Re: No-Vary-Search

David Benjamin <davidben@chromium.org> Tue, 18 June 2024 22:35 UTC

Received: by ietfa.amsl.com (Postfix) id 1BCC8C1840E6; Tue, 18 Jun 2024 15:35:55 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AEBFC1840E4 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 18 Jun 2024 15:35:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.858
X-Spam-Level:
X-Spam-Status: No, score=-2.858 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="qHZfP1sc"; dkim=pass (2048-bit key) header.d=w3.org header.b="eNlHrxgA"; dkim=pass (1024-bit key) header.d=chromium.org header.b="iUfcbOIt"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UIaWC-5Uba6o for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 18 Jun 2024 15:35:50 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C517EC1840C3 for <httpbisa-archive-bis2Juki@ietf.org>; Tue, 18 Jun 2024 15:35:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:Cc:To:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=2E9iZuW/e3KO9/ERkSQE7JXDbb/iKlNjONdSBF1Z76U=; b=qHZfP1scCDF46wc8EMwS5WPRkD E5SBzsWrJ0qMEE0eCgh0ucCPbn8jJoiGHcOzfBojhy0NkngcvTgELvf2V5xaAxA5Cb4SAZ55GvFqS 6Qvo0mKyuddRkv6McdaA4JY9SmRamvpZ+kVFT6r9pz76pucFoTCDz8wxTEJCrsivDaQ8fqACuoXSZ kmmpcxvFU6GeFdnJqpjCn4O+ImFjRBjgea394j79YS5G7lLo8fovQldXTkF5TPyxw5UTMCMsPYTan JEH7nCpI/9i7UTYClZ5n6/Lh0q0MAhvjNWi90mBu7Aj1FD61FYsV3hUC+JGZRdaYlshakazyJOBlJ 3+SmBlXQ==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sJhPl-00GnzG-1i for ietf-http-wg-dist@listhub.w3.org; Tue, 18 Jun 2024 22:34:57 +0000
Resent-Date: Tue, 18 Jun 2024 22:34:57 +0000
Resent-Message-Id: <E1sJhPl-00GnzG-1i@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <davidben@google.com>) id 1sJhPi-00GnyK-0L for ietf-http-wg@listhub.w3.internal; Tue, 18 Jun 2024 22:34:54 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=2E9iZuW/e3KO9/ERkSQE7JXDbb/iKlNjONdSBF1Z76U=; t=1718750094; x=1719614094; b=eNlHrxgAXWzo6Nq1bOXPLmQTVb5mr26jpYTgQ51L0Dbm+txIhnOZLSEkK5geP6rB2VqqVwtTljX 6+5bHGQrWreC5epYtK3AbZyWy1RF0gZaipWIP64fD4O/GwIxx+k7rYCEwzoRmSJALKO5zNXyPWAc7 IBZFDf9DcbtuwYt1pmXfJcUq/bwWz4tHyeGhwfw89FEfqIen4wYUDqpzGdCyczSU/l2oymfA4GXlk gWbKyZgmZZSMrbIQLv7ymFH3z76QfsRUU7/ZFbdpnHeJeVb+4kj7WGjhSZpYww6pFNc+FY3gaizTK s8cubkbfNBh+zrKODAuddgqmsLvANl47sjdw==;
Received-SPF: pass (pan.w3.org: domain of google.com designates 2607:f8b0:4864:20::1132 as permitted sender) client-ip=2607:f8b0:4864:20::1132; envelope-from=davidben@google.com; helo=mail-yw1-x1132.google.com;
Received: from mail-yw1-x1132.google.com ([2607:f8b0:4864:20::1132]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <davidben@google.com>) id 1sJhPh-00Gc2n-15 for ietf-http-wg@w3.org; Tue, 18 Jun 2024 22:34:54 +0000
