Re: [Wpack] Call for adoption of draft-yasskin-wpack-bundled-exchanges

Daniel Ehrenberg <littledan@igalia.com> Mon, 22 March 2021 22:20 UTC

Return-Path: <littledan@igalia.com>
X-Original-To: wpack@ietfa.amsl.com
Delivered-To: wpack@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 101CD3A13F6 for <wpack@ietfa.amsl.com>; Mon, 22 Mar 2021 15:20:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.199
X-Spam-Level:
X-Spam-Status: No, score=-0.199 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=igalia.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A9E-QSmKl0t5 for <wpack@ietfa.amsl.com>; Mon, 22 Mar 2021 15:20:35 -0700 (PDT)
Received: from fanzine.igalia.com (fanzine.igalia.com [178.60.130.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F06E3A13F5 for <wpack@ietf.org>; Mon, 22 Mar 2021 15:20:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=igalia.com; s=20170329; h=Content-Transfer-Encoding:Content-Type:Message-ID:References:In-Reply-To:Subject:Cc:To:From:Date:MIME-Version; bh=QNitBY4QgiwDTdB0U/9MGsDuGdieU7szo3f/qEBZ+5A=; b=jqDALEEvQ3pKv1YUPVH09Y9koUk+IIRbq/FXEo6y6aRZwSr4jNVO7lir7u69J0QMi4UGhQopP2sI4WxjTlShzAmaLVPvunL3CiCIGsKOKDfUNdOhPqwJ8hw/IH3L3INmQIY45VX8dItQ/STozxmtNfkKAGtUJHi7fcQD72XdZDP1xksprNaiEm1BHVpB4kY1nI5PZpI41kTPxMhsInntz50U4UO9i5l0pqX7FGXo6fkodUgOeUFt/zQW3EMJ0losSMMHIwj2Z/VP0bqEF0wWcvMyjAE7U7zgMtOUpWaRISxKRWoDYzm84AHdTUBc4wvnBK2eMpgA9It8+tepwFYGTA==;
Received: from maestria.local.igalia.com ([192.168.10.14] helo=mail.igalia.com) by fanzine.igalia.com with esmtps (Cipher TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim) id 1lOSuU-0000fb-Pn; Mon, 22 Mar 2021 23:20:30 +0100
Received: from webmail.service.igalia.com ([192.168.21.45]) by mail.igalia.com with esmtps (Cipher TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim) id 1lOSuR-00054j-UG; Mon, 22 Mar 2021 23:20:30 +0100
Received: from localhost ([127.0.0.1] helo=webmail.igalia.com) by webmail.service.igalia.com with esmtp (Exim 4.94) (envelope-from <littledan@igalia.com>) id 1lOSuM-0002HF-FZ; Mon, 22 Mar 2021 23:20:22 +0100
MIME-Version: 1.0
Date: Mon, 22 Mar 2021 23:20:22 +0100
From: Daniel Ehrenberg <littledan@igalia.com>
To: Jeffrey Yasskin <jyasskin@chromium.org>
Cc: Sean Turner <sean@sn3rd.com>, Mark Nottingham <mnot@mnot.net>, WPACK List <wpack@ietf.org>
In-Reply-To: <CANh-dXmY_YJU_pHZg-e3E8WYdC_EA+SbgL5_N1C6qPcpwHqGig@mail.gmail.com>
References: <0C5B1FE3-AB3E-4074-AED9-93DD10B89BFD@sn3rd.com> <3CF5CFC6-57AA-42AB-A42F-260DF8DA159B@mnot.net> <4896A451-ECFE-482F-B672-E6B257DEE521@sn3rd.com> <CANh-dXmY_YJU_pHZg-e3E8WYdC_EA+SbgL5_N1C6qPcpwHqGig@mail.gmail.com>
User-Agent: Roundcube Webmail/1.4.11
Message-ID: <0b73a28b79855d59278448d2debea672@igalia.com>
X-Sender: littledan@igalia.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/wpack/XWvCRA0MmWdJukpvkxmTUoEsgOk>
Subject: Re: [Wpack] Call for adoption of draft-yasskin-wpack-bundled-exchanges
X-BeenThere: wpack@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Web Packaging <wpack.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/wpack>, <mailto:wpack-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wpack/>
List-Post: <mailto:wpack@ietf.org>
List-Help: <mailto:wpack-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/wpack>, <mailto:wpack-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Mar 2021 22:20:41 -0000

I'd have an easier time supporting the adoption of the use cases
document if it did not prioritize use cases which depend on signed
bundles. Maybe we should split the use cases document, and produce one
which focuses only on unsigned bundle use cases and requirements. This
could clarify the more limited issues in terms of privacy and security
for the unsigned case. In addition to expressing the importance of
subresource loading, I'd add further use cases which are not currently
reflected (around tooling and serving conventions, which may have the
biggest developer experience impact, even if it's not something that
clients will receive directly).

