New version of WPADNG

Josh Cohen <joshco@gmail.com> Tue, 09 July 2024 00:35 UTC

Received: by ietfa.amsl.com (Postfix) id BA257C16940B; Mon, 8 Jul 2024 17:35:55 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B86B4C169409 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 8 Jul 2024 17:35:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.857
X-Spam-Level:
X-Spam-Status: No, score=-2.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="YM7AH/Pa"; dkim=pass (2048-bit key) header.d=w3.org header.b="LuxFTJZV"; dkim=pass (2048-bit key) header.d=gmail.com header.b="W2xNU4mL"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p2eICmxeDaby for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 8 Jul 2024 17:35:51 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6493C14F713 for <httpbisa-archive-bis2Juki@ietf.org>; Mon, 8 Jul 2024 17:35:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:To:Message-ID:Date:From:MIME-Version:Cc:Reply-To :In-Reply-To:References; bh=8oNdY9oHYpb/M7ZNgKLolWP2TsyKcQhxtqrHDkclUPQ=; b=Y M7AH/PaWO1cj4pUUb+bWtgEdPSfKDvAv3lqV0j6UiOc2jhGycTCDWphWbrDFN6xpy83TzRcti2S4L Z93F1FJJeFJLvt0kn6iyvAPzUONpkd+Nh9lQIt+zpUvvU97s+aEZhzkKVaTV4nIwXjCpGfIdPGT1w +DbXl5qNXyDAF50+Pq7xvT920WcnehBH+Cu1GIxXbKOTyA562xJMfHp7+ZBWaU9Gd5fJYUOnIsJBw gQQn2alO1fVEBptO4x2HQWHeQiaFwenCe3jajz7MuJnpTB1hX7Rb+pCxgoUxrxAM3ah+fCceX4mce 6sH9ympMxW6dwzHC8GdWW5S/NwHjq+VUg==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sQyoo-00BYww-2F for ietf-http-wg-dist@listhub.w3.org; Tue, 09 Jul 2024 00:34:54 +0000
Resent-Date: Tue, 09 Jul 2024 00:34:54 +0000
Resent-Message-Id: <E1sQyoo-00BYww-2F@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <joshco@gmail.com>) id 1sQyol-00BYw0-1q for ietf-http-wg@listhub.w3.internal; Tue, 09 Jul 2024 00:34:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:To:Subject:Message-ID:Date:From:MIME-Version:Cc:Reply-To :In-Reply-To:References; bh=8oNdY9oHYpb/M7ZNgKLolWP2TsyKcQhxtqrHDkclUPQ=; t=1720485291; x=1721349291; b=LuxFTJZVlreIp1Vz6ONCZn9WbcZZikvru7I3xrSMgnxLnfc S9v8Oxp3ObCbhurrMp3Zs8F0qaaX0ZV+nSccunihFqJdFxFVI0oMi4DPqG+EhCqsqWN7YLcyhY8wE k600kHFPsapYLJcnJjvs2RxcqK6eumVPa9oLWF6TOsaNLVDZOJsKYi408inhu7j7M8RfvCKYx4+LJ 3KSzGdrsaR6m8D6zS6FgROxvYEI7slcB+UctdIrSei1ITtsPx0pKiNvrdgBc3VuI3GC82zvzFg2Dv 2AeL84a2MfivrcPn4sZAKblI4/H6iiSslFIlY0pdBVlBx6KQz1LMJGSJozSGkl+g==;
Received-SPF: pass (pan.w3.org: domain of gmail.com designates 2607:f8b0:4864:20::c2c as permitted sender) client-ip=2607:f8b0:4864:20::c2c; envelope-from=joshco@gmail.com; helo=mail-oo1-xc2c.google.com;
Received: from mail-oo1-xc2c.google.com ([2607:f8b0:4864:20::c2c]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <joshco@gmail.com>) id 1sQyok-006Kw0-2z for ietf-http-wg@w3.org; Tue, 09 Jul 2024 00:34:51 +0000
Received: by mail-oo1-xc2c.google.com with SMTP id 006d021491bc7-5c44ec4f2dbso2420646eaf.2 for <ietf-http-wg@w3.org>; Mon, 08 Jul 2024 17:34:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1720485287; x=1721090087; darn=w3.