Re: [apps-discuss] Looking at Webfinger

George Fletcher <gffletch@aol.com> Tue, 03 July 2012 14:11 UTC

Return-Path: <gffletch@aol.com>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C99821F8823 for <apps-discuss@ietfa.amsl.com>; Tue, 3 Jul 2012 07:11:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.298
X-Spam-Level:
X-Spam-Status: No, score=-1.298 tagged_above=-999 required=5 tests=[AWL=-1.299, BAYES_50=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gWfqblEqpeg0 for <apps-discuss@ietfa.amsl.com>; Tue, 3 Jul 2012 07:11:51 -0700 (PDT)
Received: from imr-ma04.mx.aol.com (imr-ma04.mx.aol.com [64.12.206.42]) by ietfa.amsl.com (Postfix) with ESMTP id E017521F8816 for <apps-discuss@ietf.org>; Tue, 3 Jul 2012 07:11:50 -0700 (PDT)
Received: from mtaout-ma06.r1000.mx.aol.com (mtaout-ma06.r1000.mx.aol.com [172.29.41.6]) by imr-ma04.mx.aol.com (8.14.1/8.14.1) with ESMTP id q63EBmS1030587; Tue, 3 Jul 2012 10:11:48 -0400
Received: from palantir.office.aol.com (palantir.office.aol.com [10.181.186.254]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id BF90DE0000B1; Tue, 3 Jul 2012 10:11:47 -0400 (EDT)
Message-ID: <4FF2FDA1.3020507@aol.com>
Date: Tue, 03 Jul 2012 10:11:45 -0400
From: George Fletcher <gffletch@aol.com>
Organization: AOL LLC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: IETF Apps Discuss <apps-discuss@ietf.org>
References: <F80C8C9C-7AB8-4B7E-BFD2-4D69499D21A1@mnot.net> <CA+aD3u1jGgLJPJp8XR=FWH_3dnhogqNfbdm2a0P8VOuL=FJv3Q@mail.gmail.com>
In-Reply-To: <CA+aD3u1jGgLJPJp8XR=FWH_3dnhogqNfbdm2a0P8VOuL=FJv3Q@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20110426; t=1341324707; bh=XQjigaFiEvpGAKVoK+JeLs6YlbpjikS9oZA7UQQE2ss=; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type; b=Brf92Oq27q38vKo/k2j3MxD0vsJt7eoQGw5kE79WHR8Pj61B127UmUg6GIaTqJPtM tKqb6F9gmsflZVTRPCp9s5inHGD81UD22BrB+nfdKiXrxuIy6HblHwhWmdOHwT5G2J sPT0mpKFrxuRrPPs+QGnr2WOfZVVpOA6s/7Mn70U=
X-AOL-SCOLL-SCORE: 0:2:409777920:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d29064ff2fda33baf
X-AOL-IP: 10.181.186.254
Cc: Mark Nottingham <mnot@mnot.net>
Subject: Re: [apps-discuss] Looking at Webfinger
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2012 14:11:52 -0000

+1 for supporting redirects

 From a pure deployment perspective, managing multiple .well-known/ 
endpoints can be difficult is the group that "owns" the web domain is 
substantially different/separated from the group that wants to put 
"files" in the .well-known directory. In addition, a single organization 
supporting multiple domains that all use the same "identifier" strings 
can also add complications. Not unsolvable, but it creates a more 
brittle deployment.

Managing these endpoints as a set of fixed 3XX redirects is much simpler 
than having to deploy the actual functionality at the endpoint. Even 
easier (for my environment) is to only deploy one endpoint... but I get 
the rationale behind having multiple.

Thanks,
George

On 7/3/12 5:44 AM, Michiel de Jong wrote:
> - it should be clear to implementers that they are allowed to use http
> 3** responses to redirect to some other place where running the actual
> webfinger service might be easier to organize. it should be clear to
> clients that they should follow such redirects. afaik, the ability to
> redirect to some other place was an argument for using host-meta as a
> first hop: first discover where the host-meta server is, and then do
> the actual work there.