Re: [art] Revising BCP56: On the use of HTTP as a Substrate

Mark Nottingham <mnot@mnot.net> Sat, 15 July 2017 14:09 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62414129AC4 for <art@ietfa.amsl.com>; Sat, 15 Jul 2017 07:09:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.72
X-Spam-Level:
X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=XzMpA2yl; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ZugKzNXr
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zK2V0QE2A6ae for <art@ietfa.amsl.com>; Sat, 15 Jul 2017 07:09:09 -0700 (PDT)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA51D127077 for <art@ietf.org>; Sat, 15 Jul 2017 07:09:09 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id EEFC7208DF; Sat, 15 Jul 2017 10:09:08 -0400 (EDT)
Received: from frontend1 ([10.202.2.160]) by compute3.internal (MEProxy); Sat, 15 Jul 2017 10:09:08 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=iX+Sbebs8BbLEdJ77f 94ARsU/36pmrAE2LvaBal25IY=; b=XzMpA2yl0v2kRtHEmQx/0rMSJyMdL13QpS a2OTIAgPBPA2hx01+QOjXX5A81WfDp+KkubOfNPRZgIZl+dOwTMoEfPqTDZeIvSn TGXooQtimx2SgyqvtvIJyDseDo2P63nGpeIzJzlBThbn+QLOJaxbz/uY3OD5WBAh am8MiNC9SDBxYOAAtgLO8Yi5eSIqjYHFBroPWXzOJsAVlGXscO2NzPgBpvFNMe7b ZIm81tQjFGnfCeYo0eEcPprpG697yxBfaZMwRhnmC58b5dIjkmJpximwArXe9MxG scR3mrgcIch7+Yov2pM7puyTf1y0VGN1bGSKcj8BbT38ccf5ylHQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=iX+Sbebs8BbLEdJ77f94ARsU/36pmrAE2LvaBal25IY=; b=ZugKzNXr s5/PquwtGG0NoYXpdu9u90W/QqHxkjrc1AUfl68AI3OyiUlC/5o0vs4H/lC0wuam bpp9jArmIk9xf8N17ncL6IVHXm7RpLPYyEWpW7fW6oAhgbIjoXC78Gl2aqZ7Q3YY cFuc4cj1cXuEqqkL2aOJvKRco18WN7us9HEtn7IkTHivmIeTthVJvadDWhP3nLWk G0FF4WOzKPhRaTWrsJYfAomQsHoilWoIU3E/s/bh3Rc4lzLCidmfjaZBUMfUy4Nb 5bozgTVukjr1274pCYGM+WxRs9La93ppnOOSv3Z9uGG0aAUmOcYIsGc2fA7NES3A tUPUJMYaoO9FKA==
X-ME-Sender: <xms:BCJqWSDWOd7yWqRo5VCCLfUNEElr-LlcBb4KlSeSba6zJrSwUEo5RQ>
X-Sasl-enc: S4WgSwD9ItnwNUEpI4cKXAjlvU6GHE0aOl9SGsNsbthz 1500127748
Received: from dhcp-813f.meeting.ietf.org (dhcp-813f.meeting.ietf.org [31.133.129.63]) by mail.messagingengine.com (Postfix) with ESMTPA id 436287E46B; Sat, 15 Jul 2017 10:09:08 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <ebabe106-d914-f21b-30c2-f91f583f4de5@nostrum.com>
Date: Sat, 15 Jul 2017 16:09:06 +0200
Cc: art@ietf.org, Patrick McManus <mcmanus@ducksong.com>, Alexey Melnikov <alexey.melnikov@isode.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <DE1772EA-E54A-4FC5-AF5B-6958477B0F44@mnot.net>
References: <83273F06-63D3-41C1-BC3C-9ECE401C2279@mnot.net> <ebabe106-d914-f21b-30c2-f91f583f4de5@nostrum.com>
To: Adam Roach <adam@nostrum.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/EgoBA8A7ksSIzb308qmBwQnFzoM>
Subject: Re: [art] Revising BCP56: On the use of HTTP as a Substrate
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 15 Jul 2017 14:09:12 -0000

> On 15 Jul 2017, at 11:20 am, Adam Roach <adam@nostrum.com> wrote:
> 
> I found 4.3.2 particularly interesting, as there doesn't seem to have been consensus in this space in the past. For example, the ws(s) and ipp(s) schemes made a different decision. I presume your assertion is that, were we defining these protocols today, they would be using http(s) instead?

AFAICT IPP doesn't use the HTTP port, scheme nor HTTP's registries, so as per section 2, it's not "using" HTTP.

WS(S) uses port 80/443 to bootstrap into another protocol (using Upgrade). There probably needs to be a carve-out for that.

> I don't see anything wrong with that; I just want to probe the edges of this advice by seeing how it would have applied to decisions we made in the past, since that's a pretty good predictor for how it might apply in the future.
> 
> The advice in 4.3.3 seems a bit strong, in that it will require whatever process listens on port 443 to take on an ever-increasing role. If we're going to keep this advice, I think the document needs some treatment of the software architecture implications: functionally, whatever listens to port 443 will need to be able to delegate sub-trees of the URL space to other processes. I know that some web servers have mechanisms to handle this kind of thing today; but we're effectively saying that this will become required base functionality for web servers moving forward.
> 
> I wonder, in that context, whether the current advice strikes the right balance.

I think that's a great conversation to have.

Cheers,

> 
> /a
> 
> On 7/11/17 06:14, Mark Nottingham wrote:
>> A number of folks have recently noted that BCP56 addresses the problems of using HTTP for protocols in the early 2000's, but we've moved on considerably since then.
>> 
>> Given the number of IETF protocols being build upon HTTP these days, it seems timely to reconsider it. I've been working on a candidate for replacing it for a little while; see:
>>   https://tools.ietf.org/html/draft-nottingham-bcp56bis
>>   https://mnot.github.io/I-D/bcp56bis/
>> 
>> I have a small-ish slot in the HTTP WG session on Wednesday to discuss this.
>> 
>> Cheers,
>> 
>> --
>> Mark Nottingham   https://www.mnot.net/
>> 
>> _______________________________________________
>> art mailing list
>> art@ietf.org
>> https://www.ietf.org/mailman/listinfo/art
> 
> 
> _______________________________________________
> art mailing list
> art@ietf.org
> https://www.ietf.org/mailman/listinfo/art

--
Mark Nottingham   https://www.mnot.net/