The IESG has approved the following document: - 'Hypertext Transfer Protocol (HTTP/1.1): Authentication' (draft-ietf-httpbis-p7-auth-26.txt) as Proposed Standard This document is the product of the Hypertext Transfer Protocol Bis Working Group. The IESG contact persons are Barry Leiba and Pete Resnick. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-httpbis-p7-auth/ Technical Summary The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information systems. This document defines the HTTP Authentication framework. Note that this document is part of a set, which should be reviewed together: * draft-ietf-httpbis-p1-messaging * draft-ietf-httpbis-p2-semantics * draft-ietf-httpbis-p4-conditional * draft-ietf-httpbis-p5-range * draft-ietf-httpbis-p6-cache * draft-ietf-httpbis-p7-auth * draft-ietf-httpbis-method-registrations * draft-ietf-httpbis-authscheme-registrations Review and Consensus As chartered, this work was very constrained; the WG sought only to clarify RFC2616, making significant technical changes only where there were considerably interoperability or security issues. While the bulk of the work was done by a core team of editors, it has been reviewed by a substantial number of implementers, and design issues enjoyed input from many of them. It has been through two Working Group Last Calls, with multiple reviewers each time. We have also discussed this work with external groups (e.g., the W3C TAG). Personnel Document Shepherd: Mark Nottingham Responsible Area Director: Barry Leiba