Thank you Chris, Chris and Ryan. This is to announce the beginning of a WGLC for this draft. Because a lot of the group members are busy preparing for London and getting those drafts out by the deadline, we will extend the time allocated for this WGLC to three weeks, ending on February 28th.
Please take this almost-final opportunity to review the draft and if you spot a problem, send comments to the list. Thanks Tobias and Yoav On Feb 6, 2014, at 9:01 PM, [email protected] wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Web Security Working Group of the IETF. > > Title : Public Key Pinning Extension for HTTP > Authors : Chris Evans > Chris Palmer > Ryan Sleevi > Filename : draft-ietf-websec-key-pinning-10.txt > Pages : 23 > Date : 2014-02-06 > > Abstract: > This memo describes an extension to the HTTP protocol allowing web > host operators to instruct user agents (UAs) to remember ("pin") the > hosts' cryptographic identities for a given period of time. During > that time, UAs will require that the host present a certificate chain > including at least one Subject Public Key Info structure whose > fingerprint matches one of the pinned fingerprints for that host. By > effectively reducing the number of authorities who can authenticate > the domain during the lifetime of the pin, pinning may reduce the > incidence of man-in-the-middle attacks due to compromised > Certification Authorities. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-websec-key-pinning/ > > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-ietf-websec-key-pinning-10 > > A diff from the previous version is available at: > http://www.ietf.org/rfcdiff?url2=draft-ietf-websec-key-pinning-10 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > websec mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/websec > > Email secured by Check Point _______________________________________________ websec mailing list [email protected] https://www.ietf.org/mailman/listinfo/websec
