Errors for Signatures

Justin Richer <jricher@mit.edu> Fri, 20 January 2023 21:27 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5844C14CE53 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Fri, 20 Jan 2023 13:27:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.751
X-Spam-Level:
X-Spam-Status: No, score=-2.751 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g3-uKzlBF4c7 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Fri, 20 Jan 2023 13:27:32 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E860BC14CE32 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Fri, 20 Jan 2023 13:27:31 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1pIyuc-009GGM-0j for ietf-http-wg-dist@listhub.w3.org; Fri, 20 Jan 2023 21:27:02 +0000
Resent-Date: Fri, 20 Jan 2023 21:27:02 +0000
Resent-Message-Id: <E1pIyuc-009GGM-0j@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <jricher@mit.edu>) id 1pIyua-009GFD-HN for ietf-http-wg@listhub.w3.org; Fri, 20 Jan 2023 21:27:00 +0000
Received: from outgoing-exchange-7.mit.edu ([18.9.28.58]) by titan.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <jricher@mit.edu>) id 1pIyuX-002sfE-6B for ietf-http-wg@w3.org; Fri, 20 Jan 2023 21:27:00 +0000
Received: from w92exedge3.exchange.mit.edu (W92EXEDGE3.EXCHANGE.MIT.EDU [18.7.73.15]) by outgoing-exchange-7.mit.edu (8.14.7/8.12.4) with ESMTP id 30KLQdpB004244 for <ietf-http-wg@w3.org>; Fri, 20 Jan 2023 16:26:48 -0500
Received: from oc11exhyb3.exchange.mit.edu (18.9.1.99) by w92exedge3.exchange.mit.edu (18.7.73.15) with Microsoft SMTP Server (TLS) id 15.0.1497.45; Fri, 20 Jan 2023 16:26:06 -0500
Received: from oc11exhyb8.exchange.mit.edu (18.9.1.113) by oc11exhyb3.exchange.mit.edu (18.9.1.99) with Microsoft SMTP Server (TLS) id 15.0.1497.42; Fri, 20 Jan 2023 16:26:37 -0500
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (104.47.57.45) by oc11exhyb8.exchange.mit.edu (18.9.1.113) with Microsoft SMTP Server (TLS) id 15.0.1497.42 via Frontend Transport; Fri, 20 Jan 2023 16:26:37 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MA6t7ykk3UpCPc56cjUISTEOcE8WrEtPzFOGK+vPMmplxQxDJ3L2qvO9U+rpBpN0MBDUvJrQcKocrrhepmnsUKNebNBrg8eg6jDMeKiCb69BC+QBnQQbKvVqar54TQ6+iIX94NWbiSiRAzNvKBej37DMyRtTwKL+27hVr3RWL34nn+P0UHIpXujNhdeJGkeeyV3UDssIoM9GE5QJo0SQLmmyJOnyjUtY+E1pn+2KckbLjwWtwyH+f/Qdi/D5LSbdKsbR9NzJlbbIQ1kESlb1mVIlrhhnhC/p167+37dSC9i2m4JDM6pAZjXcSBUZHmJUaZOI+Wmj/gsVYANIuisONA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=qw6AcJ2xc0cWApUu9jOW1z4kaAzHQLT99JoQPULwzDE=; b=jrsmXkbsOwiEGaHYRgpRHMgATxtK7jgoPV/v33AoKdq0yohXLSqeRKh3idOOD40AWFGUJ8OAHQGM7PYsIP0oupHJ8kIsvxzxvuvQleCeRsOTuuMywfW4AhJqjwstrEYiyoYgT3hl7SkR6SOaJbh3KYCPYo4tHiUZ92yFKSYrly2GSIl9FiCTnQxP5lWGEb+b10wj9sZK4rApAYeAUBiAUgasldupM6rYQttXl0ETd2+LlKjBOoto2Bp5ClKaYP/Kess96XvhEei6TTWITyE2Uf1ZW93EBQIJYhuB81a4/ivXZHji8U9EN6dWHtnnYSGd7roojON6Q9b1AWkt2qwKtA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qw6AcJ2xc0cWApUu9jOW1z4kaAzHQLT99JoQPULwzDE=; b=QbWPFLfAndMjeav/ShG72RjRIynIeE9PiZ9FZjO6lH+Kqh+TPDDG1k9Kez8EOp0kyLLr+iHjkKLQm5KCiGbC0vHGAjSPl+7BatzkaApzXAgjWJRfi9aF5d6tkEoKltai6KdlyBRELgVMEowUpTdhvMJmQVMCmXS83EhnljjCISU=
