IETF Logo Mail Archive

Re: New Version Notification for draft-nottingham-http2-encryption-03.txt

William Chan (陈智昌) <willchan@chromium.org> Thu, 22 May 2014 00:29 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C2281A000C for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 21 May 2014 17:29:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.73
X-Spam-Level:
X-Spam-Status: No, score=-6.73 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fjrEFq6beB_H for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 21 May 2014 17:29:53 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22C961A000B for <httpbisa-archive-bis2Juki@lists.ietf.org>; Wed, 21 May 2014 17:29:52 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1WnGpP-0000Ti-Nu for ietf-http-wg-dist@listhub.w3.org; Thu, 22 May 2014 00:25:47 +0000
Resent-Date: Thu, 22 May 2014 00:25:47 +0000
Resent-Message-Id: <E1WnGpP-0000Ti-Nu@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <willchan@google.com>) id 1WnGpD-0000SD-GY for ietf-http-wg@listhub.w3.org; Thu, 22 May 2014 00:25:35 +0000
Received: from mail-ve0-f181.google.com ([209.85.128.181]) by lisa.w3.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.72) (envelope-from <willchan@google.com>) id 1WnGp7-0000xq-U1 for ietf-http-wg@w3.org; Thu, 22 May 2014 00:25:35 +0000
Received: by mail-ve0-f181.google.com with SMTP id pa12so3430161veb.40 for <ietf-http-wg@w3.org>; Wed, 21 May 2014 17:25:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=4rx3y6Um/ZATemvPN4NLEnfojolbm/Iz4bojzT0KCQg=; b=WJW+I7shXinLmhsYBQefnYbqs8d9VB/vPs8m445+YtJOfkvtAXTI0qsjyCLx+IWgkt Cu6rNh0AnjJleLUN1p3k9+uqq1pRkjT6Xjr/8kQmFgK0Ui6EJO313AA5S7ESvseBsieF wP+wsPfOPbD+Qs9CuMI/gE9Zuj+7qoIcR1Uy8XJChrwMBzTGsYaZi7GH62LecklXlu7m A57fh28LKordIf6CJnfBVjVn5yi0cHntx1mawn0NDwPWJPwweSjt62UhIBUbr2AXMcMZ t1PuwsacCKT8QXLiLr+SPuNRaPifPehKPd3UiEjn2at/mblxVgfz+jr7WO4++J9bCVjq PGRQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=4rx3y6Um/ZATemvPN4NLEnfojolbm/Iz4bojzT0KCQg=; b=OhTBx/SElmkFjnVDSyYKXaV6tav1Lf/u/ebKkiv58o1LsUFndW32r+zABFLJ8smL5+ r40qdlNgVNFl1FCVsueGKaNqPVcaU+lUs4xxbKtmX4Zq7TOE57/MYL/A8GupXKvsmfTo uo2fjS62Nv690IZaKn/TCYul/6SarJM1cg928=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=4rx3y6Um/ZATemvPN4NLEnfojolbm/Iz4bojzT0KCQg=; b=Lu4TJlFUFSsrJzLvR1ATrfeDzYbGda5rfl17Kxi6FIkMdWdTKtoCyfvb2WyaJaTgiY GTHdP/vjTua4RputxJWlTNbNVgGnbfUxfHgy7Jn6A3r13k3BDbUbIhiM2yIVjkGvKNbq WQZm6fsokHrbPsy4gqAdWb3yGUR1sP9HdrXzVF/2Y7Ec92/9whrUhEGQn6+XisSwzK5H NBBmI0q4a/0vuE8KS9hHf2iFaduUEK2P9tf5hT8L8Wv6Ck32J5Zgt2i7g9wpWEh5k2Vg lmx1IJJcB7ofmXd2Ekm2MVzvklieRdrFU1uzRuHbVvxcjqkVH9Dy5nDa/HwwcCHY2+iA PZCA==
X-Gm-Message-State: ALoCoQnk+re3va9p6mP8jqqPRpKvAFBak4eA/kd95nvRNB27PLGXpjBHLKB0DSo2TRl3HOao+hHg
MIME-Version: 1.0
X-Received: by 10.52.173.165 with SMTP id bl5mr10700132vdc.13.1400718303610; Wed, 21 May 2014 17:25:03 -0700 (PDT)
Sender: willchan@google.com
Received: by 10.52.227.10 with HTTP; Wed, 21 May 2014 17:25:03 -0700 (PDT)
In-Reply-To: <CABkgnnWNWUtAe5EfPdpLaDKRug0QuW7ngm-v7t_B3LJSf6fRCQ@mail.gmail.com>
References: <20140520034054.10225.92036.idtracker@ietfa.amsl.com> <5905C797-A8E2-417B-94AB-589C174382BA@mnot.net> <CABkgnnWNWUtAe5EfPdpLaDKRug0QuW7ngm-v7t_B3LJSf6fRCQ@mail.gmail.com>
Date: Wed, 21 May 2014 17:25:03 -0700
X-Google-Sender-Auth: jiSzvCs3aV_LxbxKNfIgZKR-Af4
Message-ID: <CAA4WUYgTdF0P6==mPzREK8M5ba_6C48o5u0FGOYrR=2c2iq9hg@mail.gmail.com>
From: "William Chan (陈智昌)" <willchan@chromium.org>
To: Martin Thomson <martin.thomson@gmail.com>
Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: multipart/alternative; boundary="bcaec51b9cfdeaea0904f9f224cd"
Received-SPF: pass client-ip=209.85.128.181; envelope-from=willchan@google.com; helo=mail-ve0-f181.google.com
X-W3C-Hub-Spam-Status: No, score=-3.9
X-W3C-Hub-Spam-Report: AWL=-2.433, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001
X-W3C-Scan-Sig: lisa.w3.org 1WnGp7-0000xq-U1 dde58ade16a6c82eb02057d5193d537c
X-Original-To: ietf-http-wg@w3.org
Subject: Re: New Version Notification for draft-nottingham-http2-encryption-03.txt
Archived-At: <http://www.w3.org/mid/CAA4WUYgTdF0P6==mPzREK8M5ba_6C48o5u0FGOYrR=2c2iq9hg@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/23746
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

I've skimmed the draft in more detail now and have nits:

* Grammar in section 6.3. - "A browser client MUST clear persisted all
alternative service information when clearing other origin-based state
(i.e., cookies)."
* Please consistently use "alternative services" instead of "alternate
services".

I don't feel very strongly, but I am not sure where the times for the
operational considerations are coming from. IIRC, HSTS and HPKP use much
longer max-ages. Why does this draft suggest capping at 1 month?

Cheers.


On Mon, May 19, 2014 at 8:59 PM, Martin Thomson <martin.thomson@gmail.com>wrote:

> On 19 May 2014 20:42, Mark Nottingham <mnot@mnot.net> wrote:
> > FYI - Martin went away and did some substantial revision of this draft,
> and is now an author.
>
> The changes incorporate a draft you might have seen, but I didn't
> announce.  The main innovation here is a way to make the whole thing
> sticky in an effort to reduce the opportunity for downgrade attack.
> Pretty standard stuff, but included as a bit of a thought experiment
> as well as a bit of a test to see what people think.
>
>

v2.23.0 | Report a Bug | By Email