Permalink
Find file
Fetching contributors…
Cannot retrieve contributors at this time
15364 lines (15363 sloc) 735 KB
[
[
{
"body": "It would be better to define the 'rs' (record size) parameter as the size of each ciphertext record (including the 16 byte tag for AEAD_AES_128_GCM).\r\n\r\nThat way a receiver can split the body into records without needing to add the algorithm-specific tag length. Then pass the bytes to a crypto library that does know details such as the tag length for a given alg.\r\n\r\nThis spec doesn't absolutely need alg agility as other algs would define their own content-encoding label. But it would be cleaner (& safer) if future algs could follow exactly the same pattern and same body format by simply defining a new content-encoding label. The format is very close, with the need to add 16 to 'rs' being the only wart.",
"labels": [],
"locked": false,
"title": "Record size (rs) should be of ciphertext, not padded-plaintext",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/274",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/274/labels{/name}",
"created_at": "2016-12-07T07:37:43Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/274/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/274/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/274",
"comments": 0,
"number": 274,
"updated_at": "2016-12-07T07:37:43Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/manger/following{/other_user}",
"events_url": "https://api.github.com/users/manger/events{/privacy}",
"organizations_url": "https://api.github.com/users/manger/orgs",
"url": "https://api.github.com/users/manger",
"gists_url": "https://api.github.com/users/manger/gists{/gist_id}",
"html_url": "https://github.com/manger",
"subscriptions_url": "https://api.github.com/users/manger/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/3963658?v=3",
"repos_url": "https://api.github.com/users/manger/repos",
"received_events_url": "https://api.github.com/users/manger/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/manger/starred{/owner}{/repo}",
"site_admin": false,
"login": "manger",
"type": "User",
"id": 3963658,
"followers_url": "https://api.github.com/users/manger/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 193978191
},
{
"labels": [],
"number": 273,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"id": 190613822,
"title": "Remove Crypto-Key header field",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/273",
"diff_url": "https://github.com/httpwg/http-extensions/pull/273.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/273",
"patch_url": "https://github.com/httpwg/http-extensions/pull/273.patch"
},
"comments": 1,
"state": "open",
"body": "Closes #265, #210.",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/273/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/273/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/273/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/273",
"updated_at": "2016-11-25T19:39:34Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/273",
"created_at": "2016-11-21T04:05:54Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"number": 272,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"id": 190612837,
"title": "Advice on padding strategy",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/272",
"diff_url": "https://github.com/httpwg/http-extensions/pull/272.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/272",
"patch_url": "https://github.com/httpwg/http-extensions/pull/272.patch"
},
"comments": 0,
"state": "open",
"body": "Closes #260 ",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/272/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/272/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/272/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/272",
"updated_at": "2016-11-21T03:55:22Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/272",
"created_at": "2016-11-21T03:55:22Z",
"assignees": []
},
{
"body": "A few things I noticed / need to ask:\r\n\r\n* Is the Abstract still suitable? I note it doesn't mention 5987.\r\n\r\n* Is the intended status really Internet Standard? Given that 2026 requires \"a high degree of technical maturity and by a generally held belief that the specified protocol or service provides significant benefit to the Internet community\" and in light of the doubt around the use of this format, it seems like Proposed Standard might be more appropriate. Also, we'd need to document the implementations.\r\n\r\n* @reschke - If you have direct, personal knowledge of any IPR related to this document, has it already been disclosed?",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/5987bis",
"color": "fbca04",
"default": false,
"id": 267140103,
"name": "5987bis"
}
],
"locked": false,
"title": "5987bis writeup",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/271",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/271/labels{/name}",
"created_at": "2016-11-21T03:00:00Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/271/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/271/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/271",
"comments": 1,
"number": 271,
"updated_at": "2016-11-21T06:54:37Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 190607567
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 270,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"id": 190604231,
"title": "Don't allow clients to send http and https requests coalesced.",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/270",
"diff_url": "https://github.com/httpwg/http-extensions/pull/270.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/270",
"patch_url": "https://github.com/httpwg/http-extensions/pull/270.patch"
},
"comments": 1,
"state": "open",
"body": "This is kinda silly, but it seems like adding support for coalescing is\r\nsomething we could fix later.\r\n\r\nCloses #269 with the nuclear option.",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/270/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/270/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/270/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/270",
"updated_at": "2016-11-21T22:04:10Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/270",
"created_at": "2016-11-21T02:23:20Z",
"assignees": []
},
{
"body": "Can we coalesce http and https? The implication from everything we've said is \"yes\", but Erik remains reluctant.",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"locked": false,
"title": "mixed schemes",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/269",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/269/labels{/name}",
"created_at": "2016-11-21T02:22:38Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/269/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/269/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/269",
"comments": 0,
"number": 269,
"updated_at": "2016-11-21T02:22:38Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 190604170
},
{
