Thanks Ben!
Noted: client-auth not always mandatory for web proxies.
Cheers,
Kent
> On Jul 23, 2020, at 2:06 PM, Ben Schwartz <bemasc@google.com> wrote:
>
> --00000000000070ddee05ab1fb7ab
> Content-Type: text/plain; charset="UTF-8"
> Content-Transfer-Encoding: quoted-printable
>
> No, it's entirely common to operate a Web Proxy that does not require or
> perform any HTTP or TLS client authentication. Typically, this is because
> authorization is implicit from the network topology, and the proxy is only
> reachable by authorized users.
>
> On Thu, Jul 23, 2020 at 11:24 AM Kent Watsen <kent+ietf@watsen.net <mailto:kent+ietf@watsen.net>> wrote:
>
>>
>> TL;DR; Is client-auth to a web proxy mandatory?
>>
>> Thanks,
>> Kent
>>
>>
>> On Jul 21, 2020, at 12:40 PM, Kent Watsen <kent+ietf@watsen.net> wrote:
>>
>> Thank you all for your earlier comments regarding
>> draft-ietf-netconf-http-client-server
>> <https://tools.ietf.org/html/draft-ietf-netconf-http-client-server <https://tools.ietf.org/html/draft-ietf-netconf-http-client-server>>.
>>
>> The draft is now almost ready for WGLC (which will be CC-ed here as well)=
> ,
>> but there remains one item for which your guidance is needed (see bottom)=