Slashdot Mirror


HTTP's Days Numbered

dlek writes: "ZDNet is running an article in which a Microsoft .Net engineer declares HTTP's days are numbered. (For those of you just tuning in, HTTP is the primary protocol for the world-wide web.) Among the tidbits in this manifesto is the inference that HTTP is problematic primarily because it's asymmetric--it's not peer-to-peer, therefore it's obsolete. Hey everybody, P2P was around long before Napster, and was rejected when client-server architecture was more appropriate!"

505 comments

  1. Yeah, but by pete-classic · · Score: 2, Offtopic

    don't most P2P systems use . . . HTTP as a transport?

    -Peter

    1. Re:Yeah, but by kooshball · · Score: 2, Interesting

      The article is especially funny since .NET is built upon SOAP which uses HTTP as its primary transport. Maybe MS realizes that .NET is a stupid idea and they want to set up HTTP as the scapegoat when it fails miserably

    2. Re:Yeah, but by osbornk · · Score: 2, Informative

      Well, not to comment on .NET, but SOAP can really be used over almost any transport, HTTP just being the most popular.

    3. Re:Yeah, but by Anonymous Coward · · Score: 1

      Do you even know what .NET is?

    4. Re:Yeah, but by kooshball · · Score: 1

      True, but SOAP was designed with HTTP as the primary transport so that it would be easy to get through corporate firewalls without having to open up more ports. This is one of the major objections of all the InfoSec folks like Bruce Schneier to web services.

    5. Re:Yeah, but by Anonymous Coward · · Score: 0

      Does anyone know what .NET is?

    6. Re:Yeah, but by Fulcrum+of+Evil · · Score: 1

      Does anyone know what .NET is?

      Yes. It is a marketing strategy.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    7. Re:Yeah, but by erasmus_ · · Score: 2, Flamebait

      Why post comments when you have absolutely no idea about the topic matter? Let's see, .NET is not built on SOAP, you're not even comparing anything that can be compared. .NET is a framework and a set of tools, whereas SOAP is a standard for XML data interchange. .NET applications can utilize SOAP, but saying that it's built on it is completely upside down.

      Next, let's discuss Microsoft realizing that .NET is a "stupid idea." Microsoft doesn't care about setting up a scapegoat because they're 100% sure it will work, and they're probably right. The whole company has been restructured to work with .NET and it is not going away. Latest copy of Windows in development is Windows.NET, latest set of development tools is Visual Studio.NET, latest certification is MCSD.NET. Getting a trend here yet?

      HTTP is old and needs to be replaced, as soon as we can figure out what the best replacement is. It will be extremely hard, just like IPv4 was, but very similarly, we had no idea the protocol would be used as it is being used today when it was developed. Microsoft is expressing something many other people know in this case, and the fact that a .NET architect said this does not really have anything to do with .NET, as this HTTP replacement would not happen for a long long time from now.

      I hope that addresses all your points, and educates you more about the subject at hand.

      --
      Please subscribe to see the more insightful version of th
    8. Re:Yeah, but by John_Booty · · Score: 2

      If you read the article, you'd see that near the end of the article, the guy comments on this. He states that P2P networks built on HTTP are mostly "hackery".

      I guess the moderator who modded you up didn't read the article, either. Nice.

      --

      OtakuBooty.com: Smart, funny, sexy nerds.
    9. Re:Yeah, but by Anonymous Coward · · Score: 0

      Does ANYONE even know what .NET is?

    10. Re:Yeah, but by kooshball · · Score: 1
      This is from Microsoft's explanation of .NET

      Microsoft .NET is Microsoft's platform for XML Web services...XML Web services are invoked over the Internet by means of industry-standard protocols including SOAP; XML; and Universal Description, Discovery, and Integration (UDDI).

      Sounds like .NET (or at least any .NET app that uses the network) is built on SOAP to me. As for the "stupid idea" part, That's obviously my opinion, but I don't think I'm alone.

    11. Re:Yeah, but by einer · · Score: 1

      just like IPv4 was

      Quick! Somebody tell my ISP that we're no longer using IPv4!!

      f'ing schill. go away.

      HTTP won't be replaced any time soon. If HTTP is broken it's not because the protocol is lacking, it's because no one (NO ONE!!) implements browsers correctly.

    12. Re:Yeah, but by jsprat · · Score: 1
      If HTTP is broken it's not because the protocol is lacking, it's because no one (NO ONE!!) implements browsers correctly.

      Do you mean HTML is broken or HTTP is broken. If you do mean HTTP, how do the browsers break it?

    13. Re:Yeah, but by Anonymous Coward · · Score: 0

      Yes, but please hear me out...I just started using Morpheus about a week ago. It's a multi-tiered P2P hybrid...something like a compromise between napster and gnutella. More scalable, but still not reliant on a 'master' server like napster used.

      What I liked to do was to run Morpheus all the time, so that I could upload from my pool of about 500 MP3's, and do my part to contribute to the filesharing community. While Morpheus was in the background, I would play games, surf the web...whatever I wanted. I have DSL, and a pretty front end system, so I wasn't too concerned about running out of resources.

      What I noticed was after playing counter-strike for about 30 mins...is that my ping would escalate steadily from around 80ms to 600ms...rendering the game completely unplayable after about 40 mins. I tried increasing the heapsize...read all over the web to try and figure out what the problem was. I figured it couldn't be morpheus, because I set the maximum upstream usage at about half of my maximum(256 Kb/s).

      After a while I came across a posting by a guy who was also using Morpheus...but surfing the web. He said his download and surf speeds would degrade after a while...very similar to what I was experiencing.

      So I turned off Morpheus, and the trouble stopped =(. My ping was fixed. Steady at about 90ms.

      I later read that there's an inherant weakness in the TCP protocol that enforces the asymmetric(client/server) model. Unfortunately Microsoft may be right about this one =(, I just hope there's another way to fix P2P than using .net

    14. Re:Yeah, but by pivo · · Score: 1

      .NET, simply, is a method for warming food items, such as grilled cheeze sandwiches, in the field and with a minimum of resources.

      But .NET is more than that. The warming function, and .NET as an eintity, is only an intermediary point between language and reality. .NET is constituted by the same sort of unitary traits that have been used to explain the "one" and the "one more". But this trait in .NET is not identical with the unitary trait, since in .NET we have a collection of differential traits. In other words, we can say that .NET is constituted by a set of signifiers -- for example, bread, cheeze, butter, etc. -- a set wich is finite. Each signifier is able to support the same process with regard to the subject, and it is very probably that the process of the grilled cheeze sandwich is only a special case of this relation between signifiers. The definition of this collection of signifiers is that thay constitute what I call the Other. The difference afforded by the existence of .NET is that each signifier (contrary to the unitary trait of the sandwich) is, in most cases, not identical with itself -- precisely because we have a collection of signifiers, and in this collection one signifier may or may not designate itself. This is well known and is the principle of Russell's Paradox.

    15. Re:Yeah, but by erasmus_ · · Score: 1

      You do have one valid point is that I perhaps should not have said "was" as IPv4 transition is obviously nowhere near done (if at all started on a scale that counts). The point is that there was agreement reached on gradually phasing out the old protocol and trying to implement the new, even though it's extremely hard. The same would have to be done with HTTP if and when this ever happens.

      As for your ISP, well, if they're smart, they have probably already started looking at how IPv6 will affect them in the future. Thanks for cussing me out and confusing HTTP/HTML as well. Perhaps you will someday write a new browser that gets it right, and obsolete IE and Mozilla in a day. Good luck!

      --
      Please subscribe to see the more insightful version of th
    16. Re:Yeah, but by erasmus_ · · Score: 1

      Well of course it's your opinion, but even disregarding bias, what do you think MS should have done in updating their development technology? Let's look at the options?

      1) Give up completely. Not going to happen, whether you like MS or not, it's here for a while yet.

      2) Adopt Java. And give in to their arch-rival Sun. No company in any market would cave in like that.

      3) Keep making only minor improvements to COM and development tools. This is not going to keep market share, not with other technologies out there.

      4) Make something brand new.

      Option 4 is what they chose, and the only thing they could have chosen in this market. Many people like .NET, even people from the OSS side, or at least like the concepts behind it. You might not like it, but let's try to discuss merits, not bias.

      --
      Please subscribe to see the more insightful version of th
    17. Re:Yeah, but by einer · · Score: 1

      Damn you for pointing that out! ;) Yes, I misread. How damned embarassing.

    18. Re:Yeah, but by phyxeld · · Score: 2, Funny

      Yes. It is a marketing strategy.

      It's the queers. They're in it with the aliens. They're building landing strips for gay Martians, I swear to God


      It was funnier before I realized the second part was your sig, and not refering to .Net

      --
      __
      Choose mnemonic identifiers. If you can't remember what mnemonic means, you've got a problem. - Larry Wall
    19. Re:Yeah, but by MaggieL · · Score: 2

      2) Adopt Java. And give in to their arch-rival Sun. No company in any market would cave in like that.

      Instead, they're asking/expecting everybody else to cave in *exactly* like that to .NET. That makes *exactly* that much sense. IBM doesn't seem to have had much of a problem "caving in" to thier arch-riva; Sun...and both Sun and IBM (and trhier customers) are the better for it.

      --
      -=Maggie Leber=-
    20. Re:Yeah, but by erasmus_ · · Score: 2, Interesting

      Let me state right off that I'm probably at least somewhat wrong, but here's how I remember the timeline.

      - MS realizes that Java will be huge, makes Visual J++ tool.
      - Tool not too bad compared to what's out at that point, but slow adoption rate.
      - Many Windows developers hate performance of Java as compared to native apps.
      - MS tries to get some extensions to Java when apps are compiled for native Windows code. Embrace and extend, sure, but also:
      - Tries to get Sun to approve some functionality. Sun hates MS so drags its feet in approving anything MS does with Java.
      - When MS does its own thing, Sun sues.
      - MS loses, says Screw this, and drops JVM based on lawsuit result, and stops J++ tool development.

      I think they did try to use Java, and when that didn't work, .NET became an idea. You're absolutely right that they're trying to do the same with .NET, ie get everyone to cave in. But I can also kind of see the performance arguments they had, as almost every Java app or applet I have ever used was slow or crashed.

      I was a VUE testing administrator, and their whole system was in Java on Windows - oh, the humanity, the support issues, shudder. Anyway, I agree with you, I would prefer to see more Java support, but all I was saying is that their decision makes business sense. Java isn't like Linux, it was developed proprietary by their competitor, and only then became more open and popular. For them to go their own way is not completely unexpected.

      --
      Please subscribe to see the more insightful version of th
    21. Re:Yeah, but by Anonymous Coward · · Score: 1, Interesting

      ".NET is a framework and a set of tools"

      FYI -- You might want to surf around microsoft.com a bit. You will find that ".NET" is nothing more than a big gooey bowl of marketing mush that has no clear definition other than what's on Microsoft's current pricesheet. There is no clear technical definition, and the PHB Sell avoids discussion of CLR/IL/C#-based dev tools and sells the sizzle ("web services").

      Thus you are completely off base for flaming people on the definition of .NET, because Microsoft themselves have not come forward with a clear definition and are using ".NET" to sell everything from last year's version of Exchange to Passport logins to business consulting services.

    22. Re:Yeah, but by ctembreull · · Score: 2, Insightful
      > For them to go their own way is not completely unexpected.

      You're mostly right. It was *totally* expected. It's pretty much a given that MS only supported Java contingent upon:

      their ability to get away with embrace-and-extend

      their inability to come up with something different

      Once either or both of those conditions were no longer valid, MS had no reason whatsoever to support Java. After all, they "hate" Sun almost as much as Sun "hates" them. The more conspiracy-minded might state that MS supported Java only as a means to an end: draw it out, make it ubiquitous (which they did) and then leave it to die with no support on Microsoft's monopoly platform. Java without MS can almost certainly not survive. And, those same conspiracy-minded people would quite likely be right.

      Microsoft doesn't make knee-jerk decisions. EVERYTHING they do is calculated to produce a given set of results, whether that be to curry good will, give plausible deniability in the event of a lawsuit, extend their already-prodigious monopoly, or squash a competitor like a slow-moving insect. .NET is designed to do all of the above. It makes them look good 'cos they're trying to make stuff run for everyone everywhere "regardless of platform". It gives them another "But we're just innovating" card to play in court. It will eat Sun's bottom line for breakfast. And it will lock 95% of the world's computer users into a solution which they cannot get out of without discarding EVERY MS product they own and adopting Linux.

      When you look at it this way, it doesn't really matter so much *what* .NET is. What matters more is what .NET will do. Looks like all those checks to politicians were well-spent, Mr. Gates. You just bought yourself a remodeled, tacitly legal monopoly to abuse.

      --

      Chris Tembreull
      "My karma just ran over your dogma."
    23. Re:Yeah, but by pete-classic · · Score: 2

      Well, you'll be pleased to know that I was modded up twice and down twice, and lost a point of karma in the process, due to the cap.

      Hope this helps you sleep tonight.

      -Peter

      PS: This is off-topic, so I deserve to burn three more points on this post. :-P

      -P

    24. Re:Yeah, but by Shamanin · · Score: 1

      First off, a Microsoft guru... is that

      like a Lord of the Flies? Anyhow, hmmm.... now how did MS get the idea that

      http is not what it should be, could it be..... next generation dot NET inspired?

      We need to inact a law or possibly a restraining order against MS to stay at

      least 10 man years away from developing something to replace another that

      works just fine!!!

      There, I got that off my chest.

      --
      come on fhqwhgads
    25. Re:Yeah, but by Cid+Highwind · · Score: 1

      I think the inherent weakness is in the asymmetric bandwidth caps on DSL and cable modems, not a fundamental flaw in TCP/IP. If you have more than one or two people leeching mp3s from you at a time, morpheus be using up all your outgoing bandwidth almost all the time, leaving no room for counterstike packets.

      --
      0 1 - just my two bits
    26. Re:Yeah, but by Talanvor · · Score: 2, Funny

      Unfortunately, no one can be told what .NET is, you have to see it for yourself.

    27. Re:Yeah, but by saintlupus · · Score: 4, Insightful

      HTTP is old and needs to be replaced, as soon as we can figure out what the best replacement is.

      Er, why? Am I not being advertised to in the most efficient, flashy manner?

      Fuck, the majority of what I use the web for could be handled by Gopher, let alone this fancy pants HTTP protocol.

      --saint

    28. Re:Yeah, but by erasmus_ · · Score: 1

      Well perhaps I'm not as conspiracy-minded, but you almost make it sound like Microsoft cannot make mistakes by trying to say that they planned to have their Java support fail so that they could say "Well, we're not bad, at least we gave it a shot." As someone else with a much better memory than I pointed out in this thread, MS has had plenty of failures, and they cannot always plan for the market reaction that they're going to get. For you to say that they failed on purpose, so that they could have plausible deniability is giving them a little too much credit, methinks.

      I also don't think they're immune from scrutiny as you say, the monopoly proceedings cost them quite a lot if you examine their earnings reports. .NET is just ripe to open even more allegations against them. Just because it is has been released does not mean that they have a "legal monopoly to abuse."

      --
      Please subscribe to see the more insightful version of th
    29. Re:Yeah, but by ccoakley · · Score: 1
      This is typical Don Box (which is good). Have you read "Essential COM" or attended WinDev? Don states things as he sees them, states the pros and the cons to facilitate understanding. I see nothing bad about him stating that .NET will have limitations due to a protocol used under the hood.


      Most of .NET does not "need" HTTP. The current implementation of the SOAP crap all runs over HTTP over port 80, but the CLR, the call by name method of RPC, and other goodies are independent of the HTTP protocol. I think that the article makes a good point: web services that take time won't really work so well over HTTP without cheap workarounds. The fact that once a request has been submitted to a web service that the client has to continually poll for status until the processing is completed is very wasteful. The bandwidth for the polls is just waste and the processor time to make and process the polling is a waste.


      I don't think that Microsoft can blame HTTP for the reason that .NET fails. Microsoft chose the technology to use. There's not much in .NET that Microsoft did invent. They can just as easily blame XML, SOAP, JIT compilers, a standard library, an unstable OS, etc. I'd rather they get the opportunity to blame developers like me who used to work for a Microsoft only shop who moved to free alternatives for implementation like PHP and JAVA (don't flame me for the Java choice, there are just some things that I can't do in PHP that I need to do).

      --
      Network Security: It always comes down to a big guy with a gun.
    30. Re:Yeah, but by erasmus_ · · Score: 1

      I'll refer a full discussion of why HTTP is poor to some already existing excellent posts, but the quick answer here is that you're confusing interface with what's going on behind the scenes. Sure you could build a simple interface that could be accessed even using Gopher, but applications are more and more complicated on the server side, and getting everything to communicate is hard with a stateless short-term protocol. Flashy ads = HTML, on intranet apps this is not even an issue.

      --
      Please subscribe to see the more insightful version of th
    31. Re:Yeah, but by palndron · · Score: 0

      Hehe,

      Stuart, I like you, you're not like the other people, here at slashdot...

      --
      a man, a plan, a canal, panama
    32. Re:Yeah, but by Random+Feature · · Score: 2

      Actually, IPv4 is holding up well because of the US. Japan and the PacRim is almost completely IPv6 at this point.

      Not unlike the mishmash of wireless technologies we have whereas Europe and Japan are almost all 2.5G+. Some networks in the US are still utilizing old technology.

      IPv4 isn't going anywhere for a while. The cost to upgrade is one thing, and interoperability is another. Imagine trying to implement IPv6 at a peering point, where one or more peers won't be moving to IPv6 and one or more will. What the hell do you do?

      As far as HTTP, there isn't anything wrong with the protocol. Like other protocols (and technologies) it's being utilized by freaking idiots to do that which it was not designed to do. And then they blame the protocol rather than their misguided attempts to bastardize the use of the protocol.

      --
      I don't have a solution, but I certainly admire the problem.
    33. Re:Yeah, but by John_Booty · · Score: 2

      It won't help me sleep, but if everybody read the article next time, it will help everybody else read Slashdot. And then maybe they'll get to bed a little sooner since they didn't have to read/write/wade through as many redundant posts raising issue already covered in the article. :)

      PS: If you use the "no score +1 bonus" option, they're usually a little easier on the pseudo-offtopic posts like these. Although, by typing that, I'm just begging to get this one modded down!

      --

      OtakuBooty.com: Smart, funny, sexy nerds.
    34. Re:Yeah, but by erasmus_ · · Score: 1

      Well, you have to give us somewhat of a break in the USA, larger geographically and greater number of hosts means it's a great deal harder to change. I haven't heard your argument before though, do you have any link with information about IPv6 having such high penetration over there?

      You do raise a good point regarding peering companies. But I imagine they do what any transition requires one to do - maintain separate systems until completion, in this case being separate logical (and perhaps in some cases physical) networks. As for peers that want this functionality, but peering company is not cooperating, I'm sure they could find another host. Again, this might be simplistic. But yeah, IPv4 is definitely here for a while, I didn't see its demise mentioned on that "timeline of the future" article a few days back :)

      --
      Please subscribe to see the more insightful version of th
    35. Re:Yeah, but by pivo · · Score: 1

      You make it sound like Microsoft was just trying to support Java and mean old Sun took it away from them. That's not what happened.

