Re: Considering RFC7725bis

Ben Schwartz <bemasc@google.com> Thu, 12 November 2020 16:26 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED6673A13E3 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 12 Nov 2020 08:26:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.248
X-Spam-Level:
X-Spam-Status: No, score=-10.248 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XRGraxvhJuUo for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 12 Nov 2020 08:26:35 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DC193A13E2 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Thu, 12 Nov 2020 08:26:35 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.92) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1kdFOT-0002TI-Ig for ietf-http-wg-dist@listhub.w3.org; Thu, 12 Nov 2020 16:24:17 +0000
Resent-Date: Thu, 12 Nov 2020 16:24:17 +0000
Resent-Message-Id: <E1kdFOT-0002TI-Ig@lyra.w3.org>
Received: from mimas.w3.org ([128.30.52.79]) by lyra.w3.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <bemasc@google.com>) id 1kdFOS-0002SX-Fm for ietf-http-wg@listhub.w3.org; Thu, 12 Nov 2020 16:24:16 +0000
Received: from mail-io1-xd34.google.com ([2607:f8b0:4864:20::d34]) by mimas.w3.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from <bemasc@google.com>) id 1kdFOQ-00005s-O3 for ietf-http-wg@w3.org; Thu, 12 Nov 2020 16:24:16 +0000
Received: by mail-io1-xd34.google.com with SMTP id i18so5150389ioa.3 for <ietf-http-wg@w3.org>; Thu, 12 Nov 2020 08:24:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7XPNkVtnGwXoz8rxZQMd7J1vR0u3ghCi1oy1fFbeCi8=; b=tyAnI2Wo4DSnjOkrGkXkWz4kjZu0Z6nWAdLrMjFv4Bp7pC5Oy8j37RLWEjV8izseGe d7Ufrox0Z4EQdQfGXtew3kYnUks3mbOFPq8Tx4KHTQQhh0790H7t8eDuESHKDzGGC2nU ZG4xF09gE+HxNxCge68FUKtrO1/OTdNtahK/rOInd+Srylegun8KZYpemLsorO5gzJeW Xgf4II8wXbZlUx9ywqg45x06TnWLfpPyU1PP7XSZBytmXYLpTp9YwsTHFIJYHVu4w+8h p/I/ks2gqGY0PuRVxJ3leEa6p2cA3vqbYWPtGvhah6dHb00MYVfUDrBhywoVJYQCvpL+ axIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7XPNkVtnGwXoz8rxZQMd7J1vR0u3ghCi1oy1fFbeCi8=; b=qwkWNMUxgK8u66g/iZcABN/6n5wmpp98puoLc/OX+GVJ1MLlM34CyTu7JzXSQ8BkBZ AcF8+u7JgOul8s87Z6wE5LyvjGkl+G4KEkqi3yI6jYWqSAKfBII+LAO9PSdTEOUzXn1a HgFjJVODAhx7q6JmZ9FkYuzzCnLeyxtICvsE17ctnzs9JOgQby+4SPAOOPxw+0syxiRT sNz+d5/xS2owsdqlQXXT5j/MC+ftz4sHI8m7lGtfi5j9SutcreSDNwdOGhBrxfAqdlGg 6eJDNNIBQTTfBxldWTlIJhvpM+ejKrJTYP0nIIDPlS2ul7xDznAP9SpIRysi/UG7EAGT hlWg==
X-Gm-Message-State: AOAM532Wvq9Tbq7bfc8TMB+vC4R6jmKLP6nCcezx97uFE1Fl2XVLncdb 88QDtdfAQ50bQwLX03DU5p2xi2EfVz3gNeAcJ9Jio2Apm0A=
X-Google-Smtp-Source: ABdhPJxDnayOQuhh1nkNtQdpkceZAsGeOZt8j80h1xgdmBD82/de/9fwWDhXA01EvlPfXrYaQNzXkS3pXM8Yg1MedCU=
X-Received: by 2002:a6b:4e0b:: with SMTP id c11mr23794367iob.125.1605198243530; Thu, 12 Nov 2020 08:24:03 -0800 (PST)
MIME-Version: 1.0
References: <58DD47C3-AD0D-496F-A3AF-447E1A3AE959@mnot.net> <CAP9qbHVncZY6fLdueWLByRFkYh_C=UTLv6p+_yUKMgx5LfMpgw@mail.gmail.com>
In-Reply-To: <CAP9qbHVncZY6fLdueWLByRFkYh_C=UTLv6p+_yUKMgx5LfMpgw@mail.gmail.com>
From: Ben Schwartz <bemasc@google.com>
Date: Thu, 12 Nov 2020 11:23:52 -0500
Message-ID: <CAHbrMsBBqss0DrpvZXHPt3_oY4RG9N6urweSEtQOsci8F4JKYQ@mail.gmail.com>
To: Roberto Polli <robipolli@gmail.com>
Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Tommy Pauly <tpauly@apple.com>, Tim Bray <tbray@textuality.com>, shivankaulsahib@gmail.com
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="0000000000001f88bc05b3eb57c9"
Received-SPF: pass client-ip=2607:f8b0:4864:20::d34; envelope-from=bemasc@google.com; helo=mail-io1-xd34.google.com
X-W3C-Hub-Spam-Status: No, score=-20.6
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5, W3C_AA=-1, W3C_DB=-1, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1kdFOQ-00005s-O3 d7983b8b935f708cbb2957d225186e6c
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Considering RFC7725bis
Archived-At: <https://www.w3.org/mid/CAHbrMsBBqss0DrpvZXHPt3_oY4RG9N6urweSEtQOsci8F4JKYQ@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/38209
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

