Authentication of users to servers over HTTP has always been a weak point in web services. The current HTTP authentication mechanisms, basic and digest, pass the credentials in the Working Group clear or employ weak algorithms and are considered to be httpauth (Hypertext Documents: insecure today. Authentication through Cloud Transfer Protocol Working Group Security IETF web forms is much more commonly used, but also SDN Authentication) pass the credentials in the clear. There is a need for improved mechanisms that can replace or augment HTTP authentication without the need to rely on transport layer security. Only HTTP authentication is in scope for this WG; or "web" authentication is out of scope. The purpose of the Common Authentication Technology Next Generation kitten (Common (Kitten) working group (WG) is to develop Working Group Authentication extensions/improvements to the Documents: Cloud Working Group Security IETF Technology Next and to the Kerberos authentication SDN Generation) system, shepherd specific security mechanisms, and provide guidance for any new SASL-related submissions. The transport and services area - usually just called "transport area" or "TSV area" - covers a of technical topics related to Relevant Working data transport in the Internet. Groups: alto The Transport Area works on mechanisms related to (Application- data transport to Layer support Internet applications and services Traffic that exchange potentially large volumes of Cloud Transport Area cdni Area Transport IETF traffic at potentially high bandwidths. A key SDN (Content Delivery focus are mechanisms to detect and react to Networks congestion in the Internet, such as the Interconnection), congestion control algorithms in Internet storm (STORage transport control protocols such as TCP, Maintenance) SCTP, and DCCP, as well as congestion management schemes such as PCN and CONEX. [IETF Areas]
Cloud SDN Working Group Security IETF httpauth (Hypertext Transfer Protocol Authentication) Authentication of users to servers over HTTP has always been a weak point in web services. The current HTTP authentication mechanisms, basic and digest, pass the credentials in the clear or employ weak algorithms and are considered to be insecure today. Authentication through web forms is much more commonly used, but also pass the credentials in the clear. There is a need for improved mechanisms that can replace or augment HTTP authentication without the need to rely on transport layer security. Only HTTP authentication is in scope for this WG; or "web" authentication is out of scope. Working Group Documents: Cloud SDN Working Group Security IETF kitten (Common Authentication Technology Next Generation) The purpose of the Common Authentication Technology Next Generation (Kitten) working group (WG) is to develop extensions/improvements to the and to the Kerberos authentication system, shepherd specific security mechanisms, and provide guidance for any new SASL-related submissions. Working Group Documents: Cloud SDN Area Transport IETF Transport Area The transport and services area - usually just called "transport area" or "TSV area" - covers a of technical topics related to data transport in the Internet. The Transport Area works on mechanisms related to data transport to support Internet applications and services that exchange potentially large volumes of traffic at potentially high bandwidths. A key focus are mechanisms to detect and react to congestion in the Internet, such as the congestion control algorithms in Internet transport control protocols such as TCP, SCTP, and DCCP, as well as congestion management schemes such as PCN and CONEX. [IETF Areas] Relevant Working Groups: alto Traffic cdni (Content Delivery Networks Interconnection), storm (STORage Maintenance) (Application- Layer