Re: No-Vary-Search

Jeremy Roman <jbroman@chromium.org> Tue, 19 March 2024 01:45 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CA41C15108B for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 18 Mar 2024 18:45:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.856
X-Spam-Level:
X-Spam-Status: No, score=-7.856 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="O1Mhk0qn"; dkim=pass (2048-bit key) header.d=w3.org header.b="hGLPVD3v"; dkim=pass (1024-bit key) header.d=chromium.org header.b="Tmu0ZZtC"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HqOYMMlvFWrn for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 18 Mar 2024 18:45:30 -0700 (PDT)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F252C14F6F3 for <httpbisa-archive-bis2Juki@ietf.org>; Mon, 18 Mar 2024 18:45:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:Cc:To:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=aLEyrcm9nGsIl3cTzocm9h4LdoY4OvNfNCoQKJc/3YU=; b=O1Mhk0qngpj0Ne507Tj7zsigiI IO/YHi+S3EZjQCCi9W0EbFGNZu84yxcFK5SDpq7K18tPiUj3lCl/CUFOjxi9KbZhGSwSCU5t85D6O 7MPgTSPm12OJzjzQrzbPwWYgCQvcEl3RWNFIyDAgTGNVYPcuARJUGl3exU/BOyVWQTZ/nfv/MwQcT 4M05ZXfL+gq482GHFgX9MWddbi2kaMGO43PXGh6FwfMm/fAcLGeqVuliYI5gb9JrDCj0geIZFNCio pPHyQ5fSPNXhY6j4Z/s7p3JcHhLzvCUVydYR2tDDrxR+FBbRo74N25oFZc+5eQCy8pWdgRFYV6l8/ nP3tl4Ig==;
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1rmOXT-000vMm-VU for ietf-http-wg-dist@listhub.w3.org; Tue, 19 Mar 2024 01:45:15 +0000
Resent-Date: Tue, 19 Mar 2024 01:45:15 +0000
Resent-Message-Id: <E1rmOXT-000vMm-VU@lyra.w3.org>
Received: from puck.w3.org ([34.196.82.207]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <jbroman@chromium.org>) id 1rmOXR-000vLg-PE for ietf-http-wg@listhub.w3.org; Tue, 19 Mar 2024 01:45:13 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=aLEyrcm9nGsIl3cTzocm9h4LdoY4OvNfNCoQKJc/3YU=; t=1710812713; x=1711676713; b=hGLPVD3vHJYAZzxVUs7JLfSOBVXqaKQD35tYoAky+QDL+KsJHd4WZZiHkQKebvIZXikfhGnbj6G UYdACJftcu5QlqTMsdadL4nBRWPPjl8DAnvD9tysq/R2nGZQ+oZSsx2aDYNseniUJXWI5Srt+vn4e anKMaQ25LsNQeYbiRQ3Nh19ypORQvciYIoEZTVkqjAdDmrwAk/q59uYfiu/j2QIV7APvOk3XnLMT3 /FsH+OEhLF2gYbjHUR5RNv54Z4hcGeynL6SJMG6ftfnhBkjYx1Io7drGdS+m4FxsjAzGG7txt9Lnd sQ0Yc5I2ACo5stsLVEQXhaMqWo8O+QWAS8Sw==;
Received-SPF: pass (puck.w3.org: domain of chromium.org designates 2a00:1450:4864:20::133 as permitted sender) client-ip=2a00:1450:4864:20::133; envelope-from=jbroman@chromium.org; helo=mail-lf1-x133.google.com;
Received: from mail-lf1-x133.google.com ([2a00:1450:4864:20::133]) by puck.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <jbroman@chromium.org>) id 1rmOXQ-009RJk-37 for ietf-http-wg@w3.org; Tue, 19 Mar 2024 01:45:13 +0000
Received: by mail-lf1-x133.google.com with SMTP id 2adb3069b0e04-512f3e75391so3913377e87.2 for <ietf-http-wg@w3.org>; Mon, 18 Mar 2024 18:45:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1710812709; x=1711417509; darn=w3.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=aLEyrcm9nGsIl3cTzocm9h4LdoY4OvNfNCoQKJc/3YU=; b=Tmu0ZZtCzU3xEBFyFavHCpjeuLKBGMCXuGHuKiiTTbpeN5P9bKqf5pP2vEezkgBHc5 645NgVB1zki4RULnsacOZ2BtWSxmPZ6D3eSImxVdLzJSRkqb6LZLurWmDbUP2I4sPccs suVsZ+65QypTq69kmUc/JOzhJ5qoRG6nuBF0Y=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710812709; x=1711417509; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=aLEyrcm9nGsIl3cTzocm9h4LdoY4OvNfNCoQKJc/3YU=; b=acnZ+csUJvC46cdebbourodiQeHYmdonfHjZIiW0cmEXBzjebrrIt2NkrhaKfm4K/x FRIB8kXci+5RO252JskUiaA5DPsjjf1aOBzaGH1vcFj5+OI37ETgrzEfF/S/jqlpjXqK yqxurBuyS7LTN0EDUKGtnw/U8Vg094l4L6OOi8v7biD5xg/LwHKQOTHDASo9QRiYjofv tulXJahfG1SvrRlc3NkCgHcs3tQZTeBLkK5jM00cGc2JaC2a9LktvnzvrBC4NfIDQlRN 9n71wlQ9+0v7yIgblyae+A58U2KBpUA60Jh+yioNP0DVAqlNZnybCmAlx6tKDlLv2I/a 8q3w==
X-Gm-Message-State: AOJu0Yyz30ZANCazmEPNAW6UXYhTK+RtqjPqbUP6l8bFx0lx4eR9JHCB QILGAI0dt5hQhy7V8eT2GQKJ+S+TpBrkUiXNFn7cDVZAx1Pw7YOWyxMogOYXTT4R1vfp5KMqR/h f6K57hn/5rW337aY9c52M74IY6rAFH3t/R7l6d5lnh2qri/w=
X-Google-Smtp-Source: AGHT+IHbvQBe8KjP6UTDJgdAosRseusovJrbd1RFdH2292Gs0SulIudGSnoCrJSenYOCkoWVDmt1BnduuPrB3IigJZg=
X-Received: by 2002:a19:e016:0:b0:512:ab58:3807 with SMTP id x22-20020a19e016000000b00512ab583807mr793191lfg.9.1710812708591; Mon, 18 Mar 2024 18:45:08 -0700 (PDT)
MIME-Version: 1.0
References: <CACuR13cnHHoRv_Z-HtJeOyJqZb7AVU-_udQ=R_x9qQ1_JeP=KQ@mail.gmail.com> <EA99B248-7BD2-489F-8D86-8EE95D81F661@mnot.net>
In-Reply-To: <EA99B248-7BD2-489F-8D86-8EE95D81F661@mnot.net>
From: Jeremy Roman <jbroman@chromium.org>
Date: Mon, 18 Mar 2024 21:44:56 -0400
Message-ID: <CACuR13fHj9_rryosf4T6Z5JJ7JufjzCRrvR_O2_ch9iCk6N3wA@mail.gmail.com>
To: Mark Nottingham <mnot@mnot.net>
Cc: ietf-http-wg@w3.org
Content-Type: multipart/alternative; boundary="000000000000c5f6750613f99f18"
X-W3C-Hub-DKIM-Status: validation passed: (address=jbroman@chromium.org domain=chromium.org), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.5
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.374, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: puck.w3.org 1rmOXQ-009RJk-37 3e755c89c0fd595c95504d6d2555cd17
X-Original-To: ietf-http-wg@w3.org
Subject: Re: No-Vary-Search
Archived-At: <https://www.w3.org/mid/CACuR13fHj9_rryosf4T6Z5JJ7JufjzCRrvR_O2_ch9iCk6N3wA@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51899
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On Wed, Mar 13, 2024 at 11:11 PM Mark Nottingham <mnot@mnot.net> wrote:

