attachment
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">FYI, a new draft in the IETF HTTPbis WG about the Upgrade: header which we use for opportunistic encryption of IPP requests. So far they are happy with the RFC 2817 security considerations for TLS upgrade so no changes we need to be aware of...<div><br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">internet-drafts@ietf.org<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;"><b>I-D Action: draft-ietf-httpbis-optimistic-upgrade-00.txt</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">July 2, 2024 at 9:13:03 AM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;"><i-d-announce@ietf.org><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>Cc: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">ietf-http-wg@w3.org<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>Resent-From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">ietf-http-wg@w3.org<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);"><b>Reply-To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">ietf-http-wg@w3.org<br></span></div><br><div><div>Internet-Draft draft-ietf-httpbis-optimistic-upgrade-00.txt is now available.<br>It is a work item of the HTTP (HTTPBIS) WG of the IETF.<br><br> Title: Security Considerations for Optimistic Use of HTTP Upgrade<br> Author: Benjamin M. Schwartz<br> Name: draft-ietf-httpbis-optimistic-upgrade-00.txt<br> Pages: 9<br> Dates: 2024-07-02<br><br>Abstract:<br><br> The HTTP/1.1 Upgrade mechanism allows the client to request a change<br> to a new protocol. This document discusses the security<br> considerations that apply to data sent by the client before this<br> request is confirmed, and updates RFC 9298 to avoid related security<br> issues.<br><br>The IETF datatracker status page for this Internet-Draft is:<br>https://datatracker.ietf.org/doc/draft-ietf-httpbis-optimistic-upgrade/<br><br>There is also an HTML version available at:<br>https://www.ietf.org/archive/id/draft-ietf-httpbis-optimistic-upgrade-00.html<br><br>Internet-Drafts are also available by rsync at:<br>rsync.ietf.org::internet-drafts<br><br><br><br></div></div></blockquote></div><br><div>
<div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">________________________<br>Michael Sweet<br></div>
</div>
<br></div></body></html>