"body": "Current spec is using Golomb-coded sets as the algorithm to create digests.\r\n\r\nWhile they show great space-efficiency, Golomb-coded sets do not enable O(1) removal from the digest, which means from a browser implementation perspective, the browser would have to calculate the hash for each host upon connection creation.\r\n\r\nThat poses a couple of issues from an implementation perspective:\r\n\r\n* Calculating the hash on each connection establishment may be expensive. That part seems inherent to the algorithm and not likely to be optimized away.\r\n* Calculating the hash requires per-host indexing. That part is just a limitation of many current cache implementations.\r\n\r\nA cache digest algorithm that enables O(1) removal (as well as addition) to the digest would enable us to move away from those limitations:\r\n\r\n* Browsers can calculate a per-host digest once, then keep updating it as resources are added to the cache as well as when resources are removed from the cache. No need for per-host indexing.\r\n - In order to do that, browsers would need to persist digests along with the cache\r\n* Upon connection establishment, the browser can just send the ready-made digest to the server. Win!\r\n\r\nDuring the HTTPWS, counting bloom filters were mentioned as an O(1) removal algorithm, but they are extremely inefficient when it comes to space. (~4 times bigger than bloom filters)\r\n\r\nTurns out, [Cuckoo filters](https://www.cs.cmu.edu/~binfan/papers/login_cuckoofilter.pdf) enable O(1) removal while being more space efficient than bloom filters. While they are slightly bigger than Golomb-coded sets based digests, the cheaper runtime costs can make up for that deficiency.\r\n\r\n/cc @kazuho @mnot @cbentzel @mcmanus\r\n\r\n\r\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
}
],
"locked": false,
"title": "Enabling O(1) removal from digest",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/268",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/268/labels{/name}",
"created_at": "2016-11-17T12:55:53Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/268/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/268/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/268",
"comments": 9,
"number": 268,
"updated_at": "2016-11-21T03:50:54Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/yoavweiss/following{/other_user}",
"events_url": "https://api.github.com/users/yoavweiss/events{/privacy}",
"organizations_url": "https://api.github.com/users/yoavweiss/orgs",
"url": "https://api.github.com/users/yoavweiss",
"gists_url": "https://api.github.com/users/yoavweiss/gists{/gist_id}",
"html_url": "https://github.com/yoavweiss",
"subscriptions_url": "https://api.github.com/users/yoavweiss/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/786187?v=3",
"repos_url": "https://api.github.com/users/yoavweiss/repos",
"received_events_url": "https://api.github.com/users/yoavweiss/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/yoavweiss/starred{/owner}{/repo}",
"site_admin": false,
"login": "yoavweiss",
"type": "User",
"id": 786187,
"followers_url": "https://api.github.com/users/yoavweiss/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 190039700
},
{
"body": "In working on RFC5988bis, I'm referring to this spec, and finding it's difficult to talk about the concepts, because so much has been pared back.\r\n\r\nIn particular:\r\n\r\n* [ ] There isn't any prose reference to the \"*\" form of the attribute name; it only occurs in examples. One would assume that this is the normative way to invoke this encoding, but it isn't specified.\r\n* [ ] A distinct name for the encoding would help; right now, the best I can do is \"the encoding specified in RFC5987bis\".\r\n* [ ] The examples of how to use this in header specifications needs to be deeper.",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/5987bis",
"color": "fbca04",
"default": false,
"id": 267140103,
"name": "5987bis"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "Give us something to hang onto",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/267",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/267/labels{/name}",
"created_at": "2016-11-16T06:40:41Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/267/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/267/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/267",
"comments": 10,
"number": 267,
"updated_at": "2016-11-18T00:49:11Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 189607204
},
{
"body": "... occurs twice in the current draft, without much context. Should it be removed?",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/5987bis",
"color": "fbca04",
"default": false,
"id": 267140103,
"name": "5987bis"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "'parmname'",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/266",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/266/labels{/name}",
"created_at": "2016-11-16T06:33:04Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/266/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/266/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/266",
"comments": 1,
"number": 266,
"updated_at": "2016-11-17T00:43:40Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-17T00:43:40Z",
"assignees": [],
"id": 189605811
},
{
"body": "@ekr suggests that we remove this. This is probably justified by recent developments. Simplicity suggests that it is worth cutting as well.",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"locked": false,
"title": "Remove Crypto-Key",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/265",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/265/labels{/name}",
"created_at": "2016-11-15T04:43:29Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/265/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/265/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/265",
"comments": 0,
"number": 265,
"updated_at": "2016-11-15T04:43:36Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 189298782
},
{
"body": "(Originally misfiled at https://github.com/mnot/I-D/issues/204)\r\n\r\nI believe the algorithm may be improved to increase speed and reduce digest size.\r\n\r\n#### De-dupe URLs before hashing them\r\n\r\nWastes time sorting and skipping through the list in a later stage.\r\nInflates value of N, needlessly increasing size of the entire digest.\r\n\r\n#### Trim URL origin\r\n\r\nEvery URL has identical origin. Hashing this repetitive data is wasted effort.",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
}
],
"locked": false,
"title": "Overhead in cache digest algorithm",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/264",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/264/labels{/name}",
"created_at": "2016-11-13T15:40:28Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/264/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/264/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/264",
"comments": 1,
"number": 264,
"updated_at": "2016-11-21T03:51:00Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/sebdeckers/following{/other_user}",
"events_url": "https://api.github.com/users/sebdeckers/events{/privacy}",
"organizations_url": "https://api.github.com/users/sebdeckers/orgs",
"url": "https://api.github.com/users/sebdeckers",
"gists_url": "https://api.github.com/users/sebdeckers/gists{/gist_id}",
"html_url": "https://github.com/sebdeckers",
"subscriptions_url": "https://api.github.com/users/sebdeckers/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/78718?v=3",
"repos_url": "https://api.github.com/users/sebdeckers/repos",
"received_events_url": "https://api.github.com/users/sebdeckers/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/sebdeckers/starred{/owner}{/repo}",
"site_admin": false,
"login": "sebdeckers",
"type": "User",
"id": 78718,
"followers_url": "https://api.github.com/users/sebdeckers/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 188976670
},
{
"body": "Add Client hints support for the following:\r\n\r\n`Viewport-Color-Gamut`\r\nhttps://drafts.csswg.org/mediaqueries-4/#color-gamut\r\n\r\n`Viewport-Color-Profile`\r\nhttps://www.w3.org/TR/css-color-4/#at-ruledef-profile",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/client-hints",
"color": "fbca04",
"default": false,
"id": 290789441,
"name": "client-hints"
}
],
"locked": false,
