IETF Logo Mail Archive

[Rats] Re: draft-ietf-rats-coserv-07 early Httpdir review

Mark Nottingham <mnot@mnot.net> Mon, 24 August 2026 09:24 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 3E3CC12E48E35; Mon, 24 Aug 2026 02:24:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787563484; bh=k8lAOFpK8FlMU6d6A3myZSBIODhS3G8soFnsCkLMeyw=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=empf4HemWGYpyEV5kv7InBIERQbX3EJU9DXpfg7fnaH0HbOxIP43H7PSAhrl/Qh7Z SAFvVOwwrfMmaaqY7BGbCu2XieQvFzZT8CZLzPKJXoK0+1OdzQSoume+qPWsThvumy 1JSaPfwBFnX3BjJHGXRax6c2f76UAoNd7nvy8WyE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b="epTYmBQ+"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="YQm5uD1m"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 498oqzusiAJ5; Mon, 24 Aug 2026 02:24:43 -0700 (PDT)
Received: from fout-b8-smtp.messagingengine.com (fout-b8-smtp.messagingengine.com [202.12.124.151]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C02F512E48E30; Mon, 24 Aug 2026 02:24:43 -0700 (PDT)
Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfout.stl.internal (Postfix) with ESMTP id 7D2E01D0008F; Mon, 24 Aug 2026 05:24:37 -0400 (EDT)
Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Mon, 24 Aug 2026 05:24:37 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1787563477; x=1787649877; bh=PBqAaArpMwQqU91MN5rPjZBv3sprqrBx+IPQrEFRDb4=; b= epTYmBQ+hJELCcileu5wc/CZUekOv3j2MCUTEe9K9KxZIJxZEuv/gGtWeEqW4lcg veEf9cEoRfaAksYsO+JErmLJvhL1/94krg2+8OwkFBvTMIxxBdWjzTF9pZx52C+M uVKfpEClF+Aa4eei/OfOLP0X+RqoTFFA24emd6J8lt2rpejrmaDcgf6xUjffZtbg FVCogpy6m5WsAEgtHMinG/qNojIWn27DWFHdQvUqsZk8fHxR+cxTiz3Qeszljdc/ efAdjvY7fVlaOYcqQsemrDvXYEyzzQmNw9fA5V5uBb5B8l8KZGGpSELjdYCuc39i RZP+0SjhJGjd1KNFEAlnKg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1787563477; x= 1787649877; bh=PBqAaArpMwQqU91MN5rPjZBv3sprqrBx+IPQrEFRDb4=; b=Y Qm5uD1mCq2/f7aMPuXmqSjnd0gOXCRwQsPgdvG0Rw36aPuRPs1ZaRHS4wjSjIEEp Bkt31mfK7esARcuW5Qe+AL3Yu/2DFHvS6C+OwL9Ks4Ni3SbI0lhUdwFCxAUgwQ81 onhevxunhK2+NH0sQ7VY99NnUFdBNKxVt3myNrDeIc7ttmxnpQLE8hKnYCcKGLUv DNKaW735fYPqaMiViy2sedxBHuqwHAqfO2q677zsvsgfp49X0H8WNL6XcLBOE2Ma QdBakPRHCmdQrivdJJSwuURzY8sRD7R93ZQCJjxJSTjcmQBUWR8zvz0tTkX3bpDm NHq7dT6N4Ixqa8zadUhFA==
X-ME-Sender: <xms:1Q2MarRfLqLYxsk0ezozeXn-ooQo6_ydAuy4smGiYqF04vKy8Ig9LQ> <xme:1Q2ManuW2pj1IeSR0Xxhe5Q3yNCe7ObulRhUyBDZrRwh9VGp6BBaFP_7RfYew_kXD _9jruMYC15nspCuZuo2TT0S_l0Yz3vcv-96hRLJKEnNWTWoc62AKg>
X-ME-Received: <xmr:1Q2Mav0KsenNjCvIt8HmmKBv_hfk_yvaKltXxuOgt9a0F8RoA_FAjV1ZeJ4LmBbgu3ojnOg>
