Add to the Acknowledgements and remove the 'and others' bit.
draft-ietf-tokbind-ttrp-03 draft-ietf-tokbind-ttrp-03
skipping to change at page 13, line 50 skipping to change at page 14, line 5
Considerations per Considerations per
https://mailarchive.ietf.org/arch/msg/unbearable/ https://mailarchive.ietf.org/arch/msg/unbearable/
O0IpppyyEqMrQjEkyEi8p8CeBGA O0IpppyyEqMrQjEkyEi8p8CeBGA
o Editorial fixes. o Editorial fixes.
draft-ietf-tokbind-ttrp-00 draft-ietf-tokbind-ttrp-00
o Initial WG draft from draft-campbell-tokbind-ttrp. o Initial WG draft from draft-campbell-tokbind-ttrp.
draft-campbell-tokbind-ttrp-01
o Minor editorial fixes. o Minor editorial fixes.
o Add to the Acknowledgements. o Add to the Acknowledgements.
draft-campbell-tokbind-ttrp-00 draft-campbell-tokbind-ttrp-00
o Initial draft based on 'consensus to work on the problem' from the o Initial draft based on 'consensus to work on the problem' from the
Seoul meeting [1][2] and reflecting the consensus approach from Seoul meeting [1][2] and reflecting the consensus approach from
discussions at the Chicago meeting [3]. discussions at the Chicago meeting [3].
 End of changes. 6 change blocks. 
8 lines changed or deleted 9 lines changed or added

This html diff was produced by rfcdiff 1.47. The latest version is available from http://tools.ietf.org/tools/rfcdiff/