Updates to "optimistic upgrade"

Ben Schwartz <bemasc@meta.com> Thu, 11 July 2024 15:03 UTC

Received: by ietfa.amsl.com (Postfix) id 9F477C1840DE; Thu, 11 Jul 2024 08:03:43 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E587C1840CB for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 11 Jul 2024 08:03:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.856
X-Spam-Level:
X-Spam-Status: No, score=-2.856 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="PJLOSAcP"; dkim=pass (2048-bit key) header.d=w3.org header.b="Xd8R8ZNg"; dkim=pass (2048-bit key) header.d=meta.com header.b="TuGiRjx7"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJD5jiUhuEMU for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 11 Jul 2024 08:03:39 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EB83C180B72 for <httpbisa-archive-bis2Juki@ietf.org>; Thu, 11 Jul 2024 08:03:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:MIME-Version:Content-Type:Message-ID:Date:To:From:Cc:Reply-To :In-Reply-To:References; bh=wWmgXG0TopysiIrQ2ou420lhzYQxL4/+7r5V5yb20NI=; b=P JLOSAcPbqwS1sEOLWqn2NEji9WUnEG0dkqoGtNCu+YIUTy2JREEWTNqbu9v+qaj/O5iUachDwJ5Uz qvQPfYVSFP8d/PFv6IOy/Zh4/D/wRO7MT19ujwcAtofLQskXghvhA7j9CBbZZ1UAXnTkWAL62JoLq NJMsva1QVJNyIiKkFBGX1greSMhi4pD3Jgk8iDhND1Y/BbyNyJIsHYWiA3TbJtEF0K0QXrdRt9YEI YdpD+YebGMaIIsVcY6WOwfHmj9a0bPXhznfL9rc67oz9Q+QShOmuinU7MD7PKAt2UUcQXEdMIJRsq 2ceO5Obz7cD/XTzDipwAZb5K4TJNMGBxw==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sRvJZ-002maU-18 for ietf-http-wg-dist@listhub.w3.org; Thu, 11 Jul 2024 15:02:33 +0000
Resent-Date: Thu, 11 Jul 2024 15:02:33 +0000
Resent-Message-Id: <E1sRvJZ-002maU-18@mab.w3.org>
Received: from ip-10-0-0-224.ec2.internal ([10.0.0.224] helo=puck.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <prvs=2922d2fe4f=bemasc@meta.com>) id 1sRvJW-002mZZ-0r for ietf-http-wg@listhub.w3.internal; Thu, 11 Jul 2024 15:02:30 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=MIME-Version:Content-Type:Message-ID:Date:Subject:To:From:Cc:Reply-To :In-Reply-To:References; bh=wWmgXG0TopysiIrQ2ou420lhzYQxL4/+7r5V5yb20NI=; t=1720710150; x=1721574150; b=Xd8R8ZNgJVTjDJMUq/8qHmGIzCjl186Ez2Vwe1pLOCz3NZ2 JSs1meUuo0py0j1F00Rb42zqvnSx8zXl+QlZIjdZbgrFk+TAFuf/XupjXgfzYJJrTQkijBc6P8tvC a/6ZKg49XHXIj+or+ws5PWDlwVZTyHtqw1xHkeKAlIY3PeAR4OZPRbbOuHedYD10IPFARaM/QA6Ov TpoX/ZDmNqrS7G/OCD0783+6IR5T5B/FNZnI8S77I88b2z9uqLlyd9Nc1aiZgExwmHfyx9QtfviRW 95fIqRsZbYB6YmN3oPEYYiDHaeQjvBTh2OCFX2lFlPXUVMJu26+sueav/fCiVtsw==;
Received-SPF: pass (puck.w3.org: domain of meta.com designates 67.231.145.42 as permitted sender) client-ip=67.231.145.42; envelope-from=prvs=2922d2fe4f=bemasc@meta.com; helo=mx0a-00082601.pphosted.com;
Received: from mx0a-00082601.pphosted.com ([67.231.145.42]) by puck.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <prvs=2922d2fe4f=bemasc@meta.com>) id 1sRvJV-00HA0Y-0d for ietf-http-wg@w3.org; Thu, 11 Jul 2024 15:02:30 +0000
Received: from pps.filterd (m0044010.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 46BBBTMe009070 for <ietf-http-wg@w3.org>; Thu, 11 Jul 2024 08:02:25 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meta.com; h=from :to:subject:date:message-id:content-type:mime-version; s= s2048-2021-q4; bh=wWmgXG0TopysiIrQ2ou420lhzYQxL4/+7r5V5yb20NI=; b= TuGiRjx7orTcQm6Kyc1rFhp2Ld5gUd/PCIJMQF2A0EqgNPQsfScvVKhVR/n6CcRO T6uDaSTsFcLbssQCVMczEreN1RNPffmXLzoMdnt9OM9MhOfeoo0f5OxqEbk1JrBA i4Hc3kck60uE/cTfNWb8NzpafBX0nSh4oY2XaDKK/ia/Y3X0ahp5VEaAsHHlNT73 NUAb+rS27hhfqSu9fIdt5URZPJqUOJeDOvzW+JUb7paS0n+a9vkArfzmhe21CvcK pNmAqBrx4AvW0ZKVO2gTBcXa+SDUPGcJmW4e7nQAVH04EbKX6I9WaQIwk4J1vVRI gdFvSnvZDhwcXS324Jirmg==
