Re: [apps-discuss] I-D Action: draft-ietf-appsawg-acct-uri-05.txt

Graham Klyne <GK@ninebynine.org> Wed, 03 July 2013 07:52 UTC

Return-Path: <GK@ninebynine.org>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3B8621F9A4A for <apps-discuss@ietfa.amsl.com>; Wed, 3 Jul 2013 00:52:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.607
X-Spam-Level:
X-Spam-Status: No, score=-5.607 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DATE_IN_PAST_12_24=0.992, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dV8X2eGxRWQp for <apps-discuss@ietfa.amsl.com>; Wed, 3 Jul 2013 00:52:54 -0700 (PDT)
Received: from relay16.mail.ox.ac.uk (relay16.mail.ox.ac.uk [163.1.2.166]) by ietfa.amsl.com (Postfix) with ESMTP id CEC9E21F9A49 for <apps-discuss@ietf.org>; Wed, 3 Jul 2013 00:52:53 -0700 (PDT)
Received: from smtp0.mail.ox.ac.uk ([129.67.1.205]) by relay16.mail.ox.ac.uk with esmtp (Exim 4.80) (envelope-from <GK@ninebynine.org>) id 1UuHrs-0002zc-rN; Wed, 03 Jul 2013 08:52:48 +0100
Received: from gklyne.plus.com ([80.229.154.156] helo=conina.local) by smtp0.mail.ox.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from <GK@ninebynine.org>) id 1UuHrs-0000FG-13; Wed, 03 Jul 2013 08:52:48 +0100
Message-ID: <51D30A19.90202@ninebynine.org>
Date: Tue, 02 Jul 2013 18:12:57 +0100
From: Graham Klyne <GK@ninebynine.org>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:15.0) Gecko/20120907 Thunderbird/15.0.1
MIME-Version: 1.0
To: Peter Saint-Andre <stpeter@stpeter.im>
References: <20130617205341.15641.96770.idtracker@ietfa.amsl.com> <51BF786B.9060703@stpeter.im> <016d01ce767f$2ea45990$8bed0cb0$@lanthaler@gmx.net> <51D1C423.5000804@stpeter.im> <017801ce7686$afc9db60$0f5d9220$@lanthaler@gmx.net> <51D1D417.5040705@stpeter.im>
In-Reply-To: <51D1D417.5040705@stpeter.im>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Oxford-Username: zool0635
Cc: apps-discuss@ietf.org
Subject: Re: [apps-discuss] I-D Action: draft-ietf-appsawg-acct-uri-05.txt
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 07:52:59 -0000

There's also Larry Masinter's old proposal for dated URIs: 
http://tools.ietf.org/id/draft-masinter-dated-uri-08.html (now expired).

#g
--

On 01/07/2013 20:10, Peter Saint-Andre wrote:
> On 7/1/13 12:13 PM, Markus Lanthaler wrote:
>> On Monday, July 01, 2013 8:02 PM, Peter Saint-Andre wrote:
>>> On 7/1/13 11:19 AM, Markus Lanthaler wrote:
>>>> I'm wondering whether it would make sense to add a feature allowing
>>>> associate a date to an account. This would address problems arising
>>> from
>>>> account recycling (think Yahoo). Maybe something like
>>>>
>>>>     acct:bob@example.com?date=20130701
>>>>
>>>> I think at the very least this should be covered in the security
>>>> considerations.
>>>
>>> IMHO we're beyond the point of adding new features to the 'acct' URI
>>> scheme (it has completed Working Group Last Call, IETF Last Call, and
>>> IESG review -- currently I'm working to address one issue about i18n
>>> that arose during IESG review, so that the document can be approved for
>>> publication).
>>
>> Sorry for bringing it up so late in the process.
>
> No worries. It happens. :-)
>
>>> However, a date could be included in an API or protocol that enables
>>> applications to use 'acct' URIs. Is there a reason why this would need
>>> to be included in the URI itself?
>>
>> Sure.. but I think the date should actually be a (perhaps optional) part of
>> the identifier, i.e., the acct URI. That would also make it easier to
>> exchange it between various applications and protocols.
>
> Are you arguing that it would be easier or *safer*?
>
> Also, it seems that your argument would apply to URIs in general (e.g.,
> HTTP URIs for web pages) and not just 'acct' URIs. However, we seem to
> have ways to deal with stale/old HTTP URIs and the like. Thus I wonder
> what in your mind is special about 'acct' URIs in this respect.
>
> Peter
>