IETF Logo Mail Archive

[dispatch] Re: Proposal for New Work: OODA-HTTP — Adaptive Security Framework for HTTP/HTTPS

Mark Nottingham <mnot@mnot.net> Fri, 04 July 2025 06:49 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: dispatch@mail2.ietf.org
Delivered-To: dispatch@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8BA053E00085 for <dispatch@mail2.ietf.org>; Thu, 3 Jul 2025 23:49:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.568
X-Spam-Level:
X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.232, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b="ZQEPjAgD"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="A9pehfId"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UFXPP7xgshXM for <dispatch@mail2.ietf.org>; Thu, 3 Jul 2025 23:49:45 -0700 (PDT)
Received: from fhigh-a4-smtp.messagingengine.com (fhigh-a4-smtp.messagingengine.com [103.168.172.155]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 4E2443E00070 for <dispatch@ietf.org>; Thu, 3 Jul 2025 23:49:39 -0700 (PDT)
Received: from phl-compute-08.internal (phl-compute-08.phl.internal [10.202.2.48]) by mailfhigh.phl.internal (Postfix) with ESMTP id 2A36C1400A4C; Fri, 4 Jul 2025 02:49:39 -0400 (EDT)
Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-08.internal (MEProxy); Fri, 04 Jul 2025 02:49:39 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1751611779; x=1751698179; bh=FShHJ0iFhAI2s+LOdVpeMy5XGDAJbSDb8t4p6XVZuaw=; b= ZQEPjAgDv1uowi4qxhdbJqyUzTU1/3TucGobbp7yh9SBxBGwULRNcfWwvMWaFeKH bu0StaCrN855OtMja/yJTjZwxJAKOOZ6Qo3PE1iSDbyOcz4scpNVlWrmT1t/SPNy nmmZjLEdOO23lPKFV4wcuqkIjbZMw740uoDc/4h8SEvrIt3ds/K8bjkdVo9UNNZL JqAnrK/ODOdgvcWuA+fUb7FJQAlH4USEE8cFPsuWlxY/eS7TErgAOz2tkqGDExPO 37pgHBzIbBwkyBQWW8XhrSpZG8KJVa12zpuBcxb/YxU1YzQjhrf5hIhDIYVNOBM4 yzSNJcb+Vb7NRFCySFa8CA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1751611779; x= 1751698179; bh=FShHJ0iFhAI2s+LOdVpeMy5XGDAJbSDb8t4p6XVZuaw=; b=A 9pehfIdorwZ/+dCo73jWcPQa+CTs6/kzQb/SYtHq0CgRbeZydvvgyEFtUKOldp61 qPs5TP1QyA1dZZTY6zbq5bCxDmtJfr7zgV0DpaLES27JJdCUyw3UWfLSHpvokCjC l9xUNC/z8R0pwAzDnAR+8LtUHivJTTIo6UHsYFrnhKJMxTUpKwkCQ215UR2OfNg4 Dl0WTDoqxdiqS7o+FMaB09BnQiAkHpxqq//nm9HnQ0v5V0OwGXoayXExR5O5t65O +1zwOxckqVAR9OL82afvA4Siwf279Ezj3xmX+T0iBNfuXD1Ho88y+H8ThZG+axeL 3vgFhj9UYBiJuV/hC/O6Q==
X-ME-Sender: <xms:gnlnaMC19unWraYaZkAUyy8k6TYmY4XpVVmKwzzyN1OMFcSp8DyxWA> <xme:gnlnaOj-S5rzOYYU3wLj9u4iSxqG8FOOaL2M0sR9-5Y8CMSGMUIOA-MDZeQ-27jlg D7f4V1IRPkiGMs4fQ>
X-ME-Received: <xmr:gnlnaPlQoB7lUlJudBgZbTwg9V9JthCGNIxlu0BowA0pO53CE2bdzdr9gzhVk32aGcSoogtcVduAeyXFwYsUqYJ_GHTe9pEeVZj8DQMr>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdefgddvvdegkecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjug hrpegtggfuhfgjffevgffkfhfvofesthhqmhdthhdtjeenucfhrhhomhepofgrrhhkucfp ohhtthhinhhghhgrmhcuoehmnhhothesmhhnohhtrdhnvghtqeenucggtffrrghtthgvrh hnpeefhffhleeljeejjeeikefhjeefieehteegjefghfdugeevieegheegffdtteduteen ucffohhmrghinhepmhhnohhtrdhnvghtnecuvehluhhsthgvrhfuihiivgeptdenucfrrg hrrghmpehmrghilhhfrhhomhepmhhnohhtsehmnhhothdrnhgvthdpnhgspghrtghpthht ohepfedpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepfihorhhlvgihsegrrhhirg gunhgvrdgtohhmpdhrtghpthhtoheptghonhhtrggtthesshgvtghrohhothdrihhopdhr tghpthhtohepughishhprghttghhsehivghtfhdrohhrgh
X-ME-Proxy: <xmx:gnlnaCycceuTsgfBSgkvkSlhSL_7J4hkwCs7wB8oc3SfmmBX2WVVcQ> <xmx:gnlnaBTLgq6xVLmi5SnYgaW2T0KO9kMbSJ-KoodxCTVJUpBZMhytig> <xmx:gnlnaNYLe98Pu4Aaq18r3Qgfpt67UnKqNlr1mZ3dcKQjOgQ8QQ4zew> <xmx:gnlnaKTf66ObgmYVgUmfJAlWV2TdPghOc7ZTWxGhEPBpBPAFL0D9tw> <xmx:g3lnaM_qNRcPVV5sa2aelAkROCfyAJN7BG1iW11r90dDoaNwUwmzUK4e>
Feedback-ID: ie6694242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 4 Jul 2025 02:49:38 -0400 (EDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.600.51.1.1\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <87h5ztdvmh.fsf@hobgoblin.ariadne.com>
Date: Fri, 04 Jul 2025 08:49:36 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <B182CFF6-98BC-4C6A-91B0-9F3B8720A769@mnot.net>
References: <87h5ztdvmh.fsf@hobgoblin.ariadne.com>
To: "Dale R. Worley" <worley@ariadne.com>
X-Mailer: Apple Mail (2.3826.600.51.1.1)
Message-ID-Hash: JU75SHAJAXS23FSL3J7TPYNAYZX64DD4
X-Message-ID-Hash: JU75SHAJAXS23FSL3J7TPYNAYZX64DD4
X-MailFrom: mnot@mnot.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dispatch.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: contact@secroot.io, dispatch@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dispatch] Re: Proposal for New Work: OODA-HTTP — Adaptive Security Framework for HTTP/HTTPS
List-Id: DISPATCH Working Group Mail List <dispatch.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dispatch/D3sWMPavpL-50VakJ-aDncN2g30>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dispatch>
List-Help: <mailto:dispatch-request@ietf.org?subject=help>
List-Owner: <mailto:dispatch-owner@ietf.org>
List-Post: <mailto:dispatch@ietf.org>
List-Subscribe: <mailto:dispatch-join@ietf.org>
List-Unsubscribe: <mailto:dispatch-leave@ietf.org>