"title": "Client hints: add support for hinting Display Gamut / Color Profile",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/263",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/263/labels{/name}",
"created_at": "2016-11-08T08:12:09Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/263/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/263/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/263",
"comments": 8,
"number": 263,
"updated_at": "2016-11-21T22:15:32Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/gunta/following{/other_user}",
"events_url": "https://api.github.com/users/gunta/events{/privacy}",
"organizations_url": "https://api.github.com/users/gunta/orgs",
"url": "https://api.github.com/users/gunta",
"gists_url": "https://api.github.com/users/gunta/gists{/gist_id}",
"html_url": "https://github.com/gunta",
"subscriptions_url": "https://api.github.com/users/gunta/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/657059?v=3",
"repos_url": "https://api.github.com/users/gunta/repos",
"received_events_url": "https://api.github.com/users/gunta/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/gunta/starred{/owner}{/repo}",
"site_admin": false,
"login": "gunta",
"type": "User",
"id": 657059,
"followers_url": "https://api.github.com/users/gunta/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 187927157
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 262,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-21T02:10:32Z",
"id": 186976913,
"title": "Exclude HTTP/1.1",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/262",
"diff_url": "https://github.com/httpwg/http-extensions/pull/262.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/262",
"patch_url": "https://github.com/httpwg/http-extensions/pull/262.patch"
},
"comments": 1,
"state": "closed",
"body": "I tried to make this work, but @mcmanus is right: this is entirely a transport decision and given that our best option was to violate a MUST in RFC 7230, that's too hard. This just says that HTTP/1.1 is no good because we can't include the scheme (because RFC 7230 says we can't). I almost made this h2-specific, but then remembered that there might be another protocol that has favourable properties.",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/262/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/262/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/262/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/262",
"updated_at": "2016-11-21T02:10:32Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/262",
"created_at": "2016-11-03T04:28:33Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 261,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-21T02:10:54Z",
"id": 186835922,
"title": "https origins are no longer relevant for http-opportunistic resources",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/261",
"diff_url": "https://github.com/httpwg/http-extensions/pull/261.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/261",
"patch_url": "https://github.com/httpwg/http-extensions/pull/261.patch"
},
"comments": 0,
"state": "closed",
"body": "",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/261/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/261/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/261/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/261",
"updated_at": "2016-11-21T02:10:54Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/261",
"created_at": "2016-11-02T15:36:08Z",
"assignees": []
},
{
"body": "We should provide some advice, along the lines of:\r\n\r\n1. padding is hard\r\n2. padding doesn't stop side channels from processing data\r\n3. should pad the entire message\r\n4. might want to distribute padding evenly",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"locked": false,
"title": "padding is hard",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/260",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/260/labels{/name}",
"created_at": "2016-11-02T03:16:13Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/260/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/260/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/260",
"comments": 0,
"number": 260,
"updated_at": "2016-11-02T03:16:13Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 186702531
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"number": 259,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-15T04:45:31Z",
"id": 186689036,
"title": "Fix examples",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/259",
"diff_url": "https://github.com/httpwg/http-extensions/pull/259.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/259",
"patch_url": "https://github.com/httpwg/http-extensions/pull/259.patch"
},
"comments": 2,
"state": "closed",
"body": "Somehow I managed to mess up the examples royally. They were kinda valid, but the rs and id fields didn't match the rest of the example.",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/259/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/259/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/259/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/259",
"updated_at": "2016-11-15T04:45:31Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/259",
"created_at": "2016-11-02T01:13:44Z",
"assignees": []
},
{
"labels": [],
"number": 258,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-01T12:24:34Z",
"id": 186502995,
"title": "remove bogus \"!\"",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/258",
"diff_url": "https://github.com/httpwg/http-extensions/pull/258.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/258",
"patch_url": "https://github.com/httpwg/http-extensions/pull/258.patch"
},
"comments": 2,
"state": "closed",
"body": "it leads to kramdown warnings (\"overwriting RFC....\").",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/258/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/258/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/258/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/258",
"updated_at": "2016-11-02T03:25:19Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/258",
"created_at": "2016-11-01T10:31:39Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 257,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-03T04:12:42Z",
"id": 186464516,
"title": "Try to explain and justify the use of the absolute form in HTTP/1.1",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/257",
"diff_url": "https://github.com/httpwg/http-extensions/pull/257.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/257",
"patch_url": "https://github.com/httpwg/http-extensions/pull/257.patch"
},
"comments": 0,
"state": "closed",
"body": "Based on the discussion on-list, the requirement to use the absolute form is a little hard. This tries to justify it on the basis that the secure server is acting as a proxy. Maybe that's dishonest, but I think that it's accurate. I would rather finagle this than have an experimental document update a standards-track one.",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/257/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/257/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/257/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/257",
"updated_at": "2016-11-03T04:12:42Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/257",
"created_at": "2016-11-01T05:52:24Z",
"assignees": []
},
{
"body": "Perhaps we should add an appendix to help people do this?",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
}
],
"locked": false,
"title": "Advice for ServiceWorker implementation",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/256",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/256/labels{/name}",
