Re: [http-state] [Technical Errata Reported] RFC6265 (3444)

Adam Barth <ietf@adambarth.com> Tue, 08 January 2013 07:12 UTC

Return-Path: <ietf@adambarth.com>
X-Original-To: http-state@ietfa.amsl.com
Delivered-To: http-state@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 895F021F8561 for <http-state@ietfa.amsl.com>; Mon, 7 Jan 2013 23:12:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.977
X-Spam-Level:
X-Spam-Status: No, score=-2.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ulZ6oiFugmYX for <http-state@ietfa.amsl.com>; Mon, 7 Jan 2013 23:12:06 -0800 (PST)
Received: from mail-lb0-f195.google.com (mail-lb0-f195.google.com [209.85.217.195]) by ietfa.amsl.com (Postfix) with ESMTP id AAC3B21F854F for <http-state@ietf.org>; Mon, 7 Jan 2013 23:12:05 -0800 (PST)
Received: by mail-lb0-f195.google.com with SMTP id n1so42744lba.2 for <http-state@ietf.org>; Mon, 07 Jan 2013 23:12:04 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type:x-gm-message-state; bh=tcu1WWGIqahAKNxQFLbktfuHf150DN99HWG4dLMoawk=; b=Q3qhLj1MZK60x/vEEjfHd449j0fJCiqdeCmZwEUu+6t7/SmGuScNvvAMp7h24Wb2fN iJ3Nf0q/zCdtPeEyErgweHUeeqldlCO9czGuNcyTKo7XhK4TWWZLSQ3Y/X3vQ32ij07j z7VKRudM+ktlpTSGEwnG4Cxl/csM4wk4rMaaidGEPeidrJAm3M4/fyMVn9FKJJriVPx+ B9Ccxyz4WRs/QJAh9CdAh8RSLWPUjX/JcA/X6jG+ggWCghL9xX6bjeGj4I0nnBzFbc25 s+Y0laIizsaUIN5prXBgle4LA1nqd5Pu3hXx8GXwqn1VwASFfsbnFDOvlKzRa5rADiXl QT6A==
X-Received: by 10.152.46.161 with SMTP id w1mr60757733lam.27.1357629124449; Mon, 07 Jan 2013 23:12:04 -0800 (PST)
Received: from mail-lb0-f181.google.com (mail-lb0-f181.google.com [209.85.217.181]) by mx.google.com with ESMTPS id ox6sm23974569lab.16.2013.01.07.23.12.02 (version=SSLv3 cipher=OTHER); Mon, 07 Jan 2013 23:12:03 -0800 (PST)
Received: by mail-lb0-f181.google.com with SMTP id ge1so143877lbb.40 for <http-state@ietf.org>; Mon, 07 Jan 2013 23:12:02 -0800 (PST)
Received: by 10.152.122.39 with SMTP id lp7mr60809876lab.0.1357629122004; Mon, 07 Jan 2013 23:12:02 -0800 (PST)
MIME-Version: 1.0
Received: by 10.112.10.2 with HTTP; Mon, 7 Jan 2013 23:11:31 -0800 (PST)
In-Reply-To: <50EB8226.3090303@gmx.de>
References: <50EB00C6.6050301@KingsMountain.com> <CAJE5ia8LPNEsPNh3z=b0CYg8wKQfArWoQJYzd=ChugLxjxYYZw@mail.gmail.com> <50EB2D8D.1050102@qti.qualcomm.com> <CALaySJKcDZVOtAYySNUKXrpmx+ymBZ+EVnEKafWpVCQyFcd9Ow@mail.gmail.com> <CAJE5ia_G_FVcKJBkw9C2_TPHxQfMen9i9DyAy24yOs_Qa8vscQ@mail.gmail.com> <50EB8226.3090303@gmx.de>
From: Adam Barth <ietf@adambarth.com>
Date: Mon, 07 Jan 2013 23:11:31 -0800
Message-ID: <CAJE5ia-js14NCvg-koSNMzQDUxJJkMB5EjoWnM8-BT0XNN-DQw@mail.gmail.com>
To: Julian Reschke <julian.reschke@gmx.de>
Content-Type: text/plain; charset="ISO-8859-1"
X-Gm-Message-State: ALoCoQmWPsKEfsAUUVqe1vPLzLX3AEj9t1AnsuogmT6gVHT9jqxsoZUdL3fj58wF5iXZiPM9UBll
Cc: Pete Resnick <presnick@qti.qualcomm.com>, Bjoern Hoehrmann <derhoermi@gmx.net>, Eran Hammer <eran@hueniverse.com>, http-state <http-state@ietf.org>, Barry Leiba <barryleiba@computer.org>, RFC Errata System <rfc-editor@rfc-editor.org>
Subject: Re: [http-state] [Technical Errata Reported] RFC6265 (3444)
X-BeenThere: http-state@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discuss HTTP State Management Mechanism <http-state.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/http-state>, <mailto:http-state-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/http-state>
List-Post: <mailto:http-state@ietf.org>
List-Help: <mailto:http-state-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/http-state>, <mailto:http-state-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Jan 2013 07:12:06 -0000

On Mon, Jan 7, 2013 at 6:19 PM, Julian Reschke <julian.reschke@gmx.de> wrote:
> On 2013-01-07 21:48, Adam Barth wrote:
>> On Mon, Jan 7, 2013 at 12:28 PM, Barry Leiba <barryleiba@computer.org>
>> wrote:
>>>>>>>
>>>>>>> Happy to go that route.  So how about this correction?:
>>>>>>>
>>>>>>>      path-value        = *av-octet
>>>>>>>      extension-av      = *av-octet
>>>>>>>      av-octet          = %x20-3A / %x3C-7E
>>>>>>>                        ; any CHAR except CTLs or ";"
>>>>
>>>>
>>>> So you want to allow space but not tab, right?
>>>
>>>
>>> Well, that's what the current text ("any CHAR except CTLs") says.  If
>>> we want to "fix" that, then now's the time, while we're
>>> precisificatifying the ABNF.
>>>
>>> So, which should it be?:
>>>
>>> 1:  av-octet = %x20-3A / %x3C-7E    (allows space, but not tab)
>>>
>>> 2:  av-octet = %x21-3A / %x3C-7E    (allows neither space nor tab)
>>>
>>> 3:  av-octet = %x09 / %x20-3A / %x3C-7E    (allows both space and tab)
>>
>>
>> This grammar is intentionally "loose" because there is such a wide
>> variety of crazy Set-Cookie headers in the world.  Allowing tab
>> doesn't seem harmful, so I'd recommend (3).
>
> Big -1.
>
> We're now changing the spec instead of fixing an editorial bug.
>
> If we *really* want a change, this needs way more IETF review than an
> Erratum gets.

Fair enough.

Adam