X-ME-Proxy-Cause: dmFkZTFWNNnCWl3amZDgEa3S+Gmain2fGnToGMYnpK6IsmvFSL4rPu3erTDAoLfVuKRHFR MfdImXwM/WXHJnz0P8ID5mNJT/cBeD7fay/zwMvOIEOooegdGZqoyswfyQq5k0xb9TfAv8 CLDJRaKXiNgfk7F9yIol0SLoXvvwLgUaQ82sknmkwA86YYRxrPaMTIE5jctQ70qaQye4Nb aIK/uETsf2+GwpsQCfzQu2sbOGKdm56QLv82WbEjMKF+h1RRbCCGDHnB8WQG1PY1irG4/b NeauzWHvXuekDaowFmTcf7OVRIpSU19TeZYRW6SMxjx8qa1zBjaTiuNJquEtPStxNRrWhU 5Ye8+7z8eqBd+H4UDebYADd3bsk/nfPDIlDMV/d+0sNGneYEq42hiroNaznDt0/6UrxIM7 u1MFu2ykrdd7oJb9oDqNq4ewFBt4/xLIRIVi6MVC+pKsq8Wydvz6LFrL6c9kpZdht3LxaY jUuInyJvi4r7PbyxkEhCYNRZjHVimII6dFq7aeapC//WaS4NuuooOtndQJ+2fcCZap5r30 Jn9hF0gwzOUuiz84PDGraQzr5PixdfOkPt81qmg3T1VswnfpqjkWurVNZZjDm5xgwAjM0Z XkhulGSM+Kz7MwHuEA7wsERPVKOH9GocN+0mpCbqJmjmJ0CzBnOcW5XmTYQg
X-ME-Proxy: <xmx:1Q2MagUASxbcTvtcfbDZaRDdMZqeE0KL3aP5FjWCtZSCj050PaDTLQ> <xmx:1Q2MaiJc0yXQfl9SOk6jefPSSW7eh7CZvO-nsLH1N0q9U33mmzFaZQ> <xmx:1Q2Maq00zPm-VQjSh7Tcy2pJGABeNfWqsZ1XirCYfBXdmP-hqyMvKQ> <xmx:1Q2Mag6wdrDwK7iNRGhpt1nGBx73JIEJJEMI0WtHa87IPsl4dB6Sdw> <xmx:1Q2MatQUoTcfEVwzf5McDnBABoFNyGLzageX-8hbRM4_ZKolyPf3KrBj>
Feedback-ID: ie6694242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 24 Aug 2026 05:24:36 -0400 (EDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.700.51.1.1\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <GV2PR08MB11418D87E12D6A7CBAEB59E03EAA32@GV2PR08MB11418.eurprd08.prod.outlook.com>
Date: Mon, 24 Aug 2026 10:24:34 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <492C20B3-1C4F-4AFE-99EA-D8C118A66AA7@mnot.net>
References: <178676748452.123882.12124109778422691769@dt-datatracker-7c6ddbc678-86d5j> <GV2PR08MB11418D87E12D6A7CBAEB59E03EAA32@GV2PR08MB11418.eurprd08.prod.outlook.com>
To: Paul Howard <Paul.Howard@arm.com>
X-Mailer: Apple Mail (2.3864.700.51.1.1)
Message-ID-Hash: U3JURKB5VIEV3JTHSNRZLONWFSKLX2OV
X-Message-ID-Hash: U3JURKB5VIEV3JTHSNRZLONWFSKLX2OV
X-MailFrom: mnot@mnot.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Lucas Pardue <lucas@lucaspardue.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>, "draft-ietf-rats-coserv.all@ietf.org" <draft-ietf-rats-coserv.all@ietf.org>, "rats@ietf.org" <rats@ietf.org>, nd <nd@arm.com>, Thomas Fossati <tho.ietf@gmail.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: draft-ietf-rats-coserv-07 early Httpdir review
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/i_etEfHMYjviegfYaNbWNNuz6a4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

Hi Paul,

> On 24 Aug 2026, at 9:58 am, Paul Howard <Paul.Howard@arm.com> wrote:
> 
> ISSUE 2: Safe methods and HEAD
> 
> SUGGESTED CHANGE: We will explicitly disallow HEAD method support as a “MUST NOT”, instructing servers to return the 405 status code if this method is attempted. The rationale is that CoSERV providers are not general-purpose servers. CoSERV is a specialised protocol. There is no value in the HEAD method for the case of a CoSERV query.

You can't override a requirement of HTTP and still use the protocol. If this is deployed on generic HTTP infrastructure (servers, proxies, CDNs, clients), your requirement will be violated.

--
Mark Nottingham   https://mnot.net/

v2.46.0 | Report a Bug | By Email | System Status