Re: No-Vary-Search

gs-lists-ietf-http-wg@gluelogic.com Tue, 18 June 2024 22:50 UTC

Received: by ietfa.amsl.com (Postfix) id 4FE22C1840EB; Tue, 18 Jun 2024 15:50:15 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F244C1840EA for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 18 Jun 2024 15:50:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.757
X-Spam-Level:
X-Spam-Status: No, score=-2.757 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="gWBP1VMV"; dkim=pass (2048-bit key) header.d=w3.org header.b="JXIZooab"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tyMqwJmFcNbb for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 18 Jun 2024 15:50:11 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F5D1C1840E6 for <httpbisa-archive-bis2Juki@ietf.org>; Tue, 18 Jun 2024 15:50:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Cc:To:From:Date:Reply-To; bh=7W1Lw5oakYSpwgOSK21THnZmLxVelAgiPtnvC/1IY44=; b= gWBP1VMVIunr8v445f3v1eeKpNqsCzntueEUL3H2yXUsygJRvx97e7I0Ikf31oVSRPM0O17908PAV xm019ywcIAwSMZ0FOhjaDaa+ckEA5hUzok6ivGBe/xygkk7ac7sMaQuQMV2DaVJgKEihKA6dfYxQx fM1Ea8+PBfEBAbi8ra6yjydk6qewDLJY07kMjv7hQGdVeAciUtoKXSkJei9IkZuxKgLPnTsRVyMGC weg9kq3YjAXBOSnuwbk+QnXz+BNdGEmy3F5WjObsVAzTVG4PY+hZlfCYp7O2JtYZKkDMybKG/g0EU 6Tw3J+DAl5fONtZeFo2l7lWtLXgZIyJ3mQ==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sJhe3-00GqQn-0V for ietf-http-wg-dist@listhub.w3.org; Tue, 18 Jun 2024 22:49:43 +0000
Resent-Date: Tue, 18 Jun 2024 22:49:43 +0000
Resent-Message-Id: <E1sJhe3-00GqQn-0V@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <gs-lists-ietf-http-wg@gluelogic.com>) id 1sJhdz-00GqPs-2n for ietf-http-wg@listhub.w3.internal; Tue, 18 Jun 2024 22:49:39 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:Subject: Cc:To:From:Date:Reply-To; bh=7W1Lw5oakYSpwgOSK21THnZmLxVelAgiPtnvC/1IY44=; t=1718750979; x=1719614979; b=JXIZooab0FfuoG1anbmZVooe1iXRQLH2NaSK22Eul7MbLoP xsHKPtPTYPYhUwHEzEd/4igqNKyy6Cz0LzGaZpmgpWmB9yT7QowY5s5Nx7AsONWQxvPMcDbLCXJKL s/x6NDRpMb4xj60WBTEjoTIrbh6tEJ+PHd/418+SCYh5xt84LubDtqsC0ymRn9kv8rV/ZZhxe9KcV ZIPcZwsXqgVs6wuaPmmlDCb4xIJ6rXw8u2/7HxVdUH4etqYKkZBsm8vIPzVU/B2dW68gsZHS65eJ7 QppDwKp6tb+qt/jou3YxFcEzNGlTJTgzEp/2IO4UxJV8aTLXkIarv6+TrmYwfN3Q==;
Received-SPF: pass (pan.w3.org: domain of gluelogic.com designates 52.86.233.228 as permitted sender) client-ip=52.86.233.228; envelope-from=gs-lists-ietf-http-wg@gluelogic.com; helo=smtp1.atof.net;
Received: from smtp1.atof.net ([52.86.233.228]) by pan.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (Exim 4.96) (envelope-from <gs-lists-ietf-http-wg@gluelogic.com>) id 1sJhdz-00GcFe-0m for ietf-http-wg@w3.org; Tue, 18 Jun 2024 22:49:39 +0000
X-Spam-Language: en
X-Spam-Relay-Country:
X-Spam-DCC: B=www.nova53.net; R=smtp1.atof.net 1205; Body=1 Fuz1=1 Fuz2=1
X-Spam-RBL:
X-Spam-PYZOR: Reported 0 times.
Date: Tue, 18 Jun 2024 18:49:27 -0400
From: gs-lists-ietf-http-wg@gluelogic.com
To: David Benjamin <davidben@chromium.org>
Cc: Rory Hewitt <rory.hewitt@gmail.com>, Jeremy Roman <jbroman@chromium.org>, ietf-http-wg@w3.org
Message-ID: <ZnIO9wjarnurq7XV@xps13>
References: <CACuR13cnHHoRv_Z-HtJeOyJqZb7AVU-_udQ=R_x9qQ1_JeP=KQ@mail.gmail.com> <CAEmMwDwZ8RB0Zz5GCbPeSFH-1tVgTW-hy4_0Fd1L90hNi3h0RA@mail.gmail.com> <CAEmMwDwxpy7QvJBx01WZpHmH=c2QKE6Q7iBAQisNSqRaxBoz3Q@mail.gmail.com> <CACuR13fENsddR_-3NK+w8w5OvcOwnyt=_eiHsK0E0S2X4rr=ZQ@mail.gmail.com> <CAEmMwDyMZz89pRY9OPimPDR1+-nULW9ZC8DjcYfOWvuWjUdtYA@mail.gmail.com> <CAF8qwaCo1gfWaUmSi+V3_bth_Ng8id6UWvY7BeKKA4h3WuMT9A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CAF8qwaCo1gfWaUmSi+V3_bth_Ng8id6UWvY7BeKKA4h3WuMT9A@mail.gmail.com>
X-W3C-Hub-Spam-Status: No, score=-3.9
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DMARC_MISSING=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sJhdz-00GcFe-0m b7257d56ce62d098f2dfe4a262d2cf67
X-Original-To: ietf-http-wg@w3.org
Subject: Re: No-Vary-Search
Archived-At: <https://www.w3.org/mid/ZnIO9wjarnurq7XV@xps13>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52030
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