Received: by mail-yw1-x1132.google.com with SMTP id 00721157ae682-630daaec9c7so51666077b3.1 for <ietf-http-wg@w3.org>; Tue, 18 Jun 2024 15:34:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1718750090; x=1719354890; darn=w3.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=2E9iZuW/e3KO9/ERkSQE7JXDbb/iKlNjONdSBF1Z76U=; b=iUfcbOItQFcPBg00OIAHvyzCqTlL6LtN6YZ+gAIsw4jTXn4yRsJ5vt4Wmu+jdMjOIz g9oBcXsrlhi4T6j9WD81nBDIJ2GMxzQywc9uP41U4iL5JxhZQzJ6FInjEwFhRHfCqC91 lIu74fylEZsMEfjzPGSLiSBnpC5uLCBnezDPA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1718750090; x=1719354890; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=2E9iZuW/e3KO9/ERkSQE7JXDbb/iKlNjONdSBF1Z76U=; b=OVQTqYxkn5zrEqfVbDHk3Tq6xov8H8w5B+9FAfuSBzXaMee4AKM2SvIR7J+dgtkk8v bkIaDQwKhvctgErEc6Yb+kcOIQi+V4hEa0JOdvBy28YPcAC1ZxmiMO8JnocFqFMNhrQc M5ul8yz4gWBBeeQejqsOBnrkKA1jax4VnvVmLWTk1nunxlLTdeIBAhCum1gyvek5oM+V eWxeHE5d+XG2J2aQoT2+0dYvJ9dOUzL9z+M7TNdmTTm4T1YRuMKCaDdwJTHdBBznMUf+ VUdWpojWQa91JDjN/ngyhTel8nofHpaUmMojfurpdO4/JIGlRyuSV2Dj4ZzJmVrqRTET TRkQ==
X-Forwarded-Encrypted: i=1; AJvYcCV4EFILFYFudQ1Q8NQJ7P7M9jogMU7iccTx7wFL5WIz/ryj71JA5Y/w8uvsdTaK7e+z0a4WgYOD0ibPJRkYAFkNc8Fq
X-Gm-Message-State: AOJu0YzV7xdYLUoJOWmGrzAbgp+NhbDREddiKNXSVzHJXhvXdXBgtoC9 L3A18vjbLlG1u0FyQXe8GQOfMtOJcR8v/qWe9A11Ss/D0eNg5UE0tsVRhcRm4lGsm3rFsMosN/T k4hLm9tfB/EdJSx4CulcM8KuY3xSMNK245m9BVEMo+2bAU0IPzcI=
X-Google-Smtp-Source: AGHT+IGmxT9Kfx6ySxUQq0Xx8O/TXrAt6Ade277aj68WBF7vSV+XCJDw0i0rUqjyTcp235P2/g6Kt0gExQ58DHQyYns=
X-Received: by 2002:a81:b047:0:b0:615:bb7:d59c with SMTP id 00721157ae682-63a8def608dmr12441417b3.22.1718750089503; Tue, 18 Jun 2024 15:34:49 -0700 (PDT)
MIME-Version: 1.0
References: <CACuR13cnHHoRv_Z-HtJeOyJqZb7AVU-_udQ=R_x9qQ1_JeP=KQ@mail.gmail.com> <CAEmMwDwZ8RB0Zz5GCbPeSFH-1tVgTW-hy4_0Fd1L90hNi3h0RA@mail.gmail.com> <CAEmMwDwxpy7QvJBx01WZpHmH=c2QKE6Q7iBAQisNSqRaxBoz3Q@mail.gmail.com> <CACuR13fENsddR_-3NK+w8w5OvcOwnyt=_eiHsK0E0S2X4rr=ZQ@mail.gmail.com> <CAEmMwDyMZz89pRY9OPimPDR1+-nULW9ZC8DjcYfOWvuWjUdtYA@mail.gmail.com>
In-Reply-To: <CAEmMwDyMZz89pRY9OPimPDR1+-nULW9ZC8DjcYfOWvuWjUdtYA@mail.gmail.com>
From: David Benjamin <davidben@chromium.org>
Date: Tue, 18 Jun 2024 18:34:31 -0400
Message-ID: <CAF8qwaCo1gfWaUmSi+V3_bth_Ng8id6UWvY7BeKKA4h3WuMT9A@mail.gmail.com>
To: Rory Hewitt <rory.hewitt@gmail.com>
Cc: Jeremy Roman <jbroman@chromium.org>, ietf-http-wg@w3.org
Content-Type: multipart/alternative; boundary="0000000000008b5ee9061b31b0f5"
X-W3C-Hub-DKIM-Status: validation passed: (address=davidben@google.com domain=chromium.org), signature is good
X-W3C-Hub-Spam-Status: No, score=-11.4
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, USER_IN_DEF_SPF_WL=-7.5, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sJhPh-00Gc2n-15 9a8eb040e3a4859c86e24641e1178709
X-Original-To: ietf-http-wg@w3.org
Subject: Re: No-Vary-Search
Archived-At: <https://www.w3.org/mid/CAF8qwaCo1gfWaUmSi+V3_bth_Ng8id6UWvY7BeKKA4h3WuMT9A@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52028
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