      The whole point of Java is platform nutrality. Even if Java were fast enough at the time, Microsoft would still want to add measures to ensure that Java apps written for Windows wouldn't run on other platforms, that's how they do things. This wasn't an example of Sun dragging their feet, it was an example of Sun not caving to MS. By adding a Windows platform specific API, Sun would have destroyed Java on their native platform.

      Why would Sun want to encourage or even support the development of Windows only applications? Sun makes their money by selling hardware so Windows specific applications would negate the benefit of Java for it's creator.

    36. Re:Yeah, but by Anonymous Coward · · Score: 0

      How is it then that I reserved more upstream "bandwidth" then the average 56k'er uses, and I get a ping of 600? I.e. that portion of the 256kbit upstream was reserved for programs other than morpheus.

    37. Re:Yeah, but by Random+Feature · · Score: 2

      http://www.yankeegroup.com/webfolder/yg21a.nsf/Sur veys/6A7A1DBA8B3A49D985256B4B0064C185?OpenDocument
      http://www.japaninc.net/newsletters/?list=WW&iss ue =4%0A2

      One clarification, the penetration of IPv6 is in research and dev at the moment. The committment is there, however, not only from business but from manufacturers. Sony, Microsoft, F5, et al have all finally committed to IPv6 - but all because of Japan and the PacRim. They aren't pushing it here and you rarely hear about it here, because the US isn't as interested at the moment.

      We do have a HUGE number of hosts and interconnections and competition. That makes things difficult and we don't have the impetus that Japan/PacRim has to move forward as fast as possible. They're running out of IPs, we aren't.... yet.

      --
      I don't have a solution, but I certainly admire the problem.
    38. Re:Yeah, but by Random+Feature · · Score: 2

      Here's the correct links: Yankee Group

      and

      Jap@n, Inc

      Sorry... long day.

      --
      I don't have a solution, but I certainly admire the problem.
    39. Re:Yeah, but by Anonymous Coward · · Score: 0

      wait wait, my bad...the change didn't take effect. Just restarted it to check and it's set to unlimited. Resetting to 128 kbs, will post on how it goes.

    40. Re:Yeah, but by Anonymous Coward · · Score: 0

      How did you get Morpheus's bandwidth usage? From what I can tell, the 'transfer rate' that the UI shows you excludes all of the search/broadcast traffic (which increases as more nodes learn about you). Anyway, I've noticed that issue and figured it was just Morpheus' greedy protocol and not TCP itself.

    41. Re:Yeah, but by erasmus_ · · Score: 1

      Very interesting, thanks for the information. I certainly did not know about Japan's role, and it makes sense for the rush if there were not too many address blocks allocated to the region. The first article does mention production deployment of Q4 of 2002, so perhaps not as fast as you might have said, but certainly faster than most of US. I can't wait for Japan to make USA look bad and spur adoption here faster.

      --
      Please subscribe to see the more insightful version of th
    42. Re:Yeah, but by Anonymous Coward · · Score: 0

      P2P is better in the sense that there will always be more then one copy of the file, making the files more redundant, and less likely to become ghosts (disapear), however, files would always be changing, you couldn't book mark anything, which is much more inmportant i believe

    43. Re:Yeah, but by notfancy · · Score: 2, Informative

      I quote in full, because the lack of understanding of this Box "guru" guy is appalling:

      Another problem with HTTP [...] is that it is asymmetric. "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond. For peer-to-peer applications this is not really suitable," [...] programmers create hacks to get the limitations of the protocol [...] "It's all hackery, it's all ad-hoc and none of it is interoperable,".

      Last things first, to clear the path: a blatant comission of the sin of conflation (a.k.a. bait-and-switch)! What does interoperability have to do with tomatoes? I guess it's a disclaimer for future incompatibilities ("hey, we already told you, HTTP is not interoperable").

      Then, either I slept through all my classes on Networking, or the guy doesn't really know what he's talking about. You don't need to be Apache to be an HTTP server, the code to be a modest but fully HTTP/1.0 compliant server is not much more than the code needed to be a modest but fully HTTP/1.0 compliant client. So the issue of symmetry is more one of implementation than anything else. P2P is about roles (who's the initiator and who's the responder, as opposed to who's the client and who the server), not code (how do I write the initiating side and the responder side). Anyway, it's obvious that the code implementing the functions defining both roles will be different; otherwise, initiating wouldn't be any different from responding from the operational point of view and thus indistinguishable at any given moment. Let me stress this point: you have to be able to determine the direction of the flow at any given moment in time, even when talking about P2P protocols. It makes no sense to ask for a resource by sending it.

      Among the problems with HTTP [...] is the fact that it is a Remote Procedure Call (RPC) protocol; something that one program [...] uses to request a service from another program located in another computer

      HTTP is not an RPC protocol, it's a file transfer protocol (as a quick perusal of RFC 2616, Section 5 will show). Anything built on top of that will be, by definition, a hack. So why so much grief?

      Indeed, you can type a GET request as application/x-rpc-call or anysuch, and pass parameters on the URI. But it's cheating, isn't it? So why is using HTTP as a P2P protocol "a hack"? This is a non-issue.

      Lastly:

      This works for small transactions asking for Web pages, but when Web services start running transactions that take some time to complete over the protocol, the model fails. "If it takes three minutes for a response, it is not really HTTP any more, [...] I need a way to send a request to a server and not the get result for five days."

      Well, he's right on this count. But he doesn't know (or doesn't tell) why: as defined by the standard, HTTP is an application-level protocol. You can't build upon it, it's level-7, top of the stack, period. If you build upon it, you're breaking the ISO/OSI model. But aren't cookies a way to implement sessions on top of HTTP? Well, yes and no. Aren't cookies a hack? Of course. Why can't you use something like that to implement IOUs or tickets or return thunks or any other model for delayed responses? Because it would be a hack. Yes, but no more a hack than the eminently acceptable (and widely accepted) cookie hack. You can always reify state (including the result in a RPC); cookies just are a proxy for a lazily reified state.

      I'm mystified (and angry) at the lack of understanding the article evidences.

    44. Re:Yeah, but by erasmus_ · · Score: 1

      Moderation Totals: Flamebait=1, Insightful=1, Interesting=1, Total=3.

      Now let's guess which moderator was biased and anti-anything that speaks positively of Microsoft. Is it at all possible to have moderators that do not use moderation to push their views? I'm sorry if I'm complaining, but it's irritating to try to have a balanced discussion only to try to have people with their own agendas shut you up.

      I hope meta-moderation catches this eventually.

      --
      Please subscribe to see the more insightful version of th
    45. Re:Yeah, but by einhverfr · · Score: 2

      Actually, the real irony is that the real advantage of SOAP over raw HTTP is simply not one mentioned in the article (and actually CONTRADICTS the article):

      SOAP like HTTP is an RPC-based protocol, but HTTP is usually connected with HTML by default, which does not allow the rich data definition that XML provides. This means that transmitting objects over HTTP requires another protocol to work over it.

      If RPC is so bad, why the hell do they use SOAP?

      --

      LedgerSMB: Open source Accounting/ERP
    46. Re:Yeah, but by ahde · · Score: 3, Interesting

      But how is MiscroSoft going to get .NET into the homes of the average computer user?

      Most of them are still on Windows 98 -- and don't see any convincing reason to change. They've seen four "new" versions of windows and many have tried them and gone back to 98. MicroSoft's delivery mechanism has been the Windows Update (which most people without broadband or with a healthy sense of paranoia disable) and Internet Explorer. With IE 5.5 now fairly usable and standardized, they'll need a new app to get .NET into homes. Office has been their most recent candidate, but most users can either get by without it, or will use older versions (95, 97, 2000, XP) The latter having some, but not all, of the available infiltration functionality built in. Windows Media is a likely future choice, but if downloads become too bloated, user will likely turn elsewhere.

      Microsoft's only vehicle now seems to be new systems from OEMs. Unfortunately, hardware is no longer the limiting factor for most users.

    47. Re:Yeah, but by ahde · · Score: 2

      I believe the HTTP limitations were solved when CGI was invented. Now you could add a query string to your request and maintain transaction state over time!

      GET index.htm?session_id=12345 HTTP/1.0

    48. Re:Yeah, but by overThruster · · Score: 1

      HTTP isn't cool because it lacks the letter "X." I read that MS speech and thought to myself, "Self, we don't need a new protocol--we need a universal shopping cart application co-hosted by Visa and the IRS." This would obviate the need for 99% of all web development. I get a little sick of the way our industry always has to have a next cool thing. Yesterday it was WAP, today it's WSDL and SOAP, tomorrow it will be HTTP# or some other silliness. Nobody in the trade press ever stands up and says that the latest fad is a Completely Redundant, Obsolescent, Component Kernel filled with Simple, Heterogenous, Internet Traffic.

    49. Re:Yeah, but by StillaCoward · · Score: 1

      Sorta reminds you of all those maddening Mlife commercials that ran for several weeks up until the Superbowl.

      In both cases, I may never know what it is but I know I'll never use it.

    50. Re:Yeah, but by Anonymous Coward · · Score: 0

      >>The whole point of Java is platform nutrality.

      If this is the case, then why is an app server like BEA able to extend the framework and language?

      Last time I checked, BEA is not available on all platforms, and Sun certainly hasn't adopted their changes.

    51. Re:Yeah, but by Anonymous Coward · · Score: 0

      >>The article is especially funny since .NET is built upon SOAP which uses HTTP as its primary transport.

      The comments were made specifically about P2P communications. Not for all solutions.

      Yes, Soap is part of Microsoft's Web Services strategy as it is IBM's as well. Your point?

      Leave it to the zealots to turn a comment about HTTP not being an ideal protocol for P2P and turn it into a .net debate.

      Morons.

    52. Re:Yeah, but by jo42 · · Score: 1
      > *.NET Getting a trend here yet?

      Yeah, Marketing Spin Doctor Droids At Work At Microsoft.

    53. Re:Yeah, but by jo42 · · Score: 1

      Because anything but HTML over HTTP is a kludge. Instead of developing an appropriate protocol, or using an existing one, everything is being shoved over HTTP because the designers/developers are a bunch of forkin' idiots.

  2. Well Duh... by pridkett · · Score: 4, Insightful

    Anyone who has tried to understand the various "standards" for web services and their associated train wreck (I think I'm being gracious here) would realize that most of them are bolted on to a protocol that was never meant to serve them in such a way. HTTP is meant for quick requests, not monoloithic requests that take a long time.

    Before you rush to say Mickeysoft is destroying the web, please realize that he's referring to web services, not your personal home page (although I'd imagine they'd like to make that proprietary too).

    --
    My Slashdot account is old enough to drink...
    1. Re:Well Duh... by commonchaos · · Score: 1

      Amen to that, Because of this train wreck companies are able to make money out of "application servers". Which take care of all the protocol hacking that has to go on to make a "web application"... HTTP really sucks for doing dynamic content.

    2. Re:Well Duh... by anonymous_wombat · · Score: 1

      I don't like M#cr@s*ft more than anyone else, but the article seemed quite reasonable. HTTP is not ideally suited for RPC. SOAP does not require HTTP, it just started out that way because it was easy to do. Noone is saying that HTTP shouldn't be used for web sites. As far as SOAP goes, what is wrong with good old-fashioned sockets? Both parties can be servers (and clients) and everyone is happy.

    3. Re:Well Duh... by Anonymous Coward · · Score: 0

      Exactly. I am currently porting an application from DCOM to SOAP because the client wants to use it over a VPN solution that allows traffic on port 80. The VPN 'solution' introduces a tremendous amount of latency. To combat this, I am using gzip and HTTP 1.1...

      This makes all the data coming from the server nice and small and combats the latency nicely. However, you can't send a compressed request to either Apache or IIS and if you could it would be an extension of the RFC. As a result, if you need a lot of data to make a request like say 'store this big stream to the database and tell me if it worked,' it will be much slower than the inverse 'give me a big stream from the database.'

      This is a limitation in HTTP 1.1 and it has nothing to do with how 'stateful' the protocol is.

      If you have a client sitting somewhere across a high-latency network talking to a server, you are going to want to minimize round-trips which has a tendency to create 'documents' that can get fairly large. With http it is much easier to receive them than it is to send them.

      I think this is the kind of challenge Don is talking about.

    4. Re:Well Duh... by Anonymous Coward · · Score: 0

      Before you rush to say Mickeysoft is destroying the web, please realize that he's referring to web services, not your personal home page (although I'd imagine they'd like to make that proprietary too).

      Well, it already is, to some extent, if you're using FrontPage(tm)(sm)(bfd), since you're not allowed to use it to criticize The Dominant One.

  3. What about things that P2P doesn't make sense for by Hoarke42 · · Score: 2, Insightful

    I don't think a P2P protocol would make more sense for me reading /. or ESPN websites. I agree that P2P could be more useful than HTTP for applications, but I don't see why they wouldn't keep HTTP around for simple browsing.

    But... maybe I just answered my own question. Is this a thinly-disguised way to hide a revive of the much-touted-a-few-years-back "push" technology for the web?

  4. The 'holocaust' by Ed+Avis · · Score: 3, Funny
    From the article:
    Box likes to think of HTTP as the "cockroach of the Internet" because "after the holocaust it will be the only protocol left standing."
    Also known as 'moronic firewall policies'.
    --
    -- Ed Avis ed@membled.com
  5. http over used by bobaferret · · Score: 2, Interesting

    This sounds like wishfull thinking. Http is over used. Every time someone wants to implement a new protocal latly , it seems that they do it over http, as opposed to implementing there own. esp, if it can be async.

    -jj-

    1. Re:http over used by duffbeer703 · · Score: 2

      With good reason -- many 'security' and firewall administrators will not let other protocols through proxy servers/firewalls.

      Of course if they had a clue they would know that you can encapsulate just about anything in http.

      --
      Conformity is the jailer of freedom and enemy of growth. -JFK
    2. Re:http over used by storem · · Score: 1

      And you would know I can filter that out also :-) root@your.firewall

    3. Re:http over used by schon · · Score: 1

      With good reason -- many 'security' and firewall administrators will not let other protocols through proxy servers/firewalls.

      Huh? How is this a "good reason"?

      A firewall serves a purpose. If a firewall admin decides that they don't want a particular service enabled (say IRC, for example) then an "application designer" (which generally know ZERO about security) shouldn't take it on themselves to force it.

      Of course if they had a clue they would know that you can encapsulate just about anything in http.

      And if YOU had a clue, you'd realize that not everybody thinks it's great to have a wide-open network.

      If a site admin decides they don't want something running, then they don't want something running, and it's nobody else's business.

    4. Re:http over used by phyxeld · · Score: 1

      If a site admin decides they don't want something running, then they don't want something running, and it's nobody else's business.

      You've clearly never been a user on a network with stupid-bitch admins who block everything.

      --
      __
      Choose mnemonic identifiers. If you can't remember what mnemonic means, you've got a problem. - Larry Wall
    5. Re:http over used by duffbeer703 · · Score: 2

      As an application developer, I would want my product to be easily integrated into an enterprise.

      Clueless firewall admins make it difficult to get new ports open on a firewall. Office politics typically makes it easier to deny requests for new services rather than allow new ones.

      --
      Conformity is the jailer of freedom and enemy of growth. -JFK
    6. Re:http over used by ahde · · Score: 2

      the stupid bitch admins are just doing their job. Your job isn't to chat or waste their bandwidth. If they could stop you surfing and posting on slashdot all day long and not impair other necessary functions, they would. And you'd be alot more productive.

    7. Re:http over used by phyxeld · · Score: 1

      And admins in school settings are just doing their job too, which happens to be censoring entire school district's net access so that anything deemed unchristian by the administration won't be accessible.

      --
      __
      Choose mnemonic identifiers. If you can't remember what mnemonic means, you've got a problem. - Larry Wall
    8. Re:http over used by schon · · Score: 1

      And again...

      As an application developer, I would want my product to be easily integrated into an enterprise

      As an application developer it's not your place to dictate the security policies of the sites where your application is used.

  6. zdnet.com.com? by kwishot · · Score: 1

    The link is wrong in the post...but somehow it still works??
    Anyways.... "...HTTP presents a major challenge for Web services, for peer-to-peer applications and even for security..."

    Ok...so don't use peer-to-peer applications via HTTP?

    A sentence later...

    "A replacement will eventually have to be found, he said, but it is not at all clear who will provide this replacement. "

    An industry-wide protocol "does not work for Microsoft" so it must be replaced.
    Sadly, they will probably remove native HTTP support from their OS in the future so no one has a choice but to use their own proprietary protocol (yes, I realize they didn't cite a replacement, but who else can see it coming? It's not like they haven't done this before...try accessing www.msn.com with old netscape).

    -kwishot

    1. Re:zdnet.com.com? by thesolo · · Score: 2

      The link is wrong in the post...but somehow it still works??

      The link isn't wrong. Com.com is the C|Networks portal, so it's essentially C|Net, which in turn owns ZDNet.

    2. Re:zdnet.com.com? by rlowe69 · · Score: 2

      The link is wrong in the post...but somehow it still works??

      Indeed. http://www.com.com" is owned by CNET. A pretty dumb way to name your site, but ... whatever floats your boat. :)

      It doesn't look like it's used directly though, I get 'connection refused'.

      --
      ----- rL
    3. Re:zdnet.com.com? by qqtortqq · · Score: 1

      if you go to com.com, cnet/zdnet own it. clever, eh?

    4. Re:zdnet.com.com? by erasmus_ · · Score: 1

      I hope the "they will remove native HTTP support" comment is trying to be funny. That would be not just shooting yourself in the foot for them, but more like in the face. And Microsoft does not go it alone when it comes to web standards - they always try to submit to a standards committee, as they know that will greatly improve their chances of getting it to be adopted.

      I love your proof of this though, the fact that old Netscape does not work for MSN.com. Yes, I think every media company should make sure that their site works on every possible version of every browser, even if it's hopelessly outdated. For more evidence of Microsoft Evil, try loading their homepage with Mosaic 1.0 - Oh, no, widely adopted web standards like DHTML/CSS have changed since then and it doesn't look right! Evil!

      --
      Please subscribe to see the more insightful version of th
  7. And they'll replace it with what? by Gruturo · · Score: 1

    And..... with what is Microsoft proposing to Embrace/Extend/Engulf it? I mean.... they wouldn't be saying anything like this if they had no interest in replacing it with something....um... proprietary? Can you imagine how cool it would be? Now Micro$oft has a copyright on MSFT (Multimedia Streaming and File Transfer protocol, incidentally it's also their Nasdaq code :-) ) and so the browser war is finally over. The Web server war, also, is finally over. Peace at last.

    --

    Vacuum cleaners suck. Kings rule.
  8. HTTP needed replacement long ago by Ars-Fartsica · · Score: 3, Interesting
    HTTP-NG tried to get off of the ground but ultimately it was too early and too complicated.

