Re: [OAUTH-WG] [apps-discuss] Web Finger vs. Simple Web Discovery (SWD)

Michael Thomas <mike@mtcc.com> Fri, 20 April 2012 15:51 UTC

Return-Path: <mike@mtcc.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9265C21F86D3; Fri, 20 Apr 2012 08:51:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.449
X-Spam-Level:
X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tkVDVBpurCip; Fri, 20 Apr 2012 08:51:28 -0700 (PDT)
Received: from mtcc.com (mtcc.com [50.0.18.224]) by ietfa.amsl.com (Postfix) with ESMTP id 96ABE21F86DE; Fri, 20 Apr 2012 08:51:28 -0700 (PDT)
Received: from takifugu.mtcc.com (takifugu.mtcc.com [50.0.18.224]) (authenticated bits=0) by mtcc.com (8.14.3/8.14.3) with ESMTP id q3KFpO3K007622 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 20 Apr 2012 08:51:24 -0700
Message-ID: <4F9185FC.5070406@mtcc.com>
Date: Fri, 20 Apr 2012 08:51:24 -0700
From: Michael Thomas <mike@mtcc.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1.22) Gecko/20090605 Thunderbird/2.0.0.22 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: Julian Reschke <julian.reschke@gmx.de>
References: <423611CD-8496-4F89-8994-3F837582EB21@gmx.net> <4F8852D0.4020404@cs.tcd.ie> <9452079D1A51524AA5749AD23E0039280EFE8D@exch-mbx901.corp.cloudmark.com> <sjm1unn338j.fsf@mocana.ihtfp.org> <9452079D1A51524AA5749AD23E0039280FACC3@exch-mbx901.corp.cloudmark.com> <4E1F6AAD24975D4BA5B168042967394366490B2A@TK5EX14MBXC284.redmond.corp.microsoft.com> <091401cd1ea3$e159be70$a40d3b50$@packetizer.com> <CAHBU6it3ZmTdK-mTwydXSRvGvZAYuv0FFR2EWLwdfTxQh4XV5g@mail.gmail.com> <091901cd1eb0$167a8ce0$436fa6a0$@packetizer.com> <sjmbommzdv4.fsf@mocana.ihtfp.org> <4F917CE6.2060904@mtcc.com> <4F91814A.2010606@gmx.de>
In-Reply-To: <4F91814A.2010606@gmx.de>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2157; t=1334937085; x=1335801085; c=relaxed/simple; s=thundersaddle.kirkwood; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=mtcc.com; i=mike@mtcc.com; z=From:=20Michael=20Thomas=20<mike@mtcc.com> |Subject:=20Re=3A=20[apps-discuss]=20[OAUTH-WG]=20Web=20Fin ger=20vs.=20Simple=20Web=20Discovery=0A=20(SWD) |Sender:=20 |To:=20Julian=20Reschke=20<julian.reschke@gmx.de> |Content-Type:=20text/plain=3B=20charset=3DISO-8859-1=3B=20 format=3Dflowed |Content-Transfer-Encoding:=207bit |MIME-Version:=201.0; bh=r4kkUgFtrRlHis/kPLyKpWArS9X6s1F9WzHt/vb/m+k=; b=JvNfuNtRTPZYMlJU3413YfQUZeQcA8zf7oS7wob/JSGzokHCBZ3OW9agBS Hqu4PRLCcxh/rtUduDNxUnoY0UirJVurirRnZp2E0T+KQyIxj5Emz07lT8vs xqXrY6LrFDSKeDc9uo0NTnB16VM/iIXKwyj6mttE2SIPeo1PGVspE=;
Authentication-Results: ; v=0.1; dkim=pass header.i=mike@mtcc.com ( sig from mtcc.com/thundersaddle.kirkwood verified; ); dkim-asp=pass header.From=mike@mtcc.com
Cc: Derek Atkins <derek@ihtfp.com>, oauth@ietf.org, 'Apps Discuss' <apps-discuss@ietf.org>
Subject: Re: [OAUTH-WG] [apps-discuss] Web Finger vs. Simple Web Discovery (SWD)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Apr 2012 15:51:29 -0000

On 04/20/2012 08:31 AM, Julian Reschke wrote:
> On 2012-04-20 17:12, Michael Thomas wrote:
>> ...
>> To Paul's point about how easy it is for a server to support both, I'd
>> retort that it's equally easy for a client to gin up JSON instead of XML.
>> Pity the poor programmer who can't get their head around that gigantic
>> change. On the other hand, having to support XML and JSON is an ongoing
>> maintenance headache server-side. Why do it? There isn't even the dubious
>> religious war like back in the day saying that binary encoded ASN.1 was
>> "better/faster/stacks and cleans dishes" than "human readable" XML. XML
>> is just a clunky and past its prime text encoding at this point.
>> Requiring it
>> smacks of nostalgia to me.
>> ...
>
> What's sure is that with generalizations like these, you're not going to convince anybody.
>
> JSON is simpler than XML. Sometimes it's too simple.
>
> In my experience, testing HTTP interfaces that return XML is more pleasant as a browser will actually *display* the response (and allow it to be transformed to HTML client-side), while it will pop up a download dialogue for application/json. Maybe it's time to fix the latter?
>

It may be a generalization, but it's based on direct experience. I create and use
JSON for fairly complex data structures transferred server->client (it's a ski tracking
app) and I have never once thought "gosh, I wish that I had the expressiveness
of XML here". On the input side of uploading points to the server, I use a home
grown XML scheme purely for my own historical reasons and I do often wish that
I could get rid of it. The worst of all possible worlds would be to require support
for both on the input and output side. Bletch. Just the testing requirements
would be onerous.

I also know that, oh say, twitter supports XML and JSON in their API. Probably
lots of companies do. I'll bet if you asked them now, they'd say they wish they
hadn't supported XML at this point because it's nothing more than overhead,
keeping some dev and devtest folks gainfully employed.

Mike, and I don't have a problem viewing JSON in a browser