Re: [art] Last Call for Comments: draft-nottingham-rfc7320bis (BCP 190 update)

Larry Masinter <LMM@acm.org> Wed, 16 October 2019 19:10 UTC

Return-Path: <masinter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89C90120957 for <art@ietfa.amsl.com>; Wed, 16 Oct 2019 12:10:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.476
X-Spam-Level:
X-Spam-Status: No, score=-1.476 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.172, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pTRgGDKzZ5hj for <art@ietfa.amsl.com>; Wed, 16 Oct 2019 12:10:52 -0700 (PDT)
Received: from mail-pl1-x631.google.com (mail-pl1-x631.google.com [IPv6:2607:f8b0:4864:20::631]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFCAF120241 for <art@ietf.org>; Wed, 16 Oct 2019 12:10:46 -0700 (PDT)
Received: by mail-pl1-x631.google.com with SMTP id k7so11726986pll.1 for <art@ietf.org>; Wed, 16 Oct 2019 12:10:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:references:in-reply-to:subject:date:message-id :mime-version:content-transfer-encoding:thread-index :content-language; bh=Zpaeo/LanLmg+T7xKZQOZVqj+DzS4QnNOU0j04yvaJo=; b=Hbhli7Ho1crE+21VpJnInxm3PjiHT6zjRDjf49z+ez99l6LzCTtzUjYuFvPNk3Ee3n SE9JhkubHWOfmvOG8ngb8ZXPmSCr0tAwa/qZRtWBT6rL31DVX2Nb3Do3wDLB1mYNploz UZMFumeLzfMLkxmDG8CCw7sZvSAjHzyQanaQYa5vbt2XkUw3lQysjdFW4I3Z/B4nmxLx iQdekdlUNk3r8GuqRGF6uCFZGrhkrbsKts4lTZB5dap3u42mV1xehoqtXX21+xu7jTy3 CTNapQndGnVxmAah9f3qwyUHSgYcf00xuZz/qZl/7xOLSHLL0g4syYwiRhz1dVpvQ+Zq S0SQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:references:in-reply-to:subject :date:message-id:mime-version:content-transfer-encoding:thread-index :content-language; bh=Zpaeo/LanLmg+T7xKZQOZVqj+DzS4QnNOU0j04yvaJo=; b=OUKCKKGuRqUeBY3RnjioCYOR7pm7M2GzFAfHF47zs0hh+kHlyRaSw+GtodzS03FywQ wfKxrLx+DJ7ZACdIl3HHd3IJEGfOR4XlW2q5p6AH4GL3Lq+8caJmQgpfNoWtXbdFLabr dtTDjxorIjQg+KMYckxpW2raQDOzfSaViQuB5ffHszit/PQmw6ctjWHlPeWKV0/qFho9 z7nGyclNzDIPF9BVrZXMdwHJS1iclGUwkTeGfs/wClyHX0GqkcYTpYF6dtJOFqwHkghy BdBYZHqmBLEtXimaDxAjy6ln5js9ujs5YRAbZqHvZBzECZpxcSV3P6KqUWCHwaSgRap7 nT2Q==
X-Gm-Message-State: APjAAAX5yFnVsm8iqPNQdv/uwFur3scS8j8zpM81AE29uDwKkouYL17q KBLeeu/LInT3T1sF/evDZ8s9VtCU
X-Google-Smtp-Source: APXvYqzOIXRSuEHXaNokAHGxR4CG+n4Bn/aqUAWd+QRvqsU3AYNi6AQBCFpKn7AV7evgeUrNdIV43A==
X-Received: by 2002:a17:902:122:: with SMTP id 31mr40775922plb.274.1571253045379; Wed, 16 Oct 2019 12:10:45 -0700 (PDT)
Received: from TVPC (c-67-169-101-78.hsd1.ca.comcast.net. [67.169.101.78]) by smtp.gmail.com with ESMTPSA id o60sm3557590pje.21.2019.10.16.12.10.44 for <art@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Oct 2019 12:10:44 -0700 (PDT)
Sender: Larry Masinter <masinter@gmail.com>
From: Larry Masinter <LMM@acm.org>
X-Google-Original-From: "Larry Masinter" <lmm@acm.org>
To: 'Applications and Real-Time Area Discussion' <art@ietf.org>
References: <cdeb0612-89bd-ae70-a7c3-a769d07e5f4c@nostrum.com> <4921de47-86e7-22af-767c-fb2ec0c3cc1f@cs.tcd.ie>
In-Reply-To: <4921de47-86e7-22af-767c-fb2ec0c3cc1f@cs.tcd.ie>
Date: Wed, 16 Oct 2019 12:10:44 -0700
Message-ID: <015301d58455$6931dde0$3b9599a0$@acm.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQDvf4+JJ/bJOFv8I8G83RI7mYy0aAIUjYeQqRj+MtA=
Content-Language: en-us
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/b7jOBzEF63JVrraS77zSFfCOasE>
Subject: Re: [art] Last Call for Comments: draft-nottingham-rfc7320bis (BCP 190 update)
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Oct 2019 19:10:55 -0000

