IETF Logo Mail Archive

Re: Stateful compression of cookies (Re: Delta Compression and UTF-8 Header Values)

"Poul-Henning Kamp" <phk@phk.freebsd.dk> Mon, 11 February 2013 16:08 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3951F21F8967 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 11 Feb 2013 08:08:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.485
X-Spam-Level:
X-Spam-Status: No, score=-10.485 tagged_above=-999 required=5 tests=[AWL=-0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, SARE_SUB_ENC_UTF8=0.152]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FB62lLTgsPbX for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 11 Feb 2013 08:08:07 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id A3ADB21F876E for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 11 Feb 2013 08:08:07 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1U4vv1-0002wc-4G for ietf-http-wg-dist@listhub.w3.org; Mon, 11 Feb 2013 16:07:47 +0000
Resent-Date: Mon, 11 Feb 2013 16:07:47 +0000
Resent-Message-Id: <E1U4vv1-0002wc-4G@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <phk@phk.freebsd.dk>) id 1U4vut-0002vh-RC for ietf-http-wg@listhub.w3.org; Mon, 11 Feb 2013 16:07:39 +0000
Received: from phk.freebsd.dk ([130.225.244.222]) by maggie.w3.org with esmtp (Exim 4.72) (envelope-from <phk@phk.freebsd.dk>) id 1U4vuo-00063F-OU for ietf-http-wg@w3.org; Mon, 11 Feb 2013 16:07:39 +0000
Received: from critter.freebsd.dk (critter.freebsd.dk [192.168.61.3]) by phk.freebsd.dk (Postfix) with ESMTP id 68EAF8A57C; Mon, 11 Feb 2013 16:07:13 +0000 (UTC)
Received: from critter.freebsd.dk (localhost [127.0.0.1]) by critter.freebsd.dk (8.14.5/8.14.5) with ESMTP id r1BG7A9p007948; Mon, 11 Feb 2013 16:07:11 GMT (envelope-from phk@phk.freebsd.dk)
To: Nico Williams <nico@cryptonector.com>
cc: Zhong Yu <zhong.j.yu@gmail.com>, Julian Reschke <julian.reschke@gmx.de>, "\"Martin J. Dürst\"" <duerst@it.aoyama.ac.jp>, James M Snell <jasnell@gmail.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
In-reply-to: <CAK3OfOhGoQ0HtMu4HRo5kne1fgwDkzU6AHceCUTPHEXXW5HypQ@mail.gmail.com>
From: Poul-Henning Kamp <phk@phk.freebsd.dk>
References: <CAK3OfOieNOsN7=2TV_25nTr+7Y3a-fyjSGV+F7HdbEQT8cB9xg@mail.gmail.com> <85697.1360567222@critter.freebsd.dk> <CAK3OfOhGoQ0HtMu4HRo5kne1fgwDkzU6AHceCUTPHEXXW5HypQ@mail.gmail.com>
Date: Mon, 11 Feb 2013 16:07:10 +0000
Message-ID: <7947.1360598830@critter.freebsd.dk>
Received-SPF: none client-ip=130.225.244.222; envelope-from=phk@phk.freebsd.dk; helo=phk.freebsd.dk
X-W3C-Hub-Spam-Status: No, score=-3.4
X-W3C-Hub-Spam-Report: AWL=-3.442, RP_MATCHES_RCVD=-0.001
X-W3C-Scan-Sig: maggie.w3.org 1U4vuo-00063F-OU 3d22a7435a89d6f69ba0c338f2258394
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Stateful compression of cookies (Re: Delta Compression and UTF-8 Header Values)
Archived-At: <http://www.w3.org/mid/7947.1360598830@critter.freebsd.dk>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/16560
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Content-Type: text/plain; charset=ISO-8859-1
--------
In message <CAK3OfOhGoQ0HtMu4HRo5kne1fgwDkzU6AHceCUTPHEXXW5HypQ@mail.gmail.com>
, Nico Williams writes:
>On Mon, Feb 11, 2013 at 1:20 AM, Poul-Henning Kamp <phk@phk.freebsd.dk> wrote:

>> If somebody needs 8k of storage for each browser that visits their
>> website, they can bloody well buy their own disks...
>
>It's a common implementation pattern.  I'm not ready to tell
>application implementors to stop doing this.
>
>It's not just the disk space, but also the need to fetch it and the
>need to distribute it across related servers.  Using the client to do
>this has some benefits.

... for the server, yes.

And a lot of disadvantages for the client, such as not having your
context coming along to a different computer, privacy, bandwidth etc.

I'm a big beliver in making disadvantages follow advantages, and
therefore the servers should bear this cost.

>(Also, a note about small session IDs: they can't be so small as to be
>guessable.  32-bit session IDs would be a disaster.  I think I'd not
>feel comfortable with session IDs smaller than 96-bits.)

Sure, 128 bits would be a minimum, 256 should be enough.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

v2.23.0 | Report a Bug | By Email