Re: Method Mania

Julian Reschke <julian.reschke@gmx.de> Sun, 28 July 2024 05:04 UTC

Received: by ietfa.amsl.com (Postfix) id 4F306C14F708; Sat, 27 Jul 2024 22:04:08 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E6CEC14F705 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Jul 2024 22:04:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.857
X-Spam-Level:
X-Spam-Status: No, score=-2.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="E596+b2N"; dkim=pass (2048-bit key) header.d=w3.org header.b="YEPtiKw0"; dkim=pass (2048-bit key) header.d=gmx.de header.b="MxhT2wyM"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aPYBy7VlBLUB for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Jul 2024 22:04:04 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89929C14F6EA for <httpbisa-archive-bis2Juki@ietf.org>; Sat, 27 Jul 2024 22:04:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:In-Reply-To:From:References:To:MIME-Version:Date :Message-ID:Cc:Reply-To; bh=+AdtPshYSgrHl6u5kTOoQ2bn+mgD3OPFPTPnyqcC6zM=; b=E 596+b2NKEjfCxtm8lP+lrvUGjUXIbzlEj7pZtL7fOLH4zlTnzOqB//Ae7xFyb/GFfkM6KmFCcizyL V0YSGrXSLLc4y6eC3UV02MHRKAYaR8BhyCgc9MT/tRkblMy3ymrNp+t4jHNYUyyHbhuqN2d1QdGcQ k5nXiF6tPyYi1wJn9isZDN3sxf6rZbJNIAAXNjRE16haQkcINzw/3w1Un0JQCvwRl2NqKQgF1G95w qSoO2XdqB8YlhnNTQ2VuAl+RbkUemIjZFARgaVRRKoxA/BrP9THarktMjN5awZN8nuAlq2jvVQ/Ra /F0NI1ymbjPAdPSP95W42JIa2l/4NuvBw==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sXw3i-00CXiQ-1G for ietf-http-wg-dist@listhub.w3.org; Sun, 28 Jul 2024 05:03:02 +0000
Resent-Date: Sun, 28 Jul 2024 05:03:02 +0000
Resent-Message-Id: <E1sXw3i-00CXiQ-1G@mab.w3.org>
Received: from ip-10-0-0-224.ec2.internal ([10.0.0.224] helo=puck.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <julian.reschke@gmx.de>) id 1sXw3f-00CXcv-0D for ietf-http-wg@listhub.w3.internal; Sun, 28 Jul 2024 05:02:59 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:In-Reply-To:From:References:To:Subject:MIME-Version:Date :Message-ID:Cc:Reply-To; bh=+AdtPshYSgrHl6u5kTOoQ2bn+mgD3OPFPTPnyqcC6zM=; t=1722142979; x=1723006979; b=YEPtiKw0WiPMn2Q8H0ICnpyb6udyZKKDet4x84IhO5dnCxL GpRQh4oYaALERZ06zb8mQ7hCiay2ccbRw+3CM5r5fhMI/2epWlNhzCja/sjHJC7C4058kjn3eQb+G pqpWdYP8FuZSyA2sCQZlKy7yKLB0zhXPnKNIaQyRloGAihpKF7hhXc/xvF558YbJ5G3hPNtZPROXW yt7NxOclhfWmSXJPJsFCCYfE2GTE+1Md+WY8HeE6ix2BMVjJziFb5PDUpYBOOTeUJwowJ4hdACRHM lUXF/oq8rbI8QC6G8YTY45jlrvUFXHJHtIU5S69lofrtskyhh8NXVnQpaqhD6DcQ==;
Received-SPF: pass (puck.w3.org: domain of gmx.de designates 212.227.17.22 as permitted sender) client-ip=212.227.17.22; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net;
Received: from mout.gmx.net ([212.227.17.22]) by puck.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <julian.reschke@gmx.de>) id 1sXw3e-005KXd-12 for ietf-http-wg@w3.org; Sun, 28 Jul 2024 05:02:58 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de; s=s31663417; t=1722142974; x=1722747774; i=julian.reschke@gmx.de; bh=+AdtPshYSgrHl6u5kTOoQ2bn+mgD3OPFPTPnyqcC6zM=; h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:Subject:To: References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding:cc:content-transfer-encoding: content-type:date:from:message-id:mime-version:reply-to:subject: to; b=MxhT2wyMRWM0wGm+e4UTh44B2Q0zcvEb2kLwlwpHAM6qOVynCoaG+6e6ImlA3XLC QgWIJJXR5Jo2m7O+HwgNJUu+zQTPFYfZb7O4dvo/B3rH3aX3xyX8gStUjJb/cLfo3 Cnb43VHl32swbouULa3BF80HbOESNFHnKE0UXcJjRBFGPhd0f+GwlUEpbuN66YAnV E1Est7mk/DVy4pHOmqMqShCGD7cLCQ8bOzc0KRwjnVygEaVEQS/Uz770XVkMbm0hj STferlBoKZp4nAR3Up6bPs1QBeen9Il7eaVxss4/6Y9kHjmBndpI/ikT5+vhou5be r7OYkT1TGJMZGj7BOg==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [192.168.178.182] ([84.171.153.251]) by mail.gmx.net (mrgmx105 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MRmjq-1sjScR3gSI-00KKPz for <ietf-http-wg@w3.org>; Sun, 28 Jul 2024 07:02:53 +0200
