Re: [webfinger] Server Response language

"Paul E. Jones" <paulej@packetizer.com> Wed, 10 July 2013 14:01 UTC

Return-Path: <paulej@packetizer.com>
X-Original-To: webfinger@ietfa.amsl.com
Delivered-To: webfinger@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADF0621F9F9A for <webfinger@ietfa.amsl.com>; Wed, 10 Jul 2013 07:01:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.532
X-Spam-Level:
X-Spam-Status: No, score=-2.532 tagged_above=-999 required=5 tests=[AWL=-0.067, BAYES_00=-2.599, HTTP_ESCAPED_HOST=0.134]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sX6aJcWebPV3 for <webfinger@ietfa.amsl.com>; Wed, 10 Jul 2013 07:00:59 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) by ietfa.amsl.com (Postfix) with ESMTP id E02EB21F9F9E for <webfinger@ietf.org>; Wed, 10 Jul 2013 07:00:58 -0700 (PDT)
Received: from sydney (rrcs-98-101-148-48.midsouth.biz.rr.com [98.101.148.48]) (authenticated bits=0) by dublin.packetizer.com (8.14.5/8.14.5) with ESMTP id r6AE0u78015983 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 10 Jul 2013 10:00:57 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=packetizer.com; s=dublin; t=1373464857; bh=X6HqDTeaXUo/MQBSe0M5svhkoVd99jLCezkmuMxyCLU=; h=From:To:Cc:References:In-Reply-To:Subject:Date:Message-ID: MIME-Version:Content-Type:Content-Transfer-Encoding; b=lR5Eid6WeKqB4LFmnGuskqUyR15g4nHqLmlouJYJsXRZ7fnX6s81x2Ylh3lIrEgQ0 mn6vccGu0FCn2e1U+nvSCNfesul0nBZKQJt+MJ674HnerTOm/8r+9cQypWnoMhEqri wwUedoZgMQwtwv+NtTcgj4IgVcun4cFGVB4dQjWc=
From: "Paul E. Jones" <paulej@packetizer.com>
To: 'Stephane Bortzmeyer' <bortzmeyer@nic.fr>
References: <044501cddece$fd045040$f70cf0c0$@packetizer.com> <CAHBU6itveCHU+M4A1msr_YQdW9JcrVNmfOmcjFwacLkE-pAYrA@mail.gmail.com> <048401cdded8$605d6c90$211845b0$@packetizer.com> <CAHBU6it45YFr6A+AUm3ub1roXqP99QG4jnEWpbvZew5ejhXt2Q@mail.gmail.com> <04c701cddedc$3f996000$becc2000$@packetizer.com> <20130708204135.GB30054@sources.org> <035e01ce7c59$4fd2ed40$ef78c7c0$@packetizer.com> <20130710061843.GA15182@sources.org>
In-Reply-To: <20130710061843.GA15182@sources.org>
Date: Wed, 10 Jul 2013 10:01:00 -0400
Message-ID: <01f201ce7d75$e8f4b540$bade1fc0$@packetizer.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQH37xPjZJRUcIsUNQeBWhT/3tk+XwJBmtyyAWDszUcCCDXr2gDoDW8xAqVlvXABHUVasgDvwBZ0mLDi1iA=
Content-Language: en-us
Cc: webfinger@ietf.org
Subject: Re: [webfinger] Server Response language
X-BeenThere: webfinger@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of the Webfinger protocol proposal in the Applications Area <webfinger.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/webfinger>, <mailto:webfinger-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/webfinger>
List-Post: <mailto:webfinger@ietf.org>
List-Help: <mailto:webfinger-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/webfinger>, <mailto:webfinger-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Jul 2013 14:01:03 -0000

Stephane,

I believe anyone writing a web service should understand that proposed
sentence.  We could add it as part of an example, but that text is not
normative.  I believe it would be better to introduce a clear statement in
section 4.2 similar to the way I worded it.  Any suggested changes to the
wording?

Paul

> -----Original Message-----
> From: 'Stephane Bortzmeyer' [mailto:bortzmeyer@nic.fr]
> Sent: Wednesday, July 10, 2013 2:19 AM
> To: Paul E. Jones
> Cc: webfinger@ietf.org
> Subject: Re: [webfinger] Server Response language
> 
> On Tue, Jul 09, 2013 at 12:03:46AM -0400,
>  Paul E. Jones <paulej@packetizer.com> wrote
>  a message of 64 lines which said:
> 
> >    If the "resource" parameter is a value for which the server has no
> >    information, the server MUST indicate that it was unable to match
> >    the request as per Section 10.4.5 of RFC 2616.
> >
> > This allows the use of 404 or 410, as appropriate.  I think that is the
> > right thing to do.
> 
> An aternative, if people insist that it is clear in RFC 3986 and that
> it should not be restated in Webfinger, is to provide an example:
> 
> For instance, in the OpenID COnnect example, at the end of 3.1, add:
> 
> And if the account does not exist:
> 
>      GET /.well-known/webfinger?
>             resource=acct%3Adoesnotexist%40example.com&
>             rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer
>             HTTP/1.1
>      Host: example.com
> 
>    The server might respond like this:
> 
>      HTTP/1.1 404 Not found
>      Access-Control-Allow-Origin: *
> 
>    Without a body.