Re: [Wpack] package: URL scheme

Martin Thomson <mt@lowentropy.net> Fri, 12 June 2020 00:01 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: wpack@ietfa.amsl.com
Delivered-To: wpack@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 332393A0C88 for <wpack@ietfa.amsl.com>; Thu, 11 Jun 2020 17:01:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=f1aFv3Hv; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=G9qE0A1G
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PjMx-9kzHw4b for <wpack@ietfa.amsl.com>; Thu, 11 Jun 2020 17:01:51 -0700 (PDT)
Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4937D3A0CB2 for <wpack@ietf.org>; Thu, 11 Jun 2020 17:01:50 -0700 (PDT)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id 9FB5B44A for <wpack@ietf.org>; Thu, 11 Jun 2020 20:01:49 -0400 (EDT)
Received: from imap2 ([10.202.2.52]) by compute2.internal (MEProxy); Thu, 11 Jun 2020 20:01:49 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type; s=fm2; bh=AZqj/jWN7b9WPQNRY7AyNjWKPb6vBx7 Io8blWoZfFMU=; b=f1aFv3HvSztxcN9SC0aCKQScmm0qVtbDQhBoPqzxDaUcn2B mvScJ59ySt6qth/f01zTlJrXVwjiZHHneGX60bnm0QMNrVO8FASo8o2oNGgK7b/X rvUDFL3f4YDl7sAhfvqWcpoSyHJMPq6V3Tspj+UOXsACs4pJpzKBdsG2P2zNCQ03 rUXcIVW4gPCaVolN96minBiK86MBR7AyqqQdsN1PPCJJ+xIPHYWXTZys5BtD5+jp Pvgl/3B9VFYyL+dmodS5TryM87cThOzyRqaiRA3EWwPkIHLN5We7p5/vcmvD4GKY 36HJywJeu3kpxQ7MW2kEIjCqOCf4/u2HodgZGGg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=AZqj/j WN7b9WPQNRY7AyNjWKPb6vBx7Io8blWoZfFMU=; b=G9qE0A1GR5qzMhd2wLuZsY /yblYrgwo/9+KAE0FK23D7Fbdfri/2fvmIdHPVd7/JjnY1wUZ/Qz7b007BdUqU2c dtwW6cy5vHN4PbgEPKu7rzh1LMTv7d2GRIm16hJFpXcUshLbW9I0dDbqSnz2o1CO 7/ZKDxq5xMx9Yk/6j2hivJ1adKtXN38JP6zr1Gtte7Wa8RCzLaebiS4UH/9WQkuH FkfgfC0ADZU4D+Uws3x5fczZjgZu++lwQxznB87kNImNUvXFHmIpA/8UqsWKI8Da 6uM0xR99XXY4SgSnXm/JMPJZpqBI0PCRJFF/sW6CAZa4l6hSHeev5zisNY9NZB8Q ==
X-ME-Sender: <xms:7cXiXuhL5cqa3mFk_zpTadBuxG9Y1lkat5BO7dsnbdcY7bp8s2l1OA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduhedrudeitddgfedtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucgoufhushhpvggtthffohhmrghinhculdegledmne cujfgurhepofgfggfkjghffffhvffutgesthdtredtreertdenucfhrhhomhepfdforghr thhinhcuvfhhohhmshhonhdfuceomhhtsehlohifvghnthhrohhphidrnhgvtheqnecugg ftrfgrthhtvghrnhepueeggeeuveeugfelteffvdevkeeuheetleeghfehkeekfeekiedu feefveelheelnecuffhomhgrihhnpehgihhthhhusgdrtghomhdpghhoohhglhgvrdgtoh hmpdhgohhoghhlvghsohhurhgtvgdrtghomhdpfiefrdhorhhgpdhivghtfhdrohhrghen ucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmtheslh hofigvnhhtrhhophihrdhnvght
X-ME-Proxy: <xmx:7cXiXvDdqddoQStRtbhUGlgdWZDWAIYbcGE5GarFwTE6V7vmpJIGlQ> <xmx:7cXiXmF3WSEA0UudUczqSANt7W5yYvov6QV5PbTsk6s90_jJaKHwRA> <xmx:7cXiXnRmqARU_zxGCbEWSziSKj98zEsrsszyK8hRA_eOOeSkVtYi_w> <xmx:7cXiXniEUGAYxRqnmzXtyBDl-ETttMG3SJjBheb0OkuM3XTlJb_Nrw>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id EC36EE00A9; Thu, 11 Jun 2020 20:01:48 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.3.0-dev0-525-ge8fa799-fm-20200609.001-ge8fa7990
Mime-Version: 1.0
Message-Id: <97bcac95-c220-41ae-b957-d93fc57f4a74@www.fastmail.com>
In-Reply-To: <CANh-dXndPaue3zAADhpc+wyNb8dxs=nVKOAp1n=6SMCKoUe=eQ@mail.gmail.com>
References: <CANh-dXndPaue3zAADhpc+wyNb8dxs=nVKOAp1n=6SMCKoUe=eQ@mail.gmail.com>
Date: Fri, 12 Jun 2020 10:01:29 +1000
From: Martin Thomson <mt@lowentropy.net>
To: wpack@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/wpack/QAPNg8OaExLKIEoOhRNAJVWV26k>
Subject: Re: [Wpack] package: URL scheme
X-BeenThere: wpack@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Web Packaging <wpack.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/wpack>, <mailto:wpack-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wpack/>
List-Post: <mailto:wpack@ietf.org>
List-Help: <mailto:wpack-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/wpack>, <mailto:wpack-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2020 00:01:59 -0000

