HTTP Transport Authentication

23 views
Skip to first unread message

David Oliver

unread,
Apr 22, 2022, 9:03:44 AM4/22/22
to traff...@googlegroups.com
At IETF 113th Hackathon in March, @eighthave of the Guardian Project team completed implementation of the Internet Draft known as "HTTP Transport Authentication" using Conscrypt, Google's Java TLS stack.  HTTP Transport Authentication is designed to authenticate the HTTP CONNECT protocol flow in a manner that does not reveal any information to an attacker during failure cases. Therefore, applications using HTTP Transport Authentication are resistant to active probing by network adversaries.  Attached is a brief presentation, with links to source and documentation.

David Oliver

HTTP TA Status 21Mar22.pdf
Reply all
Reply to author
Forward
0 new messages