More bikeshed: what are the advantages of a standalone header versus
extending Cache-Control?  Structured fields is one advantage of a
new, standaone header.

Cheers, Glenn

On Tue, Jun 18, 2024 at 06:34:31PM -0400, David Benjamin wrote:
> <bikeshed>
> I think No-Vary-Cache is a worse header name than No-Vary-Search. It says
> nothing about the URL query/search field and could just as easily describe
> the HTTP request headers or other things that the response doesn't vary on.
> That means it should include *something* that indicates the URL
> query/search field.
> 
> As for the Cache part, it's not *really* a statement about the cache
> anyway. It's a statement about whether the *response* to this request
> varies on some property. The cache is just the primary reason for the
> client to care about this information. So, matching the precedent with the
> Vary header, I think "Vary" is enough to capture this aspect of the name
> without adding "Cache".
> 
> I agree the combination of the two is awkward. It's unfortunate that
> "search" is a bit overloaded of a term, and everywhere is inconsistent
> about whether it's the "query" or the "search", but removing any reference
> to the field at all is even worse. (Tossing out an idea without opinion,
> No-Vary-(Search|Query|URL)-Params? It's really the individual params being
> targeted and not the overall search/query string.)
> </bikeshed>
> 
> On Tue, Jun 18, 2024 at 6:14 PM Rory Hewitt <rory.hewitt@gmail.com> wrote:
> 
> > <bikeshedding>
> >
> > Oh, I get the idea to extend/build upon/mimic/evoke the Vary header, and
> > FWIW, I really like the general 'No-Vary' idea. I'm just concerned about
> > the specific 'No-Vary-Search' name, as it implies something to do with the
> > generally understood concept of 'search' (y'know, searching for things) and
> > honestly, I'd completely forgotten that the query string is sometimes
> > called the 'search' part of the URL. It's a weirdly technical use of that
> > term that few outside the IETF/W3C would either know or understand. But
> > here we are...
> >
> > Since this header is about how user agents should cache content where that
> > content may be accessed via similar but slightly different URLs, maybe
> > 'Vary-Cache' is also an option? This more generic name would also enable
> > the header to be extended in the future to cover things in addition to the
> > URL query parameters without the name becoming out-of-date.
> >
> > But all of this may just be me being grumpy and objecting to the use of
> > 'search' in its technical meaning rather than its commonly-used meaning.
> >
> > </bikeshedding>
> >
> > On Tue, Jun 18, 2024 at 2:31 PM Jeremy Roman <jbroman@chromium.org> wrote:
> >
> >> On Tue, Jun 18, 2024 at 1:20 PM Rory Hewitt <rory.hewitt@gmail.com>
> >>> wrote:
> >>>
> >>>> Hey Jeremy,
> >>>>
> >>>> > This was originally No-Vary-Query, but the web-exposed APIs call
> >>>> this part of the URL "search", so this change was requested in a W3C
> >>>> discussion.
> >>>>
> >>>> I can understand why you changed the name from "No-Vary-Query", but
> >>>> given that it's primarily a mechanism to change the way that content is
> >>>> cached, I think it makes sense to call it "No-Vary-Cache"
> >>>>
> >>>
> >> I'll avoid getting too deep into bikeshed painting, but briefly: I hoped
> >> to evoke the longstanding Vary header
> >> <https://www.rfc-editor.org/rfc/rfc9110#field.vary>.
> >>
> >