Skip to main content

Explicitly Authenticated Proxy in HTTP/2.0

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Salvatore Loreto , John Preuß Mattsson , Robert Skog , Hans Spaak, Gus Bourg , Dan Druta , Mohammad Hafeez
Last updated 2015-01-05 (Latest revision 2014-07-04)
RFC stream (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


This document proposes the definition of an Explicitly Authenticated Proxy as intermediary of normally unprotected "http" URI scheme requests and responses of HTTP2 traffic. An Explicitly Authenticated Proxy is a message forwarding agent that is selected, with explicit user's consent, and configured by the user agent to receive exclusively "http" URI scheme requests and attempt to satisfy those requests on behalf of the user agent. A client is connected to an Explicitly Authenticated Proxy through an authenticated TLS secured connection. This document describes a method for a user agent to automatically discover and authenticate, and for an user to provide consent for an Explicitly Authenticated Proxy. This enables proxied communication to be encrypted and authenticated, explicitly acknowledged by the user agent and visible to the server end point.


Salvatore Loreto
John Preuß Mattsson
Robert Skog
Hans Spaak
Gus Bourg
Dan Druta
Mohammad Hafeez

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)