Received: from nam11-co1-obe.outbound.protection.outlook.com (mail-co1nam11lp2168.outbound.protection.outlook.com [104.47.56.168]) by mx0a-00082601.pphosted.com (PPS) with ESMTPS id 409qxwrrf1-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <ietf-http-wg@w3.org>; Thu, 11 Jul 2024 08:02:24 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=nNBlkTfML3OLs+vEgokSo827kZfHCSPZABDl7z/1GP8LEnU9i0MoU8ktR6GIOTtJjj8ipfSXQsUU65NFJi4wJmJAkixDgMgLksTuZpPlEsGfOJWR4tw69ir87f5wRlbffsynnPLMec9NPOuXdgQKT72I5c3mfN6eyfN0sx326ozmvs2nVgXxna4pl/Sqtz0XQk6DfwFssox0beIlE/2Vaw+PSSd2TLXzMX3bHOfvKkumHAV56JIBf+wnVmCsb6qtrMxotCP/MEM0ZmPfn3waLJFzzsuaCnCXSFAbMm/HiVNtf0gS2UjpoIu7/iVa/Ixbx3vGaE2Fb3QO8evqE1Aecw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=wWmgXG0TopysiIrQ2ou420lhzYQxL4/+7r5V5yb20NI=; b=EpSHcVkKIPZH6Bmiba/3xzpPrLvyChpVVN22mr4d4G6PclajOirKExRNP921xqFkA2rIUG0gJexDYBhdaRGpbSD8iEkLwh3Fu47zxPQSAzn3qvSn+CMyRA1eooyMOBu7fhc1BNW/kAC5n5trzATDUZGdzs2bCEr9KfXtqNZ84KabCjnqvE7bFvx4t0/4gbF6qtwxYGf2fPnVy5q3XJ8mg3SkNNGP2bZW0nf51CbaiC/3n5dZ62UtLYvQt1eACZvCjcGqlC29yMBLrTk9bQVthG75NIPeLOrMAzMrXzcK4/Lb94F21XWoqD91FiHOh/CFCy1IELcMlq99t3Ix0sUJVw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=meta.com; dmarc=pass action=none header.from=meta.com; dkim=pass header.d=meta.com; arc=none
Received: from SA1PR15MB4370.namprd15.prod.outlook.com (2603:10b6:806:191::8) by SA0PR15MB4029.namprd15.prod.outlook.com (2603:10b6:806:83::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.23; Thu, 11 Jul 2024 15:02:22 +0000
Received: from SA1PR15MB4370.namprd15.prod.outlook.com ([fe80::b6dd:72cc:243a:babb]) by SA1PR15MB4370.namprd15.prod.outlook.com ([fe80::b6dd:72cc:243a:babb%6]) with mapi id 15.20.7762.016; Thu, 11 Jul 2024 15:02:21 +0000
From: Ben Schwartz <bemasc@meta.com>
To: "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
Thread-Topic: Updates to "optimistic upgrade"
Thread-Index: AQHa0587slDtNxYXUE2pfOSflFLuBQ==
Date: Thu, 11 Jul 2024 15:02:21 +0000
Message-ID: <SA1PR15MB4370490422595A884B57EED3B3A52@SA1PR15MB4370.namprd15.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SA1PR15MB4370:EE_|SA0PR15MB4029:EE_
x-ms-office365-filtering-correlation-id: ec191452-5dfb-4e70-f531-08dca1ba776d
x-fb-source: Internal
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA1PR15MB4370.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SA1PR15MB4370490422595A884B57EED3B3A52SA1PR15MB4370namp_"
MIME-Version: 1.0
X-OriginatorOrg: meta.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR15MB4370.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ec191452-5dfb-4e70-f531-08dca1ba776d
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2024 15:02:21.8961 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: x/QbCBPwL4pvCFh4r6VRLv2UvDJ+JOGK6rm7k3rvY9q1xvC6IeHZqLg2r/Iu1unM
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR15MB4029
X-Proofpoint-GUID: G--0uvBTpDTtNWXuS5O9HAzVwHF5suFh
X-Proofpoint-ORIG-GUID: G--0uvBTpDTtNWXuS5O9HAzVwHF5suFh
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-07-11_10,2024-07-11_01,2024-05-17_01
X-W3C-Hub-DKIM-Status: validation passed: (address=prvs=2922d2fe4f=bemasc@meta.com domain=meta.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.1
X-W3C-Hub-Spam-Report: ARC_SIGNED=0.001, ARC_VALID=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: puck.w3.org 1sRvJV-00HA0Y-0d 491d4ec35230b7d43ded08a8b828554c
X-Original-To: ietf-http-wg@w3.org
Subject: Updates to "optimistic upgrade"
Archived-At: <https://www.w3.org/mid/SA1PR15MB4370490422595A884B57EED3B3A52@SA1PR15MB4370.namprd15.prod.outlook.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52072
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

