%% You should probably cite draft-loreto-httpbis-explicitly-auth-proxy-01 instead of this revision. @techreport{loreto-httpbis-explicitly-auth-proxy-00, number = {draft-loreto-httpbis-explicitly-auth-proxy-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-loreto-httpbis-explicitly-auth-proxy/00/}, author = {Salvatore Loreto and John Preuß Mattsson and Robert Skog and Hans Spaak and Gus Bourg and Dan Druta and Mohammad Hafeez}, title = {{Explicitly Authenticated Proxy in HTTP/2.0}}, pagetotal = 16, year = 2014, month = may, day = 5, abstract = {This document proposes the definition of an Explicitly Authenticated Proxy as intermediary of normally unprotected "http://" URI scheme requests and responses of HTTP2 traffic. An Explicitly Authenticated Proxy is a message forwarding agent that is selected, with explicit user's consent, and configured by the user agent to receive exclusively "http" URI scheme requests and attempt to satisfy those requests on behalf of the user agent. A client is connected to an Explicitly Authenticated Proxy through an authenticated TLS secured connection. This document describes a method for a user agent to automatically discover and authenticate, and for an user to provide consent for an Explicitly Authenticated Proxy. This enables proxied communication to be encrypted and authenticated, explicitly acknowledged by the user agent and visible to the server end point.}, }