RE: WHATWG [was: Appeal from Tim McSweeney regarding draft-mcsweeney-drop-scheme]

Larry Masinter <LMM@acm.org> Sat, 18 July 2020 23:08 UTC

Return-Path: <masinter@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB4A83A0E3F for <ietf@ietfa.amsl.com>; Sat, 18 Jul 2020 16:08:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Level:
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t5PhR5goZdUR for <ietf@ietfa.amsl.com>; Sat, 18 Jul 2020 16:08:56 -0700 (PDT)
Received: from mail-pl1-x629.google.com (mail-pl1-x629.google.com [IPv6:2607:f8b0:4864:20::629]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C57923A0E3E for <ietf@ietf.org>; Sat, 18 Jul 2020 16:08:56 -0700 (PDT)
Received: by mail-pl1-x629.google.com with SMTP id o1so6995161plk.1 for <ietf@ietf.org>; Sat, 18 Jul 2020 16:08:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-transfer-encoding:thread-index :content-language; bh=ifGZFdv1TygP+rKqtOHff7YZovd8W4vlV0QcyJhuuNY=; b=o6z8QSTo203jBm9CoBlNzlTjaXLfEBKItq8mh8RDIi95+JaJLcVl6FaTKRoefLHCly C35MW7RjDT66Phi3SgUALZ3k7WpUCaZL+K0I5pkeRS9Sxxw8tVVgEaI7vzLKOrtvprOt SLGbCz05h9EzrI0PL0ryfBKUM3BbkBYF2ujJ6xn4RTSXS/hhknf/dBg8o06fyn+c7dxw hgApfxyhhj1TA5nYMai9totyq9NRwfrYxIFmsiar/jnSHr0bk/xFu+ylbiCENjTK6DJ0 Fg+yukNrvJkyQ1Ub1MIFte8FqKzsnmYZ0oBcGVQW8UgS5LcvErb7DmvFGbo4kzyEbNut aiOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:references:in-reply-to:subject :date:message-id:mime-version:content-transfer-encoding:thread-index :content-language; bh=ifGZFdv1TygP+rKqtOHff7YZovd8W4vlV0QcyJhuuNY=; b=uFlgvQMWGtnApjS2I/GHFWYJ98ApnjFQMp7otVEX0l7vviIni9p739cngylzfhWjG4 P0GF2RtgzWO9TGbibIorOmAygjmAZC/cAR91v/CLIITLy5LQNro/PD+epRRcV96Gygz6 KqVqtixckKC6Caj0n8UrZDKendIhivzBGfqy66M13JhD+Qnh0vBSPhUMGIwPQP3ilHw8 IUUzhQpUa1mZ8s3vGYGojHu2T6attX3gImA6Vcjkr1voSHTX6jCRHL+k87dpguQMOXTu vj4KV7g/kyWnnxUHzV8c41CgeO74r/ULv/m92zStxAICwT5ISEbBdW1Oz5HJqIgutFVZ SsoA==
X-Gm-Message-State: AOAM530K8CZqN6IvsgATwMI85RvRyaUzxV4jfpu23zp5+ry6EXFMJBIn c//hj9vD9VgSx6h9gGFdgRE=
X-Google-Smtp-Source: ABdhPJyyq9P9YAJ0QSzr3XLI1szVcM7ZMvOJj61YThEa4AvgrkiiB9cFMLMCuEmSYFppsUhyxkrDWA==
X-Received: by 2002:a17:90a:ed87:: with SMTP id k7mr16657687pjy.31.1595113736033; Sat, 18 Jul 2020 16:08:56 -0700 (PDT)
Received: from TVPC (c-67-169-101-78.hsd1.ca.comcast.net. [67.169.101.78]) by smtp.gmail.com with ESMTPSA id u8sm6587363pjn.24.2020.07.18.16.08.54 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sat, 18 Jul 2020 16:08:54 -0700 (PDT)
Sender: Larry Masinter <masinter@gmail.com>
From: Larry Masinter <LMM@acm.org>
X-Google-Original-From: "Larry Masinter" <lmm@acm.org>
To: "'Joel M. Halpern'" <jmh@joelhalpern.com>, 'Brian E Carpenter' <brian.e.carpenter@gmail.com>
Cc: 'IETF' <ietf@ietf.org>
References: <CAL0qLwa9YYuT6J5vQYYJqkEf6ORiHJaf3zh_m=wyLHojaGPU3g@mail.gmail.com> <42958B5B-8EC4-449A-9B7F-B834285369AC@vigilsec.com> <01a701d65b90$9ffeea30$dffcbe90$@olddog.co.uk> <DD0E2DCC-707A-4702-9414-44B68A1B7BE4@tzi.org> <CAKKJt-eCdde6PY5egSg5aPL4_2LAjK5+dnhkUSiVpLiewYemRw@mail.gmail.com> <CAHw9_i+336sJq3oFCWTkeYFk8vmN1zki2qMfTYmgXkhJ6Z=-gg@mail.gmail.c om> <92415955-BD28-407C-A365-5ADFFE8164C9@tzi.org> <CAHw9_iKO+AjGN8TgjvC3H4=b-FNAx7=3dQdB=4QSVfzQr9o=bg@mail.gmail.com> <CAKKJt-enJVNSHOYj4x3caw4FAG5AjKyO70fxS_Rf6sTKwwtQvw@mail.gmail.c om> <012701d65c68$74b91890$5e2b49b0$@acm.org> <25DD0A8D-E59B-4D99-9A58-D986E3CD50D2@mnot.net> <008401d65cbb$c7806ad0$56814070$@acm.org> <2c572326-21a9-594f-4348-d717173769ea@gmail.com> <00a601d65cc7$64f8c2c0$2eea4840$@acm.org> <50B333D9F7634FA432FF28AC@PSB> <00b23b45-99e4-1ffa-cbae-e240f6eefdfa@gmail.com> <ea9faa1a-1c2f-f741-6e4e-87fd82e604e3@joelhalpern.com>
In-Reply-To: <ea9faa1a-1c2f-f741-6e4e-87fd82e604e3@joelhalpern.com>
Subject: RE: WHATWG [was: Appeal from Tim McSweeney regarding draft-mcsweeney-drop-scheme]
Date: Sat, 18 Jul 2020 16:08:54 -0700
Message-ID: <000d01d65d58$68f4b0a0$3ade11e0$@acm.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQII2YGHbbfo/UFmBBbYotarTLQ06wGmZFB+AOqmNiwCDJwJ5QGMC+O+AkvdAaMBQlf2IgGrr8RmAcBqur4CGkvMkAIRd1JAALTMIJICkSq1RQIKdCQEAT+SdVsCH1ul7wICAArXp8josqA=
Content-Language: en-us
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/Zjb0PPUKlGU2s9_Vibgb2UO7FLc>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Jul 2020 23:08:59 -0000

