Re: [art] Revising BCP56: On the use of HTTP as a Substrate

Eliot Lear <lear@cisco.com> Tue, 11 July 2017 08:36 UTC

Return-Path: <lear@cisco.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A92D1319E7 for <art@ietfa.amsl.com>; Tue, 11 Jul 2017 01:36:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.502
X-Spam-Level:
X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5JPoz1_nUirt for <art@ietfa.amsl.com>; Tue, 11 Jul 2017 01:36:07 -0700 (PDT)
Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD4E01319E6 for <art@ietf.org>; Tue, 11 Jul 2017 01:36:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3840; q=dns/txt; s=iport; t=1499762167; x=1500971767; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to; bh=1+uF8zUnkMXmAByLtG7szMx8XDzV2KzXQVhz5uxxJWc=; b=MqgIQvi1LdF1LcRpWFK5DmyiAeUtkaCTqtYZ/0pgzUFDas/IO/pWcj+J li88YnnW8kqjl8JxIOuK8b5IU0waQrsHk89Ka/HeRpVtWz91GnQ3KRtFc 092TefIJSW1+1SzoJJlKuR7Wp//YY0489dzDcvXUzIm+ugbw1uc2sCUOx A=;
X-Files: signature.asc : 481
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DdAQAIjWRZ/xbLJq1dGQEBAQEBAQEBAQEBBwEBAQEBhD6BFI58kHmWA4IRBxoLhDWBFQKDcRcBAgEBAQEBAQFrKIUZAQEBAwEBIUsLEAsOCioCAicwBgEMBgIBAYorEKwcgiaLOQEBAQEBAQEBAQEBAQEBAQEBAREKBYMohS4rgnmHfYJhBYcil32EKoIdgQGHC4U5iyaGf5VCIAE2gQoxIQgbFUmFExyBaT42iC4BAQE
X-IronPort-AV: E=Sophos;i="5.40,345,1496102400"; d="asc'?scan'208";a="654189015"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Jul 2017 08:36:02 +0000
Received: from [10.61.241.136] ([10.61.241.136]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v6B8a2wI030430; Tue, 11 Jul 2017 08:36:02 GMT
To: Mark Nottingham <mnot@mnot.net>, art@ietf.org
Cc: Patrick McManus <mcmanus@ducksong.com>, Alexey Melnikov <alexey.melnikov@isode.com>
References: <83273F06-63D3-41C1-BC3C-9ECE401C2279@mnot.net>
From: Eliot Lear <lear@cisco.com>
Message-ID: <e969b839-7f16-0c54-924a-7d2c6feee392@cisco.com>
Date: Tue, 11 Jul 2017 10:36:00 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <83273F06-63D3-41C1-BC3C-9ECE401C2279@mnot.net>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="KPWqQ0bGswajT5R9hRVPOuTc232tD7CEo"
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/QQKMySrSENb71mNqRw15NdjV5Lk>
Subject: Re: [art] Revising BCP56: On the use of HTTP as a Substrate
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Jul 2017 08:36:09 -0000

Hi Mark,

There is no question that 3205 could use a dust off.  I would suggest
that document really served two purposes.  The first was to provide best
practices on its use, and the second was more of an applicability
statement.  You've gone to some detail as to best practices, but it
seems to me more attention should be paid to the applicability component.

Good engineering principles dictate not only when a mechanism should be
used, but as important, when it should not.  HTTP's use has GREATLY
expanded thanks in large part to REST, but it also could it might narrow
somewhat, thanks to protocols such as CoAP, or through the further
development of QUIC.  A valuable contribution would be to give guidance
as to what substrate is appropriate and when.

Related, we TCP/UDP port reviewers occasionally see requests for new
ports that make use of HTTP as a substrate.  Personally I always welcome
more guidance as to when to approve those ports.  The standing view is
that we approve them in large part to address non-interference with
existing services, but at some level that seems a bit of a waste, and
perhaps we should come out more strongly to say that if HTTP is really
to be used as a substrate, there must be some form of appropriate
application layer dispatch perhaps tied to .well-known.

I won't be attending the HTTPBIS meeting but I hope you'll consider
these comments as you develop the document.

Eliot



On 7/11/17 6:14 AM, Mark Nottingham wrote:
> A number of folks have recently noted that BCP56 addresses the problems of using HTTP for protocols in the early 2000's, but we've moved on considerably since then. 
>
> Given the number of IETF protocols being build upon HTTP these days, it seems timely to reconsider it. I've been working on a candidate for replacing it for a little while; see:
>   https://tools.ietf.org/html/draft-nottingham-bcp56bis
>   https://mnot.github.io/I-D/bcp56bis/
>
> I have a small-ish slot in the HTTP WG session on Wednesday to discuss this. 
>
> Cheers,
>
> --
> Mark Nottingham   https://www.mnot.net/
>
> _______________________________________________
> art mailing list
> art@ietf.org
> https://www.ietf.org/mailman/listinfo/art
>