Call for Adoption: Cookie Incrementalism

Mark Nottingham <mnot@mnot.net> Thu, 12 November 2020 23:48 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40B1F3A1040 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 12 Nov 2020 15:48:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.747
X-Spam-Level:
X-Spam-Status: No, score=-2.747 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=VWy4uJ+z; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=QIkrz35K
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jyFdPmmPMDii for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 12 Nov 2020 15:48:32 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 426053A1031 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Thu, 12 Nov 2020 15:48:32 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.92) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1kdMHq-0001NN-If for ietf-http-wg-dist@listhub.w3.org; Thu, 12 Nov 2020 23:45:54 +0000
Resent-Date: Thu, 12 Nov 2020 23:45:54 +0000
Resent-Message-Id: <E1kdMHq-0001NN-If@lyra.w3.org>
Received: from mimas.w3.org ([128.30.52.79]) by lyra.w3.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <mnot@mnot.net>) id 1kdMHp-0001Mc-7d for ietf-http-wg@listhub.w3.org; Thu, 12 Nov 2020 23:45:53 +0000
Received: from wout3-smtp.messagingengine.com ([64.147.123.19]) by mimas.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <mnot@mnot.net>) id 1kdMHn-0003Uj-5Q for ietf-http-wg@w3.org; Thu, 12 Nov 2020 23:45:53 +0000
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id 66E5DB71; Thu, 12 Nov 2020 18:45:35 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Thu, 12 Nov 2020 18:45:35 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=from :content-type:content-transfer-encoding:mime-version:date :subject:cc:to:message-id; s=fm1; bh=mtUheQ9LRfen7Nr1ZdGIgVtS3hl m9PEte0S2zw/SVrM=; b=VWy4uJ+zxUHD7qicLirwfhiYatRE2l/aUO8udPJZDRm KvzoKToG9zUcmAt2CkDDWR4x3/psmHurCqNEyJqDR6fpPD3EDygry95kTNVixlla 1LAy9Ur10UctLfpgHEBAUx8KAJOoFKnJHx8GRqzptfJ9nWmn0O7ySERRJA6L2kZD dsN1GoOwzmuSplIQozXyNuF+SFaTaUt+1EU2B22O6tffKdrku2WSaYKjQZI17JVF IgMEFll2zDV2Pi4bj/x1zgK4RdYrIdeG5S2jtWwXSjXHHsDkIOcvY7DMojqdlONk 3FCwdvvODNTGrKPDDjMC9tsDIZFzKP0ExRo7/86ehBw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=mtUheQ 9LRfen7Nr1ZdGIgVtS3hlm9PEte0S2zw/SVrM=; b=QIkrz35KeXVAaQZ8l2xmVV 7ssi+18gwve13+n5hbKlAfUp2JA1tfGBv71A5rU7E5KPJhVfQRqfrRSbrYAhCKgp ncKfupX6pqMxU8Zrb7Ib2V8dnLlPaDotCxdjbxPYX82Xvi59HF9QxqlE1uGPWVtP 63mJjG2E/Kv9q6HwoASCf2kslB3LPAcb/LYBWHM24V3sZUWt0qQ9NuT9rdURzm54 KClpB5b1rdiiPbfN7i28j9+T3Xybiq6mgkMmaj+Y/FOb5lhHfpQfvkD3yPrmD4z7 Ftgvxt+d8Z/xwHopdr7cWUbIFZjn4KbGb0s63x/Au5NrV1yxgNe9HpWqEuTgBVhg ==
X-ME-Sender: <xms:HcmtX8yDdAv8N2malNICMoAO_wp2DPL3tzEGP-RmX_67mXptQcYo3Q> <xme:HcmtXwSCCz96pv7yNUTYa7L_tLYFPozc1Bdp_rYqhvDB2uUWbSKTqqrJfZhOgzxIN EXYk6Q2gpKnFzOFAA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedujedruddvgedgudegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhtgfgggffuffvkffosehtqhhmtd hhtddvnecuhfhrohhmpeforghrkhcupfhothhtihhnghhhrghmuceomhhnohhtsehmnhho thdrnhgvtheqnecuggftrfgrthhtvghrnhepgeduffeiueefffeuvdeugfeulefhfeefff eiudeikeekkeelgfeiieeuffehhedvnecuffhomhgrihhnpeiffedrohhrghdpihgvthhf rdhorhhgpdhhthhtphifghdrohhrghenucfkphepudduledrudejrdduheekrddvhedune cuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepmhhnohht sehmnhhothdrnhgvth
X-ME-Proxy: <xmx:HcmtX-VLxnn6Fz3ha8yAKTNTTgREj_op3F2rKZ9D0xFOXbruGay5hg> <xmx:HcmtX6h6ndNArnzw1xmUwlHYCjPU7u0FiG1Xx5hE65kfwMdoVS_6bg> <xmx:HcmtX-DtY5WStBoOP0WsiN9-9k31Q7iuaoDvYrpFnNo-rRfHQql0Qg> <xmx:H8mtX5OuG7LPCpqXbFKBD0kvwW_64PFE_i-FixUORzJaMI1xgxmT-g>
Received: from marks-air.mnot.net (119-17-158-251.77119e.mel.static.aussiebb.net [119.17.158.251]) by mail.messagingengine.com (Postfix) with ESMTPA id 80C9C3280064; Thu, 12 Nov 2020 18:45:32 -0500 (EST)
From: Mark Nottingham <mnot@mnot.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Fri, 13 Nov 2020 10:45:29 +1100
Cc: Tommy Pauly <tpauly=40apple.com@dmarc.ietf.org>
To: HTTP Working Group <ietf-http-wg@w3.org>
Message-Id: <BE51D899-1C82-4E3A-A035-FD079CCBE333@mnot.net>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Received-SPF: pass client-ip=64.147.123.19; envelope-from=mnot@mnot.net; helo=wout3-smtp.messagingengine.com
X-W3C-Hub-Spam-Status: No, score=-9.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1kdMHn-0003Uj-5Q 78ba261487058caf408066beb96a77f1
X-Original-To: ietf-http-wg@w3.org
Subject: Call for Adoption: Cookie Incrementalism
Archived-At: <https://www.w3.org/mid/BE51D899-1C82-4E3A-A035-FD079CCBE333@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/38210
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Those with good memories will recall that when we started RFC6265bis, we required significant changes to the specification to be backed by a separate I-D, so that we could judge consensus and implementation support for it separately. See:
  https://lists.w3.org/Archives/Public/ietf-http-wg/2015OctDec/0165.html

In the spirit of that, we have one more proposal for consideration:
  https://tools.ietf.org/html/draft-west-cookie-incrementalism-01

Parts of this were discussed at the recent interim:
  https://httpwg.org/wg-materials/interim-20-10/rfc6265bis.pdf#page=3

Other parts (e.g., s 3.4-3.6) may need more discussion; if we adopt the draft, we may decide that they aren't worth pursuing, but by default we'd spend some time discussing them.

Please comment on whether you support adoption of this document into RFC6265bis. In particular, we're looking for implementer feedback because -- as before -- our goal for this effort is to be closely aligned with implementation behaviour. 

The Call for Adoption will run until 27 November.

- Mark and Tommy