I didn't mean to suggest that merely by publishing the URL standard that it would automatically change IETF standards. 
(But if you had to choose an implementation, one of which is compatible with the browsers, and one which is compatible with the RFCs, which would you choose?)

With URL schemes, it's hard to get any implementation of consumers of a new scheme until there are enough producers to pay attention.
But who would start producing URLs that most of the deployed consumers can't handle.
(this is true for any common protocol element)

Change "browser" to "URL interpreter" to account for the non-browser implementations.
What I am trying to propose is that new URL schemes that you want to register as "Permanent" should come with a credible deployment strategy (e.g., sufficient coverage of deployed browser/consumers).

--
https://LarryMasinter.net https://going-remote.info

> -----Original Message-----
> From: Joel M. Halpern <jmh@joelhalpern.com>
> Sent: Saturday, July 18, 2020 1:45 PM
> To: Brian E Carpenter <brian.e.carpenter@gmail.com>; Larry Masinter
> <LMM@acm.org>
> Cc: 'IETF' <ietf@ietf.org>
> Subject: Re: WHATWG [was: Appeal from Tim McSweeney regarding draft-
> mcsweeney-drop-scheme]
> 
> Small distinction.
> Anyone is free to ignore RFCs if they want to.  We have no police.
> Although we do have an understanding with W3C that we will respect each others
> work.
> 
> Having said that, WHATWG is not free to do what I understood Larry suggested,
> which is to deprecate RFCs.  They could ask the IETF to do so.  But they can not do
> so on their own.  (Presuming that by deprecate one means either obsolete or
> move to historic.)
> 
> Yours,
> Joel
> 
> On 7/18/2020 4:37 PM, Brian E Carpenter wrote:
> > Also, looking at the WHATWG material and in particular its rejection
> > of RFC6874, they don't seem to have picked up on the underlying
> > problem that made that RFC necessary: the difference between (a) what
> > one is allowed to type into a browser and (b) what is allowed as a URI
> > on the wire. As the RFC says "Unfortunately, there is no formal
> > distinction between the syntax allowed in a browser's input dialogue
> > box and the syntax allowed in URIs." It's entirely possible that we
> > got it wrong in RFC6874, but until this formal distinction exists, the IETF standard
> is what it is.
> > WHATWG can't change it unilaterally just because it makes their code
> > awkward.
> >
> > They could always come to the IETF and talk about it. I only
> > discovered yesterday that they have an opinion on RFC6874, which was
> > published 7 years ago. (I was aware that Mozilla rejected it 5 years
> > ago, and that on paper it broke CUPS, see
> > https://tools.ietf.org/html/draft-sweet-uri-zoneid-01.)
> >
> > Regards
> >     Brian Carpenter
> >
> > On 19-Jul-20 06:58, John C Klensin wrote:
> >> Larry,
> >>
> >> This may be just an expansion on Carsten's "URIs are not just for
> >> browsers" but the two main difficulties with that scenario
> >> are:
> >>
> >> (i) It blows off all non-browser uses of URIs.  To draw an example
> >> from your earlier message, while FTP may not be in general use on the
> >> public Internet any more, especially from browsers, it is still
> >> widely supported in text editors and for retrieval of information
> >> from repositories [1], many of whom have adopted or accept an FTP URI
> >> syntax. The recent discussion of email address syntax and validity in
> >> HTML [2] (of which you have been a part) and discrepancies between
> >> what the web allows, IETF Standards, and plausible practices when