    There are obvious reasons to replace HTTP - the most obvious being the creation of true stateful transactions. That said, there will be support for HTTP until 2025 at least, and ultimately legacy support for HTTP will be painful and necessary for coders.

    1. Re:HTTP needed replacement long ago by Anonymous Coward · · Score: 0

      Its not like session tracking is hard or anything, anyway:

      HTTP was designed to be stateless so that it would be quick. If you need a stateful protocol then write a new one, rather then try to change something that is proven to not only work well but also has the ability to be adapted to uses that it was never intended to. Don't like HTTP, don't use it. There is nothing wrong with HTTP, except for people trying to use the wrong protocol for a job it was never intended, then whining about it.

  9. He's got a point by wiredog · · Score: 2, Insightful

    I've been doing web app development for a few months, and the stateless nature of http is a royal pain. Pretty much the only reliable way to maintain state information, in HTTP, is through cookies.

    1. Re:He's got a point by DohDamit · · Score: 0, Flamebait

      A few months? Well, that explains why you don't know a fucking thing about server-side scripting, the different methods of moving data around in forms, javascript, and plug-in's. Hey scoobie, there's more than just plain HTML out there!

    2. Re:He's got a point by J.+Random+Software · · Score: 1

      IETF recommends that browsers make disabling cookie support possible for privacy (for the same reason I don't walk around with my True Name tattooed on my forehead). Hidden fields are more reliable and don't represent the same threat.

    3. Re:He's got a point by Anonymous Coward · · Score: 3, Insightful

      Put the data you need to track in a database table or two and use hidden form vars to build the query to grab what you want.... Instant serverside cookies... No muss... Just another fscking query....

    4. Re:He's got a point by Anonymous Coward · · Score: 0
      Hidden fields are a pain in the ass for most users. Why would users want to give up the use of their Back button just so that the idiots who can't figure out how to delete cookies have a little more privacy?

      Cookies are stored on your computer and they're under your control. If you don't like what Doubleclick does with them, download a cookie manager and stop complaining.

    5. Re:He's got a point by cornflux · · Score: 2

      The parent comment is not a troll -- the coward makes a good point about potential abuses.

    6. Re:He's got a point by DrSkwid · · Score: 2

      I use http login and server side tracking. No cookies required but you do need to get the users to register first.

      I was going to use unique URI's like :
      http://www.genie.co.uk
      It redirects you to a big url with a 20 digit number.

      Maybe the real problem is in ipv4, NAT'd IPs mean individual machines can't be discrimanted.

      So whatever protocols are introduced will only be a fad that's here to stay! (thanks Matt Groening)

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    7. Re:He's got a point by DrSkwid · · Score: 1

      bah s/discrimanted/discriminated

      must sit nearer the screen

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    8. Re:He's got a point by Chris+Burke · · Score: 2

      Not if it's an encrypted connection. Then the hidden fields are just as safe as your credit card number is when you enter that into a form.

      --

      The enemies of Democracy are
    9. Re:He's got a point by hopews · · Score: 1

      This is completely missing the point. The point was that a hidden input field in a web page isn't hidden from the user as well as a cookie is. Any monkey can easily change the value of the hidden field by modifying a get string. It takes a bit more monkeying to change a cookie (not a whole lot though)

    10. Re:He's got a point by Hast · · Score: 1

      What's stopping you from putting a session ID in the hidden field? That would yield the same result.

      I do agree with you though. At least I don't have a big problem with cookies.

    11. Re:He's got a point by Hast · · Score: 1

      Actually with the number of cookie editors around I would actually assume that the risk is higher for a cookie.

      And the cookie file is easily editable with Notepad/Emacs in any case. If you want to spoof another user by changing a hidden field you'd have to download the file, edit it and then spoof it so that it would seem to the server as if you had just accessed the page from the server itself.

      And if you are nervous about spoofing ID's in the first place you should use a cryptographic hash as the session ID. Good luck spoofing that!

    12. Re:He's got a point by Chris+Burke · · Score: 2

      It takes a bit more monkeying to change a cookie (not a whole lot though).

      So what you're saying is that the crucial flaw in the hidden-field method is that it takes slightly less work to get at and modify? I guess maybe that was the point, but that's a stupid point.

      If the state you are trying to maintain has some level of sensitivity, and you're storing it in plain text, then you're a retard whether or not you use hidden fields, cookies, or some new made-up protocol. I don't remember anyone saying that the field has to be as simple as &lt input type="hidden" name="secret_passwd" value="imaidiot" &gt

      The data should be encrypted with a private key (not known to the client), along with a session key, time stamp, and a random number (all in the same token, to prevent replay and various other attacks, not to mention making it impossible to know exactly what the cleartext is). You can safely give this token to the client without fear of them modifying it, and if the secure connection prevents others from stealing the token, then you've got your solution. This token can be kept in a cookie, or a hidden field.

      Dealing with security and untrusted users is a difficult problem. However that problem is neither complicated nor solved by HTTP.

      --

      The enemies of Democracy are
    13. Re:He's got a point by ahde · · Score: 2

      some people think you should be able to maintain state when you click on the back button with the browser.

      But then, so does mozilla. Stupid.

    14. Re:He's got a point by Hast · · Score: 1

      But a cookie wouldn't be able to do that any more magically, right?

      It would be up to the broswer to refill the forms you have filled out and up to the state machine on the server to realise that you went back to a previous page. (And thus remove any posts you made.)

  10. What the title _should_ read: by PureFiction · · Score: 5, Insightful

    "HTTP's days as an RPC transport are numbered"

    HTTP works great for a large number of purposes. It will continue to work great for a large number of purposes. However, it is not so great when you are trying to build powerful RPC mechanisms like SOAP on top of it. It's the latter where HTTP will slowly loose favor.

    Your web browser will still be making HTTP requests for HTML documents many years into the future...

    1. Re:What the title _should_ read: by krogoth · · Score: 2

      On the other hand, one of the great advantages of RPC over HTTP is that it can take advantage of existing software, instead of inventing a new transport protocol and running another server.

      --

      They that quote Benjamin Franklin on liberty and safety deserve neither.
    2. Re:What the title _should_ read: by aminorex · · Score: 2

      Agreed, HTTP is not designed for RPC, so writing
      an RPC system on top of it is sometimes painful,
      but with software, one man's pain is all that it
      takes for everyone to benefit from that
      implementation, so why should anyone care?

      Oh, but I forgot, this was a Microsoft guy talking,
      and he assumes that everyone and his brother has to
      reimplement the same code because nobody would
      *dream* of sharing their "intellectual property".
      Pfft. I'll ignore that guy.

      --
      -I like my women like I like my tea: green-
    3. Re:What the title _should_ read: by egeorge · · Score: 1
      However, it is not so great when you are trying to build powerful RPC mechanisms like SOAP on top of it. It's the latter where HTTP will slowly loose favor.

      If it weren't for the draconian firewall/proxy policies out there, we would be able to use a truely excellent (and standard) RPC protocol that already exists, IIOP (Internet Inter-Orb Protocol, the language of CORBA).

      I have written many CORBA apps only to find that the users were trapped behind an HTTP-only firewall or proxy server. The internet could be a much richer place if we just learned to treat non-HTTP protocols like first class citizens.

      IIOP is fully capable of doing everything that web services need including high transaction rates, callbacks, and most importantly authentication. The only advantage that systems like .Net and SOAP have over IIOP is that the wire protocol is XML based and therefore easy to for humans to comprehend.

    4. Re:What the title _should_ read: by dpt · · Score: 1

      > trying to build powerful RPC mechanisms like SOAP on top of it.

      Powerful RPC mechanisms like SOAP?

      Compared to mature, complete and portable technologies like CORBA it's still in the stone-age. It currently describes a fairly primitive "RPC with XML" implementation, and that's about it.

      And it *definitely* should not be running over HTTP/port 80. That's just a fundamental error.

    5. Re:What the title _should_ read: by jo42 · · Score: 1

      Ah, duh, you still need something that can handle SOAP, i.e. a SOAP 'server' - so now we have a SOAP 'server' as a parasite inside an HTTP server. Good engineering, no?

  11. microsoft on interoperability? by I+Want+GNU! · · Score: 2, Funny

    Does anybody else find it hilarious that this guy from Microsoft says "It's all hackery, it's all ad-hoc and none of it is interoperable." I mean, this is the same Microsoft that goes out of its way to prevent MSN.com from being viewed with other browsers than IE, completely ignores HTML standards and tries to make its own proprietary HTML tags, tries to prevent Java from being interoperable, and uses closed APIs for Windows programming and proprietary formats for DOC files.

    1. Re:microsoft on interoperability? by SuiteSisterMary · · Score: 2

      But he's right. If you want to do anything beyond streaming static text and binary files, you need an add-on; something that forces state information and persistance onto a stateless and transient protocol. ASP, PHP, Cold Fusion, Tango, whatever.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
    2. Re:microsoft on interoperability? by RylandDotNet · · Score: 1

      and tries to make its own proprietary HTML tags

      *cough*<blink>*cough*

    3. Re:microsoft on interoperability? by damiam · · Score: 1
      I mean, this is the same Microsoft that goes out of its way to prevent MSN.com from being viewed with other browsers than IE

      msn.com loads fine in Galeon.

      --
      It's hard to be religious when certain people are never incinerated by bolts of lightning.
    4. Re:microsoft on interoperability? by I+Want+GNU! · · Score: 2

      I was referring to this article. They blocked all other browsers and displayed a message saying so, but really bad press caused them to back down.

  12. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  13. the declaration has been made by qqtortqq · · Score: 2, Insightful

    I don't know about anyone else, but I'm not going anywhere near .NET. Applications installed on my hard drive, including opera, work just fine for me.

    This is another example of M$'s ego. They keep trying to change the direction of personal computing and the internet, and seem to never have any thoughts about "well, what if this doesn't catch on..." What if they move all of their applications over to .NET, and no one uses it? My dad/brother were perfectly happy with office 97 until i gave them star office, and they both run windows 98SE. How soon until people get tired of having the way they compute changed and just stick with what works?

    1. Re:the declaration has been made by atlasheavy · · Score: 1

      I don't know about anyone else, but I'm not going anywhere near .NET.

      It may not be long before you have a choice. You may never install the .NET framework on your computer, but chances are that you will still make use of it on websites that you use before too long. It's incredibly nice for developing web services, which, if the pundits are to be believed are going to catch on in a big way. Besides web services, I'd much rather develop software using C# or VB.NET and the .NET framework than with the old-school windows APIs (note: my primary computer is currently an Apple TiBook. I develop with Obj-C/Cocoa primarily). This is, in a lot of ways, similar to the Win32 migration. People will hold out for a good long while, but eventually the world will get to the point where it's no longer possible to not switch. With Miguel DeIcaza advocating the use of Mono, you'll be able to do .NET development on linux even. The current systems may work, but it's always possible that the new stuff will work better. Or that you won't have a choice. Or a combination of the two.

      --

      iRooster, the Mac OS X a
  14. NAT & Firewalls by mikeee · · Score: 5, Insightful

    The problem is, most machines aren't even really *on* the internet anymore, just on the Web. Which is not as powerful, so you end up with these godawful kludges trying to run applications over HTTP.

    The Right Thing would be to get IPv6 out, make local client firewalls and sandboxing standard, and ditch NAT and central firewalls.

    Yeah, right.

    Instead we have SOAP, a RPC-over-HTTP kludge. We may as well run PPP-over-HTTP and have done with it...

    1. Re:NAT & Firewalls by ciole · · Score: 1
      The problem is, most machines aren't even really *on* the internet anymore, just on the Web.

      Huh? You mean running HTTP over TCP/IP doesn't qualify for being "on the internet"?
    2. Re:NAT & Firewalls by addaon · · Score: 2

      I believe he means that so many firewalls and such are blocking everything but 'kosher' HTTP. Even if I'm running HTTP over TCP/IP, it doesn't mean that I can also run My Own Protocol over TCP/IP... too often, these days, it's blocked somewhere down the line.

      --

      I've had this sig for three days.
    3. Re:NAT & Firewalls by mikeee · · Score: 5, Insightful

      If you don't have a real, static IP, no, you aren't really on the internet.

      If you are behind a firewall that only allows HTTP, no. If it only allows outgoing connections, not really. All you can do is what HTTP can do, which is much less than IP can.

      It would be really sad if the net were reduced to the web. "You say you need IP connectivity? Are you some kind of hacker?"

    4. Re:NAT & Firewalls by gaudior · · Score: 1
      ...get IPv6 out...

      And who is going to pay for this?

      ...make local client firewalls and sandboxing standard...

      And who is going to administer such an arrangement?


      The problem is, NAT works, and properly administered central firewalls work. IPv6 might have had a chance, had it been rolled out 6 or 8 years ago. Now, the infrastructure is just too big. The inertia is now too large to overcome. IPv6 will continue to grow in niche areas, But it will not replace most LAN and WAN installations. The appropriate analogy is the Desktop computing environment. Linux will never overcome the MS Windows inertia on the desktop. If the current state of affairs in Linux desktop environment and apps existed 6 years ago, when Win95 was new, and the total installed base was much smaller, it might have had a chance.

    5. Re:NAT & Firewalls by Telastyn · · Score: 2

      Client firewalls are total bunk. Let me rephrase. Nearly every client firewall does the exact opposite of what it is supposed to do.

      To secure a machine you shut down services. This closes open ports, and prevents untrusted user input. They hit a closed port, and they get dropped by the OS proper.

      Client firewalls do the same thing, only they are not OS proper, and they usually do packet inspection as well. Thus spending much more CPU power to do something simple like dropping packets. What would I an attack do then? Right. I'd send odd packets at the firewall trying to peg your CPU.

      I may not control your machine, but I can probably make sure you can't use it.

    6. Re:NAT & Firewalls by GSloop · · Score: 5, Insightful

      Yeah, let me run and open every port to every caller! I guess I was completely crazy to close off all those ports and limit connections for any and every service...

      [Sheesh] Security and Convience will ALWAYS play off against each other. If you have locks on your house, you're not really getting the full benefit of a house!? Sure, locks make life more "inconvenient." But you trade some convenience for security. I close off all those ports because I don't know what might be used to exploit the openings.

      Now, we'll get to arguing about packet filtering vs. proxy filtering and how proxies are better...blah blah blah.

      In short, I want a BALANCE of convenience and security. Blocking some content (ports/hosts) is a way to do that. That's a good thing in a system that's setup right. Does your company let anyone into the building that wants to get in, and only disallow those that it activly sees doing mischief? No (at least for your sake I hope) they don't. They say, do you have some purpose here? Are you explicitly allowed. Then you get in.

      Frankly you can argue about NAT and unblocked connections all you want. What my clients want is functionality. The functionality of the network is compromised by too open a security (too much functionality) of the internet. They want the machines to work, the data to get processed, and to spend as little money as possible fighting battles. The solution is only to open that which needs to be open to acomplish the business objectives.

      Cheers!

    7. Re:NAT & Firewalls by 3.1415926535 · · Score: 2, Informative

      NAT is a horrible kludge that should never have existed. Using IPv6 with good OS- and application-level support would make network administrators' jobs a lot easier. I can see companies using IPv6 internally and over WAN's to simplify and improve the performance of their networks.

    8. Re:NAT & Firewalls by Shimbo · · Score: 1
      We may as well run PPP-over-HTTP and have done with it...

      Yes. What the internet needs is an implementation of RFC3093 ;)

    9. Re:NAT & Firewalls by OSgod · · Score: 1

      Until every single machine is hacked -- the central firewall is a sound and solid approach to implementing controls. It hails back to the days of central servers for file services, printing, etc. (may be the same, may be dedicated).

      As a matter of fact it works so much more efficiently than the model of thousands of individual unmanaged machines running amok that the industry is moving back toward it rapidly.

    10. Re:NAT & Firewalls by radish · · Score: 2

      What your describing is (of course) a denial of service. Firewalls are not designed to prevent DoS attacks, and this is evident by the simple fact that many large websites running big expensive complex firewall setups still get hit by simple DoS attacks.

      There are several problems with your argument. First off, even if your firewall does manage to swiftly and quickly drop packets it doesn't like, they've still gone down your pipe. This consumes your available bandwidth, making it unavailable for legit packets. Added to that, any DoS'er with half a brain would specifically use a packet type which your firewall accepted (e.g. tcp/80) and so your firewall is useless anyway.

      Going back to the home/client firewall. Yes it is as vulnerable as your hardware box to a DoS (maybe more, I give you the point that packet dropping becomes expensive). However, the machines these run on aren't usually targetted by such attacks, rather they are targetted for takeovers so they can be used as drones in a DoS on a big site. In this case, the personal/home/client firewall performs a useful purpose in closing many of the holes common to desktop machines (of any OS).

      I don't use a personal firewall to prevent DoS attacks. I use it to give me some control of what my Windows box is sharing with the world. Therefore, IMHO, my firewall is doing EXACTLY what it is supposed to do. I take it from your argument that you'd be perfectly happy running a large production webserver (for example) on the public internet, with no firewall whatsoever? This is what you imply by saying that true protection comes simply from shutting down services. Best read up on the recent SNMP exploits ;-)

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    11. Re:NAT & Firewalls by Steveftoth · · Score: 2

      I see a day in the future where CPU power will be plentiful enough so that you will be able to send a message to your upstream router to tell it to stop sendinf you packets from specific addresses, that way if you detect a DoS attack then you can at the very least stop specific targets. And the packets will get dropped b4 they are even sent to you.

    12. Re:NAT & Firewalls by Telastyn · · Score: 2

      Umm, yes, I would have little to no problems running a large webserver unfirewalled on the internet. I'd still like a router in between for routing particularly troublesome people to never never land, but that is once again more in response to DoS, and content control as compared to client security.

      The concern then comes to the security of the http daemon, but that was always a concern; firewall or no.

    13. Re:NAT & Firewalls by dublin · · Score: 3, Interesting

      In a course I took years ago (when Interop was a small show for net-heads that fit easily in the San Jose convention center), Marshall Rose was talking about security and transports and showed us how some really twisted grad student had implemented PPP over a DNS transport just to prove it could be done.

      Sadly, pretty much everyone agrees that HTTP isn't suited for the things it's being used for today, but everything gets built on top of it because port 80 is pretty much the only thing that's guaranteed to get through firewalls, most of which are stupidly configured and require the corporate equivalent of an act of Congress to get opened up.

      By the way, Marshall Rose is relevant here for another reason, too: his proposed BEEP protocol is (IMO) a far better way to deal with providing a multipurpose transport suitable for a wide variety of things. There's a good BEEP Q&A document by Rose on the beepcore.org site. We should be using things like BEEP to avoid having the same arguments and reinventing the same wheels over again every few years/months/weeks. BEEP seems to be gaining traction: The IESG recently approved APEX4 the application datagram protocol over BEEP as a proposed standard, and SOAP over BEEP was similarly approved last summer. Let's hope these get through the grinder in time to do some good, and that the true Internet standard of "Rough Consensus and Running Code" prevails over corporate landgrabs by Microsoft, et al.