Just to clarify - 6648 deprecates x- for protocol elements no matter what the intent of the authors or the status of the document -- because intent and status can change, and are hard to predict.

Cheers,


> On 3 Jul 2025, at 7:36 pm, Dale R. Worley <worley@ariadne.com> wrote:
> 
> Ted Hardie <ted.ietf@gmail.com> writes:
>> ...  This is a BCP
>> recommending against the use of X- headers and similar constructs.
>> ...
> 
>> On Thu, Jul 3, 2025 at 2:45 AM Rachid Bouziane <contact@secroot.io> wrote:
>>> ... (via the X-OODA-Action header) ...
> 
> I am not an expert on security work, but I've worked with IETF protocols
> and their extensions for many years, including fretting about
> whether/when to use "X-" headers.  In the OODA-HTTP context, since you
> want it to be WG work, and thus ultimately an RFC, any headers defined
> by the RFC definitely *should not* have "X-" because the headers will be
> standardized.  After all, the only meaning of "X-" is "this is not a
> standard header and I want to make sure nobody mistakes it for one".
> 
> Dale
> 
> _______________________________________________
> dispatch mailing list -- dispatch@ietf.org
> To unsubscribe send an email to dispatch-leave@ietf.org

--
Mark Nottingham   https://www.mnot.net/

v2.39.1 | Report a Bug | By Email | System Status