> >> email addresses are used as identifiers may be another example,
> >> albeit an indirect one.
> >>
> >> (ii) It might be one thing to say (referencing RFC 3986) that there
> >> are no locator URIs other than URLs, parse the URL-specific material
> >> out of 3986, and see if what is left in worse publishing as a
> >> replacement.  But saying that all URIs are URLs, URLs are being taken
> >> over by WHATWG, and 3986 should be obsoleted (taking anything
> >> non-URL-ish that remain with it) presumably deprecates all name-type
> >> URIs, including URNs.  My impression is that there is a significant
> >> portion of the Internet community, including some national
> >> governments and repository libraries, that does not want to go there.
> >>
> >> The document you cited [3] also reinforces my concerns about WHATWG
> >> as a setter of standards for the Internet based on what a small
> >> number of browsers do and as an actor in this space that does not
> >> play well with others.  As one handy example, Section
> >> 3.2 is inconsistent with DNS specifications (RFC 1034/RFC 1035
> >> included) that do not require that labels in FQDNs for "hosts"
> >> conform to the preferred syntax.   It also depends on the
> >> so-called Public Suffix List, which is known to be problematic (as it
> >> goes on the warn... sort of) and uses a concept of _registerable
> >> domain_ that is inconsistent with domain trees in which the sorts of
> >> registrations they are talking about may exist at multiple levels
> >> (see RFC 1480 for an interesting example that, in combination with
> >> public suffix ideas, recently
> >> bit me).   As another, Section 3.3 uses terminology and
> >> procedures that were deprecated in 2010.  More generally, that
> >> section is based, not on IETF Standard IDNA, but on an
> >> interpretation/ profiling of Unicode UTS#46 that amounts to
> >> "IDNA2003 as extended by Unicode forever; IDNA2008 never".
> >>
> >> If one accepts the hypothesis that the Internet is evolving, or has
> >> already evolved, to the point that the web (presumably as defined by
> >> W3C and WHATWG) is all that counts, all non-web applications are
> >> obsolescent and browsers are the only applications that count, little
> >> or any of the above is actually a problem.  For at least some of us
> >> who do not believe that, perhaps because of advancing age and
> >> accompanying stick-in-the-mud tendencies, it feels like a probably.
> >>
> >> best,
> >>     john
> >>
> >> [1] Where the data are public and, in most cases, the fact that one
> >> has accessed it is of even less interest, and less concern from a
> >> privacy standpoint, than one's choice of sources for the daily news.
> >>
> >> [2] https://github.com/whatwg/html/issues/4562
> >>
> >> [3] https://url.spec.whatwg.org/
> >>
> >>
> >> --On Friday, July 17, 2020 22:50 -0700 Larry Masinter <LMM@acm.org>
> >> wrote:
> >>
> >>>>> If the URL spec moves
> >>>>
> >>>> Why would that happen?
> >>>>
> >>>>     Brian
> >>>
> >>> https://url.spec.whatwg.org/#goals
> >>>
> >>> Main goal: "Align RFC 3986 and RFC 3987 with contemporary
> >>> implementations and obsolete them in the process."
> >>>
> >>> I would expect   more stringent rules that would help
> >>> interoperability more than "specification required" - Must have
> >>> proof-of-concept implementation, two or more browsers commit to
> >>> implement - Drop or deprecate when two or more browsers do, as is
> >>> happening with "ftp:" URLs
> >>>
> >>> --
> >>> https://LarryMasinter.net https://going-remote.info
> >>>
> >>>
> >>
> >>
> >>
> >