Skip to content

Commit

Permalink
Fix #2100: unquote representation data (#2101)
Browse files Browse the repository at this point in the history
  • Loading branch information
LPardue committed May 11, 2022
1 parent 265bca5 commit 7842520
Showing 1 changed file with 10 additions and 10 deletions.
20 changes: 10 additions & 10 deletions draft-ietf-httpbis-digest-headers.md
Original file line number Diff line number Diff line change
Expand Up @@ -156,7 +156,7 @@ defined to support digests of content ({{Section 3.2 of SEMANTICS}}); see

For more advanced use-cases, the `Repr-Digest` request and response header
and trailer field ({{representation-digest}}) is defined. It contains a digest value
computed by applying a hashing algorithm to "selected representation data"
computed by applying a hashing algorithm to selected representation data
({{Section 3.2 of SEMANTICS}}). Basing `Repr-Digest` on the selected
representation makes it straightforward to apply it to use-cases where the
transferred data requires some sort of manipulation to be considered a
Expand Down Expand Up @@ -192,7 +192,7 @@ This specification does not define means for authentication, authorization or pr
[RFC3230] defined the `Digest` and `Want-Digest` HTTP fields for HTTP integrity.
It also coined the term "instance" and "instance manipulation" in order to
explain concepts that are now more universally defined, and implemented, as HTTP
semantics such as "selected representation data" ({{Section 3.2 of SEMANTICS}}).
semantics such as selected representation data ({{Section 3.2 of SEMANTICS}}).

Experience has shown that implementations of [RFC3230] have interpreted the
meaning of "instance" inconsistently, leading to interoperability issues. The
Expand Down Expand Up @@ -290,7 +290,7 @@ In this case,

The `Repr-Digest` HTTP field can be used in requests and responses to
communicate digests that are calculated using a hashing algorithm applied to
the entire "selected representation data" (see {{Section 8.1 of SEMANTICS}}).
the entire selected representation data (see {{Section 8.1 of SEMANTICS}}).

Representations take into account the effect of the HTTP semantics on
messages. For example, the content can be affected by Range Requests or methods
Expand All @@ -299,8 +299,8 @@ dependent on other transformations (e.g. transfer codings for HTTP/1.1 - see
{{Section 6.1 of HTTP11}}). To help illustrate HTTP representation concepts,
several examples are provided in {{resource-representation}}.

When a message has no "representation data" it is still possible to assert that no
"representation data" was sent by computing the digest on an empty
When a message has no representation data it is still possible to assert that no
representation data was sent by computing the digest on an empty
string (see {{usage-in-signatures}}).

`Repr-Digest` is a `Dictionary` (see {{Section 3.2 of
Expand Down Expand Up @@ -475,7 +475,7 @@ The entries in {{iana-hash-algorithm-table}} are registered by this document.
## HTTP Messages Are Not Protected In Full {#sec-limitations}

This document specifies a data integrity mechanism that protects HTTP
"representation data" or content, but not HTTP header and trailer fields, from
representation data or content, but not HTTP header and trailer fields, from
certain kinds of corruption.

Integrity fields are not intended to be a general protection against malicious tampering with
Expand All @@ -485,10 +485,10 @@ Signatures {{SIGNATURES}}).

## End-to-End Integrity

Integrity fields can help detect "representation data" or content modification due to implementation errors,
Integrity fields can help detect representation data or content modification due to implementation errors,
undesired "transforming proxies" (see {{Section 7.7 of SEMANTICS}})
or other actions as the data passes across multiple hops or system boundaries.
Even a simple mechanism for end-to-end "representation data" integrity is valuable
Even a simple mechanism for end-to-end representation data integrity is valuable
because a user agent can validate that resource retrieval succeeded before handing off to a
HTML parser, video player etc. for parsing.

Expand Down Expand Up @@ -1062,7 +1062,7 @@ Note that a `204 No Content` response without content but with the same

## Error responses

In error responses, the "representation data" does not necessarily refer to the
In error responses, the representation data does not necessarily refer to the
target resource. Instead, it refers to the representation of the error.

In the following example, a client sends the same request from {{fig-patch}} to
Expand Down Expand Up @@ -1226,7 +1226,7 @@ Using content for the Digest field is an error
that leads to interoperability problems between peers that implement RFC 3230.

For the uncertainty of doubt, RFC 3230 was only ever intended
to use what HTTP now defines as "selected representation data".
to use what HTTP now defines as selected representation data.
The semantic concept of digest and representation are explained
alongside the definition of Representation-Digest {{representation-digest}}.

Expand Down

0 comments on commit 7842520

Please sign in to comment.