IETF Logo Mail Archive

Re: [websec] Well-known URIs

Yoav Nir <ynir@checkpoint.com> Thu, 08 August 2013 21:45 UTC

Return-Path: <ynir@checkpoint.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D99F11E8238 for <websec@ietfa.amsl.com>; Thu, 8 Aug 2013 14:45:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.519
X-Spam-Level:
X-Spam-Status: No, score=-10.519 tagged_above=-999 required=5 tests=[AWL=0.080, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VsO4RXNOrLi3 for <websec@ietfa.amsl.com>; Thu, 8 Aug 2013 14:45:29 -0700 (PDT)
Received: from smtp.checkpoint.com (smtp.checkpoint.com [194.29.34.68]) by ietfa.amsl.com (Postfix) with ESMTP id 4063411E8236 for <websec@ietf.org>; Thu, 8 Aug 2013 14:45:28 -0700 (PDT)
Received: from DAG-EX10.ad.checkpoint.com ([194.29.34.150]) by smtp.checkpoint.com (8.13.8/8.13.8) with ESMTP id r78LjPYf024459; Fri, 9 Aug 2013 00:45:25 +0300
X-CheckPoint: {52041174-F-1B221DC2-1FFFF}
Received: from IL-EX10.ad.checkpoint.com ([169.254.2.105]) by DAG-EX10.ad.checkpoint.com ([169.254.3.223]) with mapi id 14.02.0342.003; Fri, 9 Aug 2013 00:45:24 +0300
From: Yoav Nir <ynir@checkpoint.com>
To: Chris Palmer <palmer@google.com>
Thread-Topic: [websec] Well-known URIs
Thread-Index: AQHOlFgB2fNLbEWVFkSgl8GkYD3KkJmLgOoAgAAPfoCAAA4qgIAAB56A
Date: Thu, 08 Aug 2013 21:45:23 +0000
Message-ID: <681B3865-0333-482F-AE35-B3A460B08664@checkpoint.com>
References: <4CF90F65-62CE-4AE0-9113-932F93A98782@mnot.net> <CAOuvq21cUqt-cXNM5xnektO-0yJq-gvXa5xoEREz26vTQiTFAA@mail.gmail.com> <F14E3D10-FF63-4F0D-8BA4-11B9A1A42012@checkpoint.com> <CAOuvq21jUfKd1=TpKpysdyQ+6re5Axvmy54R84YnPvO6ZohRzw@mail.gmail.com>
In-Reply-To: <CAOuvq21jUfKd1=TpKpysdyQ+6re5Axvmy54R84YnPvO6ZohRzw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [172.31.20.237]
x-kse-antivirus-interceptor-info: scan successful
x-kse-antivirus-info: Clean
x-cpdlp: 11c5b12eda50469c83cfaf479e96bf7ece4b6a6f9a
Content-Type: text/plain; charset="us-ascii"
Content-ID: <79007AB2DAE476459907F1680DE420BD@ad.checkpoint.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: IETF WebSec WG <websec@ietf.org>
Subject: Re: [websec] Well-known URIs
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Aug 2013 21:45:35 -0000

On Aug 9, 2013, at 12:18 AM, Chris Palmer <palmer@google.com> wrote:
>> 
> 
> I was thinking maybe we could get rid of max_age and have the max age
> be simply the lifetime of the resource as defined by the Cache-Control
> header. Maybe that's a bad idea, I don't know.

[no hats]

I don't like it. Especially if we keep it extensible, and something else (HSTS?) might need a different value. Besides, adding this resource to a server is easy - just place a file in the right directory. Changing the Cache-control properties of one particular resource on the server is harder if at all possible - it depends on the server software.

Yoav

v2.23.0 | Report a Bug | By Email