Re: [Captive-portals] practicality of 511 HTTP status code

Mark Nottingham <mnot@mnot.net> Sat, 24 June 2017 01:32 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: captive-portals@ietfa.amsl.com
Delivered-To: captive-portals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB53E129B0A for <captive-portals@ietfa.amsl.com>; Fri, 23 Jun 2017 18:32:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=dNWL5eWO; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=Sfmwwadw
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tKUElQxLjwhH for <captive-portals@ietfa.amsl.com>; Fri, 23 Jun 2017 18:32:03 -0700 (PDT)
Received: from new1-smtp.messagingengine.com (new1-smtp.messagingengine.com [66.111.4.221]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27B541250B8 for <captive-portals@ietf.org>; Fri, 23 Jun 2017 18:32:03 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailnew.nyi.internal (Postfix) with ESMTP id 8FBF7FB9; Fri, 23 Jun 2017 21:32:02 -0400 (EDT)
Received: from frontend1 ([10.202.2.160]) by compute3.internal (MEProxy); Fri, 23 Jun 2017 21:32:02 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=yKum5nBDeWwWzTJhN/ aQzNkLYNOqYCSYH+4YQsTSH2k=; b=dNWL5eWOUcuTu691yN9X1/CXqA9lvDA+HF 5pOueFLt2ospaAWjy0hJQ539UB8ZeukD0xLNBAtRe8hCq8wFFS1kzSbQEZ0+ZubP Ap3tMYHGlNgKQUKW5WA3faBqOy2SwqlzOZZrIPK7ca5lVS2part0u20yUrYSNhXC oXdDCrjupxaNvD9kj1Odug7ou+nJmvHeQFNfepOJHw1uS9MbHX3e+YsudhcU+B6c nrZDxlKkwZjglf5WZph3RimuS15WAKZiYtaKAuCVWTVKnuH2KBeSrzapWjRCAeiu nEU0v9pBnuzwvVZAqxbVPgqTZw+d5W0nFAH1Eu99co8Tr2jXpVjw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=yKum5nBDeWwWzTJhN/aQzNkLYNOqYCSYH+4YQsTSH2k=; b=Sfmwwadw 2VZZZK3dAdrBIi0HkldPy87+8XrnkdfmLYikhIlcZ0iwzo+NcUbec7HhG563iqgB M3U4+B6isusyB99khUllbvc0pNDYYapIkFu/JXIa0vyZi7qvp3rozkKw2V4+CwRn +4T3SF8RGWnbS+Nvh3tvEYRuHR48laADfv8MuEA59R0WSjKVZJRzdTKd27XkptWs 0HvqjE/ETFqd4UDDqssUaTn8GjZqMHCGDm3+uZupXO9rmAVpu/JEkeOIDjGkeJLN 7mrMUHYyNZuoy3QiRXhYMkH+SjGKAtuQT2GLQ4U8nciegMbz+tAZO+mYR43IsfPe JV5HGX4Qs7HJ2g==
X-ME-Sender: <xms:EsFNWY4HmlsNUF8jPtzxp6_9AWi6fHlCOaiofqvpayvZ9_YOBT3IXw>
X-Sasl-enc: Gu/EE7CidzMxNYjFtCyFeYi4HZdxCEQQ+xCvbrvecbm0 1498267921
Received: from [192.168.1.18] (cpe-124-188-19-231.hdbq1.win.bigpond.net.au [124.188.19.231]) by mail.messagingengine.com (Postfix) with ESMTPA id 628977E51B; Fri, 23 Jun 2017 21:32:00 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <E8355113905631478EFF04F5AA706E987061FA7F@wtl-exchp-1.sandvine.com>
Date: Sat, 24 Jun 2017 11:31:57 +1000
Cc: "Julian F. Reschke" <julian.reschke@gmx.de>, Vincent van Dam <VvanDam@sandvine.com>, David Bird <dbird@google.com>, Erik Kline <ek@google.com>, "captive-portals@ietf.org" <captive-portals@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <C1A75CC1-696D-4C9D-BF97-4835BB82DEA3@mnot.net>
References: <CAAedzxrPo+qSBWP23=fpwG0ZzBrdOMgs0gykAxOPSFbojeR79A@mail.gmail.com> <CADo9JyVrO6fcOtYXc=VtrfmhFsYdHY=3t4nM2xLG3CBnzizWJQ@mail.gmail.com> <D2A19ABBC0147C40BFBB83D1CF3E95F03FEB4A22@wtl-exchp-2.sandvine.com> <E8355113905631478EFF04F5AA706E987061F965@wtl-exchp-1.sandvine.com> <6c04ed2c-9d26-eb9d-b4e3-5205845d0fa4@gmx.de> <E8355113905631478EFF04F5AA706E987061FA7F@wtl-exchp-1.sandvine.com>
To: Dave Dolson <ddolson@sandvine.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/captive-portals/lBs77IUCzJFWRDN1ylgoV5IuCy8>
Subject: Re: [Captive-portals] practicality of 511 HTTP status code
X-BeenThere: captive-portals@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-Post: <mailto:captive-portals@ietf.org>
List-Help: <mailto:captive-portals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Jun 2017 01:32:06 -0000

The idea behind 511 was that it's an explicit signal that the response is NOT from the origin.

The payload will be displayed by browsers that don't understand its semantics, and you can use JS or http-equiv redirects if you want to send that user somewhere else.

The real value only comes when a) browsers understand its semantics, and b) a payload format is designed to do something interesting with them.

Cheers,



> On 24 Jun 2017, at 4:53 am, Dave Dolson <ddolson@sandvine.com> wrote:
> 
> Probably all of those codes are used, as well as 200 (with content).
> We could debate which is best, but that's a distraction, since we want portals to stop pretending to be the real end-point.
> (FWIW, I think 301 is a bad idea, since later requests should try the real URI again.)
> 
> My hypothesis is that 511 is an acceptable thing to send an old (pre-RFC6585) device, when there is no expectation of causing user interaction.
> 
> -Dave
> 
> -----Original Message-----
> From: Julian Reschke [mailto:julian.reschke@gmx.de] 
> Sent: Friday, June 23, 2017 2:34 PM
> To: Dave Dolson; Vincent van Dam; David Bird; Erik Kline
> Cc: captive-portals@ietf.org
> Subject: Re: [Captive-portals] practicality of 511 HTTP status code
> 
> On 2017-06-23 20:11, Dave Dolson wrote:
>> It seems 511 is probably better than 30x for non-browser 
>> requests-clearly an error instead of redirecting to something unexpected.
>> 
>> Is 511 likely to be OK for old IoT devices? Probably a better outcome 
>> than 307.
>> ...
> 
> FWIW, why is *307* desirable in the first place? Wouldn't it be better to use 301/302 or even 303?
> 
> Best regards, Julian
> 
> _______________________________________________
> Captive-portals mailing list
> Captive-portals@ietf.org
> https://www.ietf.org/mailman/listinfo/captive-portals

--
Mark Nottingham   https://www.mnot.net/