Re: #148: Reasonable Assurances and H2C

Barry Leiba <barryleiba@computer.org> Sat, 27 February 2016 16:48 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 412B21A90C2 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Feb 2016 08:48:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.286
X-Spam-Level:
X-Spam-Status: No, score=-6.286 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.006, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jifaI_MWkkfl for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Sat, 27 Feb 2016 08:48:34 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4A4D1A90B7 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Sat, 27 Feb 2016 08:48:34 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1aZhxv-0001DR-3U for ietf-http-wg-dist@listhub.w3.org; Sat, 27 Feb 2016 16:43:35 +0000
Resent-Date: Sat, 27 Feb 2016 16:43:35 +0000
Resent-Message-Id: <E1aZhxv-0001DR-3U@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <barryleiba@gmail.com>) id 1aZhxo-0001Ca-Ih for ietf-http-wg@listhub.w3.org; Sat, 27 Feb 2016 16:43:28 +0000
Received: from mail-io0-f169.google.com ([209.85.223.169]) by lisa.w3.org with esmtps (TLS1.2:RSA_ARCFOUR_SHA1:128) (Exim 4.80) (envelope-from <barryleiba@gmail.com>) id 1aZhxn-00071d-E9 for ietf-http-wg@w3.org; Sat, 27 Feb 2016 16:43:28 +0000
Received: by mail-io0-f169.google.com with SMTP id g203so150160582iof.2 for <ietf-http-wg@w3.org>; Sat, 27 Feb 2016 08:43:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc; bh=O3eBEws4rUP8SHe5S7LxinEq4vqiLN4gt4K6M2qqnEs=; b=0V6DqxX8KxyNI6+MvxUDOXKrmHFBanutKw4EY9nZse3UPqQtJ7NFMnBJWa+9SLDfQL gr3J2U6pr673IlmQJ7p3fJy4As2Kk0Ji6GW9Gp+GWFQhLWd5R3TwMZ0kaUbtXn/T5Lgz lPnmZZaUR/5wN6rgfR8MMdU0j8gWpiaUv2VQKDt6+dRyq+f2/1aHgKlRnxWLamn/5CDN a4DZtGMBLdjZ+oZyeSXQmneyBK3/Sbe0oiCxq/LZiz7/2J+iqxuYtvWTibHENmX7KGaX NKIx7t8RciHs5x6exXDxoZRXYTo5CvEMW1SSvcjdM1dWYX43HhsBRKCvPjEUhOFK64b/ ywaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc; bh=O3eBEws4rUP8SHe5S7LxinEq4vqiLN4gt4K6M2qqnEs=; b=LabRW9Jexwg4oyPa4VfNN1DRfr1fXjVV50LA+3Md+f1gqWQ8HeFomMaFREYNWmrbrU p/FUeJaPOiTD4b9oDqFc/H4VAOKx/GB4hv2Y/KOiGyj9/qX9tAN0OrOldGc0Hm6KmjFm hXGMqpTus4vrw40C9aWFMWUUkBhwwd9B3R8XQWR3ABie82pX2EAsycYYysywFmAtcVFF KDnb6SmjrWQz4jqG/zar8uv1hTq4S6YIVNodXZnDUnGrcupPTwKhXPOU76/76SQBFa6B HevE8TPklia/yYvtXObQGiVVE5ZtaCT1tM1o6jaUL6ulEX16Op17S5BNGKvyb1zMnsIU UQIw==
X-Gm-Message-State: AG10YOSX0nu9i6Ao5u1oHt6stnPpivFOTI74jWO+ZiVwzQY5UioxvWw2FKxHgLl7lkQLz3KqAr0EIHgTjO0MaQ==
MIME-Version: 1.0
X-Received: by 10.107.12.14 with SMTP id w14mr15818486ioi.8.1456591381247; Sat, 27 Feb 2016 08:43:01 -0800 (PST)
Sender: barryleiba@gmail.com
Received: by 10.36.156.5 with HTTP; Sat, 27 Feb 2016 08:43:01 -0800 (PST)
In-Reply-To: <97553164-A7C4-4F42-B06F-0AD119982669@mnot.net>
