Re: [Json] secdir review of draft-ietf-jsonbis-rfc7159bis-03 [rfc7159bis scope]

Julian Reschke <julian.reschke@gmx.de> Thu, 16 March 2017 20:39 UTC

Return-Path: <julian.reschke@gmx.de>
X-Original-To: json@ietfa.amsl.com
Delivered-To: json@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6991C129A7E; Thu, 16 Mar 2017 13:39:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.396
X-Spam-Level:
X-Spam-Status: No, score=-5.396 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.796, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R-kSjjunq-ll; Thu, 16 Mar 2017 13:39:17 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9428D129A5B; Thu, 16 Mar 2017 13:39:15 -0700 (PDT)
Received: from [192.168.178.20] ([93.217.116.59]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LZiQy-1cMwqn0g04-00lTiG; Thu, 16 Mar 2017 21:39:09 +0100
To: "Matthew A. Miller" <linuxwolf+ietf@outer-planes.net>, John Cowan <cowan@ccil.org>
References: <otwresf20y4vnpmoboqqjnux.1489359742487@email.android.com> <0d3258fa-0f9d-cc5d-06d7-fcba943349ad@gmx.de> <f63c6a4a-dfbb-e03a-ea1e-38002f81ced8@it.aoyama.ac.jp> <0631d12c-f447-8904-6e2d-81e02cc6e8d3@codalogic.com> <1e075450-d958-db9c-ae63-3cbf3733024c@outer-planes.net> <cf6e35ba-6a67-4b35-d4e1-e99fee6e9f19@gmx.de> <1F1D1DCB-767F-490D-A425-AB5E66D51D3E@tzi.org> <CAD2gp_R7raq0mzfhATTYONdowBm0HvVHFAqJqoVcLmYABrgPpA@mail.gmail.com> <c20a17b7-0329-db5b-0983-23ebe11720f2@codalogic.com> <1f87f5d4-cbb0-9350-2d08-31350fa7438d@gmx.de> <24d37dc6-eee2-5e0c-6d33-d3450750e886@codalogic.com> <d520cf1f-bafd-6f62-c46c-482ad3a01f20@gmx.de> <EAF23716-FC94-478C-ACCF-9ED58B8A0ADF@fastmail.fm> <2b6f5439-18d1-9b7b-97e9-c683187ce452@codalogic.com> <7aaceb7a-45e9-b330-beee-fb66f933b3c9@outer-planes.net> <CAD2gp_Q0tg8MBC31x3v7CqkHwxikr=UyU6rL02u8ksh4LaSk+Q@mail.gmail.com> <942f4af5-ddb9-ed39-0013-6b75c3a8078c@outer-planes.net>
Cc: Peter Cordell <petejson@codalogic.com>, Alexey Melnikov <aamelnikov@fastmail.fm>, draft-ietf-jsonbis-rfc7159bis.all@ietf.org, "json@ietf.org" <json@ietf.org>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <e0d0fe23-1e24-3d2c-f12d-9389b82e0f2d@gmx.de>
Date: Thu, 16 Mar 2017 21:39:09 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <942f4af5-ddb9-ed39-0013-6b75c3a8078c@outer-planes.net>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:EynFoILOU8Vqn3VDH8tsWKx8bTrmO8/0fymzJPjGI8TxEY7CBOk jWnQ6WCRxgeyv5U3jwEpG6tAqEfY6ZqRR8lwM+BG64YN3X6E6PybpU6aaob0rbmVjLK4LAx QL8DAuUUM49XjDE+PNDN3DU/yDUMhvBanaKnHwyDa9XoLC0ReY40sB+suHGquIgIE2BBB6z VqeX40DC9h6AO8Mq7ye1w==
X-UI-Out-Filterresults: notjunk:1;V01:K0:vjwoF9cyFNc=:xc7EJhIpuPQG0Dy4NIHPfv GJTJH89c8DW7zr8FMoDARMgnlCoqUn/XFde5FjEabq8ku8TwJ0KHID48Lgl3VJhqbdsJ7k4GL n4WpMHFnu337K8kgQ/pQRkwurM1n9f2xQMVVYb7BeDBKolyTjEKfMujRVoTeEixN4+V9uyUzh bqygp19w6lQaLnSpUDjXgnk+I2Kkg2BWecumOMa8A7iiMlkwqpA/xfz5sB4yVYctEXAyfD58N heJ/JjlWIQeuvAQFWPKbmXGrs2DZeGk2nf0AGzvknLHytr3AU+Xvm9NhvUk7LpN13CZdSm0gw Q5siyLDOvyqoEWN08XWmWPWQuwz+j9vbVI4zfS4b7BSVxewRm9l+0s0qlG49W9KeXcpTYTeIl wdrEa3m2b2IaQ9i0T2VjPsexrBE1U2wi4haL7bxzLxWmErrrRJUzJrkn3nir2dprjCV6XmvEK d8965KEneR2QhLDA06XcUms8SSIfH+M+mS38vw8e067oJ+YDxlyOe4KwfoHfwCf8Xm1vHPegp nQD1Y6SYYR/EFZ136DPy8kyeJYw8AADtV8PZz0lDEYUJ6MSzsbaJ9Ybc/MShp9UYfCNCghldy tJvAW10y2aroNeEvwgea4utx6VQSUG6IxygrV7H0hPBcvgvMwdHF/gPF6ioDLKT7wp9+3UDA4 FZ6DDY506bA+OkLWdiDeLUiHJV3siq29yJbYPjiFAZRQOs+TAcYU34BTxgr4K/zSuUjtJbIjB EeuTBY/uXnbblg/Utn012EQXIt+gytALqXUcO5J638nDsKSAlYl/9JZAJuSS8dEgAXHseHp0U G7bliiO
Archived-At: <https://mailarchive.ietf.org/arch/msg/json/5eYqJkGXpEXsFCX6Y18vtpTbwDw>
Subject: Re: [Json] secdir review of draft-ietf-jsonbis-rfc7159bis-03 [rfc7159bis scope]
X-BeenThere: json@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "JavaScript Object Notation \(JSON\) WG mailing list" <json.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/json>, <mailto:json-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/json/>
List-Post: <mailto:json@ietf.org>
List-Help: <mailto:json-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/json>, <mailto:json-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Mar 2017 20:39:18 -0000

On 2017-03-16 21:25, Matthew A. Miller wrote:
> ...
> That said, I'm not quite sure about going that far.  The web certainly
> uses UTF-8 and no other, but the scope is greater than that.  I would
> suggest keeping much of Peter's original text, with a small change to
> include the prohibition of encodings outside of UTF-8/-16/-32[1]:
>
>    JSON text SHOULD be encoded in UTF-8 [UNICODE] (Section 3), and MAY
>    be encoded in UTF-16 or UTF-32.  JSON texts that are encoded in UTF-8
>    are interoperable in the sense that they will be read successfully by
>    the maximum number of implementations.

That's a normative change from RFC 7159, which, as you clarified below 
(thanks!), has a MUST-level requirement to use UTF-8/16/32.

So this change actually allows other encodings (SHOULD != SHALL or MUST) 
without actually specifying how to interop with these (lacking an 
encoding declaration).

So I'd say that's a non-starter.

>    There are many implementations that cannot successfully read texts
>    in other encodings.  JSON text MAY be encoded in other encodings if
>    the generator is sure that the intended parsers can read them.

We can't prevent people from doing this, but, FWIW, it shouldn't be ok 
to label these payloads "application/json".

Best regards, Julian