Resent-Date: Sat, 27 Jul 2024 08:18:44 +0000
Resent-Message-Id: <E1sXcdY-00B7SM-0y@mab.w3.org>
Received-SPF: pass (pan.w3.org: domain of gmx.de designates 212.227.17.20 as permitted sender) client-ip=212.227.17.20; envelope-from=julian.reschke@gmx.de; helo=mout.gmx.net;
Message-ID: <ba56fad8-e121-4c06-9a2d-783ef82471e0@gmx.de>
Date: Sat, 27 Jul 2024 10:18:34 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: ietf-http-wg@w3.org
References: <CAF3KT4QZzx+FXOUHZoy+gPqJjQ+4KdOC+_29vbUANNtZQS4c+A@mail.gmail.com>
From: Julian Reschke <julian.reschke@gmx.de>
In-Reply-To: <CAF3KT4QZzx+FXOUHZoy+gPqJjQ+4KdOC+_29vbUANNtZQS4c+A@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
UI-OutboundReport: notjunk:1;M01:P0:3MyzrwlCnC4=;39mtawzAoKKoYy23pIkUGFCOWsm
 drJpSOyEm2yV4AUDPUKfXfHNAdjSIY8ZN1TSL5A/GWPtPF31G+LxhMHcLL59eqw2/Trc9Urzi
 niMGjw/udTn2H6WhWqvkcSOcyITd/RfRGo+3EHGXCMGkaho48OSZA8F3X7pLSEenkj/GnWcYI
 ufLcRG/BBkW4+TdQ9xnC9lzYa5ImV5lG/q5lmSHwNSjqVhRcwyp0I6CkGXqVUmaQYwD3O/zgO
 KOtdnCbAOZ1+mkFlisaERIGpJt+avrqxTD0xfdilMKLq9ezrB5Bl5Xtcm6xlIsD0nS2lq1Erj
 +9q1Gxl+E8aS5MdJET78H3fzwX+5fY+DbWqE4zmkoIIw4dK3uIJS7Scn7ihTquNQ/PWCtWqut
 p+hq4VI0zIpC5/7Wx1Elkrv81KvW6coxYS9buzWQdZH7FiYT0mAbY2TDrDas+FTX0BAZV4I8j
 a0TP2vGd27NRkDuEcPCruUBQ42JbHVN1bkCExd1/GfiR+3UZV5UewkuYUZQ6cRc/iSWjctnOk
 p/wiQPJYpdDNF1hREgxBAgdk44zSS5+yZI5o7iWpUQrxiBH5qMi5hx246dH1FBgaLYzuTF0pg
 mo8x1wktdHRzOrFdf5AwiR6QJuS9plGWUySpke6t7M+CtDYtqPZ9cWcU3ZhzfYoaRDAn/iz27
 finQ6ZMjnwVPH5TPCZ/FOKPA7HU8jT4sH3O4yx+0az1hsqMh33BATp2Ke285fnP5j0iXOMc7T
 Ff5bWjeU2tKMS2Ca5CwosMuX4QQpKYuur+ZU6pnJ4ucGlMyS55OQXNu3hjw1GheaIkjlTdLVZ
 kkpke95JupYBEWxQBHH5xUcw==
Subject: Re: Method Mania
Archived-At: <https://www.w3.org/mid/ba56fad8-e121-4c06-9a2d-783ef82471e0@gmx.de>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

On 26.07.2024 00:27, Josh Cohen wrote:
> On the httpwg agenda at IETF 120 were a proposal for a new QUERY method
> and Braid, which has subscription functionality that overloads the GET
> method.
>
> What I am curious about is if, at this point in the evolution of the
> web, it is now safe to add new methods for new functionality. I've been
> reading up on HTTP/2/3 and it seems that nowadays, connections are
> end-to-end secure and are essentially tunneled through middle boxes,
> including HTTP/1.1 proxies. I'm still just wrapping my head around
> MASQUE, but it looks like it can handle arbitrary methods.=C2=A0 Similar=
ly
> origin servers have evolved to support arbitrary methods.

It always has been "safe", when https was used.

> ...
> In the Braid internet draft[3], section 2.5 states:
>
>
>     If the request contains a Subscribe header, then it SHOULD
>     additionally leave the request open and subscribe the client to
>      =C2=A0future updates.=C2=A0 Otherwise, it should close the connecti=
on =C2=A0after
>     sending the updates.
>
> That imposes semantics at the connection level which are different from
> the norm.=C2=A0 In HTTP/1.1, the Connection header specifies whether to =
keep
> the connection open. In HTTP/2/3, the Connection header is prohibited.
 > ...

That sounds really problematic; method definitions can not override
connection semantics.

Best regards, Julian