Re: [Wpack] package: URL scheme

Mallory Knodel <mknodel@cdt.org> Fri, 12 June 2020 12:34 UTC

Return-Path: <mknodel@cdt.org>
X-Original-To: wpack@ietfa.amsl.com
Delivered-To: wpack@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D81D3A0F9C for <wpack@ietfa.amsl.com>; Fri, 12 Jun 2020 05:34:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cdt.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FmJOD1JlI5LZ for <wpack@ietfa.amsl.com>; Fri, 12 Jun 2020 05:34:26 -0700 (PDT)
Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C94C3A0F9B for <wpack@ietf.org>; Fri, 12 Jun 2020 05:34:26 -0700 (PDT)
Received: by mail-qt1-x835.google.com with SMTP id c12so6926188qtq.11 for <wpack@ietf.org>; Fri, 12 Jun 2020 05:34:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cdt.org; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding:content-language; bh=vY/AkeJeJWGs+ynRAOti3ICM9t411slruW9ew31bBYc=; b=Z4hfjwQNaLi9W4HyWKN+sYvzENbs4+dcP7dCQJ7Hn9regrErAfUspslFkpemfDe0B4 73qbTiKbzDPgq6dcOpcNGl7gspKHV0DfpkwuvEVkPrmgkSebC20ZOF07kLaMgQrIM829 1zKfM3Oe2qU2PzJ3UhXQ2tB6d+6UxPtUKoNjc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=vY/AkeJeJWGs+ynRAOti3ICM9t411slruW9ew31bBYc=; b=Mrkpp/w0DtqfyklYh5IY+T7IoG0ZtV7QMTwGhe8jkI9gbSM8sKc8gSBbiBZCZyAxnN uZWXBw9Eq4m3pfXYsawfA3szVmOpAp/MHHgqFYYArlvhSMTAp7jg1UzeZ9a5X2LtMqyd 1NIm3HECoe8YORLT+VfTwGOi4AKI3NlUeLfxjFjdzhTONgiZhCYYa729JJ43YC6Cv7Wa GuhjAURuHUGKYIgPNWwGwnnF1bLK+Vs45SWxCZLRELeU59Bgp2cXsYhFunC1pk8CZrHY 26LpLn/Z9NEFG7YGBMhzLMhp9JRHLNQFmZHui3RLU0R0ZB2NJUyt48r4KPbSOMlmq0gm IbjQ==
X-Gm-Message-State: AOAM531U0Qo6lUvtHdt0stMHfj/4s6Iq0zGt08cxRaSjXjbhAkBKcvby vvjTLGRmJhMRRRoOwRxVQA0fAAf0f+8=
X-Google-Smtp-Source: ABdhPJwR6ign1eBuvpZHQXGP+4kG/eju1IlYKbO0VAg52Y8gj+gPE3JEHVHPYd1Uma3fAQBX8vqpqg==
X-Received: by 2002:ac8:24b3:: with SMTP id s48mr2796887qts.383.1591965264468; Fri, 12 Jun 2020 05:34:24 -0700 (PDT)
Received: from Mallorys-MacBook-Air.local (c-73-163-188-207.hsd1.dc.comcast.net. [73.163.188.207]) by smtp.gmail.com with ESMTPSA id o6sm4249247qkh.28.2020.06.12.05.34.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 12 Jun 2020 05:34:23 -0700 (PDT)
To: Martin Thomson <mt@lowentropy.net>, wpack@ietf.org
References: <CANh-dXndPaue3zAADhpc+wyNb8dxs=nVKOAp1n=6SMCKoUe=eQ@mail.gmail.com> <97bcac95-c220-41ae-b957-d93fc57f4a74@www.fastmail.com>
From: Mallory Knodel <mknodel@cdt.org>
Message-ID: <105d4247-02d7-694b-74cf-9fd0d5e5bc7e@cdt.org>
Date: Fri, 12 Jun 2020 08:34:23 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Thunderbird/77.0
MIME-Version: 1.0
In-Reply-To: <97bcac95-c220-41ae-b957-d93fc57f4a74@www.fastmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/wpack/RfYbe651-dnV0_C_ZKx2-62yfQk>
Subject: Re: [Wpack] package: URL scheme
X-BeenThere: wpack@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Web Packaging <wpack.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/wpack>, <mailto:wpack-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wpack/>
List-Post: <mailto:wpack@ietf.org>
List-Help: <mailto:wpack-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/wpack>, <mailto:wpack-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2020 12:34:28 -0000

On 6/11/20 8:01 PM, Martin Thomson wrote:

> I have a bunch of concerns about this approach, but let's start with a fairly major one:
>
> This buries the authority.  If your authority is truly publisher.example, then that should be the authority component.  If you regard the rest as a split between the remainder of the identity of the resource itself and some secondary information about how that resource might be obtained, then you might have something closer to how you might want to structure a URI.

Agree that the user needs an indication of publisher, and that hiding 
the URL is unhelpful to the user. Simplification sounds like the right 
thing to do, because too much information can have the same effect as none.

-Mallory

> On Thu, Jun 11, 2020, at 08:00, Jeffrey Yasskin wrote:
>
> The URLs are obviously gross, so
> https://github.com/WICG/webpackage/pull/560 suggests that browsers
> avoid showing them to users in most cases.
>
> We could potentially simplify things if packages named things with just
> paths instead of full URIs. We'd then name things based on the bundle's
> origin. However, this loses archiving use cases.
>
> This is all further discussed in the following documents and issues,
> but you shouldn't feel responsible to read everything here:
>
> *
> https://docs.google.com/document/d/1BYQEi8xkXDAg9lxm3PaoMzEutuQAZi1r8Y0pLaFJQoo/edit#
> *
> https://chromium-review..googlesource.com/c/chromium/src/+/2226248/7#message-0a3efda5aff84770a1729422a5b26aeca3ee4e80 <https://chromium-review.googlesource.com/c/chromium/src/+/2226248/7#message-0a3efda5aff84770a1729422a5b26aeca3ee4e80>
> * https://github.com/WICG/webpackage/issues/583
> *
> https://github.com/WICG/webpackage/blob/master/explainers/navigation-to-unsigned-bundles.md#urls-for-bundle-components
> * https://lists.w3.org/Archives/Public/uri/2019Nov/0000.html

-- 
Mallory Knodel
CTO, Center for Democracy and Technology
gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780