Re: Fwd: Reviews of draft-ietf-xmpp-websocket-07

Matt Miller <[email protected]> Fri, 4 Jul 2014 12:02:36 -0600
Newsgroups gmane.ietf.xmpp
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 7/3/14, 9:59 PM, Lance Stout wrote:
> Closing in on the end of IETF LC for draft-ietf-xmpp-websocket-07,
> so replying to the feedback generated so far. We'll publish a -08
> draft addressing these issues, which have all been minor or
> editorial points.
> 
> 
> For the XMPP WG: Two proposed changes in normative requirements:
> 
> 1. A server SHOULD use <close see-other-uri="..." /> when ending a
> session & pointing the client to a new endpoint. Was previously a
> MAY, but IETF LC feedback pointed out that we don't have any other
> defined way to do this.
> 
> I don't feel too strongly on this point, so feedback welcome on if
> this change is really needed.
> 

I agree with this change.  Making the 'see-other-uri' behavior a
SHOULD I think will lead to more interoperable software; people will
be much more inclined to implement it.

> 
> 2. If the server responds to the WebSocket handshake without
> including 'xmpp' in its Sec-WebSocket-Protocol header, then the
> client MUST close the connection.
> 
> Handling of this situation was previously undefined, but this feels
> to be what we all expected was already the proper client action.
> 

This makes sense to me.


- -- 
- - m&m

Matt Miller < [email protected] >
Cisco Systems, Inc.

> 
> On Jul 3, 2014, at 9:39 AM, <[email protected]> <[email protected]>
> wrote:
> 
>> Should ?when TLS is used, it MUST be enabled the WebSocket layer
>> ? have read ?when TLS is used, it MUST be enabled at the
>> WebSocket layer ? ?
> 
> 
> Yes, that is the intended wording.
> 
> 
> 
> 
> On Jul 2, 2014, at 6:00 AM, Romascanu, Dan (Dan)
> <[email protected]> wrote:
> 
>> 1. In order to accommodate the Websocket binding this document
>> describes several deviations from RFC6120. For example, in
>> Section 3.3 it says: The WebSocket XMPP sub-protocol deviates
>> from the standard method of constructing and using XML streams as
>> defined in [RFC6120] by adopting the message framing provided by 
>> WebSocket to delineate the stream open and close headers,
>> stanzas, and other top-level stream elements. I am wondering
>> whether it would not be appropriate to reflect this in the
>> document header by adding Updates RFC6120
> 
> 
> This is a separate binding from the TCP binding defined in RFC6120,
> so I don't think saying Updates RFC6120 would be accurate. Nothing
> in RFC6120 is modified by this document.
> 
> 
>> 2. In Section 3.6.1:
>> 
>> If the server wishes at any point to instruct the client to move
>> to a different WebSocket endpoint (e.g. for load balancing
>> purposes), the server MAY send a <close/> element and set the
>> "see-other-uri" attribute to the URI of the new connection
>> endpoint (which MAY be for a different transport method, such as
>> BOSH (see [XEP-0124] and [XEP-0206]).
>> 
>> I do not understand the usage of MAY in this paragraph. Is there
>> another method to move to a different Web socket endpoint that is
>> described here or some other place? In not, why is not the first
>> MAY at least a SHOULD? The second usage seems to describe a state
>> of facts, so it needs not be capitalized at all.
> 
> That is the only method, so I agree that can be a SHOULD, and also
> agree on the second point.
> 
> 
>> In Section 3.1 I believe that the example should be preceded by
>> some text that indicates that this is an example, such as: ?An
>> example of a successful handshake and start of session follows:?
> 
> +1, will add that.
> 
> 
> 
> 
> 
> On Jun 25, 2014, at 11:55 PM, Juergen Schoenwaelder 
> <[email protected]> wrote:
> 
>> - Sec 1: The term 'raw socket' can be potentially mis-understood,
>> perhaps simply remove 'over row sockets' completely (I think the
>> message of the sentence remains intact without these words).
> 
> +1 will change
> 
>> - Sec 3.1: The text says that both client and server MUST have
>> |xmpp| in the list of protocols for the |Sec-WebSocket-Protocol|
>> header. The text does not detail what happens if this is not the
>> case. Is there be a defined behavior if this protocol negotiation
>> fails?
> 
> Good catch, RFC6455 doesn't describe what to do in that case, so
> we'll need to address it.
> 
> If the server does not reply with 'xmpp' in the
> Sec-WebSocket-Protocol handshake reply, then the client MUST close
> the connection.
> 
> 
>> - Sec 3.6.1: There is a closing parenthesis missing at the end of
>> the first paragraph.
> 
> Noted, will fix.
> 
> 
> 
> 
> - Lance
> 
> 
> 
> 
> 
> _______________________________________________ xmpp mailing list 
> [email protected] https://www.ietf.org/mailman/listinfo/xmpp
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCgAGBQJTtuw8AAoJEDWi+S0W7cO10WoH/jHlU66Y5B5AVfJzza/ey8jb
LFcYqb4hDYQm5civ+yZ3MGwRoaHDl1QreQYpF1eh4xEbo0T2heAxXReUKbIh2xvs
Wl7vXedVz0YLPS/s1i45XoMStFBU7LZ00Y9Vm5+FUHMppvjWVYrdimUNa9KKGXCo
wTRDY/it1uxlkVWgtecMh6bMSR722UTQWu71pcdvhsWIk40gU6vNdh56FU/ew2FM
WmRtrTHJYHqPoFvE86GAgSKNF8S42Dz/5DbPAsrZUp9iUbo0ocgLrsqA9VIqLqkm
/MOQy19Cce5Y0Q2G5tC8+DhAXORM6Fi1+NgXWSvgMHyOadNGLbRywT7GN49X6xo=
=p4NY
-----END PGP SIGNATURE-----