Re: Multiple header fields with the same field name - unwritten assumption about quoted commas in values?

"Roy T. Fielding" <fielding@gbiv.com> Wed, 16 January 2013 01:13 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DB6021F86C1 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 15 Jan 2013 17:13:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VCV35QJ-vIVJ for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 15 Jan 2013 17:13:46 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id CD3F521F86BE for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 15 Jan 2013 17:13:45 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1TvHZA-0005bK-L4 for ietf-http-wg-dist@listhub.w3.org; Wed, 16 Jan 2013 01:13:20 +0000
Resent-Date: Wed, 16 Jan 2013 01:13:20 +0000
Resent-Message-Id: <E1TvHZA-0005bK-L4@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <fielding@gbiv.com>) id 1TvHZ7-0005af-4x for ietf-http-wg@listhub.w3.org; Wed, 16 Jan 2013 01:13:17 +0000
Received: from mailbigip.dreamhost.com ([208.97.132.5] helo=homiemail-a32.g.dreamhost.com) by maggie.w3.org with esmtp (Exim 4.72) (envelope-from <fielding@gbiv.com>) id 1TvHZ6-0006yg-8D for ietf-http-wg@w3.org; Wed, 16 Jan 2013 01:13:17 +0000
Received: from homiemail-a32.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a32.g.dreamhost.com (Postfix) with ESMTP id 9F865584065; Tue, 15 Jan 2013 17:12:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gbiv.com; h=subject :mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=gbiv.com; bh=MLK2A0js5z/zwN3J++4QvC6fwgc=; b=Vc/nR23yDoHkFd25LkxfmvyobVBy yHCQ4xYs0vl+lz9twdYplU4SC8sLAKeq0W3XRqh6eo5DTygeoIxqJS7ZLDNImeNq eIPH+d2wpjP/ZwUQN9gWrBIPXU8g/p7gF6dlOiftWH1qARN13Nd6SsrxejkRv77/ Shu0fdySs3iAubs=
Received: from [192.168.1.84] (99-21-208-82.lightspeed.irvnca.sbcglobal.net [99.21.208.82]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: fielding@gbiv.com) by homiemail-a32.g.dreamhost.com (Postfix) with ESMTPSA id 01D60584058; Tue, 15 Jan 2013 17:12:53 -0800 (PST)
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset="us-ascii"
From: "Roy T. Fielding" <fielding@gbiv.com>
In-Reply-To: <CAK3OfOg17M3LTPwFJXFuHrq4AZh505hq27xoeVwJsPTvA7_3aw@mail.gmail.com>
Date: Tue, 15 Jan 2013 17:12:51 -0800
Cc: Mark Nottingham <mnot@mnot.net>, Karl Dubost <karld@opera.com>, Julian Reschke <julian.reschke@gmx.de>, Piotr Dobrogost <p@ietf.dobrogost.net>, ietf-http-wg@w3.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <A9D632AF-448F-4B5A-B3A0-33CF9BFDC3B4@gbiv.com>
References: <CAA6tFMtOtpu-KJ1PMctU-XqZBXieOgb=uxPNj9wkRBvvbK7iXg@mail.gmail.com> <CACuKZqFWzApgkbQUEgOoNrumJFKSeVFZeCzZgvWDBGukykVqiA@mail.gmail.com> <50ED4DB4.5010803@gmx.de> <CACuKZqHDWbNMiwjkxvBuAt-UEg_tjzEvFZsyXM2U+5H5qxK76A@mail.gmail.com> <50ED9CEF.8080609@gmx.de> <CACuKZqFQ1=0sU7uhnh9_xew5=jPjS3WtEgrtu1RFH+Nu_=FwrQ@mail.gmail.com> <50EDA819.4040402@gmx.de> <CACuKZqH4+JUe4Gqp7LRGkCorFdQ107S=sf2uOSZnMkdgHmJaaQ@mail.gmail.com> <50EDD95C.9080206@gmx.de> <CAA6tFMsgAKL+-UW6rS0ScxpvukBhJ2ExT9KMWudiKa65YCpkew@mail.gmail.com> <50F549D8.2050501@gmx.de> <360A0ACE-4CA6-400A-BFE9-7DFF89AAB439@opera.com> <50F57628.5030502@gmx.de> <BD31B7FE-1CB4-48AD-A119-37A3509EF8E9@opera.com> <6D9EA8FA-50A6-44B1-A2EF-BB428E94183C@mnot.net> <CAK3OfOj8G3gFbTK_vPSnjS0qij+SUB3t9CdG80FYW5tbGgKR3A@mail.gmail.com> <C6A43E78-4F94-4FE3-A049-678555896FEC@mnot.net> <CAK3OfOiS1UPqvsk5H8RWUKyw8MB=uykeMkXzZoffm6732=UjMg@mail.gmail.com> <86DE887E-B189-40D2-A867-C81CFB0434AB@mnot.net> <CAK3OfOiWzJqHr8VSzn6WFcWRGJ Er59XiUyh+wGTDnf1ydVL=3g@mail.gmail.com> <1390897A-59CF-451B-B3CD-BB39906BDACD@mnot.net> <CAK3OfOg17M3LTPwFJXFuHrq4AZh505hq27xoeVwJsPTvA7_3aw@mail.gmail.com>
To: Nico Williams <nico@cryptonector.com>
X-Mailer: Apple Mail (2.1283)
Received-SPF: none client-ip=208.97.132.5; envelope-from=fielding@gbiv.com; helo=homiemail-a32.g.dreamhost.com
X-W3C-Hub-Spam-Status: No, score=-3.5
X-W3C-Hub-Spam-Report: AWL=-3.423, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001
X-W3C-Scan-Sig: maggie.w3.org 1TvHZ6-0006yg-8D fd748465ae18c428225c89f04bb8f608
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Multiple header fields with the same field name - unwritten assumption about quoted commas in values?
Archived-At: <http://www.w3.org/mid/A9D632AF-448F-4B5A-B3A0-33CF9BFDC3B4@gbiv.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/15901
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On Jan 15, 2013, at 4:07 PM, Nico Williams wrote:

> On Tue, Jan 15, 2013 at 6:01 PM, Mark Nottingham <mnot@mnot.net> wrote:
>> On 16/01/2013, at 10:57 AM, Nico Williams <nico@cryptonector.com> wrote:
>>> No.  I'm saying that it's OK for apps to do that but not any other
>>> entities (middleboxes), mostly because middleboxes can't possibly know
>>> about headers that hadn't been registered when they were implemented.
>> 
>> OK. Is this an actual problem you've encountered?
>> 
>> I'm fine with adding some clarifying text if it helps implementers, but I haven't seen this confusing any middlebox vendors; they tend to leave the bits alone...
> 
> I noticed Poul's and someone else's replies that in their middlebox
> implementations they concluded that it's never safe to merge headers.
> If that's the case (and I do think it follows from the facts that it
> is the case) then we should say so rather than leave each implementor
> to figure this out on their own.

The requirement is on generating headers, so it does not concern
middlebox vendors other than for the fields that they add to a message.

Apache httpd merges header fields as they are read from the network.
So does any correctly written client that reads internet message format
(like all of the common MIME and libwww libraries).  If you want to
interoperate on the Web, field generators must obey that requirement.

....Roy