Feedback on draft-sigurdsson-anti-ddos-http-throttling

Hi Joi,

I just noticed your draft <http://www.ietf.org/id/draft-sigurdsson-anti-ddos-http-throttling-00.txt> and had a quick look through it.

One thing that stood out was your re-definition of the Retry-After HTTP header; modifying the semantics of an existing header is generally not a good idea (as doing so dilutes interop). If it does need changing, that needs to be done in consultation with the entire community, not unilaterally.

I'd suggest you define a different header; if you really need to use Retry-After, please engage with the HTTPbis WG (CC:ed).

Also, you'll need to register whatever headers you define; see RFC3864.

Regards,


--
Mark Nottingham   http://www.mnot.net/