Re: [hybi] Process! was: [whatwg] HttpOnly cookie for WebSocket?

Justin Erenkrantz <justin@erenkrantz.com> Fri, 29 January 2010 15:58 UTC

Return-Path: <justin.erenkrantz@gmail.com>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8CF633A6891 for <hybi@core3.amsl.com>; Fri, 29 Jan 2010 07:58:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.587
X-Spam-Level:
X-Spam-Status: No, score=-2.587 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, GB_I_INVITATION=-2, PLING_QUERY=1.39]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DVnVZ9Z7rhC2 for <hybi@core3.amsl.com>; Fri, 29 Jan 2010 07:58:15 -0800 (PST)
Received: from mail-iw0-f184.google.com (mail-iw0-f184.google.com [209.85.223.184]) by core3.amsl.com (Postfix) with ESMTP id A9ED63A67AC for <hybi@ietf.org>; Fri, 29 Jan 2010 07:58:15 -0800 (PST)
Received: by iwn14 with SMTP id 14so1980214iwn.17 for <hybi@ietf.org>; Fri, 29 Jan 2010 07:58:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=cNCwDysz9FXs2VjxO6tYJINRlbuOLqx/n0DNLhQxqsE=; b=BXPcWXayWM3cZlrEHzJR9OL6TqdNrsnsbpNRzxHPAnszym3Rq2iHvXFNma0NkAqgMu nC6Xa+2nsQzVYXGAPmTWzfgOHIej5W/AE5cNWGKaxhZ59/WvEFrXPCH9iVEdeF3xYY1H xLsrsE6VmfmPCzpfR9u2EvdJYsqSvTfNJjYLE=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=qmNtXY1jW3zu6eCF5JZydY1RRtd6OvutK+PHsSeE1IVJaJs1KMX9gMRyToIKnT5lus kjhnbzTFkfkaEhVGsmTpSZQZMOcHTDgJFKCRhvro1RciFacw1xtuedaBpNhQyS+QU2Hx N6h6crRuqPFLYHHCDoq2cZsnWWOoPrzHC4Qh8=
MIME-Version: 1.0
Sender: justin.erenkrantz@gmail.com
Received: by 10.142.119.41 with SMTP id r41mr686992wfc.150.1264780618349; Fri, 29 Jan 2010 07:56:58 -0800 (PST)
In-Reply-To: <4B62E516.2010003@webtide.com>
References: <de17d48e1001280012i2657b587i83cda30f50013e6b@mail.gmail.com> <4B620B8F.6030706@gmx.de> <Pine.LNX.4.64.1001282217320.22053@ps20323.dreamhostps.com> <bbeaa26f1001281449q1a6e1813q3f537fe15a5a9d60@mail.gmail.com> <4B625733.2020907@webtide.com> <6.2.5.6.2.20100128225542.06fa8d68@resistor.net> <Pine.LNX.4.64.1001290817520.22020@ps20323.dreamhostps.com> <4B62C5FE.8090904@it.aoyama.ac.jp> <Pine.LNX.4.64.1001291134350.22020@ps20323.dreamhostps.com> <4B62E516.2010003@webtide.com>
Date: Fri, 29 Jan 2010 07:56:58 -0800
X-Google-Sender-Auth: c939afff7f4f547c
Message-ID: <5c902b9e1001290756r3f585204h32cacd6e64fbebaa@mail.gmail.com>
From: Justin Erenkrantz <justin@erenkrantz.com>
To: Greg Wilkins <gregw@webtide.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Cc: Hybi <hybi@ietf.org>
Subject: Re: [hybi] Process! was: [whatwg] HttpOnly cookie for WebSocket?
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jan 2010 15:58:16 -0000

On Fri, Jan 29, 2010 at 5:39 AM, Greg Wilkins <gregw@webtide.com> wrote:
> The whatwg process relies on the consent of a single individual
> (yourself) as editor.  This position is an appointment made by an
> invitation only committee made up of 9 representatives from
> various  browser manufacturers.   You are also on that committee,
> the spokesman for the group and an employee of the company that
> is shipping the first client implementation.

Yes, this is my biggest concern about the process so far - it seems
very exclusionary to those of us who develop servers.  So far, this is
a significant portion of the community that I feel has not had a
legitimate chance to provide any real input into the WebSocket
protocol.  Instead, as an httpd developer who knows just as much about
HTTP as anyone else on this list, I just get the feeling that the
browser developers are telling me that I need to implement a
"protocol" without providing a legitimate opportunity for feedback.

Instead, I just see that there have been unilateral decisions that
have profound consequences (mandated port, conflation of security,
etc.) that show little hope of being re-considered.  It seems that
folks are intending to rubber-stamp the draft from WHATWG which
is...sad.  As such, it often leaves me wondering whether I should even
bother trying - so I applaud Greg for trying to speak up while also
getting Jetty to speak WebSocket.

I've expressed my feelings before that the current "draft" documents
for WebSocket is pretty impenetrable and I hope that future IETF
drafts alter it into something that is independently implementable by
both server and client developers.  Part of the elegance of HTTP is
that it's pretty easy to implement a basic reasonably-conformant
version - WebSocket simply does not have that property at this time.

Since IETF 77 is in my backyard, I do hope to attend any WG sessions
related to hybi.  If folks are interested in having a working session
on rewriting the latest draft into something that is more
approachable, I'm definitely interested.  I really would like to offer
something constructive as I share the goals of the WG - there is a
need for an async protocol, but I'm hard-pressed to stand behind the
current process as I don't feel very enfranchised at the moment.  --
justin