rfc8827v4prep.xml   rfc8827.xml 
<?xml version='1.0' encoding='utf-8'?> <?xml version='1.0' encoding='utf-8'?>
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" version="3" category="std" consensus="true" docName="draft-ietf-rtcweb-security-arch-20" indexInclude="true" ipr="pre5378Trust200902" number="8827" prepTime="2021-01-15T13:10:09" scripts="Common,Latin" sortRefs="true" submissionType="IETF" symRefs="true" tocDepth="4" tocInclude="true" xml:lang="en"> <rfc xmlns:xi="http://www.w3.org/2001/XInclude" version="3" category="std" consensus="true" docName="draft-ietf-rtcweb-security-arch-20" indexInclude="true" ipr="pre5378Trust200902" number="8827" prepTime="2021-01-16T18:38:47" scripts="Common,Latin" sortRefs="true" submissionType="IETF" symRefs="true" tocDepth="4" tocInclude="true" xml:lang="en">
<link href="https://datatracker.ietf.org/doc/draft-ietf-rtcweb-security-arch-20" rel="prev"/> <link href="https://datatracker.ietf.org/doc/draft-ietf-rtcweb-security-arch-20" rel="prev"/>
<link href="https://dx.doi.org/10.17487/rfc8827" rel="alternate"/> <link href="https://dx.doi.org/10.17487/rfc8827" rel="alternate"/>
<link href="urn:issn:2070-1721" rel="alternate"/> <link href="urn:issn:2070-1721" rel="alternate"/>
<front> <front>
<title abbrev="WebRTC Sec. Arch.">WebRTC Security Architecture</title> <title abbrev="WebRTC Sec. Arch.">WebRTC Security Architecture</title>
<seriesInfo name="RFC" value="8827" stream="IETF"/> <seriesInfo name="RFC" value="8827" stream="IETF"/>
<author fullname="Eric Rescorla" initials="E." surname="Rescorla"> <author fullname="Eric Rescorla" initials="E." surname="Rescorla">
<organization showOnFrontPage="true">Mozilla</organization> <organization showOnFrontPage="true">Mozilla</organization>
<address> <address>
<email>ekr@rtfm.com</email> <email>ekr@rtfm.com</email>
skipping to change at line 1624 skipping to change at line 1624
the protocol field, lest an attacker be able to direct the protocol field, lest an attacker be able to direct
requests outside of the controlled "/.well-known/" prefix. requests outside of the controlled "/.well-known/" prefix.
Query and fragment values <bcp14>MAY</bcp14> be used by including '?' or Query and fragment values <bcp14>MAY</bcp14> be used by including '?' or
'#' characters. '#' characters.
</li> </li>
</ol> </ol>
<t indent="0" pn="section-7.5-5"> <t indent="0" pn="section-7.5-5">
For example, for the IdP "identity.example.com" and the protocol For example, for the IdP "identity.example.com" and the protocol
"example", the URL would be: "example", the URL would be:
</t> </t>
<artwork align="center" pn="section-7.5-6">https://identity.example.com/.well-known/idp-proxy/example</artwork> <artwork align="left" pn="section-7.5-6">https://identity.example.com/.well-known/idp-proxy/example</artwork>
<t indent="0" pn="section-7.5-7"> <t indent="0" pn="section-7.5-7">
The IdP <bcp14>MAY</bcp14> redirect requests to this URL, but they <bcp14>MUST</bcp14> retain The IdP <bcp14>MAY</bcp14> redirect requests to this URL, but they <bcp14>MUST</bcp14> retain
the "https:" scheme. This changes the effective origin of the the "https:" scheme. This changes the effective origin of the
IdP, but not the domain of the identities that the IdP is IdP, but not the domain of the identities that the IdP is
permitted to assert and validate. I.e., the IdP is still permitted to assert and validate. I.e., the IdP is still
regarded as authoritative for the original domain. regarded as authoritative for the original domain.
</t> </t>
<section numbered="true" toc="include" removeInRFC="false" pn="section-7.5.1"> <section numbered="true" toc="include" removeInRFC="false" pn="section-7.5.1">
<name slugifiedName="name-authenticating-party">Authenticating Party</name> <name slugifiedName="name-authenticating-party">Authenticating Party</name>
<t indent="0" pn="section-7.5.1-1"> <t indent="0" pn="section-7.5.1-1">
skipping to change at line 2731 skipping to change at line 2731
<organization showOnFrontPage="true"/> <organization showOnFrontPage="true"/>
</author> </author>
<author initials="H." surname="Boström" fullname="Henrik Boström"> <author initials="H." surname="Boström" fullname="Henrik Boström">
<organization showOnFrontPage="true"/> <organization showOnFrontPage="true"/>
</author> </author>
<author initials="J-I." surname="Bruaroey" fullname="Jan-Ivar Bruaroey"> <author initials="J-I." surname="Bruaroey" fullname="Jan-Ivar Bruaroey">
<organization showOnFrontPage="true"/> <organization showOnFrontPage="true"/>
</author> </author>
<date/> <date/>
</front> </front>
<refcontent>W3C Candidate Recommendation</refcontent> <refcontent>W3C Proposed Recommendation</refcontent>
</reference> </reference>
</references> </references>
<references pn="section-11.2"> <references pn="section-11.2">
<name slugifiedName="name-informative-references">Informative References</name> <name slugifiedName="name-informative-references">Informative References</name>
<reference anchor="fetch" target="https://fetch.spec.whatwg.org/" quoteTitle="true" derivedAnchor="fetch"> <reference anchor="fetch" target="https://fetch.spec.whatwg.org/" quoteTitle="true" derivedAnchor="fetch">
<front> <front>
<title>Fetch</title> <title>Fetch</title>
<author initials="A." surname="van Kesteren"> <author initials="A." surname="van Kesteren">
<organization showOnFrontPage="true"/> <organization showOnFrontPage="true"/>
</author> </author>
 End of changes. 3 change blocks. 
3 lines changed or deleted 3 lines changed or added

This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/