Re: ietf106: ratelimit headers follow up

Mark Nottingham <mnot@mnot.net> Tue, 19 November 2019 07:45 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 736C712087F for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 18 Nov 2019 23:45:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.751
X-Spam-Level:
X-Spam-Status: No, score=-2.751 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, MAILING_LIST_MULTI=-1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=hnCjfqGr; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ZKNSO+VZ
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xI5H6g8AE7ed for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 18 Nov 2019 23:45:09 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [IPv6:2603:400a:ffff:804:801e:34:0:38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B62B912087C for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 18 Nov 2019 23:45:08 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.89) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1iWyAd-0005tw-KF for ietf-http-wg-dist@listhub.w3.org; Tue, 19 Nov 2019 07:43:31 +0000
Resent-Date: Tue, 19 Nov 2019 07:43:31 +0000
Resent-Message-Id: <E1iWyAd-0005tw-KF@frink.w3.org>
Received: from titan.w3.org ([2603:400a:ffff:804:801e:34:0:4c]) by frink.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <mnot@mnot.net>) id 1iWyAb-0005t1-NA for ietf-http-wg@listhub.w3.org; Tue, 19 Nov 2019 07:43:29 +0000
Received: from out3-smtp.messagingengine.com ([66.111.4.27]) by titan.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <mnot@mnot.net>) id 1iWyAW-000605-U3 for ietf-http-wg@w3.org; Tue, 19 Nov 2019 07:43:29 +0000
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id D8DD822017; Tue, 19 Nov 2019 02:43:21 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 19 Nov 2019 02:43:21 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm1; bh=R hxHQ8fQb6ySK2wttikDKypWjc3wH8XJBQ6HZcdUMBM=; b=hnCjfqGre9ucU8ijY fASFiDnokRFJiUGwFnqOWacGWTh1DbW6z7eboJg8JCSY4hCTk9y5A8YsWlLd8Rl+ ZIOCmnHGSMZKNL6wlQhHT/T9keVJWF4KIJJJlsn1eSq+9fllNngwGgOdCkAF12/H cKKD7hMxMh2HmBoh6ek5VN161nQYNpqp0DiQbYIY7RNn5U+yW7w7tGpj22WKJ4G4 nfMnhUJ7kcKoX7WhEYw9RDBC3vBmdCLE+IF1MIL7zA/zdwX/ux+7LP26tOJ7KNDW UPrw4dlF+kMBkTCi5QGb6wtNvSPle9TdKkZSLjnSbhHC68K+QvKAlUPlhLBT2+0j D8KXA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=RhxHQ8fQb6ySK2wttikDKypWjc3wH8XJBQ6HZcdUM BM=; b=ZKNSO+VZ8rKGoxCu43HGO6IrLW9Hxtv95G1KzCfPK1k/y6LGHFaCge+PZ OdGKyO0hNxEjxycbXhuUKJ1gJ7atFFVK10V9/J9eHVSeVr8KeaIt6EKzSj5G6630 GiZiAighkp4jXVpge/j5wcb8W3J4NxykS9HB5+KmwXJ2I/+bQq75oEbDBIlrV38y 85Qa/N/AWiVendTF2HUWHgdtKnZewcihJoqztcZTkmt/D81Z1kAEoAfSEGJxYdlA RNwgVzfKGYg6FVsjNHd40wVfq7qdU3mCL9iVJ8jYYY3KegW6odDjGmJkvPu2gZuH wMqYEPOwxR0aZno+Lj+C2jNcPmiAw==
X-ME-Sender: <xms:GJ3TXeoE2DlpOPvnK_eXG2RiSYIWSEAyF99UcEFPbNF1_Nkc5ftQNw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrudegjedgudduudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enogfuuhhsphgvtghtffhomhgrihhnucdlgeelmdenucfjughrpegtggfuhfgjfffgkfhf vffosehtqhhmtdhhtddvnecuhfhrohhmpeforghrkhcupfhothhtihhnghhhrghmuceomh hnohhtsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgohhoghhlvgdrtghomhdpghhi thhhuhgsrdgtohhmpdhmnhhothdrnhgvthenucfkphepfedurddufeefrdduhedtrdduge efnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmnhhothesmhhnohhtrdhnvghtnecuvehl uhhsthgvrhfuihiivgeptd
X-ME-Proxy: <xmx:GJ3TXSvj1m3m2JT7FUFqgaUyeQXn7k_DJvoj1K_CqfnzzyyzAMKzlg> <xmx:GJ3TXWe8xArf7stUgiXKxdXDKFSbpYY9-58HFDpF0BPOpZLta4WWuA> <xmx:GJ3TXWBZo4c6COFuLK2Dku93Rpg0HFL0ZoxZP4mwSO2YBbhCsW0pAg> <xmx:GZ3TXShhPD9Ga23crqv5fW8SqdTS2MkRYQ9fXe2RTVzWzihIB9Ga9g>
Received: from dhcp-968f.meeting.ietf.org (dhcp-968f.meeting.ietf.org [31.133.150.143]) by mail.messagingengine.com (Postfix) with ESMTPA id A08F9306005E; Tue, 19 Nov 2019 02:43:19 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <CAP9qbHVsao03hDvkACZFSFbLhEt-HyZ_Lueuoyf+7ytQa2qn9g@mail.gmail.com>
Date: Tue, 19 Nov 2019 15:43:15 +0800
Cc: HTTP Working Group <ietf-http-wg@w3.org>, Alex Martinez <amartine@redhat.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <C573DE86-39B5-48AB-9C21-0717F4EBEB59@mnot.net>
References: <CAP9qbHVsao03hDvkACZFSFbLhEt-HyZ_Lueuoyf+7ytQa2qn9g@mail.gmail.com>
To: Roberto Polli <robipolli@gmail.com>
X-Mailer: Apple Mail (2.3601.0.10)
Received-SPF: pass client-ip=66.111.4.27; envelope-from=mnot@mnot.net; helo=out3-smtp.messagingengine.com
X-W3C-Hub-Spam-Status: No, score=-9.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1iWyAW-000605-U3 4bc4785066a533ff06ddaa4929d1f587
X-Original-To: ietf-http-wg@w3.org
Subject: Re: ietf106: ratelimit headers follow up
Archived-At: <https://www.w3.org/mid/C573DE86-39B5-48AB-9C21-0717F4EBEB59@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/37148
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Hi Roberto,

