Re: [Webpush] WGLC for draft-ietf-webpush-protocol-05

jr conlin <jconlin@mozilla.com> Tue, 31 May 2016 19:09 UTC

Return-Path: <jconlin@mozilla.com>
X-Original-To: webpush@ietfa.amsl.com
Delivered-To: webpush@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 763A812D14B for <webpush@ietfa.amsl.com>; Tue, 31 May 2016 12:09:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mozilla-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26CeRepBKqGO for <webpush@ietfa.amsl.com>; Tue, 31 May 2016 12:09:29 -0700 (PDT)
Received: from mail-pf0-x22c.google.com (mail-pf0-x22c.google.com [IPv6:2607:f8b0:400e:c00::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4567E12D0B3 for <webpush@ietf.org>; Tue, 31 May 2016 12:00:58 -0700 (PDT)
Received: by mail-pf0-x22c.google.com with SMTP id b124so77106555pfb.0 for <webpush@ietf.org>; Tue, 31 May 2016 12:00:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla-com.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=Hazjv7hys1uFhsVC3fVRS7zS4i9VK9+3CcAi1zXPdfo=; b=w9GyGoRFWdOOsOJI/k+gFMe0N5xOMFWUAT8wyXGlovf4RJp147RW8PbBVDvaYSDGFA ieTEvYigQMC76AX5P/pENTiV8KRjjdIiixiUAR++jjqYX+Krp6+3ra/234sYjXYTDHpz rWvCOlUY9YQO6HsuMyxcZNSdwaNin56BFd6HimpSLjcGOlwX2RcMmeoijmY53FxlMDBR xEVTZKokezZ+z1jK56xkp4e/g+EVa+FhhnfIfGE7TAbKHCIvH0jmSYr03fV64Ms8p1HE B0g/XwN7Rcej1BFg29Rwvy1trN9rl8xkyQdLlhz8WUEj+J9tEFOB4SloGTEfuOTSaAgI PzfA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=Hazjv7hys1uFhsVC3fVRS7zS4i9VK9+3CcAi1zXPdfo=; b=BgTPmG8WJ39W+OaNkpgS0+NF1q+yoI67YYygAGzQDu8GDyKQo87TBebK/ztuNnBL27 fejceWNvtNYVHa6xsEtAaFgl2MmIfH8e/nAE9gXaiJdEWiHhMAiwRGOrXZA+HjiIn+Pv Qs9alRC1I6rEtDL91Dw7mXv2LspoXJba7KX97UTqgcCPWWsxUuSRuaNdI/+wKKhQYVGe T/EKxCG7n3hJCtNOQPllWFREyQVQzoUO326jLmlY60DL/fwWf3plsLu+rucvVCOZbzy2 Rlphs2L8F/8kUq8zYeVP0dsg6fFL3CO9gjLbCzAZs0XL5OBUl3HrlGuHIQpc6l+il2Fc xXTw==
X-Gm-Message-State: ALyK8tJWbFynBTs/RFeN9M0m4Z00QkIFlIi/9j+M+hi630cbvLzJ39pHDy9Sg6pUnsDA2GLv
X-Received: by 10.98.91.7 with SMTP id p7mr2137552pfb.8.1464721257542; Tue, 31 May 2016 12:00:57 -0700 (PDT)
Received: from [10.10.105.109] (ip170.guelphtool.com. [207.35.6.170]) by smtp.gmail.com with ESMTPSA id ez6sm56703479pab.12.2016.05.31.12.00.55 for <webpush@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Tue, 31 May 2016 12:00:56 -0700 (PDT)
To: webpush@ietf.org
References: <DA2216E6-CE23-47A0-AA7A-5E19DAF043AF@ntt-at.com> <CABvL1xrKExY4FXXmNogGKq2=PUd5HtZed09BOW1h33TXE79PNA@mail.gmail.com> <7BE6135D-961D-4D6E-B6FC-99BA27B1B0C4@ntt-at.com> <CABvL1xpiMcrtVj=ZCcesxsQJjUBJV23U5zbr5QKPeQDxQadOWg@mail.gmail.com> <CAP8-Fqmnd_pvR32BY0AE6xwvPJ1B35ieDqHsCo=c3eV0o1soKA@mail.gmail.com> <4B69453E-54AD-414A-BDC3-18E175AA25BC@ntt-at.com>
From: jr conlin <jconlin@mozilla.com>
Message-ID: <4467b402-a69f-fc0e-f699-00ca9f9f14e8@mozilla.com>
Date: Tue, 31 May 2016 12:00:58 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Thunderbird/48.0a2
MIME-Version: 1.0
In-Reply-To: <4B69453E-54AD-414A-BDC3-18E175AA25BC@ntt-at.com>
Content-Type: multipart/alternative; boundary="------------4B6FAFD6E27B4769BB014477"
Archived-At: <http://mailarchive.ietf.org/arch/msg/webpush/Ncyhw_wMAp5Sllin3O8e5Dhk40w>
Subject: Re: [Webpush] WGLC for draft-ietf-webpush-protocol-05
X-BeenThere: webpush@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Discussion of potential IETF work on a web push protocol <webpush.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/webpush>, <mailto:webpush-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/webpush/>
List-Post: <mailto:webpush@ietf.org>
List-Help: <mailto:webpush-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/webpush>, <mailto:webpush-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 May 2016 19:09:33 -0000