I have a bunch of concerns about this approach, but let's start with a fairly major one:

This buries the authority.  If your authority is truly publisher.example, then that should be the authority component.  If you regard the rest as a split between the remainder of the identity of the resource itself and some secondary information about how that resource might be obtained, then you might have something closer to how you might want to structure a URI.

On Thu, Jun 11, 2020, at 08:00, Jeffrey Yasskin wrote:
> Hi all,
> 
> I wanted to raise awareness of a discussion about the URL scheme for 
> addressing resources within bundles 
> (draft-yasskin-wpack-bundled-exchanges).
> 
> We seem to be heading toward a URL of the form 
> package:<encoded-package-url>$<encoded-resource-uri>, which for a 
> package URL of https://distributor.example/package.wbn and resource URI 
> of https://publisher.example/page.html?q=query would lead to a URL of:
> 
> *package:https:,,distributor.example,package.wbn;q=query$https:,,publisher.example/page.html?q=query*
> 
> This arises from several considerations:
> 1. A bundle is served from a URL.
> 2. After a user downloads the bundle, it gets a new URL, often 
> file:///...
> 3. We can also hash the bundle to get a URI that stays stable across 
> transfers.
> 4. Resources inside a bundle are named by URIs (which, since the bundle 
> has an index, are also URLs even if, like urn:uuid:..., they wouldn't 
> normally be locators).
> 5. Once a user downloads a bundle, for web browsers to give its content 
> storage that's persistent across reloads, as requested in 
> https://github.com/WICG/webpackage/issues/498, the content needs to be 
> assigned a non-opaque origin.
> 
> I'm updating one of the documents about this in 
> https://github.com/WICG/webpackage/pull/584 and would welcome comments 
> here or there.
> 
> The URLs are obviously gross, so 
> https://github.com/WICG/webpackage/pull/560 suggests that browsers 
> avoid showing them to users in most cases. 
> 
> We could potentially simplify things if packages named things with just 
> paths instead of full URIs. We'd then name things based on the bundle's 
> origin. However, this loses archiving use cases.
> 
> This is all further discussed in the following documents and issues, 
> but you shouldn't feel responsible to read everything here:
> 
> * 
> https://docs.google.com/document/d/1BYQEi8xkXDAg9lxm3PaoMzEutuQAZi1r8Y0pLaFJQoo/edit#
> * 
> https://chromium-review..googlesource.com/c/chromium/src/+/2226248/7#message-0a3efda5aff84770a1729422a5b26aeca3ee4e80 <https://chromium-review.googlesource.com/c/chromium/src/+/2226248/7#message-0a3efda5aff84770a1729422a5b26aeca3ee4e80>
> * https://github.com/WICG/webpackage/issues/583
> * 
> https://github.com/WICG/webpackage/blob/master/explainers/navigation-to-unsigned-bundles.md#urls-for-bundle-components
> * https://lists.w3.org/Archives/Public/uri/2019Nov/0000.html
> 
> Thanks,
> Jeffrey
> _______________________________________________
> Wpack mailing list
> Wpack@ietf.org
> https://www.ietf.org/mailman/listinfo/wpack
>