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=8oNdY9oHYpb/M7ZNgKLolWP2TsyKcQhxtqrHDkclUPQ=; b=W2xNU4mLnQ9birmc/nGdC4Ory+3pKdM3b6z5oXGM4gjYiBLfcQsEL5LqRzrmNy6fUu NxV1+uVjAM2ejomD5AyRKFiNZJHXnvACufPRFj/STwSInr0QS2RB7fNhnHLHjKl+se3A QkrtH/x+kaVii069/lxBmAgu0GR6ldSDliZoEKIkP478TApGCJCgnB/el2peFkNiTyH/ /P1lyI7Xaxkr46YCCXi9SwbhQvVVmp89AWPjnj30GDANtZNXJ3sAvN5QTSFyAEf1UCpB yrn8PVwjF++unD6SbwAd6VeuYsnkJ7cbOTYh58jLRtZFzqj59krQklYFsRz3P/wzIr0r Wd3Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1720485287; x=1721090087; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=8oNdY9oHYpb/M7ZNgKLolWP2TsyKcQhxtqrHDkclUPQ=; b=C1xuuULlYmx0UKvc+fg3pH0HYOCjdbN4+zg/tLY+zQHXWlSCkagaSnVfMX/2JNUazM L7KD6GNA4z+yXtSa4JWqMyF3A7bnjvO1/mz0WhrepNxSNVZGwqaw+jcmUGCzj/OIt+el N3aryxJIjhLLZ8R3cNzu2IAf+V+F//AV0pWzKcz/dpprBvgigupUG8Mu3QacYhJ34Met xXHSwE70Rqn0fwAq9Tf/sRr7XYgFUUSX/HP6GpozuyhzDyyJc14c0R7FSO4SfZMTgqAy eE3sXgeHgSPhetLCBWxdIpQM1uOE0ftJcObS9eFGDGIjUNwEfTwAeF/vaf6S5K0L5XKO VT1Q==
X-Forwarded-Encrypted: i=1; AJvYcCWp2lx4GW3WEqA+DE8Pq0wBJMjLeHet4PKuYIsLUFRpULqtLTIx9lnVeQRJX8s9j0aI9B/xOsYAa9HicPV4CFjzSuWV
X-Gm-Message-State: AOJu0Yz4nhChkxq2GfyslGMFSp2nAtEhSVB9TWq0rxavN+A5vK0BMgRO IM0VJqrSj3JTRYA7W/C7wSeV8ANRon3iv/PyQyyFJk1zVg1eMQM6gm2tZIvryBdyJu3E6VNV2J4 BZ5M8gwa/BX0oJXzH1FMSQiHa47g=
X-Google-Smtp-Source: AGHT+IH4qGLSo7zQ/6aHBzdFgmihKkggCxElmXMTJa/D2gIxFccdzUIszWqtaJIBIf8ZVdaFTZLoxo8dDDFVmiq4oAo=
X-Received: by 2002:a4a:301:0:b0:5ba:ec8b:44b5 with SMTP id 006d021491bc7-5c68e0f10e9mr1234520eaf.3.1720485287226; Mon, 08 Jul 2024 17:34:47 -0700 (PDT)
MIME-Version: 1.0
From: Josh Cohen <joshco@gmail.com>
Date: Mon, 08 Jul 2024 20:34:36 -0400
Message-ID: <CAF3KT4QFxgNK=kLw_jZ06B85-3sUXqHmHQK03i-jWOZS-jCszw@mail.gmail.com>
To: int-area@ietf.org, ietf-http-wg@w3.org
Content-Type: multipart/alternative; boundary="00000000000062f717061cc5b2f0"
X-W3C-Hub-DKIM-Status: validation passed: (address=joshco@gmail.com domain=gmail.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.7
X-W3C-Hub-Spam-Report: BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sQyok-006Kw0-2z 3ecc628006e730ac3d35398ff79f8fd6
X-Original-To: ietf-http-wg@w3.org
Subject: New version of WPADNG
Archived-At: <https://www.w3.org/mid/CAF3KT4QFxgNK=kLw_jZ06B85-3sUXqHmHQK03i-jWOZS-jCszw@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52055
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Greetings,



I've submitted a new draft of Web Proxy Automatic Discovery Next Generation
(WPADNG)

https://www.ietf.org/archive/id/draft-joshco-wpadng-01.html



*Changes:*


I've removed the old DNS A TXT, SRV discovery mechanisms



The current discovery mechanisms are DHCP (v4/v6), and DNSSD.



In terms of priority it is DHCP then DNSSD.



For DNSSD the key is new _wpadng._tcp.example.com.  DNS "devolution"
remains, eg: first "dev.example.com" then "example.com"



I've added the use of a URN for the proxy config URI to indicate "there is
no proxy and stop discovery" to prevent discovery of rogue proxies.



*I'm seeking feedback on the following:*



Is the priority of DHCP, DNSSD best?


For DNSSD, is domain devolution common practice?  Eg, eg: first "
dev.example.com" then "example.com".    If not, what are other common
practices to deal with subdomain scenarios?


For DNSSD and DHCPv6, we can include more than just a URL, since we have
key/value pairs in DNSSD and from my read, it looks like there is room to
do the same for DHCPv6.  Is there other information the client should know
that we should add?



Are there other URNs that we should add?



-- 

---
*Josh Co*hen