Re: Considering the pressure to turn HTTPS into a three-party protocol

On 2015-02-15 23:38, Mark Nottingham wrote:
> Over the last few years*, we've seen a considerable amount of pressure to compromise encryption from some parts of industry. For example, in HTTPbis we had several discussions of the role of a proxy in HTTP, including the now-infamous "trusted proxy" proposal <http://tools.ietf.org/html/draft-loreto-httpbis-trusted-proxy20-01> which has been discarded.
> ...

<http://tools.ietf.org/html/draft-loreto-httpbis-trusted-proxy20-01#section-1.1>:

>    The main aim for this document is to analyse and define the role of
>    an Explicit and Trusted proxy for HTTP URI resources transported over
>    HTTP2 with TLS.

So, no, AFAIU that was not a proposal that would have affected https at all.

Best regards, Julian

Received on Monday, 16 February 2015 12:46:55 UTC