[Technical Errata Reported] RFC9110 (7870)

RFC Errata System <rfc-editor@rfc-editor.org> Sun, 24 March 2024 18:36 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 499E7C14F600 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 24 Mar 2024 11:36:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.755
X-Spam-Level:
X-Spam-Status: No, score=-2.755 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="gdR5HLLr"; dkim=pass (2048-bit key) header.d=w3.org header.b="iWKjgsYi"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-v5D0yDqMPg for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sun, 24 Mar 2024 11:36:40 -0700 (PDT)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97E25C14F5FD for <httpbisa-archive-bis2Juki@ietf.org>; Sun, 24 Mar 2024 11:36:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Date:Message-Id:Content-Type:Cc:From:To:Reply-To:In-Reply-To: References:MIME-Version; bh=k/+VXxll1mRGGKataewnM15mvgD2mP1vEOGG94aX1lo=; b=g dR5HLLrGf5AHlux2VpbzPftHATNhF5ibC5M5kqv3atXZ6K4NwVX/xqMA/E5OpJtoNigVca6woCTp5 /DcR5TL11+DGpkxpNXlyYKgrM5b2OJTkaFc/euUJx+HgHMQu7eCD1KvweAtWpoU/iCUKPraoR5Wdu u2VRAqDH4PeITQ0U9i0u8FKLimDUCfdCyqwRHLVwtbozf7sHM88UCYRmaPfqTLWMkhs+KNe9659FP jLQ/nnt0jmP9PpWc0wR0G6QvGTB9BF+9Nj7JRQOG9dopNXSBpTHFh8D3S8aaB2cdjG9VRg325+L0E Ld4+X1hcZitPQHLKiJR5TMcjn7YAgdlmQ==;
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1roSev-00EiNE-Cw for ietf-http-wg-dist@listhub.w3.org; Sun, 24 Mar 2024 18:33:29 +0000
Resent-Date: Sun, 24 Mar 2024 18:33:29 +0000
Resent-Message-Id: <E1roSev-00EiNE-Cw@lyra.w3.org>
Received: from puck.w3.org ([34.196.82.207]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <wwwrun@rfcpa.amsl.com>) id 1roSes-00EiM8-Rk for ietf-http-wg@listhub.w3.org; Sun, 24 Mar 2024 18:33:26 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Date:Message-Id:Content-Type:Cc:From:Subject:To:Reply-To:In-Reply-To: References:MIME-Version; bh=k/+VXxll1mRGGKataewnM15mvgD2mP1vEOGG94aX1lo=; t=1711305206; x=1712169206; b=iWKjgsYirot6B+wg38hUJoF2KLdmroNQAP5xsqKnW3FlC/G 3qAIReBpvuqvs3XzPSqF4LTiuZ0y9QVpFJJdmlt18kFVHNTVH0WX9wkB9j8wwKLrayDbrOiKaoBAR pn67P/JYE6EqLpDF1rv7MJ4USLIKOiLPHCPksVNlDOn+DvCtPhUKM922nRlEtYAoJr2xgwLt5UGf6 MMvWm0VMxYLeB56JRQB4RCg4u2Dir+JwZTR/Z6AX9MqV16IZsgoOGXm3V5QP+eWoQwxWvLVnJTZxz NR9L6Ja0/A4mUhKuH9SV6ksmQfCSVeFAgNnDYCEznhPjKS2TDIbKPUp4LN3YoCmQ==;
Received-SPF: pass (puck.w3.org: domain of rfcpa.amsl.com designates 50.223.129.200 as permitted sender) client-ip=50.223.129.200; envelope-from=wwwrun@rfcpa.amsl.com; helo=rfcpa.amsl.com;
Received: from rfcpa.amsl.com ([50.223.129.200]) by puck.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <wwwrun@rfcpa.amsl.com>) id 1roSeo-00BOih-2E for ietf-http-wg@w3.org; Sun, 24 Mar 2024 18:33:26 +0000
Received: by rfcpa.amsl.com (Postfix, from userid 499) id A752011FD91; Sun, 24 Mar 2024 11:33:18 -0700 (PDT)
To: fielding@gbiv.com, mnot@mnot.net, julian.reschke@greenbytes.de, httpbis-ads@ietf.org, mnot@mnot.net, tpauly@apple.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: benjamin.p.kallus.gr@dartmouth.edu, ietf-http-wg@w3.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240324183318.A752011FD91@rfcpa.amsl.com>
Date: Sun, 24 Mar 2024 11:33:18 -0700
X-W3C-Hub-Spam-Status: No, score=-4.7
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DMARC_MISSING=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: puck.w3.org 1roSeo-00BOih-2E 0a6305133b520bcb69c8ed7411121ad6
X-Original-To: ietf-http-wg@w3.org
Subject: [Technical Errata Reported] RFC9110 (7870)
Archived-At: <https://www.w3.org/mid/20240324183318.A752011FD91@rfcpa.amsl.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51904
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

The following errata report has been submitted for RFC9110,
"HTTP Semantics".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7870

--------------------------------------
Type: Technical
Reported by: Ben Kallus <benjamin.p.kallus.gr@dartmouth.edu>

Section: 8.6

Original Text
-------------
   Likewise, a sender MUST NOT forward a message with a Content-Length
   header field value that does not match the ABNF above, with one
   exception: a recipient of a Content-Length header field value
   consisting of the same decimal value repeated as a comma-separated
   list (e.g, "Content-Length: 42, 42") MAY either reject the message as
   invalid or replace that invalid field value with a single instance of
   the decimal value, since this likely indicates that a duplicate was
   generated or combined by an upstream message processor.

Corrected Text
--------------
   Likewise, a sender MUST NOT send a message with a Content-Length
   header field value that does not match the ABNF above. A
   recipient of a Content-Length header field value consisting of
   the same decimal value repeated as a comma-separated list (e.g,
   "Content-Length: 42, 42") MAY either reject the message as invalid
   or replace that invalid field value with a single instance of the
   decimal value, since this likely indicates that a duplicate was
   generated or combined by an upstream message processor.

Notes
-----
This change aims to fix 2 issues with the text:

Issue #1
Recall the following from section 8.6:
> Likewise, a sender MUST NOT forward a message with a Content-Length header field value that does not match the ABNF above, ...

It wasn't immediately clear to me which of these was the intended meaning:
1. Upon receipt of a message with an invalid Content-Length value, senders MUST NOT forward the message.
2. Upon receipt of a message with an invalid Content-Length value, senders MUST NOT forward the message with the invalid value intact.

Mark Nottingham confirmed on GitHub that the intended meaning is option 2:
https://github.com/httpwg/http-core/issues/1113#issuecomment-1937914210

I propose that the word "forward" be changed to "send" to clear up the ambiguity.

Issue #2
We've just established that the intended meaning of the first half of the sentence in question is that malformed CL header values MUST NOT be forwarded intact.
An exception to this rule is (by definition) a situation in which invalid CL header values *are* permitted to be forwarded intact.
The "exception" described in the text does not allow for invalid header values to be forwarded intact, so it is a misuse of the word "exception."

To clear this up, I propose that the sentence be split in two, and that the word "exception" be removed.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9110 (draft-ietf-httpbis-semantics-19)
--------------------------------------
Title               : HTTP Semantics
Publication Date    : June 2022
Author(s)           : R. Fielding, Ed., M. Nottingham, Ed., J. Reschke, Ed.
Category            : INTERNET STANDARD
Source              : HTTP
Stream              : IETF
Verifying Party     : IESG