RE: Last Call: draft-nottingham-site-meta (Defining Well-Known URIs) to Proposed Standard

[Eran Hammer-Lahav <eran at hueniverse.com>]

> -----Original Message-----
> From: apps-discuss-bounces at ietf.org [mailto:apps-discuss-
> bounces at ietf.org] On Behalf Of Thomson, Martin
> Sent: Monday, October 19, 2009 7:16 PM
> To: barryleiba at computer.org; Mark Nottingham
> Cc: apps-discuss at ietf.org
> Subject: RE: Last Call: draft-nottingham-site-meta (Defining Well-Known
> URIs) to Proposed Standard
> 
> This would be quite helpful - if a client modifies behaviour based on
> what it understands a server to "support", then this would facilitate
> detection of that support.
> 
> With respect to Eran's concerns, it's probably not necessary to roll
> the two concepts together.  A second document would let us resolve
> those concerns without affecting the immediate usefulness of the base
> well-known.

I would be happy to help/edit such a separate proposal if people are willing to submit use cases. This can be very simple or very complex.

> Along with that, is there any desire to attempt to register any
> examples in the registry?  Moving robots.txt and favicon.ico here seems
> logical.

"Moving" them is wishful thinking at best. I can poke around at Google and Yahoo! to see if the search teams would even want to think about it but it would be nothing but dead records in the registry. And dead records tend to make the whole registry look bad.

I have just submitted (an incomplete) proposal for /.well-known/host-meta which will be published (hopefully) shortly after the registry is set up.

EHL

> > -----Original Message-----
> > From: apps-discuss-bounces at ietf.org [mailto:apps-discuss-
> > bounces at ietf.org] On Behalf Of Barry Leiba
> > Sent: Tuesday, 20 October 2009 12:12 PM
> > To: Mark Nottingham
> > Cc: apps-discuss at ietf.org
> > Subject: Re: Last Call: draft-nottingham-site-meta (Defining Well-
> Known
> > URIs) to Proposed Standard
> >
> > > Do people find this interesting? To specify it, we'd just need to
> > describe a
> > > format (e.g., a space-separated list of tokens).
> > >
> > >> Depending on how the server is configured a query to
> > >> http://example.com/.well-known/ might return the list of files in
> > that
> > >> directory. It might be nice to actually encourage that. The only
> > downside I
> > >> see is that it might make it easier for an attacker to find out
> what
> > you run
> > >> and know what to exploit, but without that the attacker could
> still
> > play 20
> > >> questions and find out.
> >
> > I like it.  I understand Eran's issue, but I don't see the point in
> > waiting before making the specification.
> >
> > Barry
> > _______________________________________________
> > Apps-Discuss mailing list
> > Apps-Discuss at ietf.org
> > https://www.ietf.org/mailman/listinfo/apps-discuss
> 
> _______________________________________________
> Apps-Discuss mailing list
> Apps-Discuss at ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss