Re: Question regarding RFC 7230

Julian Reschke <julian.reschke@gmx.de> Sat, 07 January 2017 21:09 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 402B1129B95 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 7 Jan 2017 13:09:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.12
X-Spam-Level:
X-Spam-Status: No, score=-10.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.199, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eyUdNV2QX3Ve for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 7 Jan 2017 13:09:29 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE5A8129404 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Sat, 7 Jan 2017 13:09:28 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1cPyCR-0007Au-8m for ietf-http-wg-dist@listhub.w3.org; Sat, 07 Jan 2017 21:06:51 +0000
Resent-Date: Sat, 07 Jan 2017 21:06:51 +0000
Resent-Message-Id: <E1cPyCR-0007Au-8m@frink.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by frink.w3.org with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <julian.reschke@gmx.de>) id 1cPyBQ-000793-3Y for ietf-http-wg@listhub.w3.org; Sat, 07 Jan 2017 21:05:48 +0000
Received: from mout.gmx.net ([212.227.17.21]) by titan.w3.org with esmtps (TLS1.2:DHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <julian.reschke@gmx.de>) id 1cPyBJ-0007UG-1G for ietf-http-wg@w3.org; Sat, 07 Jan 2017 21:05:42 +0000
Received: from [192.168.178.20] ([93.217.111.75]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LufbI-1cYsBo0I2S-00zrkK; Sat, 07 Jan 2017 22:05:08 +0100
To: "Hartford, Eric" <hartbeat@amazon.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
References: <9F52BB0C-85FB-40EB-B5F8-6C6F91346A25@contoso.com>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <ac2e0918-4d63-5aac-324b-32fcc4b19b39@gmx.de>
Date: Sat, 07 Jan 2017 22:05:07 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0
MIME-Version: 1.0
In-Reply-To: <9F52BB0C-85FB-40EB-B5F8-6C6F91346A25@contoso.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Provags-ID: V03:K0:Mdy71xhfgFUzBoAmPc5EE3KXnyW4VnfX4/LPrR6Fq5t8DqvOpCW kWRwR+Xp54e4zdCkNnt5LQCe3l9Sk28XNEvr/0ay45I9GQ5qs8sbDD/QgtYC9dQwPTD8H3B R7GRPabNkLpwqRmADO9lNsJmge7lK7pUoIuAY7PbYwBl45/G+jSxugVtz6cONmloFLHGy0c Q6CO98wqy4CLEQFIOj37Q==
X-UI-Out-Filterresults: notjunk:1;V01:K0:nuqFAseKcSY=:jv4mrxjS/NW/cR7NcrDI6V iL+X2azsmM6TgPH8C/6ljWy28luBLuPjb2E1AQXIhg1t+b42EchCg9l/luYcTz+e7rbfhWVeZ W195IJQ6AguC+Z1fvdgIgpbimjPvqpjLnYl+0BbRvt1MvwO2AufSFNWv6QyHdvU2F1u4Yjr59 clOsQ/bdk4XSIILRQY8MFHKES2pWpBl1Sqw+R9BIcJil3NggC7MloSfoaT5QqhRJ03vuYqfBD g+3+PHrA068CMRuN7zMrw3qkrrETxYgIRQTCAn4Zl99NnTgMu39ntfzbg46kRnq4Yw0Kmlihy bk2hJL/8Ccm6om4nCxunMo0C62XqWTdUfxHJhFl/y8pAv+3C2Fg09NK5i3LLtCuBhP0seBvbo avwMG9MqQBtTOAqVUQRf7xCp52McxZFmKKBNgyv/l12AMV+FS4VgCVtPz6Yw+bKcGaz9NX7dj K3NLb5smEp/zcC4wIxqghXjcdvAFH/u/cFpeuWGcVtp65ghB141E30D3Vk1ABK/1gsFK/RB5F gD0AirtuWxumwTKIyhvQoXJqpNJz4knDgroh6NXBSPLfa1l5AfbxJM9AMUHxXX/A2smoaVEHC +DEQNZPsXJNN4O5Cjaq9hI8cJ29dZfPURmrkTY7Mg1Ylz0giJ36SXjLzZnKY1xcrtbHmPHLKU qcYq23MXEdr81AMHWpHfOL7kJEP8DVeeDQAzVmy3z9PWHpZaSA8a9kmQovKEbrid/56WVcFMn 3FbFn42SDkjiyS8ndazxd+VIB7IH4i0enjswLmGB4RtMDFhwU/Xo3YonFOg5VlKMb0GVY/hOR Vw5bv0mICev2nv+UBhtuLYhSSHdWn/AJjqNtHDL2YfoQzWu/nwGQXXZp/bwAiQ+0zXmhw6nBt CVuFN7zgT0ZakSUMYeubDeqjoDlxr547BZRKQOCdDsdKdJkgrTHk+fb5FfFe5sG9pQp4j/2II rVhNgtm/f1NS7ExUn9t1ucwF+UChH9cfotgj2Jry/GlthpA2kPusUgRT6geHGFsmmphH0XOUG nASv7ANT0AP3bRDTeLnh0R4=
Received-SPF: pass client-ip=212.227.17.21; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net
X-W3C-Hub-Spam-Status: No, score=-7.2
X-W3C-Hub-Spam-Report: AWL=0.578, BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-1.156, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1cPyBJ-0007UG-1G 5f082c94d35e0f1be4a7ce21f3e6fc5d
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Question regarding RFC 7230
Archived-At: <http://www.w3.org/mid/ac2e0918-4d63-5aac-324b-32fcc4b19b39@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/33266
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 2017-01-06 01:01, Hartford, Eric wrote:
> I have a few questions I was hoping to clarify.
>
> Is a GET request allowed to have a body?  (the spec seems to say “yes”)
> RFC 7230 3.3 <https://tools.ietf.org/html/rfc7230#section-3.3>
> The presence of a message body in a request is signaled by a
> Content-Length or Transfer-Encoding header field.  Request message
> framing is independent of method semantics, even if the method does
> not define any use for a message body.

Yes.

> Is the server allowed to look at the body in a GET request?  (debatable)
> RFC 7231 4.3.1 <https://tools.ietf.org/html/rfc7231#section-4.3.1>
> A payload within a GET request message has no defined semantics;
> sending a payload body on a GET request might cause some existing
> implementations to reject the request.

It can look at it, but it wouldn't be wise to do so (for instance, 
because other actors might have removed it).

It would be helpful if you explained what you're looking for. A safe 
method that allows a request body, so data doesn't need to be sent as 
part of the URI?

Best regards, Julian