On 8/21/2019 at 7:50 AM I wrote

An update to BCP 190 should take into account the fact that there is not a consensus for the "best" of various "current practice" for avoiding the URL squatting identified (namely using a hypermedia format to let the server control the URL format completely rather than the API control the URL syntax and making the client do string processing.

But didn't see a reply.  

If you want links, link to draft-hartke-t2trg-coral and draft-kelly-json-hal as two examples of current practice for which the "best" way hasn't shaken out.

Larry
--
https://LarryMasinter.net



-----Original Message-----
From: Larry Masinter <masinter@gmail.com> On Behalf Of Larry Masinter
Sent: Wednesday, August 21, 2019 7:50 AM
To: 'Adam Roach' <adam@nostrum.com>; 'John C Klensin' <john-ietf@jck.com>; 'Mark Nottingham' <mnot@mnot.net>
Cc: 'Jacob Hoffman-Andrews' <jsha@letsencrypt.org>; 'Devon O'Brien' <devon.obrien@gmail.com>; 'ART Area' <art@ietf.org>
Subject: RE: [art] Call for Consensus: Re: On BCP 190

Just back from an August vacation, apologies for brevity IMHO An update to BCP 190 should take into account the fact that there is not a consensus for the "best" of various "current practice" for avoiding the URL squatting identified (namely using a hypermedia format to let the server control the URL format completely rather than the API control the URL syntax and making the client do string processing.


As far as process goes, I think it's ok to drop the DISCUSS in
 question because it is Experimental and not Standards track.


As  Carsten Bormann <cabo@tzi.org> wrote  Sunday, July 28, 2019 1:43 AM
Re: [art] On BCP 190

> 
> On Jul 28, 2019, at 08:26, Larry Masinter <LMM@acm.org> wrote:
> >
> > Now, why JSON-HAL is still an expired  Internet Draft is a puzzle.
> 
> (Slightly, but not completely off-topic:)
> 
> Probably because there are multiple ways to skin this cat and we never 
> tried to converge on one.
> 
> As a data point, for the applications in the CoRE working group, we 
> have mostly been able to avoid BCP190-style arguments by using 
> /.well-known, mainly because simple devices only tend to have one 
> service offered directly under / and because IoT device platforms tend 
> to provide the application developer full control over the URI space.  
> /.well-known/core provides a discovery mechanism for the entry point URIs
actually offered by a server.
> 
> For where this is not enough, the WG has just last week adopted CoRAL 
> (not yet resubmitted as draft-ietf, so you can find it at 
> draft-hartke-t2trg-coral) as our idea of a hypermedia format like HAL.  
> Up to now, we tried to make everything work with RFC 6690 link format, 
> but that has too many idiosyncrasies that started to get in the way of a
long-term way forward.