      --
      "The future's good and the present is nothing to sneeze at." - Roblimo's last ./ post
    14. Re:NAT & Firewalls by Anonymous Coward · · Score: 0

      everything gets built on top of it because port 80 is pretty much the only thing that's guaranteed to get through firewalls, most of which are stupidly configured

      Ehh, NO

      The correct phrasing of that should be "most of which are securely configured.

      Trying to stop people from fucking you over isn't stupid.

    15. Re:NAT & Firewalls by Petrus · · Score: 1

      What he means:
      We'll if you were on the internet, I could visit you there. However, most of us are connected over DHCP, that means effectively being internet-homeless.

      DHCP is mostly used really to ease the connections, but rather to share limited ipv4 address space.

      I would like people to ring me on my workstation, just like on the phone, I would pick it up, open chat session, open his cam connection to see him and open a shared whiteboard over X11 fotwarding and have some seriout discussion.

      But for that, I ned an IP address at least as fixed as my phone number.

    16. Re:NAT & Firewalls by $nyper · · Score: 1

      Actually the last poster was correct he just did not take his post the step farther it needed. In some cases yes a firewall does stop a denial of service attack. When a you have a 5000 node network running NAT behind a firewal those machine are usually talking to one another. If your centralized firewall is DoS'ed then the you loose outside connectivity but you 5000 nodes remain unaffected with regards to internal communications.

      Now reverse and think about what happens if there was no centralized firewall and you were running 5000 client based firewals. Your entire network now potentially comes to a screaching halt because you are being DoS'ed by some lame script kiddie.

      So as you can see a centralized firewall serves its purpose and will never go away. It is the central choke point that can cut the outside pipe off from your network and prevent a global network catastrophy.

      --
      "Help me Obi-/.-Kenobi,your my only hope!" -$
    17. Re:NAT & Firewalls by dublin · · Score: 2

      everything gets built on top of it because port 80 is pretty much the only thing that's guaranteed to get through firewalls, most of which are stupidly configured

      Ehh, NO

      The correct phrasing of that should be "most of which are securely configured."


      No, I meant stupidly configured. The refusal to use other ports as they should be used is what has caused the Tragedy of the Commons we now see on Port 80 - there's no telling *what* is passing through there, so now it's *impossible* to have a secure configuration, as opposed to a very clean, simple scenario where protocol/port mappings are 1:1. You can hardly shut off Port 80, so firewalls are mostly a joke anymore. (To quote Marshall Rose again, "Firewalls just give you the illusion of security." That is more true today than ever, as the number of potentially dangerous things riding atop HTTP reaches truly scary proportions...)

      --
      "The future's good and the present is nothing to sneeze at." - Roblimo's last ./ post
    18. Re:NAT & Firewalls by Anonymous Coward · · Score: 0

      Without application-level proxies theres no way you can enforce a 1:1 protocol:port mapping. Unless you think the evil hackers are going to conform your ideals. Since you have already lost, you might as well use port 80 for good as well as evil, and secure it properly.

    19. Re:NAT & Firewalls by Ereth · · Score: 2

      Dynamic DNS allows that with DHCP. You don't have to have a static IP to be rang up, if your DHCP server makes a DNS entry every time you get an IP address.

      We've recently implemented that where I work, and it's working great, including secure connections through firewalls that require reverse lookups.

    20. Re:NAT & Firewalls by Anonymous Coward · · Score: 0
      If you don't have a real, static IP, no, you aren't really on the internet.
      I would disagree with this statement. It's possible to have an IP address on the Internet that is dynamically assigned. It can make it very difficult if you are trying to host a real server, but if your address is a valid IP address that is not part of the reserved/private IP numbers, you are indeed on the Internet. (uh, assuming you are physically connected to the Internet!)
    21. Re:NAT & Firewalls by radish · · Score: 2

      In that situation I agree totally, however that wasn't what I understood from his post. I certainly don't advocate a client firewall to replace a central one, but in the absence of said central firewall, a clientside one is better than nothing!

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    22. Re:NAT & Firewalls by 3.1415926535 · · Score: 1

      Nonsense. Nothing is preventing there from being a central firewall. If all the traffic for a network is going through one firewall, that firewall can do whatever it wants regardless of whether the packets are NATted or not. My statement still stands: NAT is a horrible kludge. Firewalls, on the other hand, are good. Don't confuse the two.

  15. HTTP workarounds by ciole · · Score: 2, Insightful
    There is work going on to address the shortcomings of HTTP...

    i thought basically all web development fell into this category :)

    But seriously, i've been involved in projects requiring using HTTP for purposes which it was not well-suited for - workaround is the name of the game. Old problems, lots of old solutions.

    So well this looks like more .NET propaganda (the buzzword that will not die) i've been imagining a world without HTTP for a while. It's pretty much a given that i'll be able to brag to my grandkids about having used HTTP. So what will the world's computing resources look like then? The "internet" was not neighborhood-pervasive until HTTP - where and when will the next major transition occur? And (god forbid) will it be ".NET"?
  16. Oh cripes by Grelli · · Score: 0
    So you mean the troll that posts HTTP is dead is going to be on topic?

  17. What's left out of the ZDNet article is ... by feelafel · · Score: 2, Insightful

    ... the fact that Web Services don't rely on HTTP whatsoever. Sure, loading the client UI that goes and talks to these Web Services relies on HTTP, as well it should, as it's all go-fetch-me-a-web-page stuff.

    However, the web based UI could easily be implimented such that the actual communication between web services is done through any IP based protocol. Right now HTTP is the one that jumps to most developers minds, but by no means is it the one that's expected to be used for longer-running services. Personally, I would expect that the web based UI would interact with some running process that would dispatch and receive Web Service data through a message queueing system that provides some form of transactional validity and security. If it's a really long-running service, then this intermediary process could exist much like a state machine, and the web UI could get status updates by hitting that state machine and getting the appropriate response (ie: "Still waiting to hear back from Microsoft's UDDI server!" or "Still waiting for that order to go through!")

    1. Re:What's left out of the ZDNet article is ... by Anonymous Coward · · Score: 0

      Yes, HTML will work through other protocols other than HTTP.

      A web site with relative URLs can be browsed through FTP as conveniently as HTTP. The network overhead is different, but the user interface is the same other than typing "ftp:" ahead of the first URL.

  18. So this will help from Mars? by afniv · · Score: 3, Funny

    So, will the new protocol help serve web pages from Mars, where the time delay a quite long?

    --
    ~afniv
    "Man könnte froh sein, wenn die Luft so rein wäre wie das Bier"
    Richard von Weizs
    1. Re:So this will help from Mars? by Anonymous Coward · · Score: 0

      you should check out the IRTF if you're interested in interplanetary computer networks. no, really!

  19. HTTP _is_ symmetric by leob · · Score: 1

    Because the client can send arbitrary multi-part MIME data in POST requests. 'Nuff said.

    1. Re:HTTP _is_ symmetric by J.+Random+Software · · Score: 1

      But responses have to be one-to-one with requests. A While clients can send overlapped requests (but a proxy might not forward them overlapped!), servers MUST send one complete response to each request in order--no prioritization or unsolicited messages are possible, and since "server push" is implemented as one big multipart response, the client can give no feedback about it other than unexpectedly closing the connection.

    2. Re:HTTP _is_ symmetric by thenerd · · Score: 1

      Because the client can send arbitrary multi-part MIME data in POST requests. 'Nuff said.

      I doubt my browser would deal well with any GET or POST requests, never mind anything else.

      thenerd.

      --
      The camels are coming. I'm in love.
  20. What? by Dop · · Score: 1
    "However, there is nothing wrong with HTTP per se, as its ubiquity and high dependability means it is the only way to get an a reliable end-to-end connection over the Internet..."

    FTP anyone?

  21. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  22. This guy is baked by chuckgrosvenor · · Score: 2, Interesting

    from the article: "I need a way to send a request to a server and not the get result for five days"

    Why does it need to be done at a protocol layer? If I need to submit something to a server that is going to take 5 days to get back to me, I should probably have an account with that server, and when I log back in, can get that information.

    It sounds to me like he's fishing for an excuse to design a new protocol for a need no one really has.

    1. Re:This guy is baked by tomhudson · · Score: 0
      so let him make his request to a windows-based server running iis. 5 days sounds about right.

      seriously, this sounds like a combination of 'embrace, extend, exterminate', FUD, and 'dumb technology tricks' in search of a problem

  23. By design by fajoli · · Score: 2

    I think that is the point of Hyper TEXT Transport Protocol.

  24. HTTP vs P2P by glh · · Score: 1

    Well, one of the reasons why I think HTTP will stay around is because it is NOT peer to peer. One of the nice things about centralizing, especially in the case of the web, is that you keep all of your business logic on that location. That means if you want to easily change things, you can do so. With P2P if you have a distributed model, you would have to worry about getting all of your changes replicated out... that could be very prone to error!

    I admit http has its downfalls, but I don't think it is going away any time soon!

  25. Not obsolete - inappropriate for web services by StonyUK · · Score: 2, Interesting

    The article just points out that using HTTP as a basic transport for more higher level concepts such as a Microsoft Web Service is problematic because:

    a) The way most of the Internet's IP infrastructure treats port 80 traffic will not allow long durtation web service transactions to work reliably (presumably because things like NAT mapping tables will get cleaned up before the transaction finishes)

    b) Because the server can't initiate a connection to a client.

    It's NOT talking about HTTP being unsuitable for pushing web server content around the Internet.

  26. In related news... by Glock27 · · Score: 4, Funny
    Microsoft declares all languages and runtimes besides C# are obsolete, and all office suites besides OfficeXP obsolete.

    Oh yeah, and all operating systems besides Windows XP are obsolete.

    ROFL.

    By the way, the funniest quote in the article was:

    Microsoft has some ideas (on how to break the independence on HTTP)

    Now that was a Freudian slip... ;-)

    299,792,458 m/s...not just a good idea, its the law!

    --
    Galileo: "The Earth revolves around the Sun!"
    Score: -1 100% Flamebait
  27. just a matter of time by HalInc · · Score: 1

    Aren't all thing's days numbered? I mean I think most would agree that it's unlikely we'll be using HTTP in 2070, right? That's like 24820 days away. There's a number for ya.

    1. Re:just a matter of time by Anonymous Coward · · Score: 0

      You forgot leap years

  28. Not HTTP anymore? by Scarpux · · Score: 1

    From the article: "If it takes three minutes for a response, it is not really HTTP any more," Box said. The problem, said Box, is that the intermediaries--that is, the companies that own the routers and cables between the client and server--will not allow single transactions that take this long. What do the intermediaries care. It's just packets. They don't care how long it takes for the response.

    --
    -- This is not a sig
    1. Re:Not HTTP anymore? by J.+Random+Software · · Score: 1

      HTTP proxies and NATs tend to time out idle TCP connections. As usual, without micropayments, there's no way to give all the providers between incentive to offer higher quality of service.

    2. Re:Not HTTP anymore? by Anonymous Coward · · Score: 0

      Heh, I occasionally engage in such long term interactions. When I buy stuff. They send me a confirmation e-mail (I use a spamex.com address).

      It's just a matter of designing the application properly. I grant you, HTTP is not always the most appropreate protocol, sometimes a mix of protocols works best.

    3. Re:Not HTTP anymore? by Anonymous Coward · · Score: 0

      Hell if it takes more than 3 seconds for the server to return anything, I would take the next link out of a website. That's one of the reasons why I turned off java and sometime javascripts for all website unless it absolutely needs it (about 5% actually do).

  29. Oxymoron? by Chagatai · · Score: 1

    Title: Microsoft guru: Stamp out HTTP
    Isn't "Microsoft guru" something of an oxymoron?

    --
    --Chag
  30. Long live http by Fembot · · Score: 1

    "If it takes three minutes for a response, it is not really HTTP any more," - What the hell is he trying to do that takes so long???

    "A replacement will eventually have to be found, he said, but it is not at all clear who will provide this replacement." - Id say from that that Microsoft allready HAVE a replacement in mind and are first trying to tell us we actualy need one

  31. Somebody tell Tim Berners-Lee by HRH+King+Lerxst · · Score: 1

    "If people can't search the Web they call the IT department, so the IT department makes sure HTTP is always working. We have engineered the hell out of it."

    M$ Engineered the hell out of http????

    --
    No one got beat up more often than the mimes of the old west!
    1. Re:Somebody tell Tim Berners-Lee by Anonymous Coward · · Score: 0

      Nope. They engineered the hell out of IT (missing caps) ;) That's what the mail order M$ degree for you.

  32. Whatever pans out... by swordboy · · Score: 1, Offtopic

    There needs to be a built in content rating standard that binds webmasters to law. Actually, this would be easier to implement with IPv6 since you could effectively segment subnets without too much of a problem (i.e. - put pr0n on designated IPs, educational on others, etc).

    There is too much dangerous stuff out there to just be turning kids loose. One might look to Microsoft and all their money for help implementing this but who are they to create standards?

    --

    Life is the leading cause of death in America.
    1. Re:Whatever pans out... by kz45 · · Score: 1

      One might look to Microsoft and all their money for help implementing this but who are they to create standards?

      well, they ARE the most popular OS in the world, with enough power to push any standard into regular use.

      look at the html standards, for example. he who controls the browser, controls the standards.

    2. Re:Whatever pans out... by Anonymous Coward · · Score: 0

      Even if your kids really are that mentally deficient (which probably isn't true) how did that become everyone else's problem?

    3. Re:Whatever pans out... by 1010011010 · · Score: 2

      Blah. Do you plan to mandate content rating standards for TV, phones, radio, school texts, magazines, newpapers, books, chewing gum wrappers and owners' manuals as well? Why? Or, why not?

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  33. eXtensible Application Transport Protocol (XATP) by jeremie · · Score: 5, Interesting

    HTTP does have it's problems, and it's one of the reasons that Jabber has it's own internal transport protocol to accomplish IM.

    I've seen other proposals for HTTP replacements and have been less-than-pleased by their complexity and design. Based on what I've learned from Jabber, and great feedback from many in the open source and standards communities, XATP was born:

    http://xatp.org/

    XATP, the eXtensible Application Transport Protocol is very simplistic and geared to operate at a layer below content, identity, framing, and other application-level issues. Check it out and offer feedback or participate if your interested.

    Jer

  34. Well it seems to me by Anonymous Coward · · Score: 0

    .. that M$ is up to something. I know it.. my ears are burning.

  35. Everything not MS is obsolete by gweihir · · Score: 2, Redundant

    I seem to remember that some time in the past MS claimed that the Internet was obsolete and the MicroSoft Network was the future. I think Unix is also obsolete according to MS.

    And of course I am obsolete since I refuse to view MS products as anything else than toys. Admittedly by now toys that actually have some level of stability and can be used for some (limited) tasks without too much hassle. But as long as they insist on sitting on their island (admittedly a large one, but instable and plagued by document-rot), I will not consider their products "professional" in any sense.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted and ignored otherwise.
    1. Re:Everything not MS is obsolete by Anonymous Coward · · Score: 0

      This is Insightful ?

  36. Hmm, this sounds familiar by drew_kime · · Score: 4, Interesting

    Didn't Cringely claim several months ago that they were going to try to do this? Well, not quite, but back in August he wrote:

    According to these programmers, Microsoft wants to replace TCP/IP with a proprietary protocol -- a protocol owned by Microsoft -- that it will tout as being more secure.

    So they decided to go up one level of abstraction. Hell why not, that way they break even more competing products.

    --
    Nope, no sig
    1. Re:Hmm, this sounds familiar by batkiwi · · Score: 1

      Did you read the article?
      How did this get modded up to 5?

      This has NOTHING TO DO WITH WEB BROWSERS.

      This has to do with network programming, specifically replacing the HTTP in SOAP with something more reliable, and more able to handle callbacks.

      Think about it... if you want to call a transaction that will take 10 hours to process through SOAP, you have to hold an http connection open for 10 hours.

      That is silly! There should be a protocol that allows callbacks for a transaction. I send off "do this for me, give me the result." When it's done, I get a notification back with the result/errorcode/whatever. No need to hold a connection open for the whole time it's processing.

      Instructions for the future:
      READ
      COMPREHEND
      POST

      In that order.

  37. Mixed feelings... by GreenJeepMan · · Score: 1

    "If it takes three minutes for a response, it is not really HTTP any more,"

    If it takes 3 minutes or as stated later 5 days, the problem is not in the protocol, but the architecture and performance of the application.

    The beauty of HTTP is that it is generally stateless, that is, you can use it, come back 5 days later and pick up exactly where you left off without consuming any resources. A lot of programmers have done things to get around this, but really as a matter of convenience, rarely for architectural reasons.

    I'll believe this when I see it, P2P is a great technology, but the web is just inherently different. I don't see where this guy is coming from... comments?

  38. OSS real cockroach of the internet by bobaferret · · Score: 1

    Open source software is the real cockroach of the internet. It's everywhere and no matter what MS does they can't seem to stamp it out. After the holocust the only softwhere left will be open source, since no one will be able to find the single copy of closed source software locked in some dead corporate vault somewhere.

    -jj-

    1. Re:OSS real cockroach of the internet by CrazyBrett · · Score: 2

      I've always enjoyed a joke along these lines. It starts with a philosophical question...

      If all of the technological progress on Earth was suddenly destroyed in an instant, what would happen? Well, within a week, someone would have Linux running on something...

    2. Re:OSS real cockroach of the internet by LatJoor · · Score: 1

      I'll bet you've always enjoyed that joke, since you are only 9 years old.

      Get it? Hah hah!

      It's a joke about Linux not being as old as you!

      Hah... hah...

      Oh well...

    3. Re:OSS real cockroach of the internet by Anonymous Coward · · Score: 0

      wooooooooooooooooow, and your what like 20?
      get it ...
      im flaming your flame
      get it...

      ha ha

  39. Interesting article... by neosiv · · Score: 1

    But isn't "Microsoft Guru" an oxymoron?

    1. Re:Interesting article... by Anonymous Coward · · Score: 0

      Not if you've ever used an Amiga :-)

    2. Re:Interesting article... by Anonymous Coward · · Score: 0

      I would rather have a degree from McD university than to be anything MS. At least I get some respect for myself working at McD...

    3. Re:Interesting article... by ahde · · Score: 2

      No, because it really does take a guru to understand the complexity that is microsoft these days.

      "Unix guru" has come to mean "that guy who sits on his ass all day reading Slashdot and logs into the server once a month at 1 am from his dialup at home to fix an obscure problem -- and all he probly did was cut and paste the error message into google to find the solution or maybe typed 'apt get blah' "

  40. Microsoft's Choice of Protocols for .NET by Shelrem · · Score: 1

    Well, the funny thing about this is that all the .NET web service stuff uses SOAP (XML) to communicate through HTTP (presumably for both ease-of-use and so that webservices can be used in places with restrictive firewalls, for good or ill). Now, this guy is undoubtably aware of this fact, but coming from that knowledge, it's interesting to note that Microsoft's .NET team:

    a) Bases their web services on communication via HTTP then
    b) Says HTTP is doomed because it's not peer to peer

    Maybe someone made a bad choice for their protocol and is trying to cover his ass? I doubt it. Maybe they're trying to shift blame for any shortcomings of .NET webservices onto the protocol (not that i've heard anything about shortcomings-- it's been a couple months since i've worked with .NET at all).

