WHATWG [was: Appeal from Tim McSweeney regarding draft-mcsweeney-drop-scheme]

Brian E Carpenter <brian.e.carpenter@gmail.com> Sat, 18 July 2020 20:37 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EEB63A0D23 for <ietf@ietfa.amsl.com>; Sat, 18 Jul 2020 13:37:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xOny4HTUMlRm for <ietf@ietfa.amsl.com>; Sat, 18 Jul 2020 13:37:26 -0700 (PDT)
Received: from mail-pl1-x633.google.com (mail-pl1-x633.google.com [IPv6:2607:f8b0:4864:20::633]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FF083A0D22 for <ietf@ietf.org>; Sat, 18 Jul 2020 13:37:26 -0700 (PDT)
Received: by mail-pl1-x633.google.com with SMTP id t6so6886281plo.3 for <ietf@ietf.org>; Sat, 18 Jul 2020 13:37:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=6PLAvsOeBYVGJ3mTbCeb+PW5/6+5kX1PgjCFTdT1sqs=; b=rTpnjFeCQ/KOZeiylRt8wPWOK6GVX3uYU6wQrzXSEbdxsKTZuBntwX5eZIcEK7E3aS rOoz+eTZ0KEyHVM9qr8s5T8qz9E+whuSiI/9mtGHLea3ZO2SuZcyMXYbs8yRrOHSTOrs +T88K70QZuLOYUm3ZS/xr/xlyLLWVSw0QvQbkqAbEksFZ3jX3TUFmzB+ZgcLelZQ0Dyj wplOZO10beszyXcIzETJVkzZjwTdBPPE8JVF8C1BKaPhoGPbrJq9LMuY/NLKDXieftHv C0EPF8X4BputfvZe4An7f+scPsnuOY6ySEOcLJufup2hwMkZdoHrKfOkh1sj/XV0rfdS DR2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=6PLAvsOeBYVGJ3mTbCeb+PW5/6+5kX1PgjCFTdT1sqs=; b=r0og6cbWh6Mb9cgBXKndbhNPkZJyu0dJmSf+ka8TXDKnCZ1iXJNfzivgmVd5IKLp5L NCKmWvI1T24wAifLt25bkk2Au8YMyvzgfijM0VNuSx3v6HpbjHUrKknKYOS9aLDv3iXy bfjewLDmd9yRR977pGOwiiYR4Meqpd30oBYSR5gohCOBxdhRSZESFPFQkqJ5+eQBhzVu IObSj/Chhp51kdK30x1W2Ov43LiY/Zp5kaKzjNRhtuvXoJKhcZyz2+HvR57k3Xf7p+SJ nuy1+dV52t3HRbCykI6qut+RCn7MC87mWH1j4V6BC0qVsyzWKFpiaqv/GD+p2jPXGyLs y7aw==
X-Gm-Message-State: AOAM532PampvAuY1ERHloRSj/bgzMovZFnqOB2J1c9DuE4iitG+SjpVZ osCW5ELMGwfNcHQp7HNqcAQdLGfw
X-Google-Smtp-Source: ABdhPJzjYWuOa8fArVa/Bvv9eIYgLpXt6/7N9QlDTkVGHX+RoZ2r860l+J42q0XiI2A9nXwzy+me0Q==
X-Received: by 2002:a17:90b:243:: with SMTP id fz3mr15814880pjb.17.1595104645290; Sat, 18 Jul 2020 13:37:25 -0700 (PDT)
Received: from [192.168.178.20] ([151.210.132.13]) by smtp.gmail.com with ESMTPSA id y8sm6512790pju.49.2020.07.18.13.37.22 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sat, 18 Jul 2020 13:37:24 -0700 (PDT)
Subject: WHATWG [was: Appeal from Tim McSweeney regarding draft-mcsweeney-drop-scheme]
To: John C Klensin <john-ietf@jck.com>, Larry Masinter <LMM@acm.org>, 'Mark Nottingham' <mnot@mnot.net>
Cc: 'Carsten Bormann' <cabo@tzi.org>, 'IETF' <ietf@ietf.org>
References: <CAL0qLwa9YYuT6J5vQYYJqkEf6ORiHJaf3zh_m=wyLHojaGPU3g@mail.gmail.com> <42958B5B-8EC4-449A-9B7F-B834285369AC@vigilsec.com> <01a701d65b90$9ffeea30$dffcbe90$@olddog.co.uk> <DD0E2DCC-707A-4702-9414-44B68A1B7BE4@tzi.org> <CAKKJt-eCdde6PY5egSg5aPL4_2LAjK5+dnhkUSiVpLiewYemRw@mail.gmail.com> <CAHw9_i+336sJq3oFCWTkeYFk8vmN1zki2qMfTYmgXkhJ6Z=-gg@mail.gmail.c om> <92415955-BD28-407C-A365-5ADFFE8164C9@tzi.org> <CAHw9_iKO+AjGN8TgjvC3H4=b-FNAx7=3dQdB=4QSVfzQr9o=bg@mail.gmail.com> <CAKKJt-enJVNSHOYj4x3caw4FAG5AjKyO70fxS_Rf6sTKwwtQvw@mail.gmail.c om> <012701d65c68$74b91890$5e2b49b0$@acm.org> <25DD0A8D-E59B-4D99-9A58-D986E3CD50D2@mnot.net> <008401d65cbb$c7806ad0$56814070$@acm.org> <2c572326-21a9-594f-4348-d717173769ea@gmail.com> <00a601d65cc7$64f8c2c0$2eea4840$@acm.org> <50B333D9F7634FA432FF28AC@PSB>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <00b23b45-99e4-1ffa-cbae-e240f6eefdfa@gmail.com>
Date: Sun, 19 Jul 2020 08:37:20 +1200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <50B333D9F7634FA432FF28AC@PSB>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/rS1QiZY71wYo6qrU1qy0WP2kUdg>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Jul 2020 20:37:29 -0000

