Re: New Version Notification for draft-bishop-http2-extension-frames-00.txt

James M Snell <jasnell@gmail.com> Tue, 12 November 2013 16:46 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CABB11E810B for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 12 Nov 2013 08:46:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.475
X-Spam-Level:
X-Spam-Status: No, score=-10.475 tagged_above=-999 required=5 tests=[AWL=0.124, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 972qpTAAAMeu for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 12 Nov 2013 08:46:33 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id D80C911E8106 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 12 Nov 2013 08:46:32 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1VgH52-00048X-6a for ietf-http-wg-dist@listhub.w3.org; Tue, 12 Nov 2013 16:44:44 +0000
Resent-Date: Tue, 12 Nov 2013 16:44:44 +0000
Resent-Message-Id: <E1VgH52-00048X-6a@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <jasnell@gmail.com>) id 1VgH4q-00044o-JE for ietf-http-wg@listhub.w3.org; Tue, 12 Nov 2013 16:44:32 +0000
Received: from mail-ob0-f176.google.com ([209.85.214.176]) by maggie.w3.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.72) (envelope-from <jasnell@gmail.com>) id 1VgH4p-0005Ei-5b for ietf-http-wg@w3.org; Tue, 12 Nov 2013 16:44:32 +0000
Received: by mail-ob0-f176.google.com with SMTP id wp4so4929831obc.35 for <ietf-http-wg@w3.org>; Tue, 12 Nov 2013 08:44:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; bh=VIPYsp1ldgs32jIiEX3UkDyN+ftxyWd+JvLa/1ihi6M=; b=ZZOmdwisMvgNSTeSyt3yzyybFWL6XoYH5l3/UxHbv0FQbwL0XwV6E8I5WnTUCs7IOK jYcpjtf7qm+DAS8B06TsEHasENkJpONK9m5HV+uLYQTXyyXgvcPQWiOsZdAUWLLq2hae yM9zi+/yykHzdPghLZHws4dP7k1cnBN2c/Per3c33PQUNPBvxT3KQsgR+rqMkUxGDRBr 1NadLZeu38HFggS7HmVF/pI2qQPCEPSaahRTJdrPd1IuWOH7ZLvHtOpAw4noDSoBslK/ YKIBULX3theUZshFOBKhAR9xjbvfXDBqXOk+d84gOwbEq2KChjRU4bXDQG93TNofS6XR HFwA==
X-Received: by 10.60.52.1 with SMTP id p1mr24761631oeo.41.1384274644956; Tue, 12 Nov 2013 08:44:04 -0800 (PST)
MIME-Version: 1.0
Received: by 10.60.124.137 with HTTP; Tue, 12 Nov 2013 08:43:44 -0800 (PST)
In-Reply-To: <21eb8653f65c8c9306c7258ec63be3f5.squirrel@arekh.dyndns.org>
References: <20131108191248.7092.81493.idtracker@ietfa.amsl.com> <22b40d443dcc474fb6a1ecd947e9fe9a@BY2PR03MB091.namprd03.prod.outlook.com> <CABP7Rbcp0EByWkjX=wZOREKfEwGN3hVm4gAe-bH2_dEpP5DpYg@mail.gmail.com> <CABP7Rbdv4QG-tBjyd5BR4-4OOzp-g9_NoTh-VOSg1Qw_18St7Q@mail.gmail.com> <33aa09afa0de40d3b7663343eef4903a@BY2PR03MB091.namprd03.prod.outlook.com> <CABP7Rbf29DCPnu_xuGbakGS43xGJd1ujtcJmLkY+jGBnm---gA@mail.gmail.com> <21eb8653f65c8c9306c7258ec63be3f5.squirrel@arekh.dyndns.org>
From: James M Snell <jasnell@gmail.com>
Date: Tue, 12 Nov 2013 08:43:44 -0800
Message-ID: <CABP7RbcTDhLD3p+L9MK0OvH+_qOUXo6+tWK7kYa20LTV78UNFQ@mail.gmail.com>
To: Nicolas Mailhot <nicolas.mailhot@laposte.net>
Cc: Mike Bishop <michael.bishop@microsoft.com>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Received-SPF: pass client-ip=209.85.214.176; envelope-from=jasnell@gmail.com; helo=mail-ob0-f176.google.com
X-W3C-Hub-Spam-Status: No, score=-3.5
X-W3C-Hub-Spam-Report: AWL=-2.713, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001
X-W3C-Scan-Sig: maggie.w3.org 1VgH4p-0005Ei-5b 5127dc71d1d546e22ddad4ff2b04c532
X-Original-To: ietf-http-wg@w3.org
Subject: Re: New Version Notification for draft-bishop-http2-extension-frames-00.txt
Archived-At: <http://www.w3.org/mid/CABP7RbcTDhLD3p+L9MK0OvH+_qOUXo6+tWK7kYa20LTV78UNFQ@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/20409
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Content filtering is a different matter entirely, and usually happens
in a way that is content-sensitive. The kind of "silent dropping"
that's being discussed here is indiscriminate, with no consideration
being given to the frame content. The fact of the matter is that
silently dropping end-to-end frames without understanding why they've
been transmitted is extremely dangerous.

On Tue, Nov 12, 2013 at 2:25 AM, Nicolas Mailhot
<nicolas.mailhot@laposte.net> wrote:
>
> Le Dim 10 novembre 2013 19:11, James M Snell a écrit :
>
>> -1 on the "may be dropped". As I've mentioned before, silently
>> dropping end-to-end frames could significantly impact the semantics of
>> the stream data and could have very bad unintended side effects. The
>> result is that end-to-end extension frames become impossible to rely
>> upon. The better (and more reliable) option is to require that
>> end-to-end frames are either passed through untouched or the stream is
>> closed with an RST_STREAM if the endpoint does not intend to pass them
>> along.
>
> And the better option will live only as long as no one figures how to push
> objectionable optional content such as ads, trackers or cookies with it,
> then you'll see those frames dropped regardless of what the spec says.
>
> It's an unfortunate reality today that the people who control web sites
> have not always the best interests of the people who consult them in mind,
> and silently dropping parts of the stream at the browser or at any
> intermediary level is here to stay. You can not specify morals in the spec
> and giving an all-or-nothing power to one of the nodes involved in the
> http/2 dialog is not going to work.
>
> Regards,
>
> --
> Nicolas Mailhot
>