[dix] Re: [Ietf-http-auth] New draft on anti-phishing requirements

Sam Hartman hartmans-ietf at mit.edu
Mon May 22 10:53:00 PDT 2006


>>>>> "Eric" == Eric Rescorla <ekr at networkresonance.com> writes:

    Eric> Sam Hartman <hartmans-ietf at mit.edu> writes:
    >>>>>>> "Eric" == Eric Rescorla <ekr at networkresonance.com> writes:
    Eric> Right. I indicated in my message, I'm not sure this draft
    Eric> dissects the reqts correctly.
    >>  Understood. However all your criticisms to date have been
    >> rather minor.

    Eric> Hmm... I didn't mean to give that impression. I certainly
    Eric> don't think the "it's all about UI" point is minor.

I am not sure whether it is minor.  I think we are in broad agreement
that the interesting work in this space must involve the UI and is not
principally a protocol problem.

--Sam


More information about the Ietf-http-auth mailing list