[occi-wg] OCCI header information for JSON

[alexander.papaspyrou at tu-dortmund.de]

Hi Gary,

I pretty much agree to what you say; however, we should carefully assess which standard headers can be reused by the OCCI protocol to allow discovery operations using the HEAD verb only.

Best,
Alexander

Am 09.02.2012 um 17:45 schrieb Gary Mazz:

> Hi
> 
> Thank you for the interesting discussion on meta-data for the json rendering.
> 
> It was suggested OCCI meta-data should be defined as HTTP headers for the JSON and XML forms. We should seriously examine adverse outcomes of modifying well established protocols.  Placing OCCI meta-data in the http header area ignores best design practices, specifically compartmentalization. We would not consider placing OCCI headers in IP or TCP protocol header space, we should not consider impacting the HTTP transport data space. Although precedence has been set,  additional meta-data in http headers for alternative forms of OCCI data exponentially increases the cost burden on product testing and validation.
> 
> In my experience attempting to release a CDMI javascript library, I ran into a few security issues surrounding browser behavior. It seems the prominent browsers execute a Cross Origin Resource Sharing (CORS) protocol when a custom header is defined for any http request. CORS places a additional protocol demands on OCCI servers and OCCI clients that normally would not need to support CORS.
> 
> I would strongly suggest to avoid the complexities associated with OCCI meta-data in the http message header area and select an alternative approach placing OCCI meta-data  in the http message body.
> 
> b/r
> gary mazzaferro
> 
> 
> _______________________________________________
> occi-wg mailing list
> occi-wg at ogf.org
> https://www.ogf.org/mailman/listinfo/occi-wg

-- 
Alexander Papaspyrou
alexander.papaspyrou at tu-dortmund.de

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Alexander Papaspyrou.vcf
Type: text/directory
Size: 498 bytes
Desc: not available
URL: <http://www.ogf.org/pipermail/occi-wg/attachments/20120210/81aff590/attachment.bin>
-------------- next part --------------

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4678 bytes
Desc: not available
URL: <http://www.ogf.org/pipermail/occi-wg/attachments/20120210/81aff590/attachment-0001.bin>