"created_at": "2016-10-31T23:50:02Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/256/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/256/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/256",
"comments": 1,
"number": 256,
"updated_at": "2016-11-13T15:37:34Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 186430948
},
{
"body": "We need to evaluate and possibly pare down / adjust the flags in the frame, based upon real-world use cases.\r\n\r\nSee Kazuho's evaluation:\r\n https://github.com/HTTPWorkshop/workshop2016/blob/master/talks/cache-digests.pdf",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
}
],
"locked": false,
"title": "Flags",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/255",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/255/labels{/name}",
"created_at": "2016-10-31T23:26:57Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/255/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/255/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/255",
"comments": 0,
"number": 255,
"updated_at": "2016-10-31T23:26:57Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 186427595
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 254,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-01T05:44:29Z",
"id": 186180370,
"title": "Simplify opportunistic encryption",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/254",
"diff_url": "https://github.com/httpwg/http-extensions/pull/254.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/254",
"patch_url": "https://github.com/httpwg/http-extensions/pull/254.patch"
},
"comments": 0,
"state": "closed",
"body": "We've been circling an answer to this for a while. The entire gamut of possible solutions is broad, and we haven't had much luck in reaching clarity here.\n\nOne the one end of the scale, it should be perfectly OK to send a request for an `http` origin over an authenticated TLS connection. But we still have the (entirely legitimate) concern there is that some servers might get themselves confused by this.\n\nThe other end of the scale is the bells and whistles JSON stuff. @mcmanus seemed OK with this based on his implementation experience, but it is a little complicated. We found too many corner cases for me to be happy that it implementations wouldn't end up busted. And now that we insist on authentication for the server, many of the features didn't make sense.\n\nWe've also considered an HTTP/2 setting. That's appealing, but it does limit the applicability a little.\n## This proposal\n\nThis change aims more to the conservative end of that scale. It keeps the `/.well-known/` resource, but simplifies it, reducing it to a flat list of origins. The client only needs to acquire this from the authenticated server.\n\nThis doesn't defend against Alt-Svc attacks mounted by attackers with the ability to both send header fields and run an authenticated server, but we're in a very strange place if this is the sort of capabilities we ascribe to our attackers in our threat models.\n## Other changes\n\nI've explicitly added `http/1.1` here. I believe that's reflective of consensus, but that part is easy to revert.\n\nThe text about client certificates is now clearer.\n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/254/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/254/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/254/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/254",
"updated_at": "2016-11-01T05:44:29Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/254",
"created_at": "2016-10-31T01:00:24Z",
"assignees": []
},
{
"body": "Just a reminder to update the list since we've had a fair bit of new input on this recently.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"locked": false,
"title": "Update acknowledgments",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/253",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/253/labels{/name}",
"created_at": "2016-10-30T21:19:01Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/253/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/253/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/253",
"comments": 1,
"number": 253,
"updated_at": "2016-10-30T23:57:27Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-30T23:57:27Z",
"assignees": [],
"id": 186165094
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"number": 252,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-01T05:44:53Z",
"id": 186073026,
"title": "Remove Encryption header field",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/252",
"diff_url": "https://github.com/httpwg/http-extensions/pull/252.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/252",
"patch_url": "https://github.com/httpwg/http-extensions/pull/252.patch"
},
"comments": 2,
"state": "closed",
"body": "This moves the values that were in the Encryption header field to\nthe start of the payload. This provides a meagre efficiency gain\nas well as removing the need to have two correlated header fields.\n\nThis should go most of the way to address WGLC comments.\n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/252/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/252/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/252/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/252",
"updated_at": "2016-11-01T05:44:53Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/252",
"created_at": "2016-10-29T11:12:23Z",
"assignees": []
},
{
"body": "",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/jfv",
"color": "fbca04",
"default": false,
"id": 397643745,
"name": "jfv"
}
],
"locked": false,
"title": "sender requirements for JSON need to address control characters in strings",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/251",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/251/labels{/name}",
"created_at": "2016-10-27T09:37:19Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/251/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/251/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/251",
"comments": 1,
"number": 251,
"updated_at": "2016-10-27T10:32:41Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-27T10:32:41Z",
"assignees": [],
"id": 185619218
},
{
"labels": [],
"number": 250,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-20T06:17:36Z",
"id": 184093756,
"title": "clarify Accept-CH",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/250",
"diff_url": "https://github.com/httpwg/http-extensions/pull/250.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/250",
"patch_url": "https://github.com/httpwg/http-extensions/pull/250.patch"
},
"comments": 2,
"state": "closed",
"body": "See\nhttps://lists.w3.org/Archives/Public/ietf-http-wg/2016OctDec/0146.html\n\n@reschke ptal. \n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/250/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/250/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/250/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/250",
"updated_at": "2016-10-20T06:17:43Z",
"user": {
"following_url": "https://api.github.com/users/igrigorik/following{/other_user}",
"events_url": "https://api.github.com/users/igrigorik/events{/privacy}",
"organizations_url": "https://api.github.com/users/igrigorik/orgs",
"url": "https://api.github.com/users/igrigorik",
"gists_url": "https://api.github.com/users/igrigorik/gists{/gist_id}",
"html_url": "https://github.com/igrigorik",
"subscriptions_url": "https://api.github.com/users/igrigorik/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/10652?v=3",
"repos_url": "https://api.github.com/users/igrigorik/repos",
"received_events_url": "https://api.github.com/users/igrigorik/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/igrigorik/starred{/owner}{/repo}",
"site_admin": false,