    Or maybe this guy has a point, which i doubt, but i'm far from qualified to really judge.

    ben.c

    1. Re:Microsoft's Choice of Protocols for .NET by Lennie · · Score: 1

      Actually SOAP can go over a lot more protocols, but HTTP is mostly used.

      I think SMTP is one, but it's even 'more' stateless.

      --
      New things are always on the horizon
    2. Re:Microsoft's Choice of Protocols for .NET by bartling · · Score: 1

      Don Box had a major hand in coming up with the SOAP protocol (http://www.w3.org/TR/SOAP/). He just recently joined MS. More info at http://www.donbox.com/rumors2.htm. I've seen him bashing on SOAP as of late, which I find somewhat interesting.

      -- chris --

  41. What a surprise by Anonymous Coward · · Score: 0

    Microsoft must have run out of ideas on its "how to swamp out a market segment" list. This smacks of the way they used to do things: reinvent/rename the wheel just so they can claim control in their "new" proprietary format. Bah...this one is ignorant and will fail mightily. So I guess I should be happy..

  42. Ya so.... by Anonymous Coward · · Score: 0

    .NET is a year behind development, so I wouldn't worry much.

  43. It's not just some 'Microsoft engineer'..... by Anonymous Coward · · Score: 0

    It's Don Box.Now I know that he may be largely unknown outside the COM/Windows world, i.e. he is a nobody to the /. crowd, but he is an acknowledged guru in component technologies (COm, .NET, etc) and not even bothering to name him is ridiculous.

    1. Re:It's not just some 'Microsoft engineer'..... by Anonymous Coward · · Score: 0

      Acknowledged by who? Has he done anything more useful than help an third-rate software vendor "compete" in spite of their inability to ship object implementations with good enough backward compatibility to be able to use inheritance?

  44. Good points by hondo77 · · Score: 2, Insightful

    Seemed to me like Mr. Box raised some good points. Unfortunately, he works for Microsoft, which means that your first impression is "Oh my gosh, Microsoft wants to stamp out HTTP and replace it with some evil, proprietary protocol" (it was my first impression, anyway). Looks like it just means that we'll also be making requests like "newtp://blah.blah.blah" someday.

    I'm in the middle of a project where the one-way nature of HTTP is a bit inconvenient at times so I can see where he's coming from.

    --
    I live ze unknown. I love ze unknown. I am ze unknown.
    1. Re:Good points by Joe+U · · Score: 1

      The last thing we need is more UDP traffic.

      Ask anyone involved in running the backbones about UDP traffic, most are not happy.

    2. Re:Good points by Anonymous Coward · · Score: 0

      How much unhappier would they be if we tried to deliver the same payloads via TCP?

    3. Re:Good points by Anonymous Coward · · Score: 0

      > Ask anyone involved in running the backbones \
      > about UDP traffic, most are not happy

      Why?

      This is not a troll

    4. Re:Good points by Anonymous Coward · · Score: 0

      A lot of admins were recently complaining about all the re-transmissions due to poorly written UDP applications. Mostly streaming media that re-transmits over and over and over due to lost packets.

  45. http has no alternative by dybdahl · · Score: 1

    http has been designed to serve a special purpose, and is the optimal solution to this problem. It's ascii, it's fast, it's compact etc. And most important of all: It's a standard not controlled by a single company.

    What .net will provide, is a proprietary solution on which other proprietary user interfaces can be built, and these user interfaces can then exist over a network.

    There are many network oriented user interface protocols: X11, Citrix, Microsoft RDP, VNC are just a few of them. But none of these can replace http, and .net won't either.

    If you want to know how complexity is, when a webpage is replaced with a .net solution, then have a look at the OLE2 "hello world" application source code.

    1. Re:http has no alternative by Anonymous Coward · · Score: 0

      The optimal protocol wouldn't require a regex matcher to deal with whitespace and comments no user will ever see anyway. ASN.1 PER would probably be two orders of magnitude smaller than HTTP.

      This goes double for RPC using a markup language intended for document management and archival.

    2. Re:http has no alternative by Anonymous Coward · · Score: 0

      I'm afraid ASCII doesn't have enough capacity to really do what you propose, there is no room for international character support....perhaps Unicode.

    3. Re:http has no alternative by spectecjr · · Score: 2

      If you want to know how complexity is, when a webpage is replaced with a .net solution, then have a look at the OLE2 "hello world" application source code.

      What are you talking about? OLE2 has nothing to do with .NET.

      Please, get a grip. And stop smoking that which makes you paranoid.

      Si

      --
      Coming soon - pyrogyra
    4. Re:http has no alternative by dybdahl · · Score: 1

      OLE2 and .net are both made by Microsoft. If you want to know the complexity of a .net transferred user interface, have a look at the source code that makes it run. First, it needs a runtime. Next, you'll need to define classes. Do you get the point?

    5. Re:http has no alternative by spectecjr · · Score: 1

      OLE2 and .net are both made by Microsoft. If you want to know the complexity of a .net transferred user interface, have a look at the source code that makes it run. First, it needs a runtime. Next, you'll need to define classes. Do you get the point?

      Other than that you don't seem to have done much programming in either, no I don't.

      Si

      --
      Coming soon - pyrogyra
  46. A new FUD campaign, I swear by mfarah · · Score: 3, Insightful
    Box likes to think of HTTP as the "cockroach of the Internet" because "after the holocaust it will be the only protocol left standing."

    Gee, I wonder WHAT shape will that holocaust take. Maybe it'll be a killer protocol that pursues and assasinates other protocols? Damn, Mr. Box, use the proper words, will you?



    This works for small transactions asking for Web pages, but when Web services start running transactions that take some time to complete over the protocol, the model fails. "If it takes three minutes for a response, it is not really HTTP any more," Box said.

    Well, of course it isn't. Is it, then, HTTP's fault that it doesn't work perfectly when used for stuff it wasn't designed to do? Hell, I'd love to see telnet-over-HTTP done while we're at this.



    "We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."

    Maybe if we get back to use the proper protocols (say, why don't we rely on ftp for transferring files, for example?), we wouldn't have the current "problem".



    Another problem with HTTP, said Box, is that it is asymmetric. "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond. For peer-to-peer applications this is not really suitable," he said.

    Of course it isn't, HTTP is designed with a client-server model in mind.



    In my humble opinion, this is just the first step from Microsoft for a new FUD campaign against HTTP: "First, we show everyone how HTTP isn't any good, then we roll over our brand new protocol that supports all of HTTP's capabilities, and lacks its limitations. Buy it from us, your beloved Microsoft!".



    "Microsoft has some ideas (on how to break the independence on HTTP), IBM has some ideas, and others have ideas. We'll see," he said. But, he added, "if one vendor does it on their own, it will simply not be worth the trouble."

    This, of course, implies that Microsoft won't control the new protocol on its own... not at first. They'll just "embrace and extend" it later.

    --
    "Trust me - I know what I'm doing."
    - Sledge Hammer
    1. Re:A new FUD campaign, I swear by hs81 · · Score: 1

      I agree with the theme of the comments from MS that HTTP is been used in ways not planned for. However, whilst I am concerned about this the thought of MS providing us with a replacement is really terrifying.
      Much of this is vintage FUD that our friends at MS are masters of. Hopefully, the few remaining competitors to MS will ensure that alternatives to the valid points are raised.
      AS

    2. Re:A new FUD campaign, I swear by MullerMn · · Score: 1

      "We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."

      Well, if you will insist on using IIS...

    3. Re:A new FUD campaign, I swear by iabervon · · Score: 2

      Actually, ftp is a lousy protocol for transfering files. It requires a persistent connection between transfers, uses a bunch of connections anyway, isn't designed for machine-machine interaction, and doesn't have a mechanism for content type information. HTTP is a "transfer" protocol, and there's nothing in particular that relates to hypertext in it.

      HTTP is fine for P2P applications, in general; it's not hard to have a program the both makes and accepts HTTP requests.

      HTTP is suitable for delayed responses, although the entity expecting an eventual response will have to be running an HTTP server. Of course, if you want to get a delayed response, you'll have to have somewhere to accept an incoming connection, whether it's a mail server, an HTTP server, or some weird new MS thing.

      HTTP is not suitable for is negotiation, since you can't easily go back and forth multiple times (later interactions are not sufficently tightly connected to not need to send all of the information again). Of course, this is essentially what people are trying to use it for.

    4. Re:A new FUD campaign, I swear by CrazyBrett · · Score: 2
      In my humble opinion, this is just the first step from Microsoft for a new FUD campaign against HTTP: "First, we show everyone how HTTP isn't any good, then we roll over our brand new protocol that supports all of HTTP's capabilities, and lacks its limitations. Buy it from us, your beloved Microsoft!".

      Now wait a minute... so you're saying that if MS developed "a brand new protocol that supports all of HTTP's capabilities, and lacks its limitations," you'd scoff at it? Or do you only feel this way because we're talking about the evil empire here...

      I like making fun of them as much as the next guy, but...
    5. Re:A new FUD campaign, I swear by Anonymous Coward · · Score: 0

      "say, why don't we rely on ftp for transferring files, for example?"

      Why is FTP better for transfering files? Because it has a 'F' in the name?

    6. Re:A new FUD campaign, I swear by abulafia · · Score: 2, Insightful
      Sorry, I have to disagree on a number of points.

      Actually, ftp is a lousy protocol for transfering files. It requires a persistent connection between transfers, uses a bunch of connections anyway, isn't designed for machine-machine interaction, and doesn't have a mechanism for content type information. HTTP is a "transfer" protocol, and there's nothing in particular that relates to hypertext in it.


      Content type information would be useful, you're right. Requiring a persistent connection, that can be good or bad, depending on the nature of the file transfer. It is true that for requesting arbitrary files meant to be accessible by anyone, the protocol has inefficiencies. You didn't note the problems it causes for firewalls, but I'll throw that in anyway. FTP is still the most efficient means of transferring files.

      http is exactly what it is named - Hypertext Transport Protocol. People are abusing it (for reasons of expediency) to do a lot of things it was never meant to do.

      HTTP is fine for P2P applications, in general; it's not hard to have a program the both makes and accepts HTTP requests.


      I would argue that http is a stupid protocol to use for P2P. The only reason it is used is because firewalls leave that port open. One might as well argue (with substantially more reason) that port 22 and the ssh protocol is fine for P2P. Honestly, were that the case, a lot of the problems inherent in deployed P2P apps would not exist.

      HTTP is suitable for delayed responses, although the entity expecting an eventual response will have to be running an HTTP server. Of course, if you want to get a delayed response, you'll have to have somewhere to accept an incoming connection, whether it's a mail server, an HTTP server, or some weird new MS thing.


      RPC over http is a bad hack. RPC, for all the problems it has, has been running over TCP/IP for quite some time now... the _only_ reason to encapsulate it is to circumvent firewalls. Yes, RPC has a multitude of problems, and honestly, I hate it. Encapsulating it to hide from security restrictions does not make it any more appealing. Users might not like a requirement to tunnel legitimate services through a firewall, but that is how it _should_ happen. There are a bundle of add-ons to make RPC over http appealing, like XML "standards", etc, but none of those are inherent to doing RPC over http.

      HTTP is not suitable for is negotiation, since you can't easily go back and forth multiple times (later interactions are not sufficently tightly connected to not need to send all of the information again). Of course, this is essentially what people are trying to use it for.


      Here, we agree. http is for random file access with built in intelligence about file types. Nothing more.

      -j
      --
      I forget what 8 was for.
    7. Re:A new FUD campaign, I swear by mccrew · · Score: 2, Informative
      Hell, I'd love to see telnet-over-HTTP done while we're at this.

      Well, OK.

      --
      Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
    8. Re:A new FUD campaign, I swear by iabervon · · Score: 2

      FTP is not suitable for transferring files that aren't generally available, because it's not secure. FTP isn't any stronger than HTTP with basic authentication, and encrypted wrappers for HTTP are far better deployed (so far as I can tell) than for FTP.

      HTTP only sort of works for "push" transfers, but in this case, people generally want enough authorization that scp is the correct tool.

      I agree that HTTP makes a lousy RPC protocol, because it's no good when you are not, in fact, transferring anything. But this doesn't mean it isn't suitable for P2P, which is only sometimes RPC and frequently fits a request-response model.

      Likewise, the fact that the response will be delayed isn't a problem with HTTP. You could post a URL as a form field, and the server can do a long request, and then PUT/POST the result to that URL. You could, instead, post an email address, and have the result emailled to you when it is ready. The only issue is that the second half of the exchange has to happen with a "push", over a separate connection. But that's going to be an issue with any protocol.

      The whole firewall issue is silly. Few firewalls actually look at the packet contents, so you could just do RPC over TCP on port 80 and bypass the firewalls just as well.

      HTTP is designed for the pattern of an independent request/response pair. This isn't the case in a lot of situations where people try to use it, and it's always a bad fit when they try. But there are a lot of situations where people traditionally use other protocols which, as commonly practiced these days, HTTP would work fine, and is better designed than the alternatives.

    9. Re:A new FUD campaign, I swear by mfarah · · Score: 2

      Now wait a minute... so you're saying that if MS developed "a brand new protocol that supports all of HTTP's capabilities, and lacks its limitations," you'd scoff at it? Or do you only feel this way because we're talking about the evil empire here...

      I was doing an impression of what they'd say in their propaganda, not that it'd be true. Remember they claim Windows NT is more reliable than Unix/Linux, etcetera.

      I have a VERY hard time believing they would be able to come with a significant improvement in network software - in other areas, it's a different song.

      --
      "Trust me - I know what I'm doing."
      - Sledge Hammer
    10. Re:A new FUD campaign, I swear by vsavkin · · Score: 1

      FTP is very inefficient to transfer large number of small files as it opens new TCP connection for each and requires quite a few round-trips before file transfer starts. And FTP directory listing was not designed to be parsed by a program so mirroring is unreliable.

    11. Re:A new FUD campaign, I swear by J.+Random+Software · · Score: 1

      FTP in Block or Compressed (run-length encoded) mode can reuse the same data connection for several transfers in either direction. The problem is almost everything only uses Stup^H^Hream mode, which signals EOF by closing the connection (and you can't tell if you received the entire body, just like HTTP/1.0).

  47. not so sure about that... by Narcocide · · Score: 5, Insightful

    while it's certainly true that http was never originally ENVISIONED as a protocol to serve shoutcast/icecast streams, for example, it's usefulness to that purpose is a tribute to how well the spec was thought out. the simple fact remains that it's an incredibly versatile protocol which can be (and is) used for nearly every data/media transport/request over the internet. microsoft is going to have to do something FAR more impressive to convince me they have a good reason to scuttle the most re-purposeable protocol on the internet.

    ever wonder why 99% of ANY urls you see start with an http? ever wonder why flash webpages don't start with something like mmfttp and shoutcast streams don't start with plsttp?

    wonder.

    1. Re:not so sure about that... by Anonymous Coward · · Score: 0

      Maybe because 99% of the URLs I go to aren't flash pages and shoutcast streams.

    2. Re:not so sure about that... by acroyear · · Score: 2

      well, that's because as an openly published protocol, it accomplishes enough on its own, for open data sources.

      proprietary data sources use proprietary protocols. go to somewhere with an http link to a realmedia source, and you'll find the http link you downloaded was actually just a file containing another url, which has an "rtsp://" protocol, something only realnetworks software can understand.

      --
      "But remember, most lynch mobs aren't this nice." (H.Simpson)
      -- Joe
    3. Re:not so sure about that... by Anonymous Coward · · Score: 0

      Because mmfttp or plsttp wouldn't get through the firewalls

    4. Re:not so sure about that... by Anonymous Coward · · Score: 0

      RFC 2326: Real Time Streaming Protocol (RTSP)

      I think QuickTime uses it as well.

    5. Re:not so sure about that... by Spock+the+Vulcan · · Score: 2, Informative

      "rtsp://" protocol, something only realnetworks software can understand

      Wrong. RTSP is an open protocol. You can read RFC2326 here. Multiple implementations already exist, including an open-source one.

    6. Re:not so sure about that... by Anonymous Coward · · Score: 0

      You jackass. The point is that flash pages and shoutcast streams are served up over http.

    7. Re:not so sure about that... by Anonymous Coward · · Score: 0

      And you'll also notice that RealMedia was only a dominant standard when they were the only horse in the race, and now that other non-proprietary protocols and compression schemes can be used to stream media, they are.

    8. Re:not so sure about that... by acroyear · · Score: 1

      my bad...sorry 'bout that...

      --
      "But remember, most lynch mobs aren't this nice." (H.Simpson)
      -- Joe
    9. Re:not so sure about that... by dkemist · · Score: 4, Insightful

      You still have to conceed the point that http evolved to where it is today, and if one had to design something from scratch, it would likely be far different.

      I mean, let's take a connection oriented protocol like TCP and add a text based stateless protocol on top of it. Ok, that makes sense so far.... but wait, we want to be able to maintain state, so lets introduce this new concept called "cookies" and we'll use ASCII strings to identify things. And, it would be nice to be able to make multiple requests per TCP session, so let's put together some keep-alive mechanism. Ohh, and I want to be able to talk to multiple servers on a given IP, so let's add a host header field.... But wait, all of this is transmitted in clear text! Let's engineer a set of encyrption protocols to stick between our HTTP layer and our TCP layer. Here we'll solve some of the same engineering problems, like adding an SSL session ID to maintain state. Now, instead of requesting simple documents, how about we design an extensible markup spec to request "web services?" Yeah, that should work.

      It is a testament to the design of the protocol that it's still ticking with all these enhancements (aka hacks.) But, all the layers add bits of overhead that could likely be engineered out if one had the luxury of starting from scratch.

    10. Re:not so sure about that... by AftanGustur · · Score: 2


      It is a testament to the design of the protocol that it's still ticking with all these enhancements (aka hacks.) But, all the layers add bits of overhead that could likely be engineered out if one had the luxury of starting from scratch.

      Sure, but what is the gain from that ? Take IPv6 for exampe, a vastly superiour protocol than ipv4 can ever dream of.

      People will be using HTTP in ten years for the same reason as it will be sent over ipv4 networks.

      --
      echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
  48. I'm Glad to Hear this from Microsoft by elliotj · · Score: 2, Insightful

    I share the growing concern that wrapping web services in HTTP is akin to putting a ladder outside your house next to an open window. SOAP is being touted for it's ability to get through corporate firewalls via HTTP. I can't believe someone would consider this a feature rather than a bug in the spec.

    We need a wide range of new protocols for web services with security and scalability in mind while they are being developed. We don't want to use HTTP for more than HTML. We want to be able to control who does what, where and to whom.

