Re: [apps-discuss] Reserved URI query parameter in draft-ietf-oauth-v2-bearer

Stephen Farrell <stephen.farrell@cs.tcd.ie> Fri, 13 April 2012 21:20 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2530921F86C7 for <apps-discuss@ietfa.amsl.com>; Fri, 13 Apr 2012 14:20:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.521
X-Spam-Level:
X-Spam-Status: No, score=-102.521 tagged_above=-999 required=5 tests=[AWL=0.078, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p9zFasSILKYI for <apps-discuss@ietfa.amsl.com>; Fri, 13 Apr 2012 14:20:52 -0700 (PDT)
Received: from scss.tcd.ie (hermes.scss.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id 3F80C21F86C5 for <apps-discuss@ietf.org>; Fri, 13 Apr 2012 14:20:52 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 58F7017147A; Fri, 13 Apr 2012 22:20:45 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1334352045; bh=vwoZZbaBTjt0vB ou6pNOLCJ8mRLXIXCRPCyuovTxWpE=; b=6J+NX/lUGoIDVkYNijpK1Gd5KCn3SG tNKU1xPU7qCUsbFNvuGDjnmU/8g+5o7LnXhRs/3WS2i/Y4dGihTMQir3zeBmnToh XZeKLh7LIYqMEdSUyJcGgQkCWqAnwlofpHcyX6gUEDQtNe8VRikqmXxUOTpfSzRf RFoObc8SKmhkgASCIzSYBUEgWmQ9NOAyvaSfzx8RXJJTOv1Sw63E118zUa0Z9EAl mKXdryA+CcjgC2B3gjUiIIRcsXmngZbYmyzst/hTU5ie1NnrIPd1YnR1Vp1mrKjK zkliE9Z5ZgPuP3R27AVRzh8G9uBbPv/aQBmAoZOirpET7cXMYf/lsmfg==
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id dTVX8nXMlOZZ; Fri, 13 Apr 2012 22:20:45 +0100 (IST)
Received: from [10.87.48.3] (unknown [86.45.51.188]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id E48B0171479; Fri, 13 Apr 2012 22:20:41 +0100 (IST)
Message-ID: <4F8898A9.8020806@cs.tcd.ie>
Date: Fri, 13 Apr 2012 22:20:41 +0100
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:11.0) Gecko/20120327 Thunderbird/11.0.1
MIME-Version: 1.0
To: Ned Freed <ned.freed@mrochek.com>
References: <4F866AC0.3000603@qualcomm.com> <01OE8FW1U53G00ZUIL@mauve.mrochek.com> <82462DAA-5118-4108-AA5C-FBEBBC563D4E@mnot.net> <01OE921YMRSW00ZUIL@mauve.mrochek.com>
In-Reply-To: <01OE921YMRSW00ZUIL@mauve.mrochek.com>
X-Enigmail-Version: 1.4
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: Pete Resnick <presnick@qualcomm.com>, Mark Nottingham <mnot@mnot.net>, draft-ietf-oauth-v2-bearer.all@tools.ietf.org, Apps Discuss <apps-discuss@ietf.org>
Subject: Re: [apps-discuss] Reserved URI query parameter in draft-ietf-oauth-v2-bearer
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Apr 2012 21:20:53 -0000

On 04/13/2012 08:43 AM, Ned Freed wrote:
> I certainly don't object to doing that. In fact I don't object to dropping this
> nasty hack from the document, although perhaps documenting it as *not*
> standardized and explaining why it sucks would be even better.

So I've a possibly naive question:

Why is it harmful to standardise a parameter name for use in
query strings?

Note: I'm not asking if access_token is a good or bad name for
one of those, nor how exactly to standardise one well or badly,
nor who should do that, but it seems from the comments here that
some folks are against the idea of standardising anything after
the authority is a bad idea, and I don't get why exactly that
might be the case.

Thanks,
S.