"login": "igrigorik",
"type": "User",
"id": 10652,
"followers_url": "https://api.github.com/users/igrigorik/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/250",
"created_at": "2016-10-19T22:48:48Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/encryption",
"color": "fbca04",
"default": false,
"id": 302951285,
"name": "encryption"
}
],
"number": 249,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-01T05:46:30Z",
"id": 183861642,
"title": "Julian ec review",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/249",
"diff_url": "https://github.com/httpwg/http-extensions/pull/249.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/249",
"patch_url": "https://github.com/httpwg/http-extensions/pull/249.patch"
},
"comments": 1,
"state": "closed",
"body": "I think that these are all editorial.\n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/249/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/249/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/249/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/249",
"updated_at": "2016-11-01T05:46:30Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/249",
"created_at": "2016-10-19T04:12:16Z",
"assignees": []
},
{
"body": "Firefox and Tor Browser are introducing an [option](https://www.torproject.org/projects/torbrowser/design/#idp55056352) to \"double-key\" cookies by (origin-domain|first-party-domain). (The first-party domain is defined as domain of the top-level document, visible to the user as the domain in the URL bar at the top of the browser.)\n\nWith double keying, it is possible for third-party cookies to be stored and retrieved, these third-party cookies cannot be used for tracking across websites.\n\nI think this policy is notable in that it keeps third-party cookies enabled but also prevents tracking. Thus third-party cookies function properly for many use cases. I would like to suggest adding this policy to the discussion of examples in RFC6265 section 7.1, \"Third-party cookies.\" After the sentence, \n\n> Others refuse to process the Set-Cookie header in responses to third-party requests.\n\nit might be of helpful to add something like\n\n> Still others store third-party cookies loaded by different first-party domains into separate cookie databases, to prevent cross-site tracking.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "[6265bis] Add double-keying policy example to \"Third-party cookies\" section",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/248",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/248/labels{/name}",
"created_at": "2016-10-12T05:41:53Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/248/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/248/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/248",
"comments": 6,
"number": 248,
"updated_at": "2016-11-24T19:36:06Z",
"assignee": {
"following_url": "https://api.github.com/users/mikewest/following{/other_user}",
"events_url": "https://api.github.com/users/mikewest/events{/privacy}",
"organizations_url": "https://api.github.com/users/mikewest/orgs",
"url": "https://api.github.com/users/mikewest",
"gists_url": "https://api.github.com/users/mikewest/gists{/gist_id}",
"html_url": "https://github.com/mikewest",
"subscriptions_url": "https://api.github.com/users/mikewest/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/1497?v=3",
"repos_url": "https://api.github.com/users/mikewest/repos",
"received_events_url": "https://api.github.com/users/mikewest/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mikewest/starred{/owner}{/repo}",
"site_admin": false,
"login": "mikewest",
"type": "User",
"id": 1497,
"followers_url": "https://api.github.com/users/mikewest/followers"
},
"state": "open",
"user": {
"following_url": "https://api.github.com/users/arthuredelstein/following{/other_user}",
"events_url": "https://api.github.com/users/arthuredelstein/events{/privacy}",
"organizations_url": "https://api.github.com/users/arthuredelstein/orgs",
"url": "https://api.github.com/users/arthuredelstein",
"gists_url": "https://api.github.com/users/arthuredelstein/gists{/gist_id}",
"html_url": "https://github.com/arthuredelstein",
"subscriptions_url": "https://api.github.com/users/arthuredelstein/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/355566?v=3",
"repos_url": "https://api.github.com/users/arthuredelstein/repos",
"received_events_url": "https://api.github.com/users/arthuredelstein/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/arthuredelstein/starred{/owner}{/repo}",
"site_admin": false,
"login": "arthuredelstein",
"type": "User",
"id": 355566,
"followers_url": "https://api.github.com/users/arthuredelstein/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [
{
"following_url": "https://api.github.com/users/mikewest/following{/other_user}",
"events_url": "https://api.github.com/users/mikewest/events{/privacy}",
"organizations_url": "https://api.github.com/users/mikewest/orgs",
"url": "https://api.github.com/users/mikewest",
"gists_url": "https://api.github.com/users/mikewest/gists{/gist_id}",
"html_url": "https://github.com/mikewest",
"subscriptions_url": "https://api.github.com/users/mikewest/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/1497?v=3",
"repos_url": "https://api.github.com/users/mikewest/repos",
"received_events_url": "https://api.github.com/users/mikewest/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mikewest/starred{/owner}{/repo}",
"site_admin": false,
"login": "mikewest",
"type": "User",
"id": 1497,
"followers_url": "https://api.github.com/users/mikewest/followers"
}
],
"id": 182440184
},
{
"body": "1) \"The permanent message header field registry (see [RFC3864]) has been updated with the following registrations.\" -> \"The permanent message header field registry (see [RFC3864]) needs to be updated with the following registrations.\"\n\n2) Remove the entries related to Set-Cookie2.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "need to update IANA section",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/247",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/247/labels{/name}",
"created_at": "2016-10-11T09:53:34Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/247/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/247/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/247",
"comments": 0,
"number": 247,
"updated_at": "2016-10-12T07:53:14Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-12T07:53:14Z",
"assignees": [],
"id": 182222085
},
{
"body": "FWIW, I believe this change:\n\nOld:\n\n token = <token, defined in [RFC2616], Section 2.2>\n\nNew:\n\n token = token\n ; defined in [RFC2616], Section 2.2\n\nis a bad idea; it makes the ABNF invalid.\n\n(similar changes have been made to other imports)\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
}
],
"locked": false,
"title": "broken ABNF",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/246",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/246/labels{/name}",
"created_at": "2016-10-11T09:46:52Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/246/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/246/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/246",
"comments": 0,
"number": 246,
"updated_at": "2016-10-12T07:53:14Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-12T07:53:14Z",
"assignees": [],
"id": 182220545
},
{
"body": "",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
}
],
"locked": false,
"title": "document needs a \"Changes from RFC 6265\" appendix.",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/245",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/245/labels{/name}",
