Text Records Headers

[0xc0de4c0ffee]

Moving this idea from @eth-limo here.

It would be great to also include a standard for gateways to return site specific headers (following RFC8615), something like this: /.well-known/eth/vitalik/headers.json

{
  "headers": {
    "/": [
      {
        "Cross-Origin-Opener-Policy": "same-origin"
      },
      {
        "Cross-Origin-Embeder-Policy": "require-corp"
      }
    ]
  }
}

This could be consumed by any gateway process (IPFS in Brave for example) or eth.limo.

[0xc0de4c0ffee]

Adding headers.json as text record
function text(node, key = headers, value = '{"headers":...}')

../headers.json file wrapped for CCIP call is formatted as {data:<abi.encode('{"headers:..."}')>}.

?we've to add TTL in this records?
We need full example for json & sample for minimum/default config without headers.json.

• We'll discuss TTL for other records separately.

[0xc0de4c0ffee]

🙏 @eth-limo if you've time to finalize json type/format required for headers?

[sshmatrix]

I pinged them on Discord + Nostr

[eth-limo]

Here's what we're thinking:

Example with default values:

{
  "Respond": {
    "*": [
      {
        "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload"
      },
      {
        "Access-Control-Allow-Credentials": false
      },
      {
        "Access-Control-Allow-Origin": "*"
      },
      {
        "Cache-Control": "max-age=300, must-revalidate"
      },
      {
        "Cross-Origin-Resource-Policy": "cross-origin"
      },
      {
        "Permissions-Policy": "interest-cohort=(), battery=()"
      },
      {
        "Referrer-Policy": "strict-origin-when-cross-origin"
      },
      {
        "X-Content-Type-Options": "nosniff"
      },
      {
        "X-Frame-Options": "SAMEORIGIN"
      },
      {
        "Content-Security-Policy": "frame-ancestors 'self';"
      },
      {
        "X-Xss-Protection": "1; mode=block"
      }
    ],
    "": [
      {
        "": ""
      }
    ]
  }
}

Respond would be a map of lists, containing the path and corresponding headers to return. Respond[*] is a global specification for the entire site. If a path contains a header that conflicts with what's defined in Respond[*] , the path should take priority and respond accordingly, overwriting the conflicting value in Respond[*].

Here is the JSON schema for a default config:

{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "properties": {
    "Respond": {
      "type": "object",
      "properties": {
        "*": {
          "type": "array",
          "items": [
            {
              "type": "object",
              "properties": {
                "Strict-Transport-Security": {
                  "type": "string"
                }
              },
              "required": [
                "Strict-Transport-Security"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Access-Control-Allow-Credentials": {
                  "type": "boolean"
                }
              },
              "required": [
                "Access-Control-Allow-Credentials"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Access-Control-Allow-Origin": {
                  "type": "string"
                }
              },
              "required": [
                "Access-Control-Allow-Origin"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Cache-Control": {
                  "type": "string"
                }
              },
              "required": [
                "Cache-Control"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Cross-Origin-Resource-Policy": {
                  "type": "string"
                }
              },
              "required": [
                "Cross-Origin-Resource-Policy"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Permissions-Policy": {
                  "type": "string"
                }
              },
              "required": [
                "Permissions-Policy"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Referrer-Policy": {
                  "type": "string"
                }
              },
              "required": [
                "Referrer-Policy"
              ]
            },
            {
              "type": "object",
              "properties": {
                "X-Content-Type-Options": {
                  "type": "string"
                }
              },
              "required": [
                "X-Content-Type-Options"
              ]
            },
            {
              "type": "object",
              "properties": {
                "X-Frame-Options": {
                  "type": "string"
                }
              },
              "required": [
                "X-Frame-Options"
              ]
            },
            {
              "type": "object",
              "properties": {
                "Content-Security-Policy": {
                  "type": "string"
                }
              },
              "required": [
                "Content-Security-Policy"
              ]
            },
            {
              "type": "object",
              "properties": {
                "X-Xss-Protection": {
                  "type": "string"
                }
              },
              "required": [
                "X-Xss-Protection"
              ]
            }
          ]
        },
        "": {
          "type": "array",
          "items": [
            {
              "type": "object",
              "properties": {
                "": {
                  "type": "string"
                }
              },
              "required": [
                ""
              ]
            }
          ]
        }
      },
      "required": [
        "*",
        ""
      ]
    }
  },
  "required": [
    "Respond"
  ]
}

[0xc0de4c0ffee]

@eth-limo 🙏

• Is it ok if we remove "Headers" from json as it's already used as key in text record?
• Can you send us default values too?

// get
let provider = new BrowserProvider(window.ethereum)
let resolver = await provider.getResolver("vitalik.eth")
let showcase = await resolver.getText("headers")

// Offchain set text
let _data = "data:application/json,<json_string>"
let headers = {"data": "<Resolver.__callback.selector + abi.encode(signer , signature, abi.encode(_data))>", <..extradata, plain json value..>}
// this is stored in /.well-known/eth/domain/headers.json
// data is encoded for above get/ccip-read

• side note: we were playing with DNS records for possible MX/other records settings. if we could push for such roadmap yet?

[eth-limo]

@0xc0de4c0ffee please see the updated example.

side note: we were playing with DNS records for possible MX/other records settings. if we could push for such roadmap yet?

• Yes, we are already working on a custom DNS resolver.