Re: [Uri-review] URI review request for 'leaptofrogans' scheme

Dave Thaler <dthaler@microsoft.com> Fri, 14 September 2018 18:24 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: uri-review@ietfa.amsl.com
Delivered-To: uri-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5440A130934 for <uri-review@ietfa.amsl.com>; Fri, 14 Sep 2018 11:24:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.021
X-Spam-Level:
X-Spam-Status: No, score=-0.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EpN71JY9nlh2 for <uri-review@ietfa.amsl.com>; Fri, 14 Sep 2018 11:24:34 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0095.outbound.protection.outlook.com [104.47.34.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C80B127B92 for <uri-review@ietf.org>; Fri, 14 Sep 2018 11:24:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1e+UmuU8hjpY+biYB4Hx08ow+9/zbgcrp8wnohB3ZGU=; b=DNr8OAsJSAj/GhyvLw461Wrzn7/3tRsuegQzkkp3ZCXMvg/ccQGiuAjuvTuP0SlGB+V1gAMSlAPjZoBWhTppva2e6zYdwLN7qs0XdZPw1TUgTB9mASwMWNqTtNSCtHB1Db2WAffMuWnOQPgIqoCQ/IJyXRvcOYyCvy1xqEj0264=
Received: from CY4PR21MB0168.namprd21.prod.outlook.com (10.173.192.150) by CY4PR21MB0135.namprd21.prod.outlook.com (10.173.189.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1164.10; Fri, 14 Sep 2018 18:24:31 +0000
Received: from CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::3484:e2d0:b23:90af]) by CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::3484:e2d0:b23:90af%4]) with mapi id 15.20.1164.012; Fri, 14 Sep 2018 18:24:31 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: Ted Hardie <ted.ietf@gmail.com>, Peter Saint-Andre <stpeter@mozilla.com>
CC: "khaled.koubaa@op3ft.org" <khaled.koubaa@op3ft.org>, "uri-review@ietf.org" <uri-review@ietf.org>, Jean-Emmanuel RODRIGUEZ <jean-emmanuel.rodriguez@op3ft.org>, Benjamin PHISTER <benjamin.phister@op3ft.org>
Thread-Topic: [Uri-review] URI review request for 'leaptofrogans' scheme
Thread-Index: AQHUTEMFGkUWSpb6dUeSPsxi5dUg36TwBqGAgAAPdiA=
Date: Fri, 14 Sep 2018 18:24:31 +0000
Message-ID: <CY4PR21MB01688C9FB2C852209DE6533EA3190@CY4PR21MB0168.namprd21.prod.outlook.com>
References: <5eabdf3a-7fdc-4e53-b69d-daba1aa98073@mozilla.com> <CA+9kkMBC2iOna-QRMr5O0dvAfXmtZYrCAf2h3PO0-YYo-yy3uA@mail.gmail.com>
In-Reply-To: <CA+9kkMBC2iOna-QRMr5O0dvAfXmtZYrCAf2h3PO0-YYo-yy3uA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-09-14T18:24:31.6969423Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General
x-originating-ip: [2001:4898:80e8:20:50a4:d0eb:abb3:2e0c]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY4PR21MB0135; 6:kzJo3UhpiFrLRJ8jkpsyf49t6x2wVL1HNs8QVXIMcWz5EzetyV0miXy2enqT2eC4I3lbRRdBh0yaAgmFjxcParSz1E6g862Cq5apbrSINQPf8wju1hbMMPCeRGkYpinRrQ51NzpM+74jmheQlHAcCJinKQJ5qM9+fbUSL8gL0rJOZHubXUj8yKrS2fiuBgdaKzreCQTluzCVgBmOI8WEQECgEoBQahJhGrDU9QxQRaSuzKGmheuQA5+sGPNMvvSzjsulFE4YUrAATRFx8cmReVsKGA5TighIO49Ys9n6WiHH6ZW2pcKQV85Z4HPCkuNXr5PhuH2YydYhDQyDVjYqaITynS++rxhFPLw+2oljtyse9rNOqWMi0xmVVwf9HHlk2O2B7Z23Qfdpixrlk5PrXiHIjZ4zZNVYwAft6wQr9AHGPF+GGMj1Akfr6RJbhIgln5zIjPJGVLC6OHGq3NOdcQ==; 5:2innRZm8XP3uzRAhAIywNDQdHN04zYQpUMg3OUneUi6YkPHKGjhdKhNgl5b0f1drH9kNeajUDHQg2d6L8f3rKb3iUHC71dgO2CS4/6QwxSW+OKSZmswhkgpzbmzI0qBVmKrhKgVYKHHChLN6mRTyDRgsb0AsH/4xgM/clemOkMU=; 7:8uh3kiiHH8+mtVBRLKoCLe3DA5GqwNshJPRZW6vtfSthwLo+5j8d0wtW8VsMdG+rQfFHVNs02FwrwqVrwyUIV1eRL4IQNtO8Ub6SDYs0YHRuM/wJKWmSu7hHMDN8jZ8OVhP602Uye7rzYZ0/qARweB0bRgiNBXhyG6hholjhD4DtnUesnanJIXeYlpsfykvuGbqnRI6ZzdgD/vt8+fEVR4CpbzH/TKKqz20qsQ0MT97DTkZ2DcSEYc/Rnk2s12I4
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: b710b981-4eea-4259-c531-08d61a6f50d6
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:CY4PR21MB0135;
x-ms-traffictypediagnostic: CY4PR21MB0135:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com;
x-microsoft-antispam-prvs: <CY4PR21MB01357C93EF34A41B82699FE0A3190@CY4PR21MB0135.namprd21.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(278428928389397)(120809045254105)(192374486261705)(189930954265078)(131327999870524)(788757137089)(219752817060721)(21748063052155);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3231344)(944501410)(52105095)(2018427008)(3002001)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(201708071742011)(7699050)(76991041); SRVR:CY4PR21MB0135; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0135;
x-forefront-prvs: 07954CC105
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(376002)(136003)(39860400002)(396003)(346002)(366004)(189003)(199004)(316002)(8936002)(81166006)(106356001)(14454004)(81156014)(6246003)(4326008)(25786009)(102836004)(5250100002)(6506007)(53546011)(10290500003)(97736004)(39060400002)(478600001)(105586002)(790700001)(8990500004)(6116002)(966005)(86362001)(19609705001)(86612001)(6436002)(8676002)(606006)(229853002)(110136005)(22452003)(5660300001)(14444005)(236005)(2906002)(68736007)(2900100001)(99286004)(54896002)(6306002)(9686003)(55016002)(46003)(186003)(7736002)(74316002)(10090500001)(53936002)(476003)(11346002)(7696005)(33656002)(486006)(446003)(54906003)(76176011)(256004)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0135; H:CY4PR21MB0168.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: qKWKx1ROOzMjof+tLkvWfgz62qdXD7fO0GZo5CnPqKMFvUKYp3LDY+drvrjISv+O9zKa093KuxnnuKuHw4god1nXTwJCyIQcCINjP7t21anBdPTkjIO7/nCcnGreO636aiCE3lfFrljF20TnXjMLJLHqaBTq92W5kQeRk11qgBVcCpSOF5gx1MpOUSEeE+xIPms6v7175fyHGF6iWlzLuPyb4aHedP6u7x4Aavo3PbHTQtUHaLtdEb4OMWJuYkQLlyrWVkxbCwK6fvI2BD3Il09M8KUe07HFi29puZ3OIixIdf2tcXBbRDYiU5E6Trdb5NP+CvY0D1ZEfMnwK3bd2PSsGdPC3ZrkyJfPTLFYqt8=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY4PR21MB01688C9FB2C852209DE6533EA3190CY4PR21MB0168namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b710b981-4eea-4259-c531-08d61a6f50d6
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2018 18:24:31.8198 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0135
Archived-At: <https://mailarchive.ietf.org/arch/msg/uri-review/qPUowmaEbJRnSrLSd2szxEnhi2U>
Subject: Re: [Uri-review] URI review request for 'leaptofrogans' scheme
X-BeenThere: uri-review@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proposed URI Schemes <uri-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uri-review>, <mailto:uri-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uri-review/>
List-Post: <mailto:uri-review@ietf.org>
List-Help: <mailto:uri-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uri-review>, <mailto:uri-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Sep 2018 18:24:39 -0000