Good to year the feedback was well-received.

As a reminder, this draft hasn't been adopted by the group yet. I think that discussing the proposal on-list is appropriate, but it's not an official WG item yet, so we won't call a meeting about it yet.

Regards,


> On 19 Nov 2019, at 3:37 pm, Roberto Polli <robipolli@gmail.com> wrote:
> 
> Hi @all
> 
> and thank you for all the feedback provided during yesterday's presentation!
> 
> https://docs.google.com/presentation/d/1tDBzMZ81iDXmGjQR2yaxuQ5-W03Xeerllkr_9PYsOtw/edit#slide=id.p
> 
> It would be great to organise a remote meeting to push forward the
> spec (we're in CET timezone though).
> 
> Some points:
> 
> - support scope
> https://github.com/ioggstream/draft-polli-ratelimit-headers/issues/70
> - support for structured headers (help wanted
> https://github.com/ioggstream/draft-polli-ratelimit-headers/issues/35)
> - relationship with proxies and security considerations
> - improve FAQ (eg. why github ratelimit model is not enough and
> contributes to header proliferation)
>  https://github.com/ioggstream/draft-polli-ratelimit-headers/blame/master/draft-polli-ratelimit-headers.md#L1011
> 
> 
> Thanks again to everyone,
> Roberto
> 

--
Mark Nottingham   https://www.mnot.net/