Re: [hybi] Comments about draft-13
"Richard L. Barnes" <rbarnes@bbn.com> Tue, 06 September 2011 22:32 UTC
Return-Path: <rbarnes@bbn.com>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B36421F8F76 for <hybi@ietfa.amsl.com>; Tue, 6 Sep 2011 15:32:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.551
X-Spam-Level:
X-Spam-Status: No, score=-106.551 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cCNIQS91-dSI for <hybi@ietfa.amsl.com>; Tue, 6 Sep 2011 15:32:04 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 2728C21F8F74 for <hybi@ietf.org>; Tue, 6 Sep 2011 15:32:04 -0700 (PDT)
Received: from ros-dhcp192-1-51-76.bbn.com ([192.1.51.76]:64127) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.74 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1R14DH-0004Y0-Ie; Tue, 06 Sep 2011 18:33:51 -0400
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="iso-8859-1"
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <4E669CFD.6020000@isode.com>
Date: Tue, 06 Sep 2011 18:33:51 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <A6D83FEF-EC1E-4EFA-B873-3A213740A2D5@bbn.com>
References: <CALiegfkUMDfuRC+16ZcLo__2OqAcQ1UVDGa_610ykEAe6yZViw@mail.gmail.com> <CALiegf=wO6w5UMLO-hsn8o0cX3__SuxMDrgqvScuS6QWdNhptw@mail.gmail.com> <A59BAA80-CD38-48C4-A113-C1493072D079@bbn.com> <4E669025.8080804@isode.com> <F9EE9C7A-79FB-44E3-9114-0965D74C5E58@bbn.com> <4E669CFD.6020000@isode.com>
To: Alexey Melnikov <alexey.melnikov@isode.com>
X-Mailer: Apple Mail (2.1084)
Cc: hybi@ietf.org
Subject: Re: [hybi] Comments about draft-13
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Sep 2011 22:32:04 -0000
On Sep 6, 2011, at 6:21 PM, Alexey Melnikov wrote: > Richard L. Barnes wrote: > >>>> Also, to re-iterate a comment I made earlier, "Sec-Websocket-Protocol" should just be "Websocket-Protocol", since it is not "Sec" -- scripts can set the value pretty much directly. >>>> >>> Let's please not change the header field name now, this will break implementations of all earlier versions, some of which are already deployed. >>> >> I wouldn't have a problem with this had W3C not assigned a semantic to the field name: >> " >> [Do not allow a script to set a header] if /header/ is a case-insensitive match for one of the following headers [...] or if the start of /header/ is a case-insensitive match for Proxy- or Sec- (including when header is just Proxy- or Sec-). >> " >> <http://www.w3.org/TR/XMLHttpRequest/> >> >> That behavior has set the expectation that Sec- header fields cannot be set by scripts, which is not really true of Sec-Websocket-Protocol. As the WS API is specified now, a script can provide an arbitrary UTF-8 string. So either this spec should constrain the syntax of the field (e.g., a sequence of ASCII tokens, which is what actually seems to be desired) or remove the "Sec-". >> > The header field syntax is already specified in -13, see Section 4.3. Also see Iñaki's response. > Ok, thanks. I had missed that. I think that's adequately restricted to merit "Sec-". Never mind. --Richard
- [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Alexey Melnikov
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Richard L. Barnes
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Richard L. Barnes
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Richard L. Barnes
- Re: [hybi] Comments about draft-13 Philipp Serafin
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Philipp Serafin
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Alexey Melnikov
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Richard L. Barnes
- Re: [hybi] Comments about draft-13 Alexey Melnikov
- Re: [hybi] Comments about draft-13 Richard L. Barnes
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 Bjoern Hoehrmann
- Re: [hybi] Comments about draft-13 Alexey Melnikov
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 John Tamplin
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 John Tamplin
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 John Tamplin
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 Bjoern Hoehrmann
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Iñaki Baz Castillo
- Re: [hybi] Comments about draft-13 Greg Wilkins
- Re: [hybi] Comments about draft-13 Joonas Lehtolahti
- Re: [hybi] Comments about draft-13 Peter Saint-Andre