Skip to content

Commit

Permalink
Merge pull request #2885 from httpwg/concealed_ad_review
Browse files Browse the repository at this point in the history
Concealed auth: responsible AD review
  • Loading branch information
DavidSchinazi committed Aug 28, 2024
2 parents 1864289 + 7957c3a commit 409f60a
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions draft-ietf-httpbis-unprompted-auth.md
Original file line number Diff line number Diff line change
Expand Up @@ -152,14 +152,18 @@ exchanged using authentication parameters (see {{auth-params}}).

When a client wishes to uses the Concealed HTTP authentication scheme with a
request, it SHALL compute the authentication proof using a TLS keying material
exporter {{!KEY-EXPORT=RFC5705}} with the following parameters:
exporter with the following parameters:

* the label is set to "EXPORTER-HTTP-Concealed-Authentication"

* the context is set to the structure described in {{context}}

* the exporter output length is set to 48 bytes (see {{output}})

Note that TLS 1.3 keying material exporters are defined in {{Section 7.5 of
TLS}}, while TLS 1.2 keying material exporters are defined in
{{!KEY-EXPORT=RFC5705}}.

## Key Exporter Context {#context}

The TLS key exporter context is described in {{fig-context}}:
Expand Down Expand Up @@ -264,7 +268,7 @@ right values. This is described in {{fig-output}}:
~~~
{: #fig-output title="Key Exporter Output Format"}

The key exporter context contains the following fields:
The key exporter output contains the following fields:

Signature Input:

Expand Down

0 comments on commit 409f60a

Please sign in to comment.