+1 to this recommendation from Ted:

Ø  I think this could be substantially simpler, by defining these as URLs where any Frograns

Ø  Network or Frogans Site which uses characters outside the US-ASCII range encodes them

Ø  with percent encoding when constructing a URL.   This might also simplify the equivalence

Ø  matching algorithm, but that depends a bit on your needs there.

One issue with IRIs is that if they are used directly in web pages, such that the client gets to do the IRI-to-URI
conversion, you will get different results since the client might follow RFC 3987 (e.g., Windows UWP apps do)
but browsers do not, they tend to follow a conversion process closer to the iri-bis drafts that never became
RFCs (e.g., that use the charset of the containing page, rather than UTF-8).  As such, you do not get reliable
interoperable behavior.

If they always appear in web pages as URIs (not IRIs) such that the author does the conversion, then you can
get interoperable behavior.  Hence the recommendation.

Dave

From: Uri-review <uri-review-bounces@ietf.org>; On Behalf Of Ted Hardie
Sent: Friday, September 14, 2018 10:23 AM
To: Peter Saint-Andre <stpeter@mozilla.com>;
Cc: khaled.koubaa@op3ft.org; uri-review@ietf.org; Jean-Emmanuel RODRIGUEZ <jean-emmanuel.rodriguez@op3ft.org>;; Benjamin PHISTER <benjamin.phister@op3ft.org>;
Subject: Re: [Uri-review] URI review request for 'leaptofrogans' scheme

Howdy,

draft-op3ft-leaptofrogans-uri-scheme references the IFAP spec but the pointer given is to an access page; it would likely be clearer to point to a specific version, e.g. https://www.frogans.org/en/resources/ifap/ifap10-adopted.spec.txt<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.frogans.org%2Fen%2Fresources%2Fifap%2Fifap10-adopted.spec.txt&data=02%7C01%7Cdthaler%40microsoft.com%7Cf2dd94c00ff641f78d7c08d61a66edcb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636725426718904009&sdata=ekn%2BaOZOnxg98DsRAAWbezfXGEmkG6uL4DOfKnWzC3A%3D&reserved=0> .

