Re: Comments on "Good Practices for Capability URLs" FPWD

On 6/7/2014 10:22 PM, Jonathan A Rees wrote:
> I don't think there's any point in discussing or even raising the
> question of whether it's 'OK' to create unguessable URIs.


On Sat, Jun 7, 2014 at 12:56 AM, Noah Mendelsohn <nrm@arcanedomain.com> wrote:

> although there are cases where it is reasonable to gamble on having URLs
> be kept secret, the Web is not in general designed to preserve such URL
> secrecy.

I don't see these two quotes, taken in isolation, as being in conflict with 
each other. I have never suggested that it's not "OK to create unguessable 
URLs. I have suggested (and Rob obviously disagrees), that we should not 
expect the Web to then protect those URLs in ways that go much beyond 
what's already called for in normative specifications.

Noah

Received on Monday, 9 June 2014 02:24:22 UTC