Message-ID: <cd25a358-1e8a-43b7-ba61-3d16ad28b1e4@gmx.de>
Date: Sun, 28 Jul 2024 07:02:52 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: ietf-http-wg@w3.org
References: <CAF3KT4QZzx+FXOUHZoy+gPqJjQ+4KdOC+_29vbUANNtZQS4c+A@mail.gmail.com> <ba56fad8-e121-4c06-9a2d-783ef82471e0@gmx.de> <CAJV+MGz8hUTqar51V9wV=WPnWETDK+ECjWCTXYS92xXM5HEF_w@mail.gmail.com>
From: Julian Reschke <julian.reschke@gmx.de>
In-Reply-To: <CAJV+MGz8hUTqar51V9wV=WPnWETDK+ECjWCTXYS92xXM5HEF_w@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:h81Sbjch1ytXPtZ6NKLyuwt5sWpQNTI8AvLaqdIGpypMr7ziLn8 KYLW7XFsOtg55Z3XbZvcY48zOw+9bXsGT2nVq1w+R+9VDNGTSPj7/Q60mW2Irbck0y6gNsF gRy3TrTUpPkFZs59NcXEhCRCYso4IX9j8MMIgbs2MENMHGShMRirdU8ApEZmTuPcA1B3gPT LfPfSe3Bq2Zu37lSj7S7Q==
UI-OutboundReport: notjunk:1;M01:P0:DrBAP7ZVZwE=;YjBl+qpklf8ID0g7lf0gwLlFOT2 QHWJsymupVS2VmWVLdpyg5T5bb89HM7AvAdkCrPtGFvkzVewJ1z8DY6ZspuqFbpZInaMMwL3d f5vS6mJffFZeHukRtd3LzyyweB5gfuj2KrJEWpNqSEWpaGtFTM6NewaxigHAXpuT+Wvudr1Ys tJYOzcPhkK6s759i2CwsiTEHfvANycBuxJAORV6si0u0uGhQPm7Pg8/IPU9e2GTaYmTMEassa /lactC6ZpoNepNhWIOWXQM+j0/I2NoatdIZ+m90eyDva/5JPqdYSYTeztTMk6yLCfzrzkfbw1 3WYQFIGd6+0UZrm1GzfFRRYUAkfxhasnYeTNWyy141ViqH3CkPR+iu6C9xfqBCJ6uV18Xw2m8 8oCp2ARkJnInrfEEjdJSQ78OK/UtVZO6zuV7c4kBqt8hMDha/fsF7x73UtPTPXTHxm/BlWvZa 9jOR+NvE25LNBbuJT6N2n2XpvnlXAUjRgZoM5MuQ+QnA2i7hkc9InpIVJk2IzFjXvWQPXLHgd 2b0giU4WqNXTUyPIc6XYsyBLldJU6qWrJlNpqDjWrkmHuQiNx7zYBSwyLKCo+gajELag4O5Gc p7+eJvtZR2qb8OucSJkAsg/qEqO5k0RSpobynCNe4881PU2b6w6sTbHuWCdgIU7jTj3nwWFSU dnnZo7JDIxRCjIDxD6ap2qVUpsuStz15j38C49e8wKjLGfkFT36EFqyUEsjosJuxPF1dXn4Ho +cDcmp2IOK7M7std7Xozmvd4/efUk1VCBkvo9K90IaCOVJeWgsZZc6kyL0v3mYIxlVblrLFx8 lvAzuu0Ms50IfLW458l7EDSA==
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=gmx.de), signature is good
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=julian.reschke@gmx.de), signature is good
X-W3C-Hub-Spam-Status: No, score=-5.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, FREEMAIL_FROM=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: puck.w3.org 1sXw3e-005KXd-12 3ca9672547dd8c96d0dcc946f57d1fdb
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Method Mania
Archived-At: <https://www.w3.org/mid/cd25a358-1e8a-43b7-ba61-3d16ad28b1e4@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52160
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 27.07.2024 16:44, Patrick Meenan wrote:
>
>
> On Sat, Jul 27, 2024 at 4:23 AM Julian Reschke <julian.reschke@gmx.de
> <mailto:julian.reschke@gmx.de>> wrote:
>
>     On 26.07.2024 00:27, Josh Cohen wrote:
>      > On the httpwg agenda at IETF 120 were a proposal for a new QUERY
>     method
>      > and Braid, which has subscription functionality that overloads
>     the GET
>      > method.
>      >
>      > What I am curious about is if, at this point in the evolution of the
>      > web, it is now safe to add new methods for new functionality.
>     I've been
>      > reading up on HTTP/2/3 and it seems that nowadays, connections are
>      > end-to-end secure and are essentially tunneled through middle boxes,
>      > including HTTP/1.1 proxies. I'm still just wrapping my head around
>      > MASQUE, but it looks like it can handle arbitrary methods.  Similarly
>      > origin servers have evolved to support arbitrary methods.
>
>     It always has been "safe", when https was used.
>
>
> https is not "safe" in practical terms because of middleboxes that
> intercept the connections. It is very common in enterprise deployments
> where they install local trust anchors on the client devices and use
> mitm software to inspect the traffic.
> ...

I meant "safe" wrt deploying new HTTP methods.

When was the last time you encountered a problem?

Best regards, Julian