Subject: [saag] httpauth BOF summary

From: Yoav Nir <[email-masked]>
Date: Thu, 8 Nov 2012 16:59:08 +0200

The HTTP(-)Auth BOF was held on Wednesday afternoon.

5 very different methods were presented. There was considerable resistance to the idea for several reasons:

 *   The problem statement is not well-defined
 *   We don't have the website builders who are the target audience for these protocols, so we don't have meaningful requirements
 *   The different solutions are obviously solving different problems.
 *   The IETF has been unsuccessful in designing user interaction

While there is considerable willingness to do work in this space, we need better-defined goals, and we also probably need to recruit some people who either manage the user experience in large websites, or write the frameworks used by the smaller websites.

Yoav