References: <20160209074851.32332.24065.idtracker@ietfa.amsl.com> <20160209182822.C37A959F@welho-filter2.welho.com> <B7164F24-DDA1-4753-8A8B-04809B1965FF@mnot.net> <CAC4RtVCCExJNE0y8480vC1W56NP4XhzfvLs+ASh1Qy-UcDPBNw@mail.gmail.com> <C2145C5A-0255-43F9-A44A-F6C7974CDD4C@mnot.net> <CABkgnnW3-c1qaC_N2UP5TLnPS0rrOYjOYFb4nhUzfQ_8AFsTJA@mail.gmail.com> <072D900D-422E-4168-8DCF-51A739BC9E5A@mnot.net> <CABkgnnWAbKY8RZ5gvjPan3M_-XpjFSau0yDN97H=CfLb0DNL2g@mail.gmail.com> <2DDC5527-43AC-4BD2-8ED9-F68D747A7E0C@mnot.net> <56CFFE31.6090503@greenbytes.de> <12592576-7F89-4309-B97D-753C9402CE7B@mnot.net> <CALaySJJz_FK=JRtEPo1PH5VTJb=XbUJZE711hBLKadrdsvt_Lw@mail.gmail.com> <97553164-A7C4-4F42-B06F-0AD119982669@mnot.net>
Date: Sat, 27 Feb 2016 11:43:01 -0500
X-Google-Sender-Auth: NMvqR1gyQokPNg3qV38cUcB-Whc
Message-ID: <CALaySJKU6ztSOrpwQkwS+dFF_+8kcvE3T=34eEWX=reLY6koeQ@mail.gmail.com>
From: Barry Leiba <barryleiba@computer.org>
To: Mark Nottingham <mnot@mnot.net>
Cc: "Julian F. Reschke" <julian.reschke@greenbytes.de>, Martin Thomson <martin.thomson@gmail.com>, Kari Hurtta <hurtta-ietf@elmme-mailer.org>, HTTP WG <ietf-http-wg@w3.org>
Content-Type: text/plain; charset="UTF-8"
Received-SPF: pass client-ip=209.85.223.169; envelope-from=barryleiba@gmail.com; helo=mail-io0-f169.google.com
X-W3C-Hub-Spam-Status: No, score=-7.7
X-W3C-Hub-Spam-Report: AWL=1.882, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: lisa.w3.org 1aZhxn-00071d-E9 e2d339438b05c1da54d8ac9406d65a36
X-Original-To: ietf-http-wg@w3.org
Subject: Re: #148: Reasonable Assurances and H2C
Archived-At: <http://www.w3.org/mid/CALaySJKU6ztSOrpwQkwS+dFF_+8kcvE3T=34eEWX=reLY6koeQ@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/31112
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

>> Yeh, why is "that updates this document" there?  Why do readers of
>> this document have to know about means that are provided in other
>> documents, such that "updates" is needed?
>
> We wanted to assure that any other way to establish reasonable assurances
> had sufficient vetting, and that someone reading this spec could find all the
> different ways to establish reasonable assurances.
>
> Any additional insights (hopefully in non-question form)?

Hm, I'm assume that wasn't meant to be snarky, though it sounds it.  I
needed to ask the question in order to answer the original question.

The way to assure the vetting is to say that they must be Standards
Track.  Experimental documents might or might not get sufficient
vetting.

The way to ensure that people who read this spec can find all the
extensions is to make a registry.  Extensions shouldn't generally be
"updating" the original spec.

So...
You can decide how you think the vetting will be accomplished, but if
you want it to be easy to find the new mechanisms, have this document
set up a registry and say that new mechanisms MUST be registered
there.  Then there's no concern about any "updates" rules with respect
to documents from other than Standards Track sources.

b