>>>>> "Leif" == Leif Johansson <[email protected]> writes:

    Leif> Not speaking as a chair...

    >> I'm sort of imagining an attribute that the proxy includes
    >> indicating it has performed some check and the policy applied to
    >> perform that check.  I'm not entirely sure what level of
    >> granularity is required.  I'm wondering if there are participants
    >> who would be interested in working through details of this?

    Leif> I'm thinking about the channel-binding-cookie we built into my
    Leif> old negotiate-ng draft to say that an http proxy knew about
    Leif> the CB token.  Perhaps a similar model might work... At least
    Leif> your description of the problem sounds similar to the problems
    Leif> we were trying to solve back then.

I think so.
There's not actually any need to do anything cryptographic.
But yes, a cookie jar of proxy processing steps is what we're looking
> for here  I think.
_______________________________________________
abfab mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/abfab

Reply via email to