Re: [hybi] Fwd: Gen-ART last call review of draft-ietf-hybi-thewebsocketprotocol-10

David Endicott <dendicott@gmail.com> Thu, 21 July 2011 03:18 UTC

Return-Path: <dendicott@gmail.com>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D760521F86F6 for <hybi@ietfa.amsl.com>; Wed, 20 Jul 2011 20:18:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level:
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCAnvcQPpZqc for <hybi@ietfa.amsl.com>; Wed, 20 Jul 2011 20:18:18 -0700 (PDT)
Received: from mail-ww0-f44.google.com (mail-ww0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2878221F86E9 for <hybi@ietf.org>; Wed, 20 Jul 2011 20:18:18 -0700 (PDT)
Received: by wwe5 with SMTP id 5so561498wwe.13 for <hybi@ietf.org>; Wed, 20 Jul 2011 20:18:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=a6DXvWRzmIpXhpTZJXnhlvDOHlfGX+uMoDe2Ut0yQZk=; b=M2rRb8wi7oFOIhT91m3PtCtI97y9smodBLj073j4diewAiZev22uKHHldFrOk51MGB +/Gff0yWRlxuTG4Zg9AwcLm6KJum1v1GU2SYycBBtBCsKOrbT08+hBfhPDnIXcmC4I7+ HphkZKuj9N2SKgmdJywIJStHMe4toW+3KXh6U=
MIME-Version: 1.0
Received: by 10.216.1.200 with SMTP id 50mr367171wed.33.1311218297119; Wed, 20 Jul 2011 20:18:17 -0700 (PDT)
Received: by 10.216.39.197 with HTTP; Wed, 20 Jul 2011 20:18:17 -0700 (PDT)
In-Reply-To: <4E2792EB.2070408@stpeter.im>
References: <4E2792EB.2070408@stpeter.im>
Date: Wed, 20 Jul 2011 23:18:17 -0400
Message-ID: <CAP992=EpEeR3yDts4frHkcD=XL4QeJ4boU44MnBbJTY1wXAetQ@mail.gmail.com>
From: David Endicott <dendicott@gmail.com>
To: Peter Saint-Andre <stpeter@stpeter.im>
Content-Type: multipart/alternative; boundary="0016364d2c79d2a3d104a88bcc5e"
Cc: "hybi@ietf.org" <hybi@ietf.org>
Subject: Re: [hybi] Fwd: Gen-ART last call review of draft-ietf-hybi-thewebsocketprotocol-10
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jul 2011 03:18:18 -0000

Thanks for this Peter.   I believe the reviewer actually summarized the
consensus of the dissenters rather well.


Summary:
> Not ready.
>


> Major issues:
>
> [Is GET/Upgrade appropriate?]
> [Huge buffers]
> [Why is masking necessary?]
> [Why only client-to-server masking?]
> [Unlimited buffering with fragmentation]
>
>

> Minor issues:
>
> [Setting protocol]
> [Use existing Origin header]
> [Need a reference to CORS]
> [Key is over-engineered]
>
>

> Nits / Editorial comments:
>
> [Why not plain sockets?]
> [Put the handshake section first]
>