I personally found the discussion of the relationship of leaptofrogans to IRIs somewhat confusing and under-specified.  From what I have worked out, the Frograns networks and Frogans sites are both forbidden by IFAP from using the percent symbol within their names.  This means that any leaptofrograns URIs will not need to deal with percent-encoding any existing percent signs.  The document goes on to say:


   This is because Frogans Player interprets both URIs

   and IRIs based on the 'leaptofrogans' URI scheme.  If the U+0025

   PERCENT SIGN character is found in the string, then the string is

   interpreted as a URI, otherwise it is interpreted as an IRI.
While it may be useful to know what the Frogans Player currently does, the specification really has to say what further implementation should do, and this isn't really clear.  Similarly, the Security considerations section lists mitigations that are specific to a particular piece of software, rather than more generally.  Up-leveling this so it is useful to other implementations would be good.

I also must confess to a general concern about the use of IRIs.  At the time the IRI documents were written, they were conceived of as a presentation form useful for interacting with users, but the underlying assumption was that protocol elements would always be URIs.  See this from Section 3 fo RFC 3987:


   However, when the resource

   identifier is used for resource retrieval, it is in many cases

   necessary to determine the associated URI, because currently most

   retrieval mechanisms are only defined for URIs.  In this case, IRIs

   can serve as presentation elements for URI protocol elements.
This document appears to be defining a scheme for use with a resource retrieval system, but it is doing so with the IRIs as the primary identifier.  It's outside the scope of this discussion to review the implications of that for IFAP, but I think it is fair to note that IRIs have not been a resounding success, and that even if the IRI usage were very completely specified here the chances that libraries outside the Frograns ecosystem would support it seems small.  I infer that in part because of the special casing in IFAP (e.g. the use of an IDNA-based repertoire but with the restoration of the asterisk to PVALID within Frogans strings) , but mostly on the general state of IRI processing.

I think this could be substantially simpler, by defining these as URLs where any Frograns Network or Frogans Site which uses characters outside the US-ASCII range encodes them with percent encoding when constructing a URL.
This might also simplify the equivalence matching algorithm, but that depends a bit on your needs there.

regards,

Ted Hardie

On Fri, Sep 14, 2018 at 8:52 AM, Peter Saint-Andre <stpeter@mozilla.com<mailto:stpeter@mozilla.com>> wrote:
This message constitutes a request for review of the 'leaptofrogans' URI
scheme, specified here:

https://datatracker.ietf.org/doc/draft-op3ft-leaptofrogans-uri-scheme/<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-op3ft-leaptofrogans-uri-scheme%2F&data=02%7C01%7Cdthaler%40microsoft.com%7Cf2dd94c00ff641f78d7c08d61a66edcb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636725426718904009&sdata=tpbuF%2FkvIUoH84SO%2BfAYIZM8o4q3Sum%2FwhgbizbKe2Q%3D&reserved=0>

Although the completed registration template follows, reading the I-D is
advised. I am the document shepherd and have cc'd the authors.

###

6.  IANA Considerations

   [RFC Editor: Please replace 'xxxx' with assigned RFC number before
   publication]

   In accordance with the guidelines and registration procedures for new
   URI schemes [RFC7595], this section provides the information needed
   to register the 'leaptofrogans' URI scheme.

   Scheme name: 'leaptofrogans'

   Status: permanent

   URI Scheme Syntax: See Section 4 of RFC xxxx.

   URI Scheme semantics: See Section 2 of RFC xxxx.

   Encoding Considerations: See Section 4 of RFC xxxx.

   Applications/protocols that use this scheme name: Frogans Player as
   well as any end-user application (such as a Web browser or an E-mail
   client) wishing to launch Frogans Player on a given Frogans site.

   Interoperability Considerations: There are no known interoperability
   concerns related to use of the 'leaptofrogans' URI scheme.

   Security Considerations: See Section 7 of RFC xxxx.

   Contact: Alexis Tamas mailto:alexis.tamas@op3ft.org<mailto:alexis.tamas@op3ft.org>

   Change controller: OP3FT mailto:contact-standards@op3ft.org<mailto:contact-standards@op3ft.org>

   References: RFC xxxx.

###

_______________________________________________
Uri-review mailing list
Uri-review@ietf.org<mailto:Uri-review@ietf.org>
https://www.ietf.org/mailman/listinfo/uri-review<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Furi-review&data=02%7C01%7Cdthaler%40microsoft.com%7Cf2dd94c00ff641f78d7c08d61a66edcb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636725426718904009&sdata=XmdjS14AgU3n4T4b1ZeC8wYDS2SFBAvKt1un3SEbG7A%3D&reserved=0>