I will be happy to draft these proposals for changes, though it will
probably take me a few months to find the time to do so properly. I'd
like to learn more about how to write the kinds of use case documents
that IETF tends to produce. Could anyone recommend any examples to
reference?

Thanks,
Dan

On 2021-03-22 22:57, Jeffrey Yasskin wrote:
> My understanding of the charter discussion was that we expected to
> need separate documents on privacy and security because
> signing-as-other-origins has such a big effect on the web origin
> model. It could make sense to hold up adoption of the signing document
> on those drafts being started.
> 
> However, bundling without signing has a more localized effect, which
> should fit in the single document's privacy and security
> considerations section. We should continue to improve that section in
> the same way we plan to improve the rest of the draft.
> 
> A use cases document [1] is ready for adoption. It has, historically,
> not attracted much discussion from the people who asked me to write
> it, but if having it adopted by the WG would attract more interest,
> I'm all for it. I see Daniel also has some concrete changes to
> propose, I think especially around promoting
> https://wicg.github.io/webpackage/draft-yasskin-wpack-use-cases.html#name-subresource-bundling
> to "essential". I think it's easier to tell whether the WG supports
> that sort of change after we adopt the document.
> 
> Jeffrey
> 
> On Fri, Mar 19, 2021 at 7:51 PM Sean Turner <sean@sn3rd.com> wrote:
> 
>> Mark,
>>
>> You make a good point about the need for the additional I-Ds,
>> because the charter’s milestones actually call out 3 other I-Ds
>> that address the signing mechanism as well as privacy and security.
>> To be blunt, these other I-Ds have not yet been submitted. There was
>> some security-related text in the bundle document that was removed
>> and Martin Thomson had a content-based origin I-D. I am cautiously
>> optimistic that getting the bundling I-D adopted will encourage the
>> other I-Ds to surface because I strongly suspect that progress on
>> the bundling I-D is likely to grind to a halt without those I-Ds. I
>> do not think that the milestones, which are also a good year out of
>> date at this point, should hold us back from adopting the bundling
>> I-D. But, the entire set of I-Ds is required- it is the pact we made
>> the IESG to get to done.
>>
>> spt
>>
>>> On Mar 16, 2021, at 00:59, Mark Nottingham <mnot@mnot.net> wrote:
>>>
>>> Hi Sean,
>>>
>>> I don't have access to minutes of the meeting yet, so this may
>> have already been answered --
>>>
>>> The charter says that a use cases document, a privacy analysis
>> document, and a security analysis document will be adopted at the
>> same time as the bundling document. What's their status?
>>>
>>> Cheers,
>>>
>>>
>>>> On 16 Mar 2021, at 11:53 am, Sean Turner <sean@sn3rd.com> wrote:
>>>>
>>>> Based on interest expressed at IETF 110, this email starts the
>> call for adoption of draft-yasskin-wpack-bundled-exchanges. The I-D
>> can be found here:
>>>>
>>>>
>>
> https://datatracker.ietf.org/doc/draft-yasskin-wpack-bundled-exchanges/
>>>>
>>>> This adoption call will run until March 30, 2021 at 2359 UTC.
>> Please indicate whether or not you would like to see this I-D
>> adopted as a WG item. Note that this is an adoption call for the
>> draft as a starting point for the bundle format.
>>>>
>>>> Thanks,
>>>>
>>>> spt (for the chairs)
>>>> _______________________________________________
>>>> Wpack mailing list
>>>> Wpack@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/wpack
>>>
>>> --
>>> Mark Nottingham   https://www.mnot.net/
>>>
>>
>> _______________________________________________
>> Wpack mailing list
>> Wpack@ietf.org
>> https://www.ietf.org/mailman/listinfo/wpack
>  
> 
> Links:
> ------
> [1] https://tools.ietf.org/html/draft-yasskin-wpack-use-cases-01
> _______________________________________________
> Wpack mailing list
> Wpack@ietf.org
> https://www.ietf.org/mailman/listinfo/wpack