> Hi Jeremy,
>
> I don't think we've talked about it formally in the HTTP WG before, but
> some folks might recall that No-Vary-Search was discussed at the last HTTP
> Workshop:
>
> https://github.com/HTTPWorkshop/workshop2022/blob/main/talks/no-vary-search.pdf
>
> I personally think it would be good to do this work in the HTTP WG,
> because it's not just browsers that want to do this -- it's also a common
> use case for proxy caches and CDNs. However, the interaction with being
> able to store more than one variant (which browsers currently don't do)
> needs to be thought through.
>

While one variant would be more typical, the implementation in Chromium's
prefetch cache is compatible with there being multiple stored -- though of
course proxy caches and CDNs are still likely to have a larger number of
variants.

If we were to implement No-Vary-Search in Chromium's disk cache, yes, I
believe our current cache architecture would pose some challenges.


> *chair hat on*
>
> We've got a pretty tight agenda in Brisbane, but if you're interested, we
> might be able to squeeze in 5-10 minutes for a _very_ quick overview
> followed by discussion. Please tell us if you'd like to try.
>

Unfortunately it is not possible for me to join personally (time zones and
personal complications). We might be able to brief a Chrome team member who
is attending if there is interest (depending when this is), though as you
point out it would necessarily be a fairly brief overview on short notice
(so it might not be possible).

Whether or not that happens, I'd be interested to hear what other folks
> think.
>
> Cheers,
>
>
>
> > On 21 Feb 2024, at 13:08, Jeremy Roman <jbroman@chromium.org> wrote:
> >
> > Hello HTTPWG:
> >
> > This is tangentially unrelated to my previous email, but I've split it
> into another thread to avoid entangling the two.
> >
> > A developer previously reported to us that their ability to use the
> prefetch cache was limited because their prefetch request URLs needed to
> include certain query parameters which are different from the navigation
> request URL, even though these URLs do not affect the resource the server
> ultimately produces (and therefore, the client can safely use the
> resource). The explainer we wrote goes through some of the possible use
> cases in more detail.
> >
> > The semantics we have right now (and the header name, No-Vary-Search¹)
> are designed with the concept of being implementable in non-browser HTTP
> implementations, but since browser use cases were what we are focused on,
> there are some places where the semantics rely on, e.g., WHATWG URL, which
> may vary in subtle ways from other concepts of the meaning of the query
> string (since IETF HTTP doesn't currently take a position on that as far as
> I know).
> >
> > The specification draft is currently hosted by the W3C's Web Incubator
> Community Group (WICG) and we've previously discussed it in a W3C context,
> but it was suggested that we bring it to HTTPWG's attention, too, and if
> there is interest among participants it could migrate to an HTTPWG RFC
> instead of continuing incubation in the web standards venues.
> >
> > ¹ This was originally No-Vary-Query, but the web-exposed APIs call this
> part of the URL "search", so this change was requested in a W3C discussion.
>
> --
> Mark Nottingham   https://www.mnot.net/
>
>