    I hope the .NET team at Microsoft is listening to this guy.

    1. Re:I'm Glad to Hear this from Microsoft by Anonymous Coward · · Score: 0

      u want to control who does what, where and when.
      and u think m$ will develop a protol
      which will allow u to do it....???

  49. The greedy fingers of M$ by the+pogoman · · Score: 1

    What?!?! Dominating the world of crappy operating systems isn't enough? Now M$ is going to try to work its way into our open protocols too. I seem to remember the internet being designed with the goal of being completely open and non-proprietary (*cough* completely against all of M$'s goals).

    Can we say subscription-ware to the extreme?

  50. Good points by Soong · · Score: 2

    There is a good point that HTTP over TCP doesn't work nicely when there is lag between request and response. It keeps that nasty TCP connection going the whole time, tying up resources. For higher volume, and a more flexible scheme, go to an ACK-ed UDP transport.

    Client: Hey! I want X!
    Server: ok...
    [time passes]
    Server: (X)
    Client: got it!

    In TCP, the "ok..." and "got it!" phases are implicit in that TCP will tell you your message got through. Lots of overhead that the protocol doesn't really need though. In my Networks class we hear the End-to-End argument, that end to end the protocol should be designed to exibit only the state and information transfer it actually needs. Using TCP is a shortcut, and lazy. Good for getting things working fast, not optimal in the long run. Just like the STL, but that's another rant.

    --
    Start Running Better Polls
  51. bxxp, I mean beep by Pauly · · Score: 2, Informative
    Sorry Microsoft, as usual smarter people already knew this and have been working on it:

    www.beepcore.org

    1. Re:bxxp, I mean beep by Anonymous Coward · · Score: 0

      Well, maybe microsoft knew it before those 'smarter people' but you don't know about that?

    2. Re:bxxp, I mean beep by Anonymous Coward · · Score: 0

      yeah, i was beginning to wonder why nobody had
      mentioned this.

      mickeysoft and it's sympathizser need to see the
      light of the clue-train at the end of the tunnel,
      lest they get run over!

      wina umodzi in southern africa.

  52. Bye bye SOAP! by Anonymous Coward · · Score: 0

    AMEN!

  53. UDP and Parchive by Bonker · · Score: 2

    Hmm... An intelligent statement coming from Redmond?

    While I'm certain a lot of this is about leveraging Microsoft to control the 'next' major form of web transport, the engineer in question is right about one thing... HTTP is overused.

    A lot of P2P stuff could be a lot more efficiently and resource-considerate if it were to use UDP-style transmission like email and some online games rather than 'Virtual Circuit' style TCP connections. Another sweetener to add in the pot is to use Parchive (PAR) style error correction on your datagram packects in order to be more tolerant to faults, etc...

    sender transmits udp0-6, upd7 is lost by receiver, receiver requests par(0,6), sender transmits, receiver self-generates upd7, sender transmits upd8-999 with no further par requests without ever trying to figure out if receiver got all those packets.

    It's async. It's resource considerate, and it could do a great deal to ease download over p2p architecture.

    --
    The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
    1. Re:UDP and Parchive by mikeee · · Score: 2

      UDP-style transmission like email and some online games

      Huh? SMTP, POP, and IMAP all use TCP.

    2. Re:UDP and Parchive by Anonymous Coward · · Score: 0

      Where do you get that email uses UDP in any way, shape, or form?

      Every connection associated with standard email (SMTP, POP3, IMAP, etc.) is a TCP (i.e., reliable, stream-oriented) connection.

    3. Re:UDP and Parchive by Bonker · · Score: 2

      My bad. Email does *not* use UDP.

      --
      The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
  54. In more news ... by Anonymous Coward · · Score: 0

    Why does that sound like a generic argument to me ? :)

    .... said HTTP (Microsoft, DMCA, random issue) presents a major challenge for Web services, for peer-to-peer applications and even for security. A replacement will eventually have to be found, he said, but it is not at all clear who will provide this replacement.

    "One of the big challenges facing Web services (Security, Freedom of speech) is our reliance on HTTP (Microsoft, Patents)," said Box (rms,...). However, there is nothing wrong with HTTP (Microsoft, Patents) per se, ....

  55. Embrace and Extend by EricLivingston · · Score: 2
    I wouldn't be surprised if this is preparatory FUD laying the groundwork for MS to introduce some kind of DRM-laden, proprietary, charge-per-use, license-to-implement, no-OSS-allowed, caters-completely-to-huge-business protocol that will warp the web into some kind of horrific, ad-laden, taxed, corporate space where all fun and creativity will be sucked out leaving a soulless morass of stuff-we-must-buy.

    Or maybe not - I suppose one way to look at it is if big biz, sucking from the MS teat, all herd off onto MS's "better" protocol, the rest of us can continue to use HTTP without the control freaks (read: corporations) trying to own it.

    --
    Please Rate my comment (and help support Fre
    1. Re: Embrace and Extend by jacobm · · Score: 2

      That's not really reading between the lines so much as reading the lines themselves, don't you think? And while I think there are more fundamental problems with HTTP than the ones he mentions, I think he's essentially right: HTTP wasn't really designed to do what we want to do with it, so we ought to use another protocol instead.

      --
      -jacob
  56. "Guru" my ass by z84976 · · Score: 2, Interesting

    If he was such a guru maybe he'd have realized that http is "hypertext transport protocol" or something like that, not "heavenly total treatment protocol"

    It was designed to --- get this, kids --- deliver WEB PAGES!!! I once heard rumors of this other evil, called ftp, that was once used as a "file transfer protocol!!" The nerve of some of those early networking types!

    Really, though... there are just about as many potential protocols as their are potential uses. So http doesn't lend itself to your insecure privacy invading microsoft-enriching wet dream of global domination. GET OVER IT or LEARN TO USE AN APPROPRIATE PROTOCOL. Really!

    I don't see my linux box making http requests every time I want to mount an NFS share, so why should microsoft's next weapon use it to rob me of my money? HAH! Guru indeed...

    1. Re:"Guru" my ass by J.+Random+Software · · Score: 1

      HTTP with WebDAV offers type negotiation, transparent compression, connection reuse (hardly any FTP clients can use MODE B or MODE C), and cache coherence. Unless you're aware of something FTP still does better, it really is obsolete.

    2. Re:"Guru" my ass by Anonymous Coward · · Score: 0

      So you think you know all there is because you are aware of what HTTP and FTP stand for. I guess with geniuses like you around to decode these acronyms, there's no need to argue the merits. Thanks for setting the industry straight!

  57. I don't think so by geophile · · Score: 2

    COBOL is still around. FORTRAN is still around. The reverberations of 80-column cards can still be heard. Screen-scraping is alive and well. HTTP will be with us when Bill Gates' ghostly presence is roaming Internet2.

  58. MS needs something new it can embrace by tootingbec · · Score: 1
    "If we rely on HTTP we will melt the Internet. ... I need a way to send a request to a server and not the get result for five days."

    Earth to Microsoft: use SMTP! How about your beloved SOAP over SMTP, even!

    The trouble with all these established protocols is that it's too late for our friends in Redmond to proprietary-ize them.

  59. Usual MS FUD by gweihir · · Score: 5, Interesting

    seem to remember that some time in the past MS claimed that the Internet was obsolete and the MicroSoft Network was the future. I think Unix is also obsolete according to MS.

    And of course I am obsolete since I refuse to view MS products as anything else than toys. Admittedly by now toys that actually have some level of stability and can be used for some (limited) tasks without too much hassle. But as long as they insist on sitting on their island (admittedly a large one, but instable and plagued by document-rot), I will not consider their products "professional" in any sense.

    Incidently the only argument in the article (aside from the "argument" that P2P is better than client-server, given as dogma) is that there are problems with transactions that have several minutes connection time. I am sorry, but I don't see how that makes http obsolete. First these long transaction are not that common and second they work fine. Or are we going towards an Internet where a telnet/ssh connection will be terminated after 3 minutes, because the backbone cannot cope?

    Pure FUD, as far as I can tell.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted and ignored otherwise.
    1. Re:Usual MS FUD by gweihir · · Score: 2

      Opps, overlooked the part that he was actually talking about RPC. (Talk about misleading headlines...).

      I still don't quite get the argument. Af course HTTP is not really suitable for RPC. That much can be deduced from its name. Is anybode except MS using it for RPC?

      And I still don't see the problem with the long connections.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted and ignored otherwise.
    2. Re:Usual MS FUD by Anonymous Coward · · Score: 0

      From your description, it sounds like MS HQ is in Australia!

    3. Re:Usual MS FUD by Anonymous Coward · · Score: 0

      I refuse to view MS products as anything else than toys. ... But as long as they insist on sitting on their island ... I will not consider their products "professional" in any sense.

      I checked your web page. You're unemployed. Sorry, you're a PhD student. At any rate, you may be well educated, but I don't consider you professional in any sense. Thanks for your disconnected, academic opinion though.

    4. Re:Usual MS FUD by wadetemp · · Score: 2

      Is anybode except MS using it for RPC?

      One of SOAP's primary transports is HTTP, and that's not Microsoft specific.

      And I still don't see the problem with the long connections.

      If you make a SOAP call with HTTP has your primary transport, and the call takes 5 hours to process on the server, how's the server going to get back to you with the data? That's the problem with HTTP... MS is basically wanting another protocol that can be used for SOAP that punches through firewalls as easily as HTTP does, but doesn't have timeout problems.

    5. Re:Usual MS FUD by Anonymous Coward · · Score: 0

      Don't worry - even though you acknowledge that your post was off-topic, you still got a 5 due to your excellent M$ Sux0rs k-whoring abilities.

      Although it fairly bizarre -- the MS guy is really FUDding their own "web services" products which just shipped a couple weeks ago. Maybe he's hoping that people will feel the pain and finally open those firewalls up to TOG/MS RPC.

    6. Re:Usual MS FUD by wadetemp · · Score: 2

      First these long transaction are not that common and second they work fine.

      Ever heard of the Slashdot effect? It doesn't seem to work fine to me.

    7. Re:Usual MS FUD by Anonymous Coward · · Score: 0
      Is anybode except MS using it for RPC?

      Most users do...

      (status, type, options, body) := Connection::GET(URL, options, args...)
  60. Re:What about things that P2P doesn't make sense f by storem · · Score: 1

    Changing to P2P will only make sense when everyone becomes a contributor to the web. But that's not the case now, and will probably not be the case in the future. Distributed content environments (like the icq personal frontpage, or how do they call it) are/always will be less reliable (uptime, virus free, etc...) than centralised and well maintained servers.

  61. doh! by mikeee · · Score: 3, Insightful

    Using TCP is a shortcut, and lazy.

    Until you end up reimplementing half of it on top of UDP. Badly. And yes, I've seen this multiple times.

    Enough with the NIH, please? There are many years of effort in the common TCP stacks, and many subtle things they do right that you'll miss the first dozen implementations.

    For the love of god, if you need a substancial subset of TCP's features, and can live with the overhead, use TCP!

  62. as long as it's covered by a patent by wardk · · Score: 1
    go ahead and replace HTTP, just make sure it's not an open standard. there HAS to be a way for MS to turn the net into a tollway, using a dmca protected, closed protocol could help make that a reality.

    can they make it so we can be arrested for using the standard for purposes that are competetive (or maybe disrespecting) to MS? that would be the way-coolest.


    And even though Microsoft is working on the problem too, Box did say that Microsoft is unlikely to succeed alone.

    oh, nevermind...it's a team effort. nothing to worry about ;-)

  63. Napster used an IRC-like protocol by brer_rabbit · · Score: 1

    although you can argue that Napster wasn't really peer-to-peer.

    1. Re:Napster used an IRC-like protocol by erasmus_ · · Score: 1

      How can you argue that? Although the server application was indeed an intermediary for clients, the actual direct transfer of files and chat happened directly from one peer to another. Hence, peer to peer. If it was truly client-server, the server would play a role in the whole transaction, which it does not after making the initial "match" for users seeking files.

      --
      Please subscribe to see the more insightful version of th
    2. Re:Napster used an IRC-like protocol by Steveftoth · · Score: 2

      If you read the title of his post, Napster and IRC are very, very similar.

      IRC -> talk to people and get them to transfer a file to you. the file is transfered directly to you aka p2p style. However, would you say that IRC is p2p? No it's client-server.

      Napster -> type in search box that sends a search request to a CENTRAL SERVER. Central server finds all matches to your file and tells you who has the file. You download a file by contacting the host directly and d/l the file (except when the file was behind a firewall, I think that napster would d/l it for you through the fw). This method is exactly like IRC with a built in search engine.

    3. Re:Napster used an IRC-like protocol by DrSkwid · · Score: 2

      you seem to be confusing IRC with it's DCC extensions.

      IRC is very client server.

      Napster is/was irc like in that the central server connected people but then it initiated DCC transfers.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    4. Re:Napster used an IRC-like protocol by Anonymous Coward · · Score: 0

      you seem to be confusing IRC with it's DCC extensions.

      You're forgetting that to the w4r3z d00dz who thought napster was leet, IRC *was* DCC. Why else would anyone chat online if they weren't getting movies mp3z or pirated copies of photoshop out of it?

  64. I said by wiredog · · Score: 2

    HTTP. I know about java, et. al. There're lots of things that can run over tcp/ip, the trouble is that people want to use a web browser as their GUI, and the browser is designed to do http. Everything else is just a bag hung on the side of the browser.

    1. Re:I said by mark_lybarger · · Score: 1

      most browsers support ftp, gopher and others. i don't see it challenging for them to support a new protocol. most browsers are also designed to handle smtp, ntp, pop, irc, html authoring, etc. no wonder mozilla is slow. this isn't about replacing a protocol, it's about the right tool for the right job, and web services/applications don't work well with http. round hold, square peg kinda thing.

  65. Editor trained at Weekly World News? by blamanj · · Score: 2

    Excuse me, but the article says that HTTP will still be around after the world ends, so that hardly implies it's going away. The implication is (correctly) that HTTP should be used for everything.

    Inflammatory headlines and spinning of the stories really does no one any good, and we have to slog through dozens of responses by people frothing at the mouth because they only read the intro paragraph.

  66. Re:opera by Anonymous Coward · · Score: 0

    i love the browser, but some pages just dont like following the newest standards..

    im not saying that standards is always the exact right way to go.. but they do help! (now if only there were more following them..)

  67. HTTP Info by Joe+U · · Score: 2, Insightful

    HTTP,

    Was designed to transfer hypertext, not be the end-all-be-all RPC transport of the Internet.

    Microsoft and MANY others made a big mistake of using it as their protocol of choice for everything Internet related.

    Using HTTP as a catch-all protocol defeats the whole purpose of having different ports if everything is on 80. It makes administration a headache, and it lulls people into a false sense of security.

    (Oh, it's only HTTP, we can leave that open...what did you say about a SQL Server HTTP interface? And the SA password is blank on your local development system?)

    HTTP, The HyperText Transfer Protocol; use it for what it was designed for.

  68. Great quote at end of the article by rjamestaylor · · Score: 1
    • "Microsoft has some ideas (on how to break the independence on HTTP), IBM has some ideas, and others have ideas. We'll see," he said. But, he added, "if one vendor does it on their own, it will simply not be worth the trouble."
    So...refreshing.

    The problem with HTTP is that it is stateless and requires a constant connnection (or a state-tracking mechanism with repolling or push-back). This becomes a problem when dealing with web services that process large or time-consumming transactions before returning results. HTTP connections timeout. But, protocols such as SMTP, for example, don't require synchronious connectivity.

    This is why I love SOAP/SOAP::Lite. It allows me to use firewall-piercing HTTP as a transport protocol, but it also allows me to use

    • HTTP/HTTPS
    • FTP
    • SMTP
    • TCP (straight up)
    • POP3
    • Jabber
    • and so on...
    When HTTP is dead, CPAN will have the replacement module ready to go. (BTW, props to Paul Kulchenko!)
    --
    -- @rjamestaylor on Ello
  69. More Microsoft FUD by phillyTIM · · Score: 1

    OK, Microsoft obviously is saying this because they can't control it. Anything that Microsoft doesn't have its control-freak-claws into is obsolete, right? Heck they tried to convince everyone that MP3's are obsolete, and it seems to me it took away very little (if any) of its use. Just because Microsoft says something doesn't mean that it is what they say it is. I *YAWN* when I read microsoft says this or that about whatever; they don't know any better and aren't changing my development patterns.

  70. Scary by Anonymous Coward · · Score: 0

    This is how MS is trying to control the internet, they could careless about the desktop market now. If they control and own the underlying means which allow for communication over the internet, we are all doomed.

    1. Re:Scary by Anonymous Coward · · Score: 0

      C'mon do you really believe that? As long as people like us exist there will be an alternative to Microsoft. Even if they do Shanghai the Internet we can create the "subnet" that none of their browsers will be able to see.

  71. Embrace and Extend by segfaultdot · · Score: 1

    READ BETWEEN the lines, fellow geeks. What he's really saying is "HTTP is a cludge, .NET is much better. Use .NET"

    Seriously, i'm sure Microsoft would love to replace HTTP with something "better." Sounds like further "embrace and extend" to me. It was not enough for them to make browsing the web with anything other than IE a hellacious experience, now they want to overtake the very protocols on which the www runs. If they are successfull... well, i hope you all are familiar with how to use a "gopher" client. ;)

    In my experience, when Microsoft say's, "We want to make it better," they usually mean, "We want to control it."

  72. HTTP is good if used for the correct porpose. by jellomizer · · Score: 2

    I make many Web Apps. And I know from 1st hand experence that HTTP it is not the best protocall for making apps. Keeping state is anoying eather you use cookies or make more of hacking tricks, All the browsers seem to handle more advanced html commands differently. HTTP is great for Message boards like Slashdot or simple online ordering. And of course content information. Where it is basicly place your data and get a responce. But if you start working on more advanced features HTTP is anoying because your program spends a lot of code to get your data and memory in the right spot and it does its output and it is gone. A different protocall for the more advanced features could be more handy so we are not hacking a way to keep state. Making Javascript to do realtime input checking. Having in intire page reload to update some data. (remember I am tring to use as simple HTML as possible for browser compatability). The Web is now being used way beyond it intent and does need a new protocall for more advanced documents.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  73. Technological Snake Oil by DohDamit · · Score: 1

    "We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."

    Melt the internet? What the fuck is he talking about? Nice sounding metaphor, if a bit meaningless. As for ways to do long-running requests, I fail to see how a stateful connection in this case is anymore beneficial than a dated message sent via a stateless protocol to a service. In fact, questions about uptime, data transmission integrity, and security have me thinking the stateless message is better.

    Adapting for P2P
    Another problem with HTTP, said Box, is that it is asymmetric. "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond. For peer-to-peer applications this is not really suitable," he said. The reason that peer-to-peer applications do work today, said Box, is that programmers create hacks to get around the limitations of the protocol, and this is not good. "It's all hackery, it's all ad-hoc and none of it is interoperable," he added.


