Re: signatures vs sf-date

Julian Reschke <julian.reschke@gmx.de> Tue, 24 January 2023 06:47 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D815BC157B45 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 23 Jan 2023 22:47:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.05
X-Spam-Level:
X-Spam-Status: No, score=-5.05 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmx.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o8SWgtLIT7_a for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 23 Jan 2023 22:47:41 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DDE5C1345E5 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 23 Jan 2023 22:47:34 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1pKD5V-007OeM-9g for ietf-http-wg-dist@listhub.w3.org; Tue, 24 Jan 2023 06:47:21 +0000
Resent-Date: Tue, 24 Jan 2023 06:47:21 +0000
Resent-Message-Id: <E1pKD5V-007OeM-9g@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <julian.reschke@gmx.de>) id 1pKD5S-007OdT-Vw for ietf-http-wg@listhub.w3.org; Tue, 24 Jan 2023 06:47:19 +0000
Received: from mout.gmx.net ([212.227.17.22]) by titan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <julian.reschke@gmx.de>) id 1pKD5P-004QmX-J0 for ietf-http-wg@w3.org; Tue, 24 Jan 2023 06:47:18 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.de; s=s31663417; t=1674542821; bh=3OfWfIBRABIqc2u0hlmi0MMtT1B2P8BX9YHaZIxXoHE=; h=X-UI-Sender-Class:Date:Subject:To:Cc:References:From:In-Reply-To; b=AICX+DGBpxfS4e4S2gzlJvrsoJUUO8mDxstPd0xUv085G6bH401F42Z/HFP925Ot3 6fh8uOjM8422BT1jrZbBBpoAf0BuYRHnRKFhDvohZfoA0EsScp+4rkDlDjOQyblbmV ME8k1v0V7R1z02bUpwH9+fuK4p64le4ei2z9CfJbfrnAGGhNGrw5bU77khQuTaef8f KaVbN8+vM8fcQKyumz/AQ3VZaYdZrml8DttxD+SE75pNkB2cZV6dBAkCjY1XsyCKkI kx7RC9wLOyAEWXLUSziIi28zpB8Mg6v7350s1DNdBUglGXsP7xDNd+00H6rhZ6XbXy Jojq1ijIdph1Q==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [192.168.178.20] ([217.251.130.237]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1Mi2O1-1opG3I2AMb-00e6LR; Tue, 24 Jan 2023 07:47:01 +0100
Message-ID: <7e13ab91-0979-f545-7868-7991bc396490@gmx.de>
Date: Tue, 24 Jan 2023 07:47:01 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.6.1
Content-Language: en-US
To: Mark Nottingham <mnot@mnot.net>
Cc: Lucas Pardue <lucaspardue.24.7@gmail.com>, ietf-http-wg@w3.org
References: <9f446816-7588-46af-6501-3508c1993752@gmx.de> <3C1E02FA-C2AA-4420-B3E1-A482230E0BB7@mnot.net>
From: Julian Reschke <julian.reschke@gmx.de>
In-Reply-To: <3C1E02FA-C2AA-4420-B3E1-A482230E0BB7@mnot.net>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:tYNVNzKu7PB+hhyk4A/P47xlN2mFBEooAqO2sDS5QWt1+5lSiPr f99C40+cCQdF7Q5K/hrfX4R163CFdpS/oCRE5jpNsVIbQ/dUZ+S9n8OoCKrUB8CNSi46Z6M BTXbFIlbVLMBt8vxKi8CtR/bR6hi30DVRH0CrsFakoSzzg2C5elagzQT7Jh28ik0ynMBedf 94HNDUkj8SLdWNkZf9r6g==
