- From: Mohamed Boucadair via Datatracker <noreply@ietf.org>
- Date: Wed, 10 Sep 2025 01:53:44 -0700
- To: "The IESG" <iesg@ietf.org>
- Cc: draft-ietf-httpbis-optimistic-upgrade@ietf.org, httpbis-chairs@ietf.org, ietf-http-wg@w3.org, tpauly@apple.com, tpauly@apple.com
Mohamed Boucadair has entered the following ballot position for
draft-ietf-httpbis-optimistic-upgrade-05: No Objection
When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)
Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
for more information about how to handle DISCUSS and COMMENT positions.
The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-httpbis-optimistic-upgrade/
----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------
Hi Ben,
Thanks for the effort put into this well-written spec.
Please find below some minor comments:
# Please help readers to find where to look for various statements in the spec.
For example:
(1)
OLD:
In HTTP/1.1 and later, a single connection can be used for many
requests. In HTTP/2 and HTTP/3, these requests
NEW:
In HTTP/1.1 [RFC9112] and later, a single connection can be used for many
requests. In HTTP/2 [RFC9113] and HTTP/3 [RFC9114], these requests
(2) Point to where this is specified
CURRENT:
However, in HTTP/1.1, requests are strictly sequential, and each new
request is distinguished implicitly by the closure of the preceding
request.
(3) Cite 9.3.6 of 9110
CURRENT:
The other mechanism is the HTTP CONNECT method.
# Only when accepted
OLD:
The server replies with a 2xx (Successful)
response to indicate that the request was accepted and a TCP
connection was established.
New:
If accepted, the server replies with a 2xx (Successful)
response to indicate that the request was accepted and a TCP
connection was established.
# Definitive list or samples?
CURRENT:
Rejections are common, and can happen for a variety of reasons. A
request using Upgrade might be rejected if:
Is this the definite list of conditions under which this can be rejected or
these are only examples? Consider making this clear in the text.
The same applies for other similar text in the draft
# An example
CURRENT:
In some cases, the client might expect that the protocol transition
^^^^^^^^^^^^
will succeed.
Can an example be provided here for illustration purposes?
# Registered Upgrade Tokens
CURRENT:
This section describes the impact of this document's considerations
on some registered upgrade tokens that are believed to be in use at
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
the time of writing.
Can we cite
https://www.iana.org/assignments/http-upgrade-tokens/http-upgrade-tokens.xhtml?
# Future specifications
CURRENT:
Future specifications for upgrade tokens should account for the
security issues discussed here and provide clear guidance on how
implementations can avoid them.
How this reco will be tracked?
# Consider using {:quote} to tag all the citations in the document.
Cheers,
Med
Received on Wednesday, 10 September 2025 08:53:48 UTC