Re: I-D Action: draft-ietf-httpbis-connect-tcp-07.txt

Can you please clarify section 3.3.2 for me?

    "A templated TCP proxy does not use the "407 (Proxy Authentication
    Required)" response code and related header fields ([RFC9110],
    Section 11.7) because they do not traverse HTTP gateways (see
    Section 7)."

Is there a reason for this besides some orgs use gateways in front of 
the proxies?  Most large, load balanced security proxy environments load 
balance at layer 4 and heavily rely on 407 for authentication.  It's the 
fastest way to authenticate them on a per-connection basis (as opposed 
to per source IP).  If you want them to use this (or they're forced to), 
407's will be needed.