Also, looking at the WHATWG material and in particular its rejection
of RFC6874, they don't seem to have picked up on the underlying
problem that made that RFC necessary: the difference between (a) what
one is allowed to type into a browser and (b) what is allowed as a URI
on the wire. As the RFC says "Unfortunately, there is no formal distinction
between the syntax allowed in a browser's input dialogue box and the syntax
allowed in URIs." It's entirely possible that we got it wrong in RFC6874,
but until this formal distinction exists, the IETF standard is what it is.
WHATWG can't change it unilaterally just because it makes their code
awkward.

They could always come to the IETF and talk about it. I only discovered
yesterday that they have an opinion on RFC6874, which was published 7 years
ago. (I was aware that Mozilla rejected it 5 years ago, and that on paper
it broke CUPS, see https://tools.ietf.org/html/draft-sweet-uri-zoneid-01.)

Regards
   Brian Carpenter

On 19-Jul-20 06:58, John C Klensin wrote:
> Larry,
> 
> This may be just an expansion on Carsten's "URIs are not just
> for browsers" but the two main difficulties with that scenario
> are:
> 
> (i) It blows off all non-browser uses of URIs.  To draw an
> example from your earlier message, while FTP may not be in
> general use on the public Internet any more, especially from
> browsers, it is still widely supported in text editors and for
> retrieval of information from repositories [1], many of whom
> have adopted or accept an FTP URI syntax. The recent discussion
> of email address syntax and validity in HTML [2] (of which you
> have been a part) and discrepancies between what the web allows,
> IETF Standards, and plausible practices when email addresses are
> used as identifiers may be another example, albeit an indirect
> one.  
> 
> (ii) It might be one thing to say (referencing RFC 3986) that
> there are no locator URIs other than URLs, parse the
> URL-specific material out of 3986, and see if what is left in
> worse publishing as a replacement.  But saying that all URIs are
> URLs, URLs are being taken over by WHATWG, and 3986 should be
> obsoleted (taking anything non-URL-ish that remain with it)
> presumably deprecates all name-type URIs, including URNs.  My
> impression is that there is a significant portion of the
> Internet community, including some national governments and
> repository libraries, that does not want to go there.
> 
> The document you cited [3] also reinforces my concerns about
> WHATWG as a setter of standards for the Internet based on what a
> small number of browsers do and as an actor in this space that
> does not play well with others.  As one handy example, Section
> 3.2 is inconsistent with DNS specifications (RFC 1034/RFC 1035
> included) that do not require that labels in FQDNs for "hosts"
> conform to the preferred syntax.   It also depends on the
> so-called Public Suffix List, which is known to be problematic
> (as it goes on the warn... sort of) and uses a concept of
> _registerable domain_ that is inconsistent with domain trees in
> which the sorts of registrations they are talking about may
> exist at multiple levels (see RFC 1480 for an interesting
> example that, in combination with public suffix ideas, recently
> bit me).   As another, Section 3.3 uses terminology and
> procedures that were deprecated in 2010.  More generally, that
> section is based, not on IETF Standard IDNA, but on an
> interpretation/ profiling of Unicode UTS#46 that amounts to
> "IDNA2003 as extended by Unicode forever; IDNA2008 never".
> 
> If one accepts the hypothesis that the Internet is evolving, or
> has already evolved, to the point that the web (presumably as
> defined by W3C and WHATWG) is all that counts, all non-web
> applications are obsolescent and browsers are the only
> applications that count, little or any of the above is actually
> a problem.  For at least some of us who do not believe that,
> perhaps because of advancing age and accompanying
> stick-in-the-mud tendencies, it feels like a probably.
> 
> best,
>    john
> 
> [1] Where the data are public and, in most cases, the fact that
> one has accessed it is of even less interest, and less concern
> from a privacy standpoint, than one's choice of sources for the
> daily news.
> 
> [2] https://github.com/whatwg/html/issues/4562
> 
> [3] https://url.spec.whatwg.org/
> 
> 
> --On Friday, July 17, 2020 22:50 -0700 Larry Masinter
> <LMM@acm.org> wrote:
> 
>>>> If the URL spec moves
>>>
>>> Why would that happen?
>>>
>>>    Brian
>>
>> https://url.spec.whatwg.org/#goals 
>>
>> Main goal: "Align RFC 3986 and RFC 3987 with contemporary
>> implementations and obsolete them in the process."
>>
>> I would expect   more stringent rules that would help
>> interoperability more than "specification required" - Must
>> have proof-of-concept implementation, two or more browsers
>> commit to implement - Drop or deprecate when two or more
>> browsers do, as is happening with "ftp:" URLs
>>
>> --
>> https://LarryMasinter.net https://going-remote.info
>>
>>
> 
> 
>