Re: RFC 9113 and :authority header field

Stefan Eissing <stefan@eissing.org> Thu, 30 June 2022 14:54 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAD83C15C7E5 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 30 Jun 2022 07:54:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.758
X-Spam-Level:
X-Spam-Status: No, score=-2.758 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=eissing.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WWc-w7U1vqEy for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 30 Jun 2022 07:54:19 -0700 (PDT)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE26FC15A757 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Thu, 30 Jun 2022 07:54:18 -0700 (PDT)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1o6vVd-000tJN-KJ for ietf-http-wg-dist@listhub.w3.org; Thu, 30 Jun 2022 14:51:09 +0000
Resent-Date: Thu, 30 Jun 2022 14:51:09 +0000
Resent-Message-Id: <E1o6vVd-000tJN-KJ@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <stefan@eissing.org>) id 1o6vVc-000tI3-Ju for ietf-http-wg@listhub.w3.org; Thu, 30 Jun 2022 14:51:07 +0000
Received: from mail.eissing.org ([194.163.179.85]) by titan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <stefan@eissing.org>) id 1o6vVY-007Jzl-GT for ietf-http-wg@w3.org; Thu, 30 Jun 2022 14:51:07 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eissing.org; s=default; t=1656600648; bh=iSQJX5/Y217wwnXN7Vjkxrth0fIaV7B6PbwFC95roG0=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=Sksv3pyq+IbEkEqSsQvLBDxboQP7QtluaU00uqRMUSqXlDCspJYs8BwxPJ/nYuaix ucKZ8MUxF9CNGIyTyWOfCeybo6TEAqo/xDG/EJDaBHfttGEuXstkf2nQ6V5pZNc/RQ sOryD1Mw99kb+bkLJeQSR6M6SazaJBKbrG5yXITu2I7GwmT4asCKhAFqJ8OT7UBUGP g0vZ7Cb/qP96X5taFZK83HPGW//T+9BEwTWza+oMqSPEkY0lfhndXGZJi3u070bOc0 3rMLlTilh0mEmEhtoRmgVi6Xn9sY5mUsHAq9khSnE1LsGhtEvIw0Q0JBfbxFp1O0l4 Qn23CkzVDYixA==
Received: from smtpclient.apple (unknown [89.246.53.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail.eissing.org (Postfix) with ESMTPSA id 95326C006B; Thu, 30 Jun 2022 16:50:48 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.100.31\))
From: Stefan Eissing <stefan@eissing.org>
In-Reply-To: <20220630071314.GA20634@1wt.eu>
Date: Thu, 30 Jun 2022 16:50:48 +0200
Cc: "tatsuhiro.t@gmail.com" <tatsuhiro.t@gmail.com>, HTTP <ietf-http-wg@w3.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <392D0C8A-4EBC-4DD9-8C84-F06E837177BC@eissing.org>
References: <CAPyZ6=+q+MoOOwoCxbtFjt+gqsjHBqTzz9KXNVcs3EP-4VFp=Q@mail.gmail.com> <D7142A8A-5B80-46F5-A653-2307EE2DC5D8@gbiv.com> <CAPyZ6=LCSDAsPoFCQ2cRO-i+dpo5vnp2L5A7ZLw8dvRtDs6HUg@mail.gmail.com> <20220629055254.GA18881@1wt.eu> <697C5255-A33F-4DEE-AA7A-236DC7481EFA@eissing.org> <20220630071314.GA20634@1wt.eu>
To: Willy Tarreau <w@1wt.eu>
X-Mailer: Apple Mail (2.3696.100.31)
Received-SPF: pass client-ip=194.163.179.85; envelope-from=stefan@eissing.org; helo=mail.eissing.org
X-W3C-Hub-DKIM-Status: validation passed: (address=stefan@eissing.org domain=eissing.org), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1o6vVY-007Jzl-GT 1caf3976173b13cab24139a50f739756
X-Original-To: ietf-http-wg@w3.org
Subject: Re: RFC 9113 and :authority header field
Archived-At: <https://www.w3.org/mid/392D0C8A-4EBC-4DD9-8C84-F06E837177BC@eissing.org>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/40226
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>


> Am 30.06.2022 um 09:13 schrieb Willy Tarreau <w@1wt.eu>:
> 
> No, this one should not forge a :authority where there was not any,
> it's the case that's covered by the "unless" rule in the spec, so
> you'd get this:
> 
> H1 GET / HTTP/1.1, Host: example.com
> -> H2 host: example.com, :scheme: <context>
> -> H0 GET / HTTP/1.0, Host: example.com
> -> H1 GET / HTTP/1.1, Host: example.com
> 

I see. That is what you described as an "internal flag" to preserve that information in a gateway. And what is causing the problems at some CDNs (missing :authority). Thanks.

Well, since Apache httpd misses that flag our http2 proxy always sends :authority. I think I'll leave it that way until there is more acceptance of such a change.

Kind Regards,
Stefan