Re: Method Mania

Julian Reschke <julian.reschke@gmx.de> Sat, 27 July 2024 08:19 UTC

Received: by ietfa.amsl.com (Postfix) id 86E3DC1840C4; Sat, 27 Jul 2024 01:19:50 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 861F9C180B50 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Jul 2024 01:19:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.858
X-Spam-Level:
X-Spam-Status: No, score=-2.858 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="Wn69HBKT"; dkim=pass (2048-bit key) header.d=w3.org header.b="RFFYOvDI"; dkim=pass (2048-bit key) header.d=gmx.de header.b="oNa7y09M"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pjmDMq2siubf for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Jul 2024 01:19:46 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C01B0C1840D0 for <httpbisa-archive-bis2Juki@ietf.org>; Sat, 27 Jul 2024 01:19:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:In-Reply-To:From:References:To:MIME-Version:Date :Message-ID:Cc:Reply-To; bh=pARg1eHf2enUoZSqJqAnSiBhyAXJCNRfPdwQHSoAk0g=; b=W n69HBKT/hv12TK7ROHClpGUDVtxfn8gefQ8VO142BfxkDfgTBww77JEJlyE565ZFcxKyeLeCcjK7a lkTjJbXXavTDQWNQncvGagkrwQ59oSNZ1zcI3mKZAkDF4UwRg9CARG0Tp11ij0vLGJ9YBxTZeed/+ eRqnlfYNG3LG7+wx3JAlu0SLO82cZ7u9LTDKiwtwDLtrjAM9W+KgF4AuCKOTjHtVgrJBAHM1/rsjC Pq2XXFw9hhQVSSF+ZbFJfPocpPqaaqK1ZjuoQhGaJaYDgg3BoyoQOQvymmoHJkkLmbs7W+YNvMRnB WuJqapX9ODk+tj5aeG7oLr/OXd1LFfYGQ==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sXcdY-00B7SM-0y for ietf-http-wg-dist@listhub.w3.org; Sat, 27 Jul 2024 08:18:44 +0000
Resent-Date: Sat, 27 Jul 2024 08:18:44 +0000
Resent-Message-Id: <E1sXcdY-00B7SM-0y@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <julian.reschke@gmx.de>) id 1sXcdU-00B7RO-2g for ietf-http-wg@listhub.w3.internal; Sat, 27 Jul 2024 08:18:40 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:In-Reply-To:From:References:To:Subject:MIME-Version:Date :Message-ID:Cc:Reply-To; bh=pARg1eHf2enUoZSqJqAnSiBhyAXJCNRfPdwQHSoAk0g=; t=1722068320; x=1722932320; b=RFFYOvDIwNrRmDokxh6OOBFBPaWrkTP0J0T0dG/nPu1Mlnt zl0Fw9Ajg2oJAc8uMLhf1IVULLg91k6L7qDarrbvC6N0gfV9ADi2RxSmsg9QZh5Ge93eSmz3Dyulc DpxOBkqg0iwP6um8ngxRvG/au2y32hQo3Qx1iKgdSFPbMtQpflTYqURdk0yZ3WRuiP6sQ2uibSK5x ZzFhFOh+tJb5/5GQ49wYf/FEb7l1o02WCu3LL2yWNDuTnGAMljlR++CNWVJRu8wWKDzAlIpaHT76w t9XwNKkM/hGwwOI/askIzUNixczF8qhXWrUTHm0I/11KijcdS/cPCEsdq13u7m4A==;
Received-SPF: pass (pan.w3.org: domain of gmx.de designates 212.227.17.20 as permitted sender) client-ip=212.227.17.20; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net;
Received: from mout.gmx.net ([212.227.17.20]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <julian.reschke@gmx.de>) id 1sXcdU-00DWqG-0E for ietf-http-wg@w3.org; Sat, 27 Jul 2024 08:18:40 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de; s=s31663417; t=1722068315; x=1722673115; i=julian.reschke@gmx.de; bh=pARg1eHf2enUoZSqJqAnSiBhyAXJCNRfPdwQHSoAk0g=; h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:Subject:To: References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding:cc:content-transfer-encoding: content-type:date:from:message-id:mime-version:reply-to:subject: to; b=oNa7y09MktWVoR+VM2x8r6m8bnrfhrxJMxe5QJf3qqAhq3K0kMudWdcydXPUAx8Z 7wouFgjKjhsvVVwE5V4Kk/hijsqVeM4VI28wjONIg2QVyKs7F3+i0nU3CHpNnvuZZ AW6BCbMzuyzcqwhYr9Z+Fv/Np0m/ZJwGJtUSv5EwJMox/axi0Rg8BgnGtn3Tm8krC GVRnJBZYCQMv48mHLUp/r0hwCT8/RmQiDxuwPdF4qQnEe+rSNDzTU4DBCzBzrGGr4 +qfG/LWspPYnMnbFeqGAOXFbQx+2scl9boe65cfJ4S3u4IjlZySaUnhe4+cJNJ4Mu AnL5rAtnh5ZiGTYElw==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from [192.168.178.182] ([217.251.138.214]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MHXFx-1sTTly2c2j-000yxR for <ietf-http-wg@w3.org>; Sat, 27 Jul 2024 10:18:35 +0200