Received: from DM6PR01MB4444.prod.exchangelabs.com (2603:10b6:5:78::15) by BYAPR01MB4517.prod.exchangelabs.com (2603:10b6:a03:95::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6002.27; Fri, 20 Jan 2023 21:26:34 +0000
Received: from DM6PR01MB4444.prod.exchangelabs.com ([fe80::24bf:bd6f:317f:bc50]) by DM6PR01MB4444.prod.exchangelabs.com ([fe80::24bf:bd6f:317f:bc50%4]) with mapi id 15.20.6002.024; Fri, 20 Jan 2023 21:26:34 +0000
From: Justin Richer <jricher@mit.edu>
To: HTTP Working Group <ietf-http-wg@w3.org>
Thread-Topic: Errors for Signatures
Thread-Index: AQHZLRXfu/6/i1o/PUSudsG3jjZaYg==
Date: Fri, 20 Jan 2023 21:26:34 +0000
Message-ID: <2A2C7381-5397-4171-B0DF-66F64346329E@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=mit.edu;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DM6PR01MB4444:EE_|BYAPR01MB4517:EE_
x-ms-office365-filtering-correlation-id: a485151a-3333-47b6-86f3-08dafb2d01ab
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM6PR01MB4444.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230022)(4636009)(39860400002)(136003)(346002)(376002)(366004)(396003)(451199015)(2616005)(2906002)(41300700001)(8936002)(5660300002)(4744005)(86362001)(38070700005)(33656002)(36756003)(122000001)(3480700007)(38100700002)(75432002)(6916009)(316002)(786003)(6506007)(186003)(6512007)(26005)(66946007)(66446008)(71200400001)(64756008)(66476007)(66556008)(76116006)(91956017)(7116003)(8676002)(966005)(478600001)(6486002);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <8357F2536C85E14393EB86BC76073202@prod.exchangelabs.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM6PR01MB4444.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a485151a-3333-47b6-86f3-08dafb2d01ab
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jan 2023 21:26:34.5840 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /GnBy5nD7aYiAU0Ss+epKVplHP5a3h3yENAacdgD45InDVTgq6JQd6rPmKrQ7xKr
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR01MB4517
X-OriginatorOrg: mit.edu
X-W3C-Hub-DKIM-Status: validation passed: (address=jricher@mit.edu domain=mit.edu), signature is good
X-W3C-Hub-Spam-Status: No, score=-7.4
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1pIyuX-002sfE-6B 857eeb332ef59a09b275c082a61a1003
X-Original-To: ietf-http-wg@w3.org
Subject: Errors for Signatures
Archived-At: <https://www.w3.org/mid/2A2C7381-5397-4171-B0DF-66F64346329E@mit.edu>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/40695
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Hello WG,

I’d like some additional perspective about an issue raised against the signatures specification:

https://github.com/httpwg/http-extensions/issues/2336

Specifically, what, if anything, should the spec say about returning errors? Since signatures can be applied in a variety of different ways, I think that the spec shouldn’t really have a lot to say. I’ve put together a PR that adds some non-normative guidance though, and I’d like some feedback as to whether this is appropriate in this context:

https://github.com/httpwg/http-extensions/pull/2392

Thank you,

 — Justin