Re: RFC2616 vs RFC2617, was: Straw-man charter for http-bis

Keith Moore wrote:
> no.  deprecate 2617.  deprecate the framework that is in 2616.  HTTP
> security needs a clean slate approach.

I personally have no problem with this. In the wild, most authentication 
isn't using RFC2617 anyway.

However, my understanding is that the IESG doesn't allow RFC2616bis not 
to discuss authentication in *some* manner.

BTW: does the framework really require fixing?

Best regards, Julian