The draft "Security Considerations for Optimistic Use of HTTP Upgrade" was recently adopted by the working group.  I've published a clean rename of the draft, and written Pull Requests for three changes based on feedback from the working group before and during the adoption call [1].

#2821 - Extend the draft to cover HTTP CONNECT

As Mike Bishop pointed out to me, most of the concerns in this draft, which was originally motivated by "connect-tcp", also apply to regular CONNECT in HTTP/1.1.  This change would expand the draft to cover Upgrade and CONNECT, changing the title of the draft to "Security Considerations for Optimistic Protocol Transitions in HTTP/1.1".

#2818 - Deprecate the "HTTP" and "TLS" upgrade tokens

From discussion on the list, it seems like we have consensus that "Upgrade: HTTP/2.0" is not a standards-compliant header field.  This PR amends the IANA registry [2] to make that clearer.  It also deprecates "Upgrade: TLS/1.2" and marks the corresponding RFC as Historic.

#2827 - Recommend GET for future Upgrade Tokens

This PR depends on #2818.  With those deprecations in place, all remaining Upgrade Tokens use the GET method.  This PR makes that a formal recommendation (SHOULD).

If these changes are of interest, please review them on Github or in this thread.  I'll also be discussing them in the Wednesday session of HTTPBIS at IETF 120.

--Ben Schwartz

[1] https://github.com/httpwg/http-extensions/pulls?q=is%3Apr+is%3Aopen+label%3Aoptimistic-upgrade
[2] https://www.iana.org/assignments/http-upgrade-tokens/http-upgrade-tokens.xhtml#:~:text=any%20DIGIT.DIGIT%20(-,e.g.%2C%20%222.0%22,-)