Re: Consensus call to include Display Strings in draft-ietf-httpbis-sfbis

Michael Sweet <msweet@msweet.org> Sat, 27 May 2023 15:14 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7933C14F74E for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 May 2023 08:14:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.047
X-Spam-Level:
X-Spam-Status: No, score=-5.047 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=msweet.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7AzLPqdJ8Z91 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 May 2023 08:14:50 -0700 (PDT)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F6D4C14F726 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Sat, 27 May 2023 08:14:50 -0700 (PDT)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1q2vaF-00BZnc-Qe for ietf-http-wg-dist@listhub.w3.org; Sat, 27 May 2023 15:11:55 +0000
Resent-Date: Sat, 27 May 2023 15:11:55 +0000
Resent-Message-Id: <E1q2vaF-00BZnc-Qe@lyra.w3.org>
Received: from mimas.w3.org ([128.30.52.79]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <msweet@msweet.org>) id 1q2vaE-00BZmj-De for ietf-http-wg@listhub.w3.org; Sat, 27 May 2023 15:11:54 +0000
Received: from mail.msweet.org ([173.255.209.91]) by mimas.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <msweet@msweet.org>) id 1q2vaE-00317U-Az for ietf-http-wg@w3.org; Sat, 27 May 2023 15:11:54 +0000
Received: from smtpclient.apple (unknown [129.222.138.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.msweet.org (Postfix) with ESMTPSA id 93B5D803A3; Sat, 27 May 2023 15:11:47 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.msweet.org 93B5D803A3
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=msweet.org; s=default; t=1685200307; bh=wCp8dkbSYt8M3QKU7hSIv/vZxTMxLtFY+6Hqfn9ooDI=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=rJkKDpUxGsQ2hF2+pqXrPIRxnJa0CPcraPbIPnFuPFualirekgeeW8ynfHYYCQWmD au1mAR70HRhoR0oFISd/miZpj5pB7HDb56izvTfzN+3mxu8mavZCe/OIx476kBz8fG cKB1u1XeFNhl3R55vOIgONUJmEqeEnxo/71W1cpQ=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
From: Michael Sweet <msweet@msweet.org>
In-Reply-To: <a19c9d6c-d976-0da6-baca-d6582134374f@gmx.de>
Date: Sat, 27 May 2023 11:11:35 -0400
Cc: ietf-http-wg@w3.org
Message-Id: <B739D1AA-6A82-4545-85D5-82C9D6C10174@msweet.org>
References: <a19c9d6c-d976-0da6-baca-d6582134374f@gmx.de>
To: Julian Reschke <julian.reschke@gmx.de>
X-Mailer: iPad Mail (20E252)
Received-SPF: pass client-ip=173.255.209.91; envelope-from=msweet@msweet.org; helo=mail.msweet.org
X-W3C-Hub-DKIM-Status: validation passed: (address=msweet@msweet.org domain=msweet.org), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1q2vaE-00317U-Az b50a87f23d603ffbe6343bf8a9894280
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Consensus call to include Display Strings in draft-ietf-httpbis-sfbis
Archived-At: <https://www.w3.org/mid/B739D1AA-6A82-4545-85D5-82C9D6C10174@msweet.org>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51108
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Not wanting to wade too deep into the waters here, but for IPP we usually reference Network Unicode (RFC 5198) when we want Unicode text without potentially nasty control/special code points. Among other things, it acknowledges that we are not Unicode experts and that somebody else will make sure to update the allowed characters should the Unicode Consortium add more control characters.

WRT the need for localizable error messages, while IPP does support such things we also like to use well-known “reason” strings (normatively plain English strings like “toner-empty”) that can be localized at the client as needed. This solves common UX issues like “my printer doesn’t offer localizations in my language” and “I have multiple users consuming messages in different languages”, avoids the security issues or passing display strings, and avoids putting the burden of localization on a busy server.

(for the record I’m +0 on sf-display-string)

____________________
Michael Sweet

> On May 27, 2023, at 5:56 AM, Julian Reschke <julian.reschke@gmx.de> wrote:
> 
> On 27.05.2023 10:37, Willy Tarreau wrote:
>> ...
> 
> Without having read all details:
> 
> +1 to consider (!) just using raw octets
> 
> +1 not to use sf-binary
> 
> +1 to exclude ASCII controls (but not entirely sure about CR LF HTAB)
> 
> but
> 
> -1 to use anything but UTF-8 (I fail to see any reason for that) - and
> no, use of UTF-8 does require revising things when Unicode code points
> are added
> 
> Best regards, Julian
>