<bikeshed>
I think No-Vary-Cache is a worse header name than No-Vary-Search. It says
nothing about the URL query/search field and could just as easily describe
the HTTP request headers or other things that the response doesn't vary on.
That means it should include *something* that indicates the URL
query/search field.

As for the Cache part, it's not *really* a statement about the cache
anyway. It's a statement about whether the *response* to this request
varies on some property. The cache is just the primary reason for the
client to care about this information. So, matching the precedent with the
Vary header, I think "Vary" is enough to capture this aspect of the name
without adding "Cache".

I agree the combination of the two is awkward. It's unfortunate that
"search" is a bit overloaded of a term, and everywhere is inconsistent
about whether it's the "query" or the "search", but removing any reference
to the field at all is even worse. (Tossing out an idea without opinion,
No-Vary-(Search|Query|URL)-Params? It's really the individual params being
targeted and not the overall search/query string.)
</bikeshed>

On Tue, Jun 18, 2024 at 6:14 PM Rory Hewitt <rory.hewitt@gmail.com> wrote:

> <bikeshedding>
>
> Oh, I get the idea to extend/build upon/mimic/evoke the Vary header, and
> FWIW, I really like the general 'No-Vary' idea. I'm just concerned about
> the specific 'No-Vary-Search' name, as it implies something to do with the
> generally understood concept of 'search' (y'know, searching for things) and
> honestly, I'd completely forgotten that the query string is sometimes
> called the 'search' part of the URL. It's a weirdly technical use of that
> term that few outside the IETF/W3C would either know or understand. But
> here we are...
>
> Since this header is about how user agents should cache content where that
> content may be accessed via similar but slightly different URLs, maybe
> 'Vary-Cache' is also an option? This more generic name would also enable
> the header to be extended in the future to cover things in addition to the
> URL query parameters without the name becoming out-of-date.
>
> But all of this may just be me being grumpy and objecting to the use of
> 'search' in its technical meaning rather than its commonly-used meaning.
>
> </bikeshedding>
>
> On Tue, Jun 18, 2024 at 2:31 PM Jeremy Roman <jbroman@chromium.org> wrote:
>
>> On Tue, Jun 18, 2024 at 1:20 PM Rory Hewitt <rory.hewitt@gmail.com>
>>> wrote:
>>>
>>>> Hey Jeremy,
>>>>
>>>> > This was originally No-Vary-Query, but the web-exposed APIs call
>>>> this part of the URL "search", so this change was requested in a W3C
>>>> discussion.
>>>>
>>>> I can understand why you changed the name from "No-Vary-Query", but
>>>> given that it's primarily a mechanism to change the way that content is
>>>> cached, I think it makes sense to call it "No-Vary-Cache"
>>>>
>>>
>> I'll avoid getting too deep into bikeshed painting, but briefly: I hoped
>> to evoke the longstanding Vary header
>> <https://www.rfc-editor.org/rfc/rfc9110#field.vary>.
>>
>