Re: Comments on draft-ietf-httpbis-encryption-encoding-04

Martin Thomson <martin.thomson@gmail.com> Sat, 12 November 2016 08:47 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 620051299D7 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 12 Nov 2016 00:47:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.498
X-Spam-Level:
X-Spam-Status: No, score=-8.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XMzFkCu-uR6x for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 12 Nov 2016 00:47:01 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 660C91294AD for <httpbisa-archive-bis2Juki@lists.ietf.org>; Sat, 12 Nov 2016 00:47:01 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1c5TuQ-000463-UY for ietf-http-wg-dist@listhub.w3.org; Sat, 12 Nov 2016 08:43:34 +0000
Resent-Date: Sat, 12 Nov 2016 08:43:34 +0000
Resent-Message-Id: <E1c5TuQ-000463-UY@frink.w3.org>
Received: from mimas.w3.org ([128.30.52.79]) by frink.w3.org with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <martin.thomson@gmail.com>) id 1c5TuL-00045I-Dp for ietf-http-wg@listhub.w3.org; Sat, 12 Nov 2016 08:43:29 +0000
Received: from mail-qt0-f175.google.com ([209.85.216.175]) by mimas.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <martin.thomson@gmail.com>) id 1c5TuF-0003cy-On for ietf-http-wg@w3.org; Sat, 12 Nov 2016 08:43:24 +0000
Received: by mail-qt0-f175.google.com with SMTP id w33so22564907qtc.3 for <ietf-http-wg@w3.org>; Sat, 12 Nov 2016 00:43:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=0yU36yWxMkNRXfWwO5OLwvbTtauSq/ex6AF4jraaeNY=; b=tnkn48Wc8SmcJFCrmfQMj3GKUfQ3rwIrg6CCb9pfkXKkPjsisgggEB20oqxr9IizQE /1NGSrdarngXFPSN5cK8MMdO2tRe6HaDvmJtMLIHsI63fYBdrg7bcWdrFUpTmZbMla2M WDPgahrKw17IQKqYVFBKE4Y+a3vfmt1+9PyhykJrUoE+JSBKx7Gx8n2UrVkJilWyvBVK eGBDtaI/SqEYaaeE/+wAhnSsGZWdPkeVCHdMq+7F52dqUY7+JHv271gaKI+dOJLBWKUm xzsLuqmGP3f+SQFmfXS+ohW3+dKeBpuo7QgavO0i3ymvXBRZSpmbdROXD324djK4yvbL 8QwA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=0yU36yWxMkNRXfWwO5OLwvbTtauSq/ex6AF4jraaeNY=; b=g/j89+39rJyjA+KKCiuK+muItq3S9WkmPj3PCM8dA3cC/QyqqDwdNyXPAL/reo8ADt VQwAW2KP6k/7IznLkxoz+AJZwlF3VBsmEYSM0KLSOsNnKMq5NmBRJKXD4HMsG+hvhf/k ORwLZHYe7D2Rsxugo+Z7ZaGTdzhYXtPCyCU/UhzynoEkB07Grtbh8L5tMEpvF6iHKsov NP8Vi3c5Kctt15vJD0zzcJmWN7jwCQykIfAzTmwWCqW8CXf5HfIiiivXYnjhDYv6qcmi HsgiBoSS8x7nUxDmfeDMQSzCGikcDy1ukBGjl2NLIAuUHDa+e3haomqGUeWwMW5u5VG7 jnWQ==
X-Gm-Message-State: ABUngveRjnYY0vyRrFF3Httc/E0UxGhLLAUVQqywh6BfePgWCKKFMEMXcE4sxv7N+mzqMf8ZDVCkug1AvoxHhA==
X-Received: by 10.200.48.28 with SMTP id f28mr2202097qte.247.1478940177980; Sat, 12 Nov 2016 00:42:57 -0800 (PST)
MIME-Version: 1.0
Received: by 10.140.85.7 with HTTP; Sat, 12 Nov 2016 00:42:57 -0800 (PST)
In-Reply-To: <7ffff023-7e82-1f74-8d2d-e0f0a08d8f5a@gmx.de>
References: <a3f3a4e0-5be3-f619-d2f8-cdda6ce2ed1e@gmx.de> <20161112081859.A68C013455@welho-filter2.welho.com> <CABkgnnWgQ1JcK9SpfeLcLdCLrzPCPkWJh-2TZgDoBhe0Fxo24Q@mail.gmail.com> <7ffff023-7e82-1f74-8d2d-e0f0a08d8f5a@gmx.de>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Sat, 12 Nov 2016 17:42:57 +0900
Message-ID: <CABkgnnU_+qg4S8rXTH2QHuBgJB+V4_0h2+Gr5pqpE7VEua-AbQ@mail.gmail.com>
To: Julian Reschke <julian.reschke@gmx.de>
Cc: Kari Hurtta <hurtta-ietf@elmme-mailer.org>, HTTP working group mailing list <ietf-http-wg@w3.org>, Eric Rescorla <ekr@rtfm.com>
Content-Type: text/plain; charset="UTF-8"
Received-SPF: pass client-ip=209.85.216.175; envelope-from=martin.thomson@gmail.com; helo=mail-qt0-f175.google.com
X-W3C-Hub-Spam-Status: No, score=-6.4
X-W3C-Hub-Spam-Report: AWL=0.347, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1c5TuF-0003cy-On ada842d76e7a3ec41caebc2766364728
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Comments on draft-ietf-httpbis-encryption-encoding-04
Archived-At: <http://www.w3.org/mid/CABkgnnU_+qg4S8rXTH2QHuBgJB+V4_0h2+Gr5pqpE7VEua-AbQ@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/32875
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 12 November 2016 at 17:37, Julian Reschke <julian.reschke@gmx.de> wrote:
>> The alternative is to find a different solution for that draft, like
>> moving the keys to the payload.
>
> Yes, that's how it actually started.

:)

> The question remains whether a common mechanism is desirable/needed.

I'm on the fence, and that suggests that committing to doing a common
mechanism in this document is probably the wrong decision.  I don't
like building new mechanisms with such a low level of certainty about
need.