Re: [Trans] Directory instead of .well-known for URL structure

Eran Messeri <eranm@google.com> Tue, 25 June 2019 10:12 UTC

Return-Path: <eranm@google.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4443F1203E9 for <trans@ietfa.amsl.com>; Tue, 25 Jun 2019 03:12:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.499
X-Spam-Level:
X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nbf4RZ04Vqha for <trans@ietfa.amsl.com>; Tue, 25 Jun 2019 03:12:32 -0700 (PDT)
Received: from mail-yb1-xb2f.google.com (mail-yb1-xb2f.google.com [IPv6:2607:f8b0:4864:20::b2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3837D12024D for <trans@ietf.org>; Tue, 25 Jun 2019 03:12:32 -0700 (PDT)
Received: by mail-yb1-xb2f.google.com with SMTP id y67so3674187yba.8 for <trans@ietf.org>; Tue, 25 Jun 2019 03:12:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=G7RZOVahFHir9iJfSltgZjTDnUXP40TCs0aAzYvbGis=; b=hHROkv5c4sB+DA55CBryl2w9YjJ8QrAxmOColKmZPrwYqbT5wx4pvaGl6MtXIBYGhX KG+WsUm1fuS03jGIZ5fK2/qcCpnBi2cc1GelMFzASGVyPjfUX/l5e+bnRCOPZdaUkpcZ OlJzK6WSK4nDfNbnckQqqQIaX+4sOJFsNAqIvhe+uE5g0BtLaLIKKTdMXtYaVrVHNw82 uGA/LHLUhppzMCaBNa1hFBL90XpWpbNzPjXunes9JCrJ7Vy42Byt8AAM5c2lPcB7Kerr 4+fyS3ukDm2uuHOUyGimaxmvtPh9RDHajRnguRE/MGGsCHhvtYdEb2tn53ZrFzmfmz3C aFow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=G7RZOVahFHir9iJfSltgZjTDnUXP40TCs0aAzYvbGis=; b=l9FNAVpCZMJJe6V+VJcOVGbmGbCqeT9zHMCY2IIxgsc5nLYfgn4VamoPmBdr8uFIM1 aqXV/oyGmKKMMK2CTHV/d0/HDJM5bgMX5bEO3f7d/PJQ9k8CahU+HCJJYYnZdvI684Tq s59lLrVcht68gNqzLzQhXATGfbyfzkT5VdZSSXNcpDBM3Hf4u3s0yWhtcIO8aUhWUHPP AQpcGF3M3vRP6XltA+LCYs45kf28umzRsB8qUTE0O80XUG02XL/OGnuhBZgs68x5qJ/d i31zv+Cy54QjXZeAhmprzlbe4CkfzdZJ8u++nIUUQttVawkInevxp2SQge81ma+u6/os trkA==
X-Gm-Message-State: APjAAAWw7WxvU30mFZ6fQjUDakW0sIcbXNy5kWB/aF3gU7dry5TAELaV C+GALM3B8cAwAdoTyrcIMHpRoFyI8HwBTelrXBL2HQ==
X-Google-Smtp-Source: APXvYqwKzbXcg41uL9Wesif0IeM6My03+XwpOjTn5pA0EiZltTqL6r+TS4rbo1hlIJF+zLw4yo3ffEsY/1FF0bcKRE0=
X-Received: by 2002:a25:bdcf:: with SMTP id g15mr78960091ybk.419.1561457551041; Tue, 25 Jun 2019 03:12:31 -0700 (PDT)
MIME-Version: 1.0
References: <0d5e05fc-8f1e-54b5-536d-231153e7baf7@eff.org> <48a31dcd-71d9-42c8-9ec3-6104939a59ab@www.fastmail.com> <7161898d-a58d-1625-a041-2e93961e71a2@gmail.com> <f03a2bc2-9058-bafd-37a1-50a1fd5d02d2@sectigo.com> <SY2PR01MB27648842CD64DFBC3E9E3205E5E30@SY2PR01MB2764.ausprd01.prod.outlook.com>
In-Reply-To: <SY2PR01MB27648842CD64DFBC3E9E3205E5E30@SY2PR01MB2764.ausprd01.prod.outlook.com>
From: Eran Messeri <eranm@google.com>
Date: Tue, 25 Jun 2019 11:12:04 +0100
Message-ID: <CALzYgEf8GZY8UPr2K3iCYuxJKqVsx1EHJiPuZkKEJJyhRy8bug@mail.gmail.com>
To: "Manger, James" <James.H.Manger@team.telstra.com>
Cc: Rob Stradling <rob@sectigo.com>, "trans@ietf.org" <trans@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a9bbf4058c232acf"
Archived-At: <https://mailarchive.ietf.org/arch/msg/trans/RfBDe8WqRnCcsnMNVtCTl1w6-eY>
Subject: Re: [Trans] Directory instead of .well-known for URL structure
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jun 2019 10:12:34 -0000