"created_at": "2016-10-11T09:46:13Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/245/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/245/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/245",
"comments": 0,
"number": 245,
"updated_at": "2016-10-11T09:46:13Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 182220402
}
],
[
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
}
],
"number": 244,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"id": 182217890,
"title": "incorrect IPR",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/244",
"diff_url": "https://github.com/httpwg/http-extensions/pull/244.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/244",
"patch_url": "https://github.com/httpwg/http-extensions/pull/244.patch"
},
"comments": 0,
"state": "open",
"body": "we can't change the IPR clause from RFC 6265\n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/244/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/244/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/244/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/244",
"updated_at": "2016-10-11T09:34:46Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/244",
"created_at": "2016-10-11T09:34:46Z",
"assignees": []
},
{
"body": "From Kari on-list:\n\n5.1.3. Domain Matching\nhttps://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-00#section-5.1.3\n\nThere is some nested lists lost.\n\n| o The domain string and the string are identical. (Note that both\n| the domain string and the string will have been canonicalized to\n| lower case at this point.)\n| o All of the following conditions hold:\n| o The domain string is a suffix of the string.\n| o The last character of the string that is not included in the\n| domain string is a %x2E (\".\") character.\n| o The string is a host name (i.e., not an IP address\n\nThese should be on nested list, I think:\n\n| o The domain string is a suffix of the string.\n| o The last character of the string that is not included in the\n| domain string is a %x2E (\".\") character.\n| o The string is a host name (i.e., not an IP address\n\nRFC 6265 was\n\n5.1.3. Domain Matching\nhttps://tools.ietf.org/html/rfc6265#section-5.1.3\n\n| o The domain string and the string are identical. (Note that both\n| the domain string and the string will have been canonicalized to\n| lower case at this point.)\n|\n| o All of the following conditions hold:\n|\n| \\* The domain string is a suffix of the string.\n|\n| \\* The last character of the string that is not included in the\n| domain string is a %x2E (\".\") character.\n|\n| \\* The string is a host name (i.e., not an IP address).\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "List nesting",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/243",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/243/labels{/name}",
"created_at": "2016-10-11T05:10:00Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/243/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/243/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/243",
"comments": 1,
"number": 243,
"updated_at": "2016-10-11T08:23:28Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-11T08:22:56Z",
"assignees": [],
"id": 182175167
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"number": 242,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-21T02:11:31Z",
"id": 181942546,
"title": "The \"mixed-scheme\" field is probably needed when you make any request\u2026",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/242",
"diff_url": "https://github.com/httpwg/http-extensions/pull/242.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/242",
"patch_url": "https://github.com/httpwg/http-extensions/pull/242.patch"
},
"comments": 1,
"state": "closed",
"body": "\u2026 over a connection that might be used for \"https\" resources. After all, ordering of request in \"h2\" is\nsomewhat nebulous.\n\nAs discussed on-list.\n",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/242/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/242/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/242/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/242",
"updated_at": "2016-11-21T02:11:31Z",
"user": {
"following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
"events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
"organizations_url": "https://api.github.com/users/martinthomson/orgs",
"url": "https://api.github.com/users/martinthomson",
"gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
"html_url": "https://github.com/martinthomson",
"subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
"repos_url": "https://api.github.com/users/martinthomson/repos",
"received_events_url": "https://api.github.com/users/martinthomson/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
"site_admin": false,
"login": "martinthomson",
"type": "User",
"id": 67641,
"followers_url": "https://api.github.com/users/martinthomson/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/242",
"created_at": "2016-10-10T06:09:24Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/client-hints",
"color": "fbca04",
"default": false,
"id": 290789441,
"name": "client-hints"
}
],
"number": 241,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-23T18:29:50Z",
"id": 181650341,
"title": "consistency in IANA considerations",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/241",
"diff_url": "https://github.com/httpwg/http-extensions/pull/241.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/241",
"patch_url": "https://github.com/httpwg/http-extensions/pull/241.patch"
},
"comments": 0,
"state": "closed",
"body": "",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/241/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/241/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/241/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/241",
"updated_at": "2016-11-23T18:29:50Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/241",
"created_at": "2016-10-07T11:54:15Z",
"assignees": []
},
{
"labels": [],
"number": 240,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-07T15:07:23Z",
"id": 181646870,
"title": "netinfo isn't a dated document, so do not pretend it is",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/240",
"diff_url": "https://github.com/httpwg/http-extensions/pull/240.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/240",
"patch_url": "https://github.com/httpwg/http-extensions/pull/240.patch"
},
"comments": 1,
"state": "closed",
"body": "",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/240/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/240/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/240/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/240",
"updated_at": "2016-10-07T15:07:33Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/240",
"created_at": "2016-10-07T11:34:13Z",
"assignees": []
},
{
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/client-hints",
"color": "fbca04",
"default": false,
"id": 290789441,
"name": "client-hints"
}
],
"number": 239,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-12-02T18:05:15Z",
"id": 181646574,
"title": "update reference to CR-css-values-3",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/239",
"diff_url": "https://github.com/httpwg/http-extensions/pull/239.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/239",
"patch_url": "https://github.com/httpwg/http-extensions/pull/239.patch"
},
"comments": 2,
"state": "closed",
"body": "",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/239/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/239/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/239/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/239",
"updated_at": "2016-12-02T18:05:15Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/239",
