On Thu, Jul 28, 2016 at 7:14 PM, Roland Shoemaker <[email protected]>
wrote:

> That sounds good, adding this more specific language about how the server
> should treat non-mailto URIs would make the tel examples make more sense to
> me.
>
> When you say 'filter' unsupported contacts what do you mean? It seems like
> erroring out seems like it would be more prudent.
>

I mean that the "contact" list in the returned registration object would be
a subset of the list in the client's POST.

I don't have super strong feelings about error vs. filter, but have a
slight preference for filtering.  We went the hard-fail way with new-cert
(now new-app), but in this case, the client can fix things by updating the
registration, so it seems like less of a big deal.

--Richard


>
>
> On Jul 28, 2016, 3:25 PM -0700, Richard Barnes <[email protected]>, wrote:
>
> So how about we add something like this:
>
> - Servers SHOULD only allow contact types they know how to handle
> - ... MUST filter unsupported contacts;
> - ... MUST support "mailto:";
>
> Roland: When you say "explicitly referred to", do you mean in the
> examples?  I would prefer to keep a non-mailto example there, if we're
> clear that the server can reject it.
>
>
> On Thu, Jul 28, 2016 at 6:21 PM, Roland Shoemaker <[email protected]>
> wrote:
>
>> I agree with Ted that generic URI support should be documented but that
>> mailto should be the only one explicitly referred to.
>>
>> This was the intention of the original ticket I filled, although maybe
>> not as coherently.
>>
>>
>> On Jul 28, 2016, 3:17 PM -0700, Ted Hardie <[email protected]>, wrote:
>>
>> Hi Richard
>>
>> On Thu, Jul 28, 2016 at 2:42 PM, Richard Barnes <[email protected]> wrote:
>>
>>> Roland filed an issue proposing removal of any URIs other than "mailto:
>>> ".
>>>
>>> https://github.com/ietf-wg-acme/acme/issues/159
>>>
>>> I think there is another way to look at the issue.  Rather than focusing
>> on removing PSTN, you could say that he is requesting that mailto: be
>> universally supported, where other URI forms would be at the discretion of
>> the CA.
>>
>> Put that way, I think it's worth consideration.  If there is a single
>> contact method that ACME requires, mailto makes sense.
>>
>>
>>> I really strongly disagree with this.  At the level of this protocol, we
>>> should allow clients to specify whatever types of contact they want, as
>>> long as it can be specified in a URI.
>>>
>>>
>> A data URI could have instructions on where to show up as a series of
>> navigational cues, so "can be specified in a URI" may not be enough.
>>
>>  Ted
>>
>> I would be willing to have some text that explicitly allows the server to
>>> filter the contact list, though, so that it's clear to the client what the
>>> server does and doesn't support.
>>>
>>> _______________________________________________
>>> Acme mailing list
>>> [email protected]
>>> https://www.ietf.org/mailman/listinfo/acme
>>>
>>>
>> _______________________________________________
>> Acme mailing list
>> [email protected]
>> https://www.ietf.org/mailman/listinfo/acme
>>
>>
>
_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to