Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removing IANA consideration sections for HTTP headers #7274

Closed
annevk opened this issue Oct 29, 2021 · 5 comments
Closed

Removing IANA consideration sections for HTTP headers #7274

annevk opened this issue Oct 29, 2021 · 5 comments
Labels
clarification Standard could be clearer meta Changes to the ecosystem around the standard, not its contents

Comments

@annevk
Copy link
Member

annevk commented Oct 29, 2021

Now that https://github.com/protocol-registries/http-fields exists it seems we can register most of these with ease.

  • Cross-Origin-*: these have dedicated sections already so that is relatively straightforward. We should consider giving the "The headers" sections better IDs though.
  • Origin-Agent-Cluster: same.
  • Ping-From and Ping-To: I suggest we add a short section after "Hyperlink auditing" (same level?) that defines these.
  • Refresh: a section parallel to "The X-Frame-Options header" that is mainly a pointer to the http-equiv state?
  • Last-Event-ID: a section after "Processing model" within the overall EventSource section?
  • X-Frame-Options: already has a section. It's also already registered as https://datatracker.ietf.org/doc/html/rfc7034 so we might not be successful in getting this updated. There's a similar situation with Origin and I asked mnot for input.

Thoughts?

@annevk annevk added the meta Changes to the ecosystem around the standard, not its contents label Oct 29, 2021
@annevk annevk added the clarification Standard could be clearer label Oct 29, 2021
@domenic
Copy link
Member

domenic commented Oct 29, 2021

I'm skeptical that the existence of a GitHub repository will cause the IETF to process registration requests any more quickly than they did with a mailing list. I.e. changing the technology doesn't seem like it'd help with the human factors.

But indeed, removing the IANA boilerplate and fleshing out the definitions where appropriate seems nice.

@annevk
Copy link
Member Author

annevk commented Oct 29, 2021

It took a day without issue for the first registration I tried (see issue 1 there), so I'm optimistic.

@domenic
Copy link
Member

domenic commented Nov 10, 2021

Indeed things seem to be moving quickly now!

It looks like @mikewest registered Cross-Origin-* using the iana.html URLs per https://www.iana.org/assignments/http-fields/http-fields.xhtml ; see e.g. protocol-registries/http-fields#18 . So we'd need to take some care to get those updated...

annevk added a commit that referenced this issue Nov 22, 2021
This is the first step towards addressing #7274. It takes care of Cross-Origin-Embedder-Policy, Cross-Origin-Embedder-Policy-Report-Only, Cross-Origin-Opener-Policy, Cross-Origin-Opener-Policy-Report-Only, and Origin-Agent-Cluster.

Closes #7325.
annevk added a commit that referenced this issue Nov 23, 2021
This is the first step towards addressing #7274. It takes care of Cross-Origin-Embedder-Policy, Cross-Origin-Embedder-Policy-Report-Only, Cross-Origin-Opener-Policy, Cross-Origin-Opener-Policy-Report-Only, and Origin-Agent-Cluster.

Closes #7325.
annevk added a commit that referenced this issue Nov 23, 2021
This concludes moving away from using IANA templates to define HTTP headers. It takes care of Last-Event-ID, Ping-From, Ping-To, Refresh, and X-Frame-Options.

It also adds an index to ensure these headers are still easy to find.

And finally it corrects the casing of several index sections.

This helps with #7274 (kept open to update the IANA registry) and fixes #7355.
annevk added a commit that referenced this issue Nov 24, 2021
This concludes moving away from using IANA templates to define HTTP headers. It takes care of Last-Event-ID, Ping-From, Ping-To, Refresh, and X-Frame-Options.

It also adds an index to ensure these headers are still easy to find.

And finally it corrects the casing of several index sections.

This helps with #7274 (kept open to update the IANA registry) and fixes #7355.
@annevk
Copy link
Member Author

annevk commented Nov 30, 2021

They all succeeded. \o/

@annevk annevk closed this as completed Nov 30, 2021
dandclark pushed a commit to dandclark/html that referenced this issue Dec 4, 2021
This is the first step towards addressing whatwg#7274. It takes care of Cross-Origin-Embedder-Policy, Cross-Origin-Embedder-Policy-Report-Only, Cross-Origin-Opener-Policy, Cross-Origin-Opener-Policy-Report-Only, and Origin-Agent-Cluster.

Closes whatwg#7325.
mfreed7 pushed a commit to mfreed7/html that referenced this issue Jun 3, 2022
This is the first step towards addressing whatwg#7274. It takes care of Cross-Origin-Embedder-Policy, Cross-Origin-Embedder-Policy-Report-Only, Cross-Origin-Opener-Policy, Cross-Origin-Opener-Policy-Report-Only, and Origin-Agent-Cluster.

Closes whatwg#7325.
mfreed7 pushed a commit to mfreed7/html that referenced this issue Jun 3, 2022
This concludes moving away from using IANA templates to define HTTP headers. It takes care of Last-Event-ID, Ping-From, Ping-To, Refresh, and X-Frame-Options.

It also adds an index to ensure these headers are still easy to find.

And finally it corrects the casing of several index sections.

This helps with whatwg#7274 (kept open to update the IANA registry) and fixes whatwg#7355.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
clarification Standard could be clearer meta Changes to the ecosystem around the standard, not its contents
Development

No branches or pull requests

2 participants