Message-ID: <ba56fad8-e121-4c06-9a2d-783ef82471e0@gmx.de>
Date: Sat, 27 Jul 2024 10:18:34 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: ietf-http-wg@w3.org
References: <CAF3KT4QZzx+FXOUHZoy+gPqJjQ+4KdOC+_29vbUANNtZQS4c+A@mail.gmail.com>
From: Julian Reschke <julian.reschke@gmx.de>
In-Reply-To: <CAF3KT4QZzx+FXOUHZoy+gPqJjQ+4KdOC+_29vbUANNtZQS4c+A@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:FatZ20Gc0TH9uC5EDocYmWM7rCr7bOFuNpbGlkXfMUUcnysxP6N mh+/1hSjmxzjjyDWbKXiRSZ6oIbCV9eBlGOZbAJADyHFKFKay10yuomHlFV1Ifbnu/D6ekj FFToPPFwlcsKEKA/XxE37YSVNgywtEv/ATLoGMd39AwU9WuR4QHCC/K2YMZX4NhlUDJnNrW s3abzXqsj2+dwEvQmY7kw==
UI-OutboundReport: notjunk:1;M01:P0:3MyzrwlCnC4=;39mtawzAoKKoYy23pIkUGFCOWsm drJpSOyEm2yV4AUDPUKfXfHNAdjSIY8ZN1TSL5A/GWPtPF31G+LxhMHcLL59eqw2/Trc9Urzi niMGjw/udTn2H6WhWqvkcSOcyITd/RfRGo+3EHGXCMGkaho48OSZA8F3X7pLSEenkj/GnWcYI ufLcRG/BBkW4+TdQ9xnC9lzYa5ImV5lG/q5lmSHwNSjqVhRcwyp0I6CkGXqVUmaQYwD3O/zgO KOtdnCbAOZ1+mkFlisaERIGpJt+avrqxTD0xfdilMKLq9ezrB5Bl5Xtcm6xlIsD0nS2lq1Erj +9q1Gxl+E8aS5MdJET78H3fzwX+5fY+DbWqE4zmkoIIw4dK3uIJS7Scn7ihTquNQ/PWCtWqut p+hq4VI0zIpC5/7Wx1Elkrv81KvW6coxYS9buzWQdZH7FiYT0mAbY2TDrDas+FTX0BAZV4I8j a0TP2vGd27NRkDuEcPCruUBQ42JbHVN1bkCExd1/GfiR+3UZV5UewkuYUZQ6cRc/iSWjctnOk p/wiQPJYpdDNF1hREgxBAgdk44zSS5+yZI5o7iWpUQrxiBH5qMi5hx246dH1FBgaLYzuTF0pg mo8x1wktdHRzOrFdf5AwiR6QJuS9plGWUySpke6t7M+CtDYtqPZ9cWcU3ZhzfYoaRDAn/iz27 finQ6ZMjnwVPH5TPCZ/FOKPA7HU8jT4sH3O4yx+0az1hsqMh33BATp2Ke285fnP5j0iXOMc7T Ff5bWjeU2tKMS2Ca5CwosMuX4QQpKYuur+ZU6pnJ4ucGlMyS55OQXNu3hjw1GheaIkjlTdLVZ kkpke95JupYBEWxQBHH5xUcw==
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=gmx.de), signature is good
X-W3C-Hub-DKIM-Status: validation passed: (address=julian.reschke@gmx.de domain=julian.reschke@gmx.de), signature is good
X-W3C-Hub-Spam-Status: No, score=-5.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, FREEMAIL_FROM=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sXcdU-00DWqG-0E 6c85ce68f32c8d24a04975eef9fac9c0
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Method Mania
Archived-At: <https://www.w3.org/mid/ba56fad8-e121-4c06-9a2d-783ef82471e0@gmx.de>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52151
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 26.07.2024 00:27, Josh Cohen wrote:
> On the httpwg agenda at IETF 120 were a proposal for a new QUERY method
> and Braid, which has subscription functionality that overloads the GET
> method.
>
> What I am curious about is if, at this point in the evolution of the
> web, it is now safe to add new methods for new functionality. I've been
> reading up on HTTP/2/3 and it seems that nowadays, connections are
> end-to-end secure and are essentially tunneled through middle boxes,
> including HTTP/1.1 proxies. I'm still just wrapping my head around
> MASQUE, but it looks like it can handle arbitrary methods.  Similarly
> origin servers have evolved to support arbitrary methods.

It always has been "safe", when https was used.

> ...
> In the Braid internet draft[3], section 2.5 states:
>
>
>     If the request contains a Subscribe header, then it SHOULD
>     additionally leave the request open and subscribe the client to
>       future updates.  Otherwise, it should close the connection  after
>     sending the updates.
>
> That imposes semantics at the connection level which are different from
> the norm.  In HTTP/1.1, the Connection header specifies whether to keep
> the connection open. In HTTP/2/3, the Connection header is prohibited.
 > ...

That sounds really problematic; method definitions can not override
connection semantics.

Best regards, Julian