[Wpack] About content-based origins

Martin Thomson <mt@lowentropy.net> Tue, 24 March 2020 00:34 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: wpack@ietfa.amsl.com
Delivered-To: wpack@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA69E3A0EA1 for <wpack@ietfa.amsl.com>; Mon, 23 Mar 2020 17:34:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=T7n1iZhC; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=qWpAo2qp
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dtc9756HEs1I for <wpack@ietfa.amsl.com>; Mon, 23 Mar 2020 17:34:45 -0700 (PDT)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CED343A0EAE for <wpack@ietf.org>; Mon, 23 Mar 2020 17:34:44 -0700 (PDT)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 6AFC05C0102 for <wpack@ietf.org>; Mon, 23 Mar 2020 20:34:43 -0400 (EDT)
Received: from imap2 ([10.202.2.52]) by compute2.internal (MEProxy); Mon, 23 Mar 2020 20:34:43 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:date:from:to:subject:content-type; s= fm1; bh=+vuDEX5VMQNmeiqwiWgiXQLD8z/u63LPUCx1z3li9IE=; b=T7n1iZhC YX+7yuJKIuwcnzno7HqEyZol8VaXD9aY8no1+/VVdot0reuLX3MeJS3bgjWhh1J5 jIInAw9JnI1Oa3467DaFKRtckdM5U39QGAdDuf2BF85agAFCjn0vKlNOkcS0chCh 6N+sjlTFLImU+NbGuzjWn1nhkcutaPM/trgi70qXCn3beycykspoU8LITY7Dl22X zh3HKbOv6o8dYIV2i5hzx6Kiy8sP2vxcFZeQWa21Cetwd8Xayhy8RfHPPq6Cj8ZI hbJN8OOJ78uZ9pLKoHAfBN0W5nD4jDdE7sLaOYkmdSJ/EgSZSmjfgZsVtaVqfpBI HXwWfPBGWuyxDw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=+vuDEX5VMQNmeiqwiWgiXQLD8z/u6 3LPUCx1z3li9IE=; b=qWpAo2qpL2pGW4xGgmXuNcSz4ZAtM5NH3+O/pTui9pbu9 uGlvmkRwK0w1eBC2v96tsl6/9hxQH8QdpdLFSpfRitUhBCQ9xrbPemCv24Q1wVy+ P/qgD9b7IroEd7ELeSLvXM4BIzl3c2OiaZBwE3s/PSoG1VU7HKZZBKOwz9GeqtIi LmASYPfaIpEOZz2qcCpcWKoi8dnSSNbxomHWLfHgS8dvxNLEDjFiMR5VVMWOmb14 L4BCbJhEwoKTwMSQ8OyVmLZz+r2Ww4GoR3Ja7J+tcQ0SMrCvVpaZPyfelTSpaYwp VQiKiVBWFE8jMOEIGUJXj/ty0yY8gMu7Py8OLEC3g==
X-ME-Sender: <xms:o1V5XoLSezIAqdxvFMZFDkxr_-kdo3ofKa5zoZ4WpfBHWxEhvPtODA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedugedrudegledgvdduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucgoufhushhpvggtthffohhmrghinhculdegledmne cujfgurhepofgfggfkfffhvffutgesthdtredtreertdenucfhrhhomhepfdforghrthhi nhcuvfhhohhmshhonhdfuceomhhtsehlohifvghnthhrohhphidrnhgvtheqnecuffhomh grihhnpehivghtfhdrohhrghdpghhithhhuhgsrdhiohenucevlhhushhtvghrufhiiigv pedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmtheslhhofigvnhhtrhhophihrdhnvg ht
X-ME-Proxy: <xmx:o1V5Xonlw6hiwvc0TlEm6oP3Slhgp-wCVt59_Qe8rEailBSXXYxoRw> <xmx:o1V5XqJnUPDr7z1zocKlYRVW0SD0-8hNiMQEyPaMUMpF0JddI-y0zA> <xmx:o1V5XlbTWsFeWtv8Noa-VzKGVn4xhpMPOfSmzQsuYfqXtEFexBYaEQ> <xmx:o1V5XkFZwxs6rnbwbEQ7pd5myI1G3dlovG3CLD6svBPGS6aUGWo4Zw>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id E7634E00C9; Mon, 23 Mar 2020 20:34:42 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-1021-g152deaf-fmstable-20200319v1
Mime-Version: 1.0
Message-Id: <260dfc2f-8399-483e-859d-08f92821c823@www.fastmail.com>
Date: Tue, 24 Mar 2020 11:34:19 +1100
From: Martin Thomson <mt@lowentropy.net>
To: wpack@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/wpack/vcxWz3krnV_dcQmj94VKUg-P6iw>
Subject: [Wpack] About content-based origins
X-BeenThere: wpack@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Web Packaging <wpack.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/wpack>, <mailto:wpack-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wpack/>
List-Post: <mailto:wpack@ietf.org>
List-Help: <mailto:wpack-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/wpack>, <mailto:wpack-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Mar 2020 00:34:49 -0000

Ted's note prompted me to send a much-belated announcement (sorry folks, I forgot).

The draft is here:
https://tools.ietf.org/html/draft-thomson-wpack-content-origin-00

A nicer version here:
https://martinthomson.github.io/wpack-content/draft-thomson-wpack-content-origin.html

This approach could a dramatically different approach to addressing the use cases set out in our charter.

In short, this aims to address the core question of how offline content might *ultimately* be attributed to a web origin in a fundamentally different way.  There are two key concepts:

1. Content is given its own origin, using a new system for identification.

2. A target origin can "accept" content and state from one of these new origins.

There are a lot of details here (read the draft), but the major advantage I see is that you don't have to make an offline decision about authority, and that means you can be offline for much longer (lifting the 7 day limit).

What it does have in common with signed exchanges approach is the need for a bundling format, but in its current form it is less dependent on the details of the format.  That might allow that to be simpler, but I'm sure that the need to mint new identifier types will more than make up for any slack there.

The draft is quite rough.  I'm sure that it has the remnants of a few bad ideas still hanging around.  Ask questions if you think something is unclear.