Re: [hybi] [whatwg] HttpOnly cookie for WebSocket?

Ian Hickson <ian@hixie.ch> Thu, 28 January 2010 21:53 UTC

Return-Path: <ian@hixie.ch>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D3DBC3A695E for <hybi@core3.amsl.com>; Thu, 28 Jan 2010 13:53:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oCLP5SVfDZHd for <hybi@core3.amsl.com>; Thu, 28 Jan 2010 13:53:16 -0800 (PST)
Received: from looneymail-a4.g.dreamhost.com (caibbdcaaaaf.dreamhost.com [208.113.200.5]) by core3.amsl.com (Postfix) with ESMTP id DB1F13A67B2 for <hybi@ietf.org>; Thu, 28 Jan 2010 13:53:16 -0800 (PST)
Received: from ps20323.dreamhostps.com (ps20323.dreamhost.com [69.163.222.251]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by looneymail-a4.g.dreamhost.com (Postfix) with ESMTP id B583E81C6; Thu, 28 Jan 2010 13:53:36 -0800 (PST)
Date: Thu, 28 Jan 2010 21:53:36 +0000
From: Ian Hickson <ian@hixie.ch>
To: Greg Wilkins <gregw@webtide.com>
In-Reply-To: <4B619223.60408@webtide.com>
Message-ID: <Pine.LNX.4.64.1001282141080.22020@ps20323.dreamhostps.com>
References: <de17d48e1001280012i2657b587i83cda30f50013e6b@mail.gmail.com> <4B614CEC.2050400@ericsson.com> <Pine.LNX.4.64.1001280856380.22020@ps20323.dreamhostps.com> <4B616F17.4030402@ericsson.com> <4B619223.60408@webtide.com>
Content-Language: en-GB-hixie
Content-Style-Type: text/css
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Cc: Hybi <hybi@ietf.org>
Subject: Re: [hybi] [whatwg] HttpOnly cookie for WebSocket?
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Jan 2010 21:53:17 -0000

-whatwg; Please don't cross-post to the WHATWG list -- it causes threads 
to fragment since not everyone is subscribed to both lists and the WHATWG 
list rejects non-subscriber posts. Also, people on the WHATWG list didn't 
subscribe for political stuff, they just want the technical discussions.

On Fri, 29 Jan 2010, Greg Wilkins wrote:
> 
> I'm also curious that you say the WHATWG is still actively working on 
> the protocol (even though you also say that the protocol has reached 
> last call at the WHATWG)?

The idea of a last call for comments is to get comments... those comments 
then have to be addressed. Then there's a call for implementations, which 
also results ein feedback, which also has to be addressed. And then 
there's the test suite that needs writing. Last Call therefore is not even 
half-way along the process.


> The WHATWG submitted the document to the IETF

I don't think that's an accurate portrayal of anything that has occurred, 
unless you mean the way my commit script uploads any changes to the draft 
to the tools.ietf.org scripts. That same script also submits the varous 
documents generated from that same source document to the W3C and WHATWG 
source version control repositories.


> and surely it was expected that IETF processes would be applied to edit 
> and refine the protocol and the document. If the WHATWG continue to work 
> on their own document, that is only going to result in multiple 
> specifications!

HTML5, Web Storage, Web Workers, Microdata, 2D Canvas, Server Sent Events, 
Web Sockets API, Cross-Document Messaging, and Channel Messaging are all 
being developed by the W3C and the WHATWG together, and there's only one 
spec for each of those. Why would the IETF not be able to work with the 
WHATWG in the same way?


> Surely when the WHATWG submitted the protocol to the IETF they were 
> passing the protocol from the WHATWG process to the IETF process?

Goodness no. If you are referring to my publishing a draft using the IETF 
tools, that was (and is) done in the spirit of cooperation, just as is 
done with HTML5 with the W3C. I would be very happy to work with the IETF 
on Web Sockets, in conjunction with the WHATWG community, just as HTML5 
is developed as a joint effort.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'