UI-OutboundReport: notjunk:1;M01:P0:NC6XhcQNBYg=;MPZ99/TasenNnmAnRYvkVoI+7RO SXVF/RwdHANTC0H1BO4RRz8DYHP/xhSkIXSYQf4UFuRasnL24BgkJEQGdHnQb8W6ADSmX5IRV CAaRuovNvDFI1oM3TKEEMD2cdcuDcj3cmsTwVjAPJ7WuYLbKNSOfQPWd29XaXVt26GQlC3N4U 4tefNH5EG58wyWvPkm1IQdXllXp4gcsxH44fFIUMm6X6AoVTaxts7UN0/X5zRmS7RkbwKy9t9 /mhypOwrB7q0Fpg6GaA4LfFMYOXwOcrXv5uh4+YM9VY40FYF+fZkGeKGr8SuCGkTXQwhlPDG6 qgHcHPF/nIHlsEQoDDhY4D2+ktdG2+oQXbNst0ZXPeQXiFx0qgjUNueozaKGAby00LhkFPAjK TptJVj4RuxHz7WactB/yOLjiCH9DmReDyDV6qHVVHXj81L9vvPrYQZQuRywYgD9hj3tZLkMdZ GsWNgc6KwBYhwg4I8Sb2ZYC+8MrSXAjwiMZt0yZ5Geb7/iDyNyd9US6yzhp73WXA/5il4iWmr A/6HFIgaWfGZcfwvpfvobbD6ROvCmAN/0PhqiYzqzLLlMZvSJ+BNvNTqZOuwGzRantFHqPxZ5 ZeyLDUKaAvvwCcW4RIVSpN768OduINYeqzCRuWuhjiSwY2UuQT8EX/0sNs1zm4BteuMnprgqX vwagL5W23TrNBDLoX9idA2VFin6j/WP2Gh/CGhV0jveIIINypz6Dx8BzewplLRfI2EMk0fuX+ 80FpJ3FClhqkZAfLEi4kpSRGyEU0GsPTB7IgYQSXxUmfTWgEyqCNEteJeedm0QcJCeIuty/9F Pz/8N31f0DSWSoBGMJabtqTNfOb+G6QWtlMf5jHrfOpZjfTlYkVx5Bhtp674HHzZwe7NsGB5k lAzsNCnfcstQa1a/m6WglCiIqwV+g+JlV0yxTIqpO9oIwytGX3J/3fGYL6LQIUSXkSK8o8FYa Pbbcqzj2+f00VqBw5lW5ieCbd1o=
Received-SPF: pass client-ip=212.227.17.22; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=gmx.de), signature is good
X-W3C-Hub-Spam-Status: No, score=-6.9
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.147, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1pKD5P-004QmX-J0 4c61c6cd15d17337e0fd487395092613
X-Original-To: ietf-http-wg@w3.org
Subject: Re: signatures vs sf-date
Archived-At: <https://www.w3.org/mid/7e13ab91-0979-f545-7868-7991bc396490@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/40709
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 24.01.2023 07:36, Mark Nottingham wrote:
>
>> On 24 Jan 2023, at 4:52 pm, Julian Reschke <julian.reschke@gmx.de> wrote:
>>
>> On 24.01.2023 01:01, Mark Nottingham wrote:
>>>
>>>>> On 24 Jan 2023, at 3:09 am, Julian Reschke <julian.reschke@gmx.de> wrote:
>>>>
>>>> What about a dictionary, where you're only looking for "x" (expected to
>>>> be an integer), but the sender adds an extension parameter "y" as sf-date?
>>>>
>>>> A conforming parser (of the current spec) will reject the whole field
>>>> value, and the recipient will not be able to see the value for "x".
>>>
>>> If you are parsing a field that uses Date, its specification will refer to sf-bis, not RFC8941. Therefore, you will need to use an implementation that claims conformance to sf-bis. What's the problem?
>>
>> The problem is that a generic library will not lookup the header definition.
>
> That’s immaterial; it’s the *use* of the library that’s important.

OK, so how will that work with the signatures spec then? (Signing a part
of a SF field that might have an sf-date extension parameter)

>> IMHO an important point of SF is that we can throw fields at the parser
>> without *any* out of band information.
>
> That’s not true; you’ve always needed field specific information (the top level type). This was discussed at length and widely known, so the assertion is a bit surprising.

Correct, you need to know it's a structured field.

What's new is that there might be different types (sf-date supoort or
not, retrofit support or not, further extensions...).

What I'm looking for is a strategy that avoid tons of flags in parsers,
and confusing APIs when using them.

> ...

Best regards, Julian