"created_at": "2016-10-07T11:32:37Z",
"assignees": []
},
{
"body": "... are they two distinct cookies and in which order should they be sent?\n\n[on the list](https://lists.w3.org/Archives/Public/ietf-http-wg/2016OctDec/0046.html)\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/6265bis",
"color": "fbca04",
"default": false,
"id": 329793151,
"name": "6265bis"
}
],
"locked": false,
"title": "rfc6265bis: cookies set with or without leading dot in domain attribute",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/238",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/238/labels{/name}",
"created_at": "2016-10-05T06:24:35Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/238/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/238/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/238",
"comments": 0,
"number": 238,
"updated_at": "2016-10-05T15:14:07Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/bagder/following{/other_user}",
"events_url": "https://api.github.com/users/bagder/events{/privacy}",
"organizations_url": "https://api.github.com/users/bagder/orgs",
"url": "https://api.github.com/users/bagder",
"gists_url": "https://api.github.com/users/bagder/gists{/gist_id}",
"html_url": "https://github.com/bagder",
"subscriptions_url": "https://api.github.com/users/bagder/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/177011?v=3",
"repos_url": "https://api.github.com/users/bagder/repos",
"received_events_url": "https://api.github.com/users/bagder/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/bagder/starred{/owner}{/repo}",
"site_admin": false,
"login": "bagder",
"type": "User",
"id": 177011,
"followers_url": "https://api.github.com/users/bagder/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 181074087
},
{
"labels": [],
"number": 237,
"assignee": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-09-28T06:23:08Z",
"id": 179488808,
"title": "type the artwork",
"pull_request": {
"url": "https://api.github.com/repos/httpwg/http-extensions/pulls/237",
"diff_url": "https://github.com/httpwg/http-extensions/pull/237.diff",
"html_url": "https://github.com/httpwg/http-extensions/pull/237",
"patch_url": "https://github.com/httpwg/http-extensions/pull/237.patch"
},
"comments": 0,
"state": "closed",
"body": "",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/237/labels{/name}",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/237/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/237/comments",
"html_url": "https://github.com/httpwg/http-extensions/pull/237",
"updated_at": "2016-09-28T06:23:08Z",
"user": {
"following_url": "https://api.github.com/users/reschke/following{/other_user}",
"events_url": "https://api.github.com/users/reschke/events{/privacy}",
"organizations_url": "https://api.github.com/users/reschke/orgs",
"url": "https://api.github.com/users/reschke",
"gists_url": "https://api.github.com/users/reschke/gists{/gist_id}",
"html_url": "https://github.com/reschke",
"subscriptions_url": "https://api.github.com/users/reschke/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/332994?v=3",
"repos_url": "https://api.github.com/users/reschke/repos",
"received_events_url": "https://api.github.com/users/reschke/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/reschke/starred{/owner}{/repo}",
"site_admin": false,
"login": "reschke",
"type": "User",
"id": 332994,
"followers_url": "https://api.github.com/users/reschke/followers"
},
"milestone": null,
"locked": false,
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/237",
"created_at": "2016-09-27T13:11:32Z",
"assignees": []
},
{
"body": "3] get rid of tls-commit (i.e. the latch to opp sec) as this plays very poorly with alt-svc. The notion of alt-svc has always been that it is a shortcut route (or dns name if your prefer) for the same content as supplied at the default origin. If for any reason you cannot get there, you can always go back to the default origin. All of the machinery around this (validating alternates, etc) can happen transparently and asynchronously in the background until they are ready to be used. A mechanism that requires a characteristic of a route (auth'd TLS) but not the route itself doesn't play well - its far too easy to brick your site for an extended period of time and really ceases to be opportunistic in any meaningful sense. If you're up to managing this, then you're probably up to the fight of running https:// and using HSTS which at least has the benefit of not bringing a whole second technology (alt-svc) into play.\n\n[there is further discussion on list]\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"locked": false,
"title": "remove tls-commit",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/236",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/236/labels{/name}",
"created_at": "2016-09-07T20:44:53Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/236/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/236/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/236",
"comments": 0,
"number": 236,
"updated_at": "2016-09-28T03:09:05Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mcmanus/following{/other_user}",
"events_url": "https://api.github.com/users/mcmanus/events{/privacy}",
"organizations_url": "https://api.github.com/users/mcmanus/orgs",
"url": "https://api.github.com/users/mcmanus",
"gists_url": "https://api.github.com/users/mcmanus/gists{/gist_id}",
"html_url": "https://github.com/mcmanus",
"subscriptions_url": "https://api.github.com/users/mcmanus/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/260531?v=3",
"repos_url": "https://api.github.com/users/mcmanus/repos",
"received_events_url": "https://api.github.com/users/mcmanus/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mcmanus/starred{/owner}{/repo}",
"site_admin": false,
"login": "mcmanus",
"type": "User",
"id": 260531,
"followers_url": "https://api.github.com/users/mcmanus/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-09-28T03:09:05Z",
"assignees": [],
"id": 175601745
},
{
"body": "2] /.well-known/http-opportunistic should always be required. The current doc is actually a little fuzzy on this, I think by accident. It refers to this as an \"additional mechanism\" in addition to authentication. But .wk does not really play the same role - it allows the server to opt-in to being an alternate for specific origins on specific ports. So if we're going to use it - we should always use it. (This has no bearing on https:// alt-svc, this is just about http:// as that is all this doc governs).\n\n[There is further discussion of this on list]\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"locked": false,
"title": "require .well-known/http-opportunistic",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/235",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/235/labels{/name}",
"created_at": "2016-09-07T20:44:20Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/235/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/235/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/235",
"comments": 2,
"number": 235,
"updated_at": "2016-11-21T21:44:32Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mcmanus/following{/other_user}",
"events_url": "https://api.github.com/users/mcmanus/events{/privacy}",
"organizations_url": "https://api.github.com/users/mcmanus/orgs",
"url": "https://api.github.com/users/mcmanus",
"gists_url": "https://api.github.com/users/mcmanus/gists{/gist_id}",
"html_url": "https://github.com/mcmanus",
"subscriptions_url": "https://api.github.com/users/mcmanus/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/260531?v=3",
"repos_url": "https://api.github.com/users/mcmanus/repos",