Can you clarify if you mean a single template to cover all possible actions
or separate one for each action?

The former would, I think, be tricky to define as different actions have
different parameters.
The latter is what we had, and is not in compliance with BCP190.

Either way, the issue here is compliance with BCP190, so if your proposal
is in compliance with BCP190 it's worth highlighting why (as it's not clear
to me personally).

Thanks,
Eran

On Tue, Jun 25, 2019 at 1:45 AM Manger, James <
James.H.Manger@team.telstra.com> wrote:

> Would it be sufficient to provide a URL template for each log, instead of
> a directory URL?
> Possible text:
>
>   The address of a log is defined by a URL template [RFC6570] that MUST
> include
>   the following variables: action, first, second, hash, start, end.
>
>   'action' identifies the client message, such as 'submit-entry' or
> 'get-sth'.
>   'first' and 'second' are tree sizes. 'hash' is a base64-encoded v2 leaf
> hash.
>   'start' and 'end' are 0-based entry indicies.
>
>   Example:
> https://log.example.net/ct/v2/red/{action}{?first}{?second}{?hash}{?start}{?end}
>
> --
> James Manger
>
> -----Original Message-----
> From: Trans <trans-bounces@ietf.org> On Behalf Of Rob Stradling
> Sent: Tuesday, 25 June 2019 12:16 AM
> To: Melinda Shore <melinda.shore@gmail.com>; trans@ietf.org
> Subject: Re: [Trans] Directory instead of .well-known for URL structure
>
> This sounds unanimous.  :-)
>
> I'll go ahead and make this change, and I'll cancel the registration
> process for "ct" as a .well-known URI suffix.
>
> On 24/06/2019 01:05, Melinda Shore wrote:
> > On 6/23/19 3:28 PM, Martin Thomson wrote:
> >> I agree with Jacob here. As I have expressed in the past, I believe
> >> that this is a better design than the well-known prefix.
> >
> >> On Fri, Jun 21, 2019, at 08:33, Jacob Hoffman-Andrews wrote:
> >>> The latest draft adopts a /.well-known/ path for CT as a way to get
> >>>   around BCP 190 (URI Design and Ownership:
> >>> https://tools.ietf.org/html/bcp190#section-3).
> >>>
> >>> Personally I think BCP 190 makes it needlessly painful to specify
> >>> HTTP-based APIs using techniques that are very common among
> >>> practitioners. However, given that it is still considered best
> >>> practice for IETF documents, I propose that CT should use a
> >>> different workaround, one used very successfully by ACME: Directory
> >>> URLs.
> >
> > I have a fairly profound dislike for BCP 190, to be honest, and am in
> > agreement with the proposal.
> >
> > Melinda
> >
>
> --
> Rob Stradling
> Senior Research & Development Scientist
> Email: rob@sectigo.com
> Bradford, UK
> Office: +441274024707
> Sectigo Limited
>
> This message and any files associated with it may contain legally
> privileged, confidential, or proprietary information. If you are not the
> intended recipient, you are not permitted to use, copy, or forward it, in
> whole or in part without the express consent of the sender. Please notify
> the sender by reply email, disregard the foregoing messages, and delete it
> immediately.
> _______________________________________________
> Trans mailing list
> Trans@ietf.org
> https://www.ietf.org/mailman/listinfo/trans
>
> _______________________________________________
> Trans mailing list
> Trans@ietf.org
> https://www.ietf.org/mailman/listinfo/trans
>