Re: [apps-discuss] RFC 5785: Registration of .well-known services under HTTP to First Come

Mark Nottingham <mnot@mnot.net> Thu, 14 January 2016 03:36 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9BED1A8942 for <apps-discuss@ietfa.amsl.com>; Wed, 13 Jan 2016 19:36:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.602
X-Spam-Level:
X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PpprP9uaELUZ for <apps-discuss@ietfa.amsl.com>; Wed, 13 Jan 2016 19:36:03 -0800 (PST)
Received: from mxout-07.mxes.net (mxout-07.mxes.net [216.86.168.182]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A4FD1A893C for <apps-discuss@ietf.org>; Wed, 13 Jan 2016 19:36:03 -0800 (PST)
Received: from [192.168.1.57] (unknown [115.70.207.235]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 114B322E200; Wed, 13 Jan 2016 22:36:00 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <CAMm+Lwj=A+KbxOvxFrURZmTmYJuGD3rXvnRToLZ_L+v-Qv_L_w@mail.gmail.com>
Date: Thu, 14 Jan 2016 14:35:57 +1100
Content-Transfer-Encoding: quoted-printable
Message-Id: <F87BF4D5-98EB-4476-B07B-969BEF842EE2@mnot.net>
References: <CAMm+Lwj=A+KbxOvxFrURZmTmYJuGD3rXvnRToLZ_L+v-Qv_L_w@mail.gmail.com>
To: Phillip Hallam-Baker <phill@hallambaker.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/apps-discuss/CACiBdiDnlW1X7JsnXdEXW22m1U>
Cc: General discussion of application-layer protocols <apps-discuss@ietf.org>
Subject: Re: [apps-discuss] RFC 5785: Registration of .well-known services under HTTP to First Come
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/apps-discuss/>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jan 2016 03:36:06 -0000

SRV isn't used by HTTP, so I'm not seeing a strong motivation for aligning the policies. Given that .well-known is a mechanism for allocating a URL on *every* Web server on the planet, and that space is ceded to standard uses by server authorities (the actual owners of that name space), having a higher bar to entry than FCFS seems like a good idea. 



> On 14 Jan 2016, at 9:31 am, Phillip Hallam-Baker <phill@hallambaker.com> wrote:
> 
> Last week I released my set of build tools for specifications and
> services on sourceforge.
> https://sourceforge.net/projects/phb-build-tools/
> 
> One of the tools is a JSON protocol compiler. This makes it really
> easy to write a Web Service, all the code required to map API data to
> HTTP messages is done for the programmer. The tools also create
> entries for the reference section in the spec.
> 
> I am just writing a note on the conventions that are used to perform
> this mapping which I will forward to the list in due course. In short
> I could not care less what the mapping is but I do care that
> everything does things in the exact same way and the approach respects
> sound principles of layer abstraction etc.
> 
> 
> Now for the problem. This is how I describe the discovery process:
> 
> "Beginning with a DNS address of the service (e.g. example.com), the
> client identifies a specific HTTP URL at which to access the service.
> The DNS SRV record [!RFC2782] and Well Known Service [!RFC5785]
> mechanisms are used for this purpose."
> 
> 
> So the basic idea is that given an address 'example.com' and a
> protocol 'mmm', the client first attempts to resolve a host using an
> SRV lookup:
> 
> _mmm._tcp.example.com 0 5 80 host1.example.com
> 
> Having found our host, we now use it to construct the web service endpoint:
> 
> To: host1.example.com
> POST /.well-known/mmm/
> Host: example.com
> 
> OK, so the spec is all well and good. The problem is that to make this
> work, I need two separate registrations. One for the SRV record and a
> second for the Well Known. That might be acceptable but the next bit
> really is not, getting an SRV record is first come first served,
> getting a Well Known is specification required.
> 
> This is an inconsistency in approach for a start. The two
> registrations serve essentially the same purpose, there should be
> essentially the same approach to registration.
> 
> I attempted to bring this up with the author but the response was
> 'people decided different'. Well now I am pointing out that the result
> is inconsistent.
> 
> In general we should encourage as many people as possible to be using
> the IANA registries and put as few obstacles in their way as possible.
> We should not worry about the possibility of 'damaging the Internet'.
> The people I deal with on a daily basis have been actively attempting
> to destroy it for two decades without much success. And the biggest
> potential for causing problems in this particular case is two people
> attempting to use the same identifier - the very problem that the
> registry is there to avoid.
> 
> I will also note that the use of the .well-known registry has been
> negligible to date
> http://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
> 
> 
> I suggest we adopt one of two solutions to this:
> 
> 1) Make the criteria for listing the same as SRV (first come)
> 
> 2) Delete the registry completely and fold it into the Well Known
> protocols registry used for SRV so that anyone registering an SRV
> protocol access prefix will get the Well Known automatically.
> 
> _______________________________________________
> apps-discuss mailing list
> apps-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss

--
Mark Nottingham   https://www.mnot.net/