I'm supportive and able to contribute text.  I also agree that some
additions and adjustments to the metadata in the current draft will be
needed.

Regarding a CfA, I would appreciate hearing from anyone who is interested
in publishing this additional metadata if it is defined.  If we don't have
clear interest on the server side, I don't think it's worth revising RFC
7725.

On Thu, Nov 12, 2020 at 10:42 AM Roberto Polli <robipolli@gmail.com> wrote:

> Hi everybody,
>
> I agree with the idea of 7725bis.
>
> Probably some Security considerations are needed (eg.  resolving links
> to blocking-authorities may disclose the client data,  ...)
>
> My 2ยข,
> R.
>
> Il giorno mer 11 nov 2020 alle ore 22:44 Mark Nottingham
> <mnot@mnot.net> ha scritto:
> >
> > WG participants,
> >
> > RFC7725, "An HTTP Status Code to Report Legal Obstacles" has seen some
> deployment in the ~4 years since its publication, including by some
> platforms who use it to indicate that various legal demands have been made
> of them.
> >
> > About two years later, we discussed adopting
> draft-sahib-251-new-protocol-elements. There wasn't substantial interest in
> the WG, but enough in the broader community for it to be AD-sponsored.
> >
> >   https://tools.ietf.org/html/draft-sahib-451-new-protocol-elements-03
> >
> > For whatever reason, it never got out of AD-sponsorship, and our current
> AD has asked what we'd like to do about it.
> >
> > Tommy and I believe that if this document is to proceed, it should be in
> the HTTP WG, not AD-sponsored. We're also inclined to think that if there's
> support, the best path forward would be to do a (relatively small) 7725bis;
> besides the issues that draft-sahib attempts to address, there's been some
> discussion of adjusting wording to make it clear that the status code is
> also useable when a request is refused for legal reasons in absence of an
> actual legal demand -- e.g., when the server wishes to serve the response,
> but believes that some legal obligation prevents them from doing so.
> >
> > Please discuss. If there seems to be support, we'll do a formal CfA
> (incorporating feedback already received).
> >
> > Cheers,
> >
> > Mark and Tommy
>
>