There are some aspects of the published spec that are optional and seem
a bit "hand wavey"* (e.g. "subscription sets"), and I believe that the
recommendation for expired or removed push subscription endpoints was to
return 410, not 404 (see section 7.3). I note that 7.3.1 suggests 410
for expired subscription sets, so it might help if things were consistent.

Aside from those minor nits, I have no complaint with the draft as stands.

*The subscription set bits are an implementation detail that seems like
it's fairly vague compared to the detail that's provided for other parts
of the specification. I'm not terribly bothered by that, since how the
UA and PS handle exchange is probably going to be the most ignored
aspect of this specification. Various service providers will favor
existing channels over a new implementation.

On 5/30/2016 8:52 PM, Shida Schubert wrote:
> All;
>
> We have heard very little regarding the actual contents of the draft
> and WGLC is over this week.
>
> As noted when I started the last call, please show your support by
> providing acknowledgement(s) if you are happy with the draft as is. 
>
> Thanks! 
> Shida
>
>> On May 24, 2016, at 11:11 AM, Costin Manolache <costin@gmail.com
>> <mailto:costin@gmail.com>> wrote:
>>
>> +1 - we discussed my concerns on flow control for push promises, and
>> I think it's reasonable to have them addressed either 
>> as part of http2 or as a separate document. 
>>
>> Other than that I think it's reasonable and stable base - extensions
>> and features can be added on top of it.
>>
>> Costin
>>
>>
>> On Mon, May 23, 2016 at 5:53 PM Richard Maher <maherrj@googlemail.com
>> <mailto:maherrj@googlemail.com>> wrote:
>>
>>     Please see embedded comments: -
>>
>>     On Tue, May 24, 2016 at 8:03 AM, Shida Schubert <shida@ntt-at.com
>>     <mailto:shida@ntt-at.com>> wrote:
>>
>>
>>         Hi Richard;
>>
>>         Thank you for your feedback.
>>
>>         Currently developers need to either deal with different
>>         spec/api for each of the push notification providers (GCM,
>>         Azure, APN etc.) to communicate to their subscribers or use
>>         third party service (urban airship etc.), which is fine for
>>         native apps but gets a little more complicated with the browser.
>>
>>
>>     Inconvenient but feature detection is not the end of the world.
>>      
>>
>>         The IETF has agreed that we need a standardized protocol for
>>         this and that’s what we are chartered to work on. 
>>
>>
>>     A much better idea especially considering the number of Push
>>     Services that don't happen to also manufacture a browser. But
>>     let's get it as fit-for-purpose and as extensive as we can, eh?
>>     How many different specifications have there been so far dealing
>>     with Server Push, Simple Push, etc. Each time with developers
>>     having to deprecate and re-tool :-(
>>      
>>
>>
>>         As for Broadcasting, from my shallow understanding isn’t it
>>         merely the same payload sent to set or all of subscribers?
>>
>>
>>     I find that level of naivety astounding in anyone who is involved
>>     in formulation of this standard. Why do you seek to deliberately
>>     ignore the client-based subscription feature where any and all
>>     client-to-topic mapping is maintained solely by the Push Service
>>     and where the Application Server is oblivious to consumers and
>>     freed the need for a local mapping database? The Use-Cases are
>>     clear: - Sports results, Weather Updates, Stock Prices, Security
>>     Alerts, just to name a few. The strategy for encrypting an
>>     authenticating the payload/body is also clear(ish):
>>     - https://github.com/slightlyoff/ServiceWorker/issues/901
>>
>>     Why do you people continue to say "What elephant?"
>>
>>         In which case, I believe it can be handled as an
>>         implementation matter likely at the application side.
>>
>>
>>      For some other use cases, managing subscriptions on the server
>>     is indeed an option. Horses for courses: -
>>      https://developers.google.com/cloud-messaging/topic-messaging#managing_topic_subscriptions_from_the_server 
>>
>>         The protocol can be extended at later stage if wg agrees it
>>         is something that is necessary but I haven’t heard anybody
>>         else at the meeting or on the mailing list expressing this
>>         feature is a show-stopper.  
>>
>>
>>     I sorry to appear blunt but if the other members of the
>>     cloistered star chamber that is adjudicating on this are equally