    Correction. Programmers are not creating hacks to get around the limitations of the protocol, they're creating hacks that misuse the protocol. It's all hackery? This coming from the land of Patches? Simply amazing. None of its interoperable? Are we to expect Microsoft, the company that gave us the .doc format, to give us this interoperable format? Suuuuure.

    This is nothing but FUD.

    1. Re:Technological Snake Oil by Ace905 · · Score: 0, Troll

      I have to agree with you completely on this. Microsoft's latest announcement is nothing more than lip service to beaten horses.

      If you check their interoperability standards you can see that they blatently admit non-adherence to POSIX compliance in a very anti pro-active server farm way.

      --

      Ace
    2. Re:Technological Snake Oil by platypus · · Score: 2
      As for ways to do long-running requests, I fail to see how a stateful connection in this case is anymore beneficial than a dated message sent via a stateless protocol to a service. In fact, questions about uptime, data transmission integrity, and security have me thinking the stateless message is better.

      Amen, add to that

      load balancing (ok, related to uptime)

      resource consumption (stateful firewalls and the servers themselves)

      Also from a theoretical point of view, I don't think that the asymmetric nature is not suitable for most kind of webservices I can imagine.
      Why should webservices include P2P for chrissake?

      Also, I don't want to expose my internal network to incoming requests of this nice new symmetric protocol, just to be able to use some future possible webservices like online banking.

      I want it asymmetric, dammit.

  74. Didn't see it coming? by Anonymous Coward · · Score: 0

    All your httpds are belong to us!!

  75. No central firewalls? by NetJunkie · · Score: 3, Informative

    Who in the world would want to administer seperate client firewalls? Sure, sounds great at home with 5 machines, now do it with 5000. No way that will ever happen.

    A good centrally administered firewall won't stop you from doing what you need to do. If a protocol is well thought out NAT will not cause a problem.

    1. Re:No central firewalls? by demaria · · Score: 2

      Use a centrally managed desktop firewall. People do that. Often. A lot.

      Look at products from InfoExpress, ISS, F-Secure, Sygate, Securitae, and now Zone Labs. They all offer centrally managed firewalls.

    2. Re:No central firewalls? by Anonymous Coward · · Score: 0

      But those products don't support IPv6.. which this comment was about, also its the authors idea that central firewalls are bad in IPv6 networks.

  76. Shit programmers' days numbered by nagora · · Score: 1
    MS today announced that they would stop hiring programmers that used HTTP for everything. They denied that they had considered scrapping HTTP because their current programmers didn't know how to use it properly. "That would be insane; like banning paint because lots of people have poor taste in decorating their homes." an official said.

    TWW

    --
    "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
  77. Time for new thinking.. by Koos · · Score: 2
    Don Box, an architect for Microsoft's .NET Developer Platform team, said HTTP presents a major challenge for Web services, for peer-to-peer applications and even for security.

    I guess Microsoft needs to think outside the box.

  78. slashdots days are numbered by Anonymous Coward · · Score: 0

    suck my penis, willie.

  79. Re:What about things that P2P doesn't make sense f by CmdrPinkTaco · · Score: 1

    Ok, I am a programmer and I have written some RPC functions / services / insertBuzzWordHere for some of my employers. The thing that I fail to see is the fundamental difference between P2P and (as the author calls them) RPCish services, like HTTP.

    I understand the complaint that RPCish services lacks a suffecient TTL to really make them an application, but is P2P really nothing more than a RPC with a TTL->infunity? Or is there something else that Im not seeing here.

    It seems to me that having a function on node A that calls an RPC function on node B, then B returns the results at its leisure with an RPC call to node A. This could feesibly use RPC to acheive a P2P-style connection. Is there something like this already? From what I hear, this seems to be what SOAP covers, but I have never investigated this. Any thoughts, rants, info would help out. Thanx.

    --
    Please give your mod points to others, Im at the cap. They will appreciate it more
  80. The father of Anarcho Socialism by Anonymous Coward · · Score: 0

    Power Corrupts the Best

    by Michael Bakunin (1867)


    The State is nothing else but this domination and exploitation regularised
    and systemised. We shall attempt to demonstrate it by examining the
    consequence of the government of the masses of the people by a minority,
    at first as intelligent and as devoted as you like, in an ideal State,
    founded on a free contract.

    Suppose the government to be confined only to the best citizens. At
    first these citizens are privileged not by right, but by fact. They
    have been elected by the people because they are the most intelligent,
    clever, wise, and courageous and devoted. Taken from the mass of the
    citizens, who are regarded as all equal, they do not yet form a class
    apart, but a group of men privileged only by nature and for that reason
    singled out for election by the people. Their number is necessarily
    very limited, for in all times and countries the number of men endowed
    with qualities so remarkable that they automatically command the
    unanimous respect of a nation is, as experience teaches us, very small.
    Therefore, under pain of making a bad choice, the people will always
    be forced to choose its rulers from amongst them.

    Here, then, is society divided into two categories, if not yet to say
    two classes, of which one, composed of the immense majority of the
    citizens, submits freely to the government of its elected leaders, the
    other, formed of a small number of privileged natures, recognised and
    accepted as such by the people, and charged by them to govern them.
    Dependent on popular election, they are at first distinguished from the
    mass of the citizens only by the very qualities which recommended them
    to their choice and are naturally, the most devoted and useful of all.
    They do not yet assume to themselves any privilege, any particular right,
    except that of exercising, insofar as the people wish it, the special
    functions with which they have been charged. For the rest, by their
    manner of life, by the conditions and means of their existence, they do
    not separate themselves in any way from all the others, so that a perfect
    equality continues to reign among all. Can this equality be long maintained?
    We claim that it cannot and nothing is easier to prove it.

    Nothing is more dangerous for man's private morality than the habit of
    command. The best man, the most intelligent, disinterested, generous,
    pure, will infallibly and always be spoiled at this trade. Two sentiments
    inherent in power never fail to produce this demoralisation; they are:
    contempt for the masses and the overestimation of one's own merits.

    "The masses" a man says to himself, " recognising their incapacity to
    govern on their own account, have elected me their chief. By that act
    they have publicly proclaimed their inferiority and my superiority. Among
    this crowd of men, recognising hardly any equals of myself, I am alone
    capable of directing public affairs. The people have need of me; they
    cannot do without my services, while I, on the contrary, can get along
    all right by myself; they, therefore, must obey me for their own security,
    and in condescending to obey them, I am doing them a good turn.

    Is there not something in all that to make a man lose his head and his
    heart as well, and become mad with pride? It is thus that power and
    the habit of command become for even the most intelligent and virtuous
    men, a source of aberration, both intellectual and moral.

  81. Insert negative Microsoft subject here by Anonymous Coward · · Score: 1, Insightful

    Insert anti-Microsoft rant here.

    I don't even bother anymore.

    1. Re:Insert negative Microsoft subject here by ahde · · Score: 2

      we need a way to moderate the moderations as "funny"

  82. Technical inaccuracies in the article by Excession · · Score: 1
    "If it takes three minutes for a response, it is not really HTTP any more," Box said. The problem, said Box, is that the intermediaries--that is, the companies that own the routers and cables between the client and server--will not allow single transactions that take this long.

    The "intermediaries" only talk IP, they don't parse the TCP or HTTP. IP is stateless - you've no idea when you route/switch a packet if it's from a pre-exsiting connection or a new one as you only look at the source and destination IPs. It's irrelevant if the "intermediaries" have low TCP/HTTP timeouts set because you're not talking TCP/HTTP to those devices. As long as the 'net is still passing traffic the TCP connection will never time out between the browser and the server - as long as the user doesn't hit "stop" - because TCP sends keepalives.

    Either the .net engineer is not very clueful (Unlikely) or ZDNet are misreporting.

    1. Re:Technical inaccuracies in the article by Anonymous Coward · · Score: 0

      Proxies, not routers. There are entire organizations that aren't on the Internet other than their HTTP proxy, and if it times out idle requests you're fscked.

  83. Proper use of the word "hack" by Trebuchet · · Score: 2, Funny

    Did anyone else notice that Mr. Box used the word hack properly? ("It's all hackery")

    --

    Malcolm solves his problems with a chainsaw,
    And he never has the same problem twice.
    1. Re:Proper use of the word "hack" by erasmus_ · · Score: 1

      Giving him credit for anything takes away valuable MS bashing time, as evidenced by the posts. But good observation! Perhaps someone can tell us that he's just doing this to be subversive.

      --
      Please subscribe to see the more insightful version of th
  84. The "Cockroach" by gcondon · · Score: 2, Insightful

    To be fair, the engineer interviewed acknowledged that HTTP is the "cockroach of the internet ... after the after the holocaust it will be the only protocol left standing."

    Of course, that is as it should be. Even bad standards have a tendency to live much longer than anticipated and good standards are rarer than hen's teeth. As a good standard, HTTP rightly deserves a long and fruitful life.

    The nefarious implication is that Microsoft is pushing their own propriety replacement for HTTP in order to lay down their infamous hammerlock on the 'net just as they have on so many other sectors of the industry.

    While the engineer raises some fairly valid points regarding the applicability of HTTP to alternative networking models such as P2P, I'm sure that most people will read these comments as a thinly veiled plot to extend Redmond's Global Dominance (TM) - and I'm not sure that they would be mistaken.

    Certainly, the issues mentioned regarding high latency network operations smacks of the distributed applications model of .Net and strikes me as more of a macguffin than a critical limitation of the existing infrastructure. This is just the sort of strawman Gates & co. love to use to insert new technologies whose only true purpose is to increase the public's dependence on the Microsoft MotherShip (TM).

    While few would (should) argue that HTTP has room to grow, and may ultimately be supplemented or even supplanted by other standards, I am very leery of such spin coming from such a notoriously anti-standards organization.

    Be afraid. Be very afraid.

  85. Stateful vs. stateless by Salamander · · Score: 5, Insightful

    The problem with HTTP, as with any stateless protocol, is that there often are (or should be) relationships between requests. Ordering relationships are common, for example, as are authentication states. Stateless protocols are easier to implement, and thus should be preferred when such "implicit state" is not an issue, but in many other situations a protocol that knew something about state could be more efficient. All of this session-related cookie and URL-munging BS could just go away if the RPC-like parts of HTTP were changed to run on top of a generic session protocol.

    Another error embodied in HTTP - and it's one of my pet peeves - is that it fails to separate heartbeat/liveness checking from the operational aspects of the protocol. Failure detection and recovery gets so much easier when any two communicating nodes track their connectedness using one protocol and every other protocol can adopt a simple approach of "just keep trying until we're notified [from the liveness protocol] that our peer has died". This is especially true when there are multiple top-level protocols each concerned with peer liveness, or when a request gets forwarded through multiple proxies. As before, having the RPC-like parts of HTTP run on top of a generic failure detection/recovery layer would give us a web that's much more robust and also (icing on the cake) easier to program for.

    I don't know if any of this is what Don Box was getting at, but in very abstract terms he's right about HTTP being a lame protocol.

    --
    Slashdot - News for Herds. Stuff that Splatters.
    1. Re:Stateful vs. stateless by Joe+U · · Score: 1

      Essentially, what you're suggesting is HTTP over Telnet.

    2. Re:Stateful vs. stateless by Salamander · · Score: 2
      Essentially, what you're suggesting is HTTP over Telnet.

      Wrong. Telnet doesn't have session-management or heartbeat behavior either.

      --
      Slashdot - News for Herds. Stuff that Splatters.
    3. Re:Stateful vs. stateless by Joe+U · · Score: 1

      Session management would be up to the server, wouldn't it?

      And I was being very generic, I don't mean Telnet as Telnet, I mean a protocol similar to what Telnet has to offer.

    4. Re:Stateful vs. stateless by Eryq · · Score: 2

      Good points. I would have to add that my ideal protocol would be a one in which, minimally, the server is able to communicate information back to the client while it is servicing a long request (IOW, status messages which can be used by the client to trace service activity).

      I can't stand having an RPC call which does something complex, like assembling a database report, go off into la-la land for a minute with no clue as to what progress the remote peer has made.

      --
      I'm a bloodsucking fiend! Look at my outfit!
    5. Re:Stateful vs. stateless by J.+Random+Software · · Score: 1

      IAC AYT is no good because the response arrives as NVT data, but either end could use option negotiation for liveness (pick some harmless option, send IAC WILL FOO and expect IAC DO/DONT FOO).

    6. Re:Stateful vs. stateless by Salamander · · Score: 2
      Session management would be up to the server, wouldn't it?

      Session management is probably always going to involve an element of negotiation between servers and clients (and users) at some level. The important thing is that the responsibility for establishing, tracking, and maintaining sessions move out of the applications running on the server. It would be much better to have a single standard way to do these things for all applications, instead of having every application do it just a little bit differently. In-protocol support for sessions also provides a convenient way to deal with request-ordering issues, the status indicators that another poster mentioned, etc.

      I don't mean Telnet as Telnet, I mean a protocol similar to what Telnet has to offer.

      I'm not sure what definition of "telnet" you're using, then. Telnet is an extremely simple protocol that does almost nothing besides negotiating a few connection characteristics and terminal settings. Even the authentication you might be thinking of is not actually part of telnet; it's part of the login process on the target machine. The term "generic telnet" is therefore almost meaningless; HTTP as it exists today is much more telnet-like than what I'm suggesting, since it's based on a single bytestream over a single TCP connection instead of a real (potentially multi-stream multi-connection) session model.

      --
      Slashdot - News for Herds. Stuff that Splatters.
    7. Re:Stateful vs. stateless by Salamander · · Score: 2

      Using telnet IAC for higher-level messaging is just perverse...worse than using HTTP for RPC, even. The whole point here is to use a protocol that's designed to support needed features, instead of hacking those features on top of an existing protocol that was designed for something else.

      --
      Slashdot - News for Herds. Stuff that Splatters.
    8. Re:Stateful vs. stateless by SJS · · Score: 1
      I've long thought that HTTP should have been a UDP protocol for simple stateless request/responses; for state-preserving communication, TCP should have been used, and a single connection kept for the entire interaction.

      As it is, HTTP is a mess, and frequently invents poor solutions to problems solved long ago.

      But what can you expect when you release alpha-quality designs to a population desperately seeking a simpler way to acquire pr0n than Usenet?

      --
      Pick One: http://www-rohan.sdsu.edu/~stremler/sigs/sigs.html (Note - disable Javascript first!)
    9. Re:Stateful vs. stateless by maraist · · Score: 2
      I've long thought that HTTP should have been a UDP protocol for simple stateless request/responses; for state-preserving communication,


      If HTTP were UDP then you'd be relying on IP-framentation to get HUGE transmissions across the pipe (e.g. file-uploads, large form-fields, to say nothing of the downloads). Though I'm not too familiar with practical installations, I thought I've read about firewalls disallowing such fragmentation. Not to mention, on such large transmission, UDP provides no error-recovery.

      TCP should have been used, and a single connection kept for the entire interaction.


      If TCP connections were maintained, then places like cnn.com would go insance with the millions of persistent TCP connections (which often take forever to timeout and die as it is).
      --
      -Michael
    10. Re:Stateful vs. stateless by Anonymous Coward · · Score: 0

      Telnet as in one connected stateful session per user, not the connect/disconnect of http.

    11. Re:Stateful vs. stateless by SJS · · Score: 1
      If HTTP were UDP then you'd be relying on IP-framentation to get HUGE transmissions across the pipe (e.g. file-uploads, large form-fields, to say nothing of the downloads). Though I'm not too familiar with practical installations, I thought I've read about firewalls disallowing such fragmentation.
      Actually, no, there wouldn't be HUGE transmissions across the http pipe. (That's what FTP is for anyway.) Most HTTP transactions are tiny -- just a few K -- that would easily fit into a packet. (And a form that would be larger than, what, 64K? Any web-developer that insane should be shot. Immediately, if not sooner.)

      So the answer becomes "so what"?

      People on dial-up connections don't want HUGE chunks of data coming at them; shoot, even people with broadband connections frequently don't want to send or receive huge pieces of data. Just because some crack-smoking graphic-artist with a shiny new disk and Photoshop want to inflict his "art" on the general populace is no reason to make it easy for 'em.

      The reason for using TCP was that it was the easy -- the lazy -- way out.

      Not to mention, on such large transmission, UDP provides no error-recovery.
      Again, "so what"? We have that now -- I routinely get stalled TCP connections, broken links, incomplete images... and I just wait a few minutes, and then click on "Reload" to see if it gets better.

      If TCP connections were maintained, then places like cnn.com would go insance with the millions of persistent TCP connections (which often take forever to timeout and die as it is).
      Why does CNN need a persistent connection from you? What state is there that needs to be preserved?

      And now that we have "invented" cookies, what need is there for TCP at all when discussing HTTP? Error detection? Use checksums.

      In cases of good network connectivity, TCP is needless overhead. In cases of poor connectivity, TCP is frequently-needless-delay. Do I REALLY need to have my browser keep trying to reload that 1x1-transparent-GIF from an overloaded ad-tracking site? Is it that important to me?

      --
      Pick One: http://www-rohan.sdsu.edu/~stremler/sigs/sigs.html (Note - disable Javascript first!)
    12. Re:Stateful vs. stateless by maraist · · Score: 2
      Actually, no, there wouldn't be HUGE transmissions across the http pipe. (That's what FTP is for anyway.)


      Try pasting a multi-K error report in bugzilla. I've had co-workers who would paste a dozen K of java-debug messages into a bug. Textarea allows the user to really screw with your system (and you know what; sometimes it's necessary). There's no reason why enctype=multipart/form-data shouldnt be able to handle such volume. Further, FTP ONLY works on files. What about meta-downloads.. Dynamically generated images, files ripped straight from a database, etc. The alternative is to save the data into temp files... But how long should those files live.. If you have a 20 meg file and someone downloading over a modem, you're probably going to incorrectly set the timeout before file-deletion.


      The reason for using TCP was that it was the easy -- the lazy -- way out.


      Yes, and good for them.. Why reinvent the wheel? I'll give stronger claims below.


      Not to mention, on such large transmission, UDP provides no error-recovery.

      Again, "so what"? We have that now -- I routinely get stalled TCP connections, broken links, incomplete images... and I just wait a few minutes, and then click on "Reload" to see if it gets better.


      And how is it any better with UDP? At least with TCP, you have some semblence of a connection; your browser window can show you how long the OS thinks the connection is good. With UDP, you rely apon arbitrary client-side timers, and depending on your proprietary protocol, you have no checkpoints, so you can't reliably tell the user how far into the process you've gotten. (e.g. with TCP, you know when the client has at least fully read your request). UDP is not scalable, since any fault tolerant features are going to be less efficient at higher levels. Sure UDP is fast for quick-and-dirty requests, but that's not representative of the majority of modern requests.

      As for your complaint.. Broken links are irrelevant to our discussion. Stalled TCP would hardly be avoided by a wrapper around UDP (except possibly if the LARGER THAN 32 K TRANSMISSION WINDOWS ARE FULL!) Hopefully you'll understand why that statement was important. I'll revisit this below. As for incomplete images, there's the concept of byte-serving; works _very_ well for PDFs, and I believe it's avaiable for any static files. Thus if your browser loses some data, it is possible for it to pick up where it left off. The fact that you can hit reload to try again (except for certain types of forms) is a testament to the robustness of HTTP. If you were in a persistent session, the server would assume that you're in a different state, and may say your reload attempt is invalid.

