Subject: [Unbearable] Updated Internet-Drafts

From: Andrei Popov <[email-masked]>
Date: Fri, 26 Aug 2016 23:49:10 +0000

The updated TBNEGO-04<https://tools.ietf.org/html/draft-ietf-tokbind-negotiation-04>, TBPROTO-09<https://tools.ietf.org/html/draft-ietf-tokbind-protocol-09>, and HTTPSTB-06<https://tools.ietf.org/html/draft-ietf-tokbind-https-06> include the accumulated PRs and address a variety of GitHub issues.

Notable changes:

1.       TBNEGO-04 uses the TLS extension code point 24 (temporarily assigned by IANA).

2.       TBPROTO-09 adds TokenBindingID.key_length field, so that TB IDs with unknown key parameters can be skipped.

3.       TBPROTO-09 signs new parameters (label, protocol version, TB type and TB key parameters), in addition to the EKM.

4.       TBPROTO-09 clarifies the parameters of the PKCS and PSS padding algorithms.

5.       HTTPSTB-06 further clarifies the details of base64url encoding.

6.       HTTPSTB-06 explicitly states that the Include-Referred-Token-Binding-ID header is honored even when eTLD+1 of the RP is the same as that of the IDP.

7.       HTTPSTB-06 includes the API language we discussed in Berlin.

Please review the updated documents<https://datatracker.ietf.org/wg/tokbind/documents/>,

Thanks,

Andrei