Re: [webfinger] Simplifying and unjamming WebFinger

Mike Jones <Michael.Jones@microsoft.com> Fri, 14 June 2013 18:20 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: webfinger@ietfa.amsl.com
Delivered-To: webfinger@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 796C521F9922 for <webfinger@ietfa.amsl.com>; Fri, 14 Jun 2013 11:20:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.448
X-Spam-Level:
X-Spam-Status: No, score=-2.448 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eEN-Wo+Ld2nl for <webfinger@ietfa.amsl.com>; Fri, 14 Jun 2013 11:20:11 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0206.outbound.protection.outlook.com [207.46.163.206]) by ietfa.amsl.com (Postfix) with ESMTP id 2140A21F9C02 for <webfinger@ietf.org>; Fri, 14 Jun 2013 11:20:06 -0700 (PDT)
Received: from BY2FFO11FD015.protection.gbl (10.1.15.203) by BY2FFO11HUB036.protection.gbl (10.1.14.179) with Microsoft SMTP Server (TLS) id 15.0.707.0; Fri, 14 Jun 2013 18:20:05 +0000
Received: from TK5EX14HUBC102.redmond.corp.microsoft.com (131.107.125.37) by BY2FFO11FD015.mail.protection.outlook.com (10.1.14.131) with Microsoft SMTP Server (TLS) id 15.0.707.0 via Frontend Transport; Fri, 14 Jun 2013 18:20:04 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.25]) by TK5EX14HUBC102.redmond.corp.microsoft.com ([157.54.7.154]) with mapi id 14.03.0136.001; Fri, 14 Jun 2013 18:19:48 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Tim Bray <tbray@textuality.com>, "webfinger@ietf.org" <webfinger@ietf.org>
Thread-Topic: [webfinger] Simplifying and unjamming WebFinger
Thread-Index: AQHOaSL2oEEfbPpYmEis0pC9Nurt/Zk1g45w
Date: Fri, 14 Jun 2013 18:19:47 +0000
Message-ID: <4E1F6AAD24975D4BA5B168042967394367855E7C@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <CAHBU6is9Fq8YkT=FFCa7qTn-=cFH75JCn6_uSahuhqb7AvbJCg@mail.gmail.com>
In-Reply-To: <CAHBU6is9Fq8YkT=FFCa7qTn-=cFH75JCn6_uSahuhqb7AvbJCg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [157.54.51.73]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B168042967394367855E7CTK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(377454002)(189002)(199002)(66066001)(20776003)(31966008)(49866001)(44976003)(63696002)(47446002)(50986001)(53806001)(80022001)(59766001)(6806003)(54356001)(76482001)(47736001)(69226001)(76796001)(65816001)(33656001)(79102001)(54316002)(51856001)(4396001)(55846006)(512874002)(47976001)(74706001)(16406001)(76786001)(56816003)(46102001)(74876001)(77096001)(56776001)(77982001)(81342001)(81542001)(74366001)(71186001)(16236675002)(74502001)(16297215003)(15202345002)(15395725003)(74662001); DIR:OUT; SFP:; SCL:1; SRVR:BY2FFO11HUB036; H:TK5EX14HUBC102.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 08770259B4
Subject: Re: [webfinger] Simplifying and unjamming WebFinger
X-BeenThere: webfinger@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of the Webfinger protocol proposal in the Applications Area <webfinger.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/webfinger>, <mailto:webfinger-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/webfinger>
List-Post: <mailto:webfinger@ietf.org>
List-Help: <mailto:webfinger-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/webfinger>, <mailto:webfinger-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Jun 2013 18:20:16 -0000

Tim, I’m not sure where the feeling of despair comes from, other than finishing things always seems to take longer than it should.  (I agree with you there.)

That said, I can’t support changes to WebFinger that restrict it’s applicability to only e-mail addresses, and if you’re being consistent with your desire to have OpenID Connect succeed, neither can you.  OpenID Connect uses the ability of WebFinger to return metadata about URIs that are not e-mail addresses.  See http://openid.net/specs/openid-connect-discovery-1_0.html#URLSyntax and http://openid.net/specs/openid-connect-discovery-1_0.html#host.port.example for example uses with URLs.

My take-away from this is that those of us who care about finishing WebFinger should double down in our participation to constructively help finish the IESG review process.  I would only despair if we went back to the drawing board, because that would set us back by years and destroy the chance of finishing something that’s nearly done and has been demonstrated to meet open discovery needs in practice.

                                                                -- Mike

From: webfinger-bounces@ietf.org [mailto:webfinger-bounces@ietf.org] On Behalf Of Tim Bray
Sent: Friday, June 14, 2013 10:17 AM
To: webfinger@ietf.org
Subject: [webfinger] Simplifying and unjamming WebFinger

I’ve been following the endless back and forth on this with a feeling of despair... people seem to be talking back and forth past each other.  Lots of people think there are problems, Paul thinks there are no problems.
Back in the day, when I first heard of WebFinger, it was the simplest thing imaginable: Put in an email address and get back some pointers to IDPs or whatever.  Somewhere along the way, it morphed into getting metadata about any Resource.  Which meant that you couldn’t just use an email address, you had to turn it into a URI.

And thus the problem in the spec.  You have to figure out which URI scheme to use (acct:, mailto:, device:) and this will affect the output in ways that have to be specified in Other Places.
But I don’t have a general-purpose problem about wanting metadata for arbitrary URIs.  I have several immediate pressing problems for retrieving metadata about  email addresses.   The former is now seriously getting in the way of the latter.
So, how about a WebFinger light, in which the form of the query is
/.well-known/wf-lite?email=bob@example.com<mailto:bob@example.com>
Which yields a JRD.  You could still have the rel-selection and so on. It would be easy to understand. It would be self-contained. The draft would shrink in size dramatically. It would be instantly usable by OpenID Connect.  It would probably sail through the IESG.

 -T