>>     ignorant of the business requirements then there is no surprise
>>     they haven't come up with a solution.
>>
>>     But *please* don't listen to me. Just look at what solutions that
>>     are already in the wild with native apps. Why won't you let HTML5
>>     Web App developers compete on an even playing field and create
>>     Apps that satisfy these common requirements?
>>
>>     The MBONE people seem to have made progress over the years and we
>>     all know that your Application Servers with simply be overwhelmed
>>     if you tickle potentially millions of clients so let's get on
>>     with the solution? 
>>      
>>
>>
>>         Anyway, I would very much appreciate it, if you can refrain
>>         the comments to the technical contents of the draft. 
>>
>>
>>     Are you telling me that pointing out omissions and scope
>>     deficiencies is not welcomed?
>>
>>     Either way 5.4 is completely wrong. You've been told.
>>       
>>
>>
>>         Thanks
>>         Shida
>>
>>>         On May 16, 2016, at 6:50 PM, Richard Maher
>>>         <maherrj@googlemail.com <mailto:maherrj@googlemail.com>> wrote:
>>>
>>>         "5.4 Updating Push Messages" is based on the misconception
>>>         that "Topics" are "Collapse Keys". The standard as proposed
>>>         has been superseded by event on the ground by established,
>>>         successful, and more importantly scalable solutions: -
>>>
>>>         Google Cloud Messaging: -
>>>         https://developers.google.com/cloud-messaging/topic-messaging
>>>
>>>         Azure Notification Hubs: -
>>>          https://blogs.windows.com/buildingapps/2013/09/16/delivering-push-notifications-to-millions-of-devices-with-windows-azure-notification-hubs/
>>>
>>>         Whether the Topics are identified via HTTP headers or JSON
>>>         Tokens is the only moot point. What is clear is that the
>>>         proposed protocol attempts to conflate the Topic and
>>>         Collapse Key features: -
>>>         https://developers.google.com/cloud-messaging/concept-options#collapsible_and_non-collapsible_messages
>>>
>>>         The fact that quintessential Push Notification feature
>>>         "Broadcasting" has been descoped from this protocol must be
>>>         sufficient to reject the proposal.
>>>
>>>         Please do not make the same mistake that you made with
>>>         Geofences. IETF and W3C credibility has already suffered enough.
>>>
>>>         On Tue, May 17, 2016 at 2:32 AM, Shida Schubert
>>>         <shida@ntt-at.com <mailto:shida@ntt-at.com>> wrote:
>>>
>>>             All;
>>>
>>>             As discussed at the IETF 95, as last issue surrounding
>>>             the subscription re-use is addressed, we are starting a
>>>             Working Group Last Call for the webpush protocol. 
>>>
>>>             https://tools.ietf.org/html/draft-ietf-webpush-protocol-05
>>>
>>>             If you have any issues or questions regarding the draft
>>>             please submit it to the list, when raising issues please
>>>             provide constructive resolution when possible.
>>>
>>>             Please acknowledge on the list even when you are
>>>             content/happy with the status of the draft. 
>>>
>>>             The Working Group Last Call will end on June 6th (3 weeks). 
>>>
>>>             Shida
>>>             As co-chair
>>>
>>>             _______________________________________________
>>>             Webpush mailing list
>>>             Webpush@ietf.org <mailto:Webpush@ietf.org>
>>>             https://www.ietf.org/mailman/listinfo/webpush
>>>
>>>
>>>         _______________________________________________
>>>         Webpush mailing list
>>>         Webpush@ietf.org <mailto:Webpush@ietf.org>
>>>         https://www.ietf.org/mailman/listinfo/webpush
>>
>>
>>         _______________________________________________
>>         Webpush mailing list
>>         Webpush@ietf.org <mailto:Webpush@ietf.org>
>>         https://www.ietf.org/mailman/listinfo/webpush
>>
>>     _______________________________________________
>>     Webpush mailing list
>>     Webpush@ietf.org <mailto:Webpush@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/webpush
>>
>> _______________________________________________
>> Webpush mailing list
>> Webpush@ietf.org <mailto:Webpush@ietf.org>
>> https://www.ietf.org/mailman/listinfo/webpush
>
>
>
> _______________________________________________
> Webpush mailing list
> Webpush@ietf.org
> https://www.ietf.org/mailman/listinfo/webpush