      Why does CNN need a persistent connection from you? What state is there that needs to be preserved?


      In your original reply, you said that you wanted UDP for simple RPC calls and TCP for sessions. I take sessions to mean anything more than a simplistic web-form. CNN, as well as many other sites have varying levels of complexity in their forms, and could thus have a desire for such .NET-style protocols. The equivalent would be to have the hypothetical "done-right" HTTP protocol maintaining a TCP connection from web request to web request (as I believe you are implying). Thus, CNN would have to maintain thousands (millions over time) of TCP connections open.. Hopefully they're not using a 1 thread/connection model. At least with ASP models, while you still keep memory resident data laying around, your threads get to service alternate requests inbetween subsequent sessioned page loads. That was my point.

      And now that we have "invented" cookies, what need is there for TCP at all when discussing HTTP? Error detection? Use checksums.


      Data robustness for large transmissions, and to provide feedback to the browser when conditions are sub-optimal. Cookies can even be very large (2k each). I'll refute your claim that checksums are sufficient for error-detection below.

      In cases of good network connectivity, TCP is needless overhead.


      For good networks (e.g. fully bidirectional, such as a switched network, and independent upload/download channels, and obviously error-resistent), the ack-packets only provide latency, since they are out-of-band, not inlined with either side's transmission. The only remaining overhead is the setup/tear-down time. But Keepalive completely avoids this issue. Fully independent HTTP requests should have enough separation between details that the overhead shouldn't be much of a big deal.. (a[pache]b[enchmark] is an artifical example, and I seriously doubt any good design would really have such stress loads due to independent transactions).

      In cases of poor connectivity, TCP is frequently- needless-delay.


      In poor connectivity, a checksum is going to provide HORRENDOUS delay. It's all or nothing. If you ever have more than one packet (due to ip-framentation) trasnmitted, you'll likely never get a valid transaction. There is no excuse for reimplementing the TCP model in your proposed UDP framework; it would be less efficient due to the loss of low-level accelerators, robust coding, etc. Thus, simple checksums would require retransmission from the begining after each timeout. (Note that timeouts due to dropped packets are the primary source of delay with TCP, to my knowledge, so you don't avoid that problem with UDP+checksum). NFS, if I am correct foregoes TCP for use of simple checksums, but do you know anybody crazy enough to mount NFS over the inet? Above you imply using FTP beyond a certain threshold to avoid the problem, but DHTML is too dynamic for that.. Rather often (anymore) you get very large data-sets.. SOAP/XML are not going to make this any less true.

      I had other points to make, but accidently closed my browser window, so I'll leave it at this.

      -Michael
      --
      -Michael
  86. Considerations for long duration by Christopher+Bibbs · · Score: 3, Insightful

    Capabilities like chunked-encoding allow HTTP to not know how long the response will be before transmission begins. Explicit instructions for weather the connection is to remain open or closed after the request is complete. Support for acknowledgment before large data chunks are sent to server. Mandatory backward compatibility certainly hasn't taken anything away from the party. All of this is perfect for Client-Server, yes even "monolithic" actions.

    Now if you want to use HTTP to do P2P, then most likely you're only doing it so corporate users can flow out from behind their various firewalls without getting special permission from the IS department. Perhaps, HTTP isn't right in those situatins, but that doesn't mean something is wrong with HTTP. Put the blame where its due.

    1. Re:Considerations for long duration by Anonymous Coward · · Score: 0

      Explicit instructions for weather

      Wow, no wonder HTTP has been around so long and is so adaptable - they thought of everything. It even has built-in instructions for the weather, for pete's sake!

  87. Mis-information by ChipX86 · · Score: 2

    I know I'll get moderated down for saying this, but this seems to be a problem lately. Mis-information.

    The article does not say that HTTP's days are numbered. They are simply saying that HTTP does not work for RPC, and they are completely correct. If I may quote from Dan Box, the .Net engineer:

    "However, there is nothing wrong with HTTP per se, as its ubiquity and high dependability means it is the only way to get an a reliable end-to-end connection over the Internet"

    That doesn't sound to me like he's trying to get rid of HTTP, or that it's going away.

    HTTP is perfect for what it is used for, but when you get into things where you need real-time processing of data both ways, HTTP simply does not work well. This is all that Dan Box is saying.

    Remember folks, just because it's Microsoft does not mean they are always wrong or evil.

    1. Re:Mis-information by Anonymous Coward · · Score: 0

      WRONG!

      When is the last time M$ gave something back to the community that they love to steal from?

      See! They are wrong and evil!

    2. Re:Mis-information by Anonymous Coward · · Score: 0

      Remember folks, just because it's Microsoft does not mean they are always wrong or evil.

      You are half right.

  88. What I Fear by sabat · · Score: 1


    I don't fear HTTP going away; it was never really intended to do what we're doing with it.

    But what I do fear is Microsoft's ideas for a replacement. P2P? Sure. But imagine the control and insidious design they would want. If we replace HTTP, we cannot let Microsoft set the new standard.

    --
    I, for one, welcome our new Antichrist overlord.
  89. We're screwed... by PFAK · · Score: 0

    Hmmm, I say we're screwed if Micro$oft succeeds with this. I mean, they're already attempting to "own" the world. This would be just another step to their world domniation.. There should be NO corporate company developing a protocol, it should be done by the user. Due to the fact that if it's created by the company, chances are it won't be properley done, so that other people can compete.

    This is kinda the doom for the internet..

    --

    Free means no restrictions, ironic the FSF's GPL forces restrictions, isn't it? What's your definition of free?
  90. I do not think so by Anonymous Coward · · Score: 0

    I rememeber when active directory was out..it was the killer as microsoft put it to internet traffic. Now look at Active Directory...? are you or do you know someone who actively implements it?

  91. The Marketing Continues... by micromuncher · · Score: 1

    We all knew that M$ was really pushing .NET with a new marketing campaign. We have read all the wonderful .NET snake oil masqueraiding as "legitimate journalism", even on slashdot.

    It is wonderful to see Box tout anonymous services over the web (hmm, isn't SOAP part of NET?) as the downfall of static pages.

    But what was HTTP for? Delivery of content in static pages. This is NOT anonymous services. It is not stateful or transactional. And it shouldn't be. The fact that people have figured out all sorts of ways to add state - fine - its grafted on top of a simple protocol with a simple implementation and low computational and bandwidth requirements.

    In the Halloween document, they stated very clearly that They wanted to control the protocols. How else can you get your cut unless you have licensed out proprietary protocols?

    If I had a pie for every Microsoft evangelist... I'd have a lot of pies.

    Mm

    --
    /\/\icro/\/\uncher
  92. problems with microsoft + HTTP by cballowe · · Score: 2, Insightful

    Seems that this article reveals many of the fundamental flaws in Microsoft's view of HTTP. The idea that HTTP is fundamentally a RPC protocol is somewhat out of line. Of course, that view is precisely why .NET services run on port 80 -- most firewalls don't block it so they can get around security.

    In a very abstract view, HTTP could be a RPC protocol, but it isn't the same kind of RPC that Sun RPC or even java's RMI (Remote Method Invocation) cover. Sure you can send data back and forth and even cause the server to do some action, but that isn't the design of the protocol. Unlike RPC, HTTP provides no inherent mechanism for passing arbitrary objects -- only text. There is no marshaling of data types at the protocol level. The protocol isn't designed to be used by an application to do anything but retrieve data.

    With XML there is some standard mechanism for packaging arbitrary data types to be sent over HTTP, but this isn't an inherent part of the protocol. The unpacking and reconstructing of these is still at the application level (at best the interpreter of the call will do it so the programmer doesn't have to think about it), but the web server won't have it's primary purpose be marshaling of datatypes -- just executing the requested file (assuming it's a CGI type object) or returning the contents of the file for a normal web page.

    There's more to RPC than just a request and a reply -- generally more than just a few functions are made available, HTTP only really has GET, POST, HEAD, and maybe CONNECT for proxy servers. How these are handled is up to the server author -- in the case of Microsoft, they want to think of it as RPC, are we suprised that they have so many security flaws in IIS?

  93. Did this guy state anything besides the obvious? by NanoGator · · Score: 2

    I've read this article twice, and I'm still not getting anything other than some obvious remarks. The worst part is that he's not offering much of a solution either. "Well, the big guys have some ideas about it..."

    Oooooooookay.

    So HTTP isn't sufficient for a client and a the server to have intimate discussions. We know that. So P2P can't really work on HTTP. DUH we know that. So does he have a magical, better protocol?

    If he's saying that web-browsers should have more robust protocol support, that's fine. I just think he could have made that point a little clearer. Let's say that was what he was saying... doesn't that propose a problem? One really nice advantage to HTTP is that's well developed and about anything can be made to talk to it. But what if another protocol comes around? What if that one protocol turns into 2 protocols? What if it turns into 10 or even 100? This will start over a brand new browser race, and I *reallY* don't want that. Just when the net starts to get settled on standards, they wanna turn it upside down just to implement a protocol they think is necessary.

    I dunno... I wish this guy had provided more of a description of what he thinks would be appropriate, rather than saying "There's a problem!! There's a problem!! Fix it!! And give me fame for pointing it out."

    --
    "Derp de derp."
  94. And floppies, CD's and DVD's..Oh My! by galego · · Score: 1
    floppies days are numbered due to zips and CDs...

    CD's will be taken over by DVD

    DVDs are already obsolete aren't they?

    Since legacy stuff moves on and new stuff transitions in 100% right off the bat...he's probably right!

    Galego

    --

    Que Deus te de em dobro o que me desejas

    [May God give you double that which you wish for me]

  95. Not his issue...his argument is... by peterdaly · · Score: 2

    He is not talking about web applications as you know them. What I believe he is talking about is the webservices model for remote procedure calls as part of the internals of applications. An commonly used example of this would be an application on your computer requesting a stock price from a stock price webservice, which is then used by the application, not displayed in a web browser.

    What they effectivly have created is a nasty implementation of "one-way-corba", which seems to be his complaint (and rightly so!) It is a real pain in the butt to design any complex distributed application using soap calls for everything, due to the limitations he talks about.

    What he wants is something like corba, without the problem of be firewalled up the wazu, like everything but http!

    Distributed apps over an IP network? Easy. Distributed apps over the everything blocked but application level http internet IP network? Hope you have a simple app!

    Firewalls are put up purely for the reason of not allowing things like this. The problem is now there are too many firewall managers out there who either don't know how, or refuse to open ports which makes all communication except application level httpd (as opposed to raw port 80) impossible to base a commercial application on.

    -Pete

  96. fair enough by mikeee · · Score: 2

    I'm not calling for running every service known to man on Internet-connected machines, shutting stuff down is great. No argument.

    What I do think is that ideally we should have honest-to-god IP to every desktop. No, I don't think this is 100% realistic, but I think it is the ideal.

    It's all well and good for the central firewalls to block certain ports, but nothing is enforcing what's really running over those ports. (PPP over DNS, anyone?) Securing the desktop is key; once you've done that, you can open it the network as far as possible so you don't have to deal with this everything-over-HTTP b*&#%&#.

    1. Re:fair enough by GSloop · · Score: 1

      "PPP over DNS, anyone"

      That's the difference between proxy and packet filtering. The proxy "knows" enough about the application layer not to allow a non HTTP connection such as DNS or other stuff. Obviously, this will depend on the sophistication of the proxy, but a good proxy will understand a great deal about the session and application layers.

      If security is really important, everything will pass through a proxy that really understands what's passing, and only pass what's appropriate. Plus, it will do user based authenticaion, and prevent non-priviledged users (inside or outside)from accessing services they don't need or shouldn't use. That's much more granular. Packet filtering in comparison is rock and flint compared to flame thrower.

      Go read the best books on internet security.

      Firewalls and Internet Security
      William R. Cheswick & Steven M. Bellovin
      Addison-Wesley
      and

      Building Internet Firewalls
      Chapman & Zwicky
      O'Reilly

      Basically, the premise is that you only need to really harden the gateway (firewall). Trying to harden every target in the net is an unreachable goal. You'll always fail, because the people in the org will do stupid things with their machines that you can't stop. Thus, harden the ingress and egress points to control access, and you have a workable strategy.

      Cheers!

    2. Re:fair enough by mikeee · · Score: 1, Redundant

      I've read C&B.

      How is your firewall going to protect from a new Outlook virus, or the IE bug-of-the-month?

      And if I'm running RFC3093 IP over HTTP, with SSL, your proxy is almost certain to be clueless. Even assuming I'm not using steganography... and SOAP might count. ;)

      Sure, proxies are more secure; but they can't be perfectly secure... and now you need a new proxy for each new application, which is the mess I was complaining about.

    3. Re:fair enough by GSloop · · Score: 2

      True, and this raises lots of questions about the model MS proposes.

      The beauty of a Client Server app is that the server can't dictate how the client "renders" the returned data.

      Basically, HTTP isn't capable of doing all these nasties, but we want more and more bells and whistles, and extend HTTP to support more Client RPC style commands. This extends the client to a more peer-to-peer model, and then relies almost entirely on the RPC application to play defense.

      It appears that SOAP and .NET move entirely to a client application style security model. The problem is that securing applications is very difficult. Securing large applications is (ultra difficult)^2 or 3 or 4. Since I don't trust many people to secure their apps and MS even less, this type of security model sucks.

      We wouldn't have the IE and Outlook bugs, if MS hadn't basically extended the HTTP protocol to initiate actions on the client machine. The browser (HTTP renderer) should be independant to render any HTTP page as needed. A specific hack to support actions on the client is scary. (Don't get me wrong, lots of people have been guilty of extending the HTTP stuff, but MS seems the most guilty.) Finally, integrating the browser into the OS really blurs the line, and makes additional security a real nightmare.

      Cheers!

    4. Re:fair enough by Cuthalion · · Score: 1

      You're confusing HTTP and HTML. HTTP is a protocol that information is transfered through. Outlook doesn't even use HTTP. HTML is a format for marking up, formatting, and now adding scripting to data. This and MIME are where problems come in.

      I don't know much about SOAP, but in .NET security is not written into each app, so much as being written into system call invocation. This IS reasonable.

      --
      Trees can't go dancing
      So do them a big favor
      Pretend dancing stinks!
    5. Re:fair enough by J.+Random+Software · · Score: 1

      Allegedly Outlook 2002 is a WebDAV client (WebDAV is HTTP plus locking and named properties). They're doing away with the proprietary Exchange protocol in favor of "Web Folders" (or "Office Server Extensions" or whatever they're calling WebDAV this week).

    6. Re:fair enough by GSloop · · Score: 1

      You're right, I wasn't thinking, and using HTTP and HTML interchangeably. [Grins red-faced]

      But, you're running software in basically an RPC here aren't you?

      Thus, you must trust the underlying software, such as .NET or ActiveX etc. If the security model of the underlying software that's being called (RPC) isn't really good, you've got all sorts of problems.

      What you're saying is that the apps ON TOP of .NET don't have to be secure, as .NET is SUPPOSEDLY secure.

      My point, is that HTTP is not a command language (RPC). The move to embed a new middleware with full hooks into the OS, and have it accept RPC calls really have some dangers. If you believe that MS has vetted .NET well, then you shouldn't be worried. If you never know what MS will do, like myself, you should be worried.

      In basic, the original intent behind HTML was great. There were'nt all sort of ill concieved extensions to HTML to do RPC style calls, and the security model was easy to handle. Once the HTML code was extended and integrated into the OS (Windows) the ability of badly designed HTML documents to circumvent the sandbox and touch the OS became much a greater threat.

      Am I off base here...?

      Cheers!

  97. The article totally misrepresented Mr. Box by Anonymous Coward · · Score: 0

    Do we really have to lie about what people say in order to stimulate conversation? Mr. Box never said that HTTP was doomed. On the contrary, he said it will outlive all other protocols. He suggested that a higher level abstraction sit on top of HTTP to allow longer running interactions, he DID NOT suggest that HTTP was dead, dying, sick, or in any way obsolete.

    Get a life!!!!!!!!!!!!!!!!!!!

  98. Buzzwords and Bombshells by WillSeattle · · Score: 1

    Once again MSFT tries to sell us "services" - this year the PHB buzzword is "web services". And since MSFT is losing sales - because people are cutting back - they need to find a "reason" why PHBs should go for "web services".

    One way is to tell them HTML is dead.

    We in the Open Source sphere know that we can ignore all the MSFT FUD and just keep evolving along. Let MSFT tell us Borland is dead (they grew more than MSFT last year due to Open Source). Let MSFT tell us that Linux is dead on servers (we grew more than them on servers). Let MSFT tell us that Java is dead (it's beating the MSFT competition six ways to Sunday).

    Face it, only one thing smells like Dead Fish, and that's the Dark Lord in Redmond.

    One Web Service to Rule Them All
    One Web Service to BIND Them
    One Web Service to SSH Them All
    And in the darkness blind them

    -

    --
    --- Will in Seattle - What are you doing to fight the War?
  99. "Three Minute Transaction Times" by Lathi- · · Score: 1
    "If it takes three minutes for a response, it is not really HTTP any more"

    If it tames three minutes for a response I doubt you would have many users.
  100. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  101. It has begun by pergamon · · Score: 3, Insightful

    I knew it was only a matter of time before Microsoft realized it didn't need HTTP anymore. Granted, that isn't *exactly* what this article is talking about, but I think they're just warming up. If you read carefully, they're not just attacking HTTP as an RPC transport, but HTTP because it is an RPC protocol.

    Why bother with HTTP, FTP, SMTP, POP, IMAP, etc when they control most of the clients and almost half the servers on the Internet. They could replace all those with their own set of protocols or, more likely, a single MS-specific protocol. They say they're already working on some new RPC solution right here in this article. It isn't too hard to imagine them introducing this WindowsProtocol on the server and in some beta of MSIE. Then MSIE starts to try to use WindowsProtocol for any network communications before falling back to the standard protocols. In 3-5 years when they're up to 60% or 70% of the server market, server side Windows has an option that is default "on" that disables non-WindowsProtocol connections and client-side Windows starts asking the user if they want to enable connections to "legacy" services, while warning them that it isn't Microsoft so it can't be good. After that, who would run a server that can't accept connections from 90% of consumer computers?

    Of course I don't want this to happen, but what's to stop them? I doubt the <5% of us that realize its wrong will be able to.

    1. Re:It has begun by kawaichan · · Score: 2

      I think the first step in doing so would be creating a HTTP/.NET based hybird, why everyone has migrated to this platform then they will just kill HTTP completely.

      --

      kawai
    2. Re:It has begun by steve_l · · Score: 1

      .NET has two means of talking to peers (ignoring COM+).

      First it has SOAP over HTTP, which is what dbox was criticising as flawed (agreed, it doesnt work for web services, