Re: signatures vs sf-date

Julian Reschke <julian.reschke@gmx.de> Mon, 19 December 2022 10:29 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DB6EC14CF17 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 19 Dec 2022 02:29:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.749
X-Spam-Level:
X-Spam-Status: No, score=-2.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmx.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D8xYNzg1_2Gz for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 19 Dec 2022 02:29:26 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E278C14CEEA for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 19 Dec 2022 02:29:26 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1p7DNg-006zHH-Ij for ietf-http-wg-dist@listhub.w3.org; Mon, 19 Dec 2022 10:28:24 +0000
Resent-Date: Mon, 19 Dec 2022 10:28:24 +0000
Resent-Message-Id: <E1p7DNg-006zHH-Ij@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <julian.reschke@gmx.de>) id 1p7DNf-006zGP-4a for ietf-http-wg@listhub.w3.org; Mon, 19 Dec 2022 10:28:23 +0000
Received: from mout.gmx.net ([212.227.15.18]) by titan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <julian.reschke@gmx.de>) id 1p7DNd-00DBjP-Fv for ietf-http-wg@w3.org; Mon, 19 Dec 2022 10:28:22 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.de; s=s31663417; t=1671445689; bh=gNhznUYLg7Lp9zYk/0ZBCL4OkkmF4pBdCagUTAt8DG0=; h=X-UI-Sender-Class:Date:Subject:To:References:From:In-Reply-To; b=BUyLINFKPgaktsF6GU1Uf4cFJPq1w/u9mG7LKuEoacWk5a33dQlP35NwaRhU4noET CIc4oNH/3QEToKckbmhTNicwCLYBjhJ0Lsro+RASJYX8FQfaclwQ2mvdKKpqmVkpAe xzOfLE2Vh50Q/Kr5+UmiY0241Av6Rlh9IwlmXLUHSmI028WDB7P2fnGfDWFIyieHXN G/YFh790i3nDNjMips+J9DfWzDlq0FfzUpvKaly4XaJeA9UGdqop04oESX9RVgX9o3 zhC8prSBDkgfiuJidhEhheVz74Y/c7sSuEObBdfhDP/ZUhsYor6nr5Yd0lkNxZaN2+ nXCazbFSGe7mA==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [192.168.178.179] ([91.61.62.172]) by mail.gmx.net (mrgmx004 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MUGi9-1pGsQc3JTf-00RHpE for <ietf-http-wg@w3.org>; Mon, 19 Dec 2022 11:28:09 +0100
Message-ID: <8b547e17-1f24-ff1f-90d1-ec4c974de88f@gmx.de>
Date: Mon, 19 Dec 2022 11:28:09 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.6.0
Content-Language: en-US
To: ietf-http-wg@w3.org
References: <2070c8e0-98d6-7b63-77c3-550bcd661397@gmx.de>
From: Julian Reschke <julian.reschke@gmx.de>
In-Reply-To: <2070c8e0-98d6-7b63-77c3-550bcd661397@gmx.de>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:9k+ksJhPqKY5uH4BMNU9oZoXtP+THVgqWygcOpiWsdSGESfx6h0 pKXMZaVstaCkI7V4CAmqWhvkEOswDnv+AYLGTJHr2h2t6j3Evjvd3ZsGwHiIA4VXM0tMcjH k8oTKGiipCUCCzglb96nJFrVEIr5WPgQvjmjpmX+gBLQKBzTnHW4b6wAwsFcx2QpdKgAKMj j7c8Oi6Za/AmJ+6UucPZw==
UI-OutboundReport: notjunk:1;M01:P0:4MeiLtCrVAI=;PqL0A2wJzOwHDKb/EHKsGQtLHeu usvMQ2r88K3rR8zpfPvdcB49sfcptOUKm3HudwSL2k1eXQrXNiEduZBFmd+sSckipJtKwwB60 81khDRrxSwuag0mEhSmUMVgJadyYKJ9E4OdXsycwOTLQZr8L3ALSFnqKD6/+fwNP1tJg8HvTf 9L6WBmbjjHQjnR6OgQzn8/KJe/4g/MEHNFDXtTeOg5vf0qXvose6ov8dEtWkJPC71tBW37f2f ZyszilKm+00i61iv8Hq1rzCWwLU5mqzQh0gDXONJ6wSPpiHsuEysgK8GmMlnAOpLO1Lq5ZFPw pqVTei0wBDbrXqdFjV6UKHq5KiyASrSJIXovT5TSd6ZVhXembF8gZzaDdCVdEnbhZhSsPz4wa 88PDlFc0hrovaA3yAPpxYaupxB7EpD6J6PxGi8+yXh0MFgMTo2mU0TeU8HfKLLQS4hRRWloUh B8JfRKWZhyxtP0orJPDClX8ORufRnYm2W1KwIN8dixB/K1GJ1giPpvxDto0ge2hGBd2Wo4iCE TEtzFJBSm3pLwHOU6uStCbIsqWSPvIIsL5Ry47y76uZ/7y9BuOja7mvsGv20Vxu+44R/WKd8M IElgQbEZx+59ujfSxni8My53v7O+qk3MkgxE+IvFEegKvqor9nf3+WxE0z3P3BDKK5huMIA3/ LLB75FHVQv2brD+p2iffkSsJl7s6wmk/BFjKmYYiJbutwRtZrlI29RYycF9wQRGO0TJ0Y/qdO C30xi2WLu/7/LZCRk4ZpbDv1yy8uBAnyawjf8L07akf8ya9QRFnaU0yS4gYukhtSXld4w7s0i eNntRVLS+s4mCkbIam1gu6QA81Gdfvgv9KWWch5gIbgXJU/7+VYt/MKOgJsDeD5Zt6PbH8rBw KAyqxTLN0QN5qX4fxYyBvWa9EAExX1riCTWCD30BKZq8X7770LrZDVxvsdr5k2QMCCJSzGmNp B9zWZw==
Received-SPF: pass client-ip=212.227.15.18; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=gmx.de), signature is good
X-W3C-Hub-Spam-Status: No, score=-6.9
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.149, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1p7DNd-00DBjP-Fv 7d2d661f73f7489cc31760f402164361
X-Original-To: ietf-http-wg@w3.org
Subject: Re: signatures vs sf-date
Archived-At: <https://www.w3.org/mid/8b547e17-1f24-ff1f-90d1-ec4c974de88f@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/40659
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 01.12.2022 18:16, Julian Reschke wrote:
> Hi there.
>
> Currently the signatures draft relies on structured fields as defined in
> RFC 8941 - that is, without the date type we are currently working on.
>
> We need to make a few decisions here:
>
> 1) Should signatures *use* the date type in the field(s) it defines
> ("created" TS)?
>
> 2) When signing parts of a SF shaped field, should it support RFC
> 8941bis in some way?
>
>
> 1) would require delaying the signatures spec until sfbis is ready - I
> don't think we want that, unless we can finish sfbis *really* quick (can
> we?)
>
> If we do *not* wait for sfbis to be ready, should we add some text that
> would allow implementers to make use of sfbis-shaped fields?

FWIW - I've been working on the minimal changes to extend my SF
implementation to support sf-date. My test suite incorporates the tests
from <https://github.com/httpwg/structured-field-tests> and now fails,
because there are tests expecting an sf-date shaped item to be an error.

This sort of confirms that we really need to figure out what the
expectations for users of SF (be it implementations or specifications)
are - is support of sf-date an extension you need to opt in somehow?

Best regards, Julian