"received_events_url": "https://api.github.com/users/mcmanus/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mcmanus/starred{/owner}{/repo}",
"site_admin": false,
"login": "mcmanus",
"type": "User",
"id": 260531,
"followers_url": "https://api.github.com/users/mcmanus/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-21T02:13:00Z",
"assignees": [],
"id": 175601608
},
{
"body": "1] opportunistic security should require TLS authentication. Any other approach undermines the opt-in mechanism of .wk. As the PKI market has matured to allow truly free and automated certs certificate availability is no longer the chief barrier to https, and so opportunistic security should feel comfortable requiring real authentication. (THERE IS NO PROPOSED CHANGE IN THE SECURITY MODEL - HTTP:// IS STILL HTTP:// AND NOT GRANTED HTTPS:// STATUS AT ALL). The biggest barrier to https:// at this point seems to be mixed content.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/opp-sec",
"color": "fbca04",
"default": false,
"id": 111000960,
"name": "opp-sec"
}
],
"locked": false,
"title": "require tls auth",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/234",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/234/labels{/name}",
"created_at": "2016-09-07T20:43:13Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/234/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/234/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/234",
"comments": 5,
"number": 234,
"updated_at": "2016-11-21T02:13:14Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mcmanus/following{/other_user}",
"events_url": "https://api.github.com/users/mcmanus/events{/privacy}",
"organizations_url": "https://api.github.com/users/mcmanus/orgs",
"url": "https://api.github.com/users/mcmanus",
"gists_url": "https://api.github.com/users/mcmanus/gists{/gist_id}",
"html_url": "https://github.com/mcmanus",
"subscriptions_url": "https://api.github.com/users/mcmanus/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/260531?v=3",
"repos_url": "https://api.github.com/users/mcmanus/repos",
"received_events_url": "https://api.github.com/users/mcmanus/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mcmanus/starred{/owner}{/repo}",
"site_admin": false,
"login": "mcmanus",
"type": "User",
"id": 260531,
"followers_url": "https://api.github.com/users/mcmanus/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-11-21T02:13:14Z",
"assignees": [],
"id": 175601371
},
{
"body": "Define maximums; e.g., uint64_t? for DIV, PARTITION\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/key",
"color": "fbca04",
"default": false,
"id": 274815718,
"name": "key"
}
],
"locked": false,
"title": "Integers",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/233",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/233/labels{/name}",
"created_at": "2016-08-24T07:15:20Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/233/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/233/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/233",
"comments": 0,
"number": 233,
"updated_at": "2016-08-24T07:15:20Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 172880884
},
{
"body": "Some sort of syntax to denote that if a match is made, stop processing, to allow control over permutations.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/key",
"color": "fbca04",
"default": false,
"id": 274815718,
"name": "key"
}
],
"locked": false,
"title": "Short Circuit",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/232",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/232/labels{/name}",
"created_at": "2016-08-24T07:14:45Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/232/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/232/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/232",
"comments": 0,
"number": 232,
"updated_at": "2016-08-24T07:14:45Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 172880787
},
{
"body": "E.g., \n\n> substr=foo|bar\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/key",
"color": "fbca04",
"default": false,
"id": 274815718,
"name": "key"
}
],
"locked": false,
"title": "Allow alternation in substr",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/231",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/231/labels{/name}",
"created_at": "2016-08-24T07:13:37Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/231/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/231/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/231",
"comments": 0,
"number": 231,
"updated_at": "2016-08-24T07:13:37Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 172880614
},
{
"body": "as per @martinthomson \n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/editorial",
"color": "009800",
"default": false,
"id": 111000923,
"name": "editorial"
}
],
"locked": false,
"title": "Make Rice paper reference more prominent",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/230",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/230/labels{/name}",
"created_at": "2016-08-24T06:49:22Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/230/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/230/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/230",
"comments": 0,
"number": 230,
"updated_at": "2016-10-31T23:40:14Z",
"assignee": null,
"state": "closed",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": "2016-10-31T23:40:14Z",
"assignees": [],
"id": 172877097
},
{
"body": "Some mechanism to note that the server wants CD would be good.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
}
],
"locked": false,
"title": "Server opt-in",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/229",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/229/labels{/name}",
"created_at": "2016-08-20T01:01:47Z",
"events_url": "https://api.github.com/repos/httpwg/http-extensions/issues/229/events",
"comments_url": "https://api.github.com/repos/httpwg/http-extensions/issues/229/comments",
"html_url": "https://github.com/httpwg/http-extensions/issues/229",
"comments": 0,
"number": 229,
"updated_at": "2016-09-28T06:59:53Z",
"assignee": null,
"state": "open",
"user": {
"following_url": "https://api.github.com/users/mnot/following{/other_user}",
"events_url": "https://api.github.com/users/mnot/events{/privacy}",
"organizations_url": "https://api.github.com/users/mnot/orgs",
"url": "https://api.github.com/users/mnot",
"gists_url": "https://api.github.com/users/mnot/gists{/gist_id}",
"html_url": "https://github.com/mnot",
"subscriptions_url": "https://api.github.com/users/mnot/subscriptions",
"avatar_url": "https://avatars.githubusercontent.com/u/74384?v=3",
"repos_url": "https://api.github.com/users/mnot/repos",
"received_events_url": "https://api.github.com/users/mnot/received_events",
"gravatar_id": "",
"starred_url": "https://api.github.com/users/mnot/starred{/owner}{/repo}",
"site_admin": false,
"login": "mnot",
"type": "User",
"id": 74384,
"followers_url": "https://api.github.com/users/mnot/followers"
},
"milestone": null,
"repository_url": "https://api.github.com/repos/httpwg/http-extensions",
"closed_at": null,
"assignees": [],
"id": 172245015
},
{
"body": "A few people have noted that SHA-1 is probably overkill.\n",
"labels": [
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/cache-digest",
"color": "fbca04",
"default": false,
"id": 418128526,
"name": "cache-digest"
},
{
"url": "https://api.github.com/repos/httpwg/http-extensions/labels/design",
"color": "02d7e1",
"default": false,
"id": 109132722,
"name": "design"
}
],
"locked": false,
"title": "Digest algorithm",
"url": "https://api.github.com/repos/httpwg/http-extensions/issues/228",
"labels_url": "https://api.github.com/repos/httpwg/http-extensions/issues/228/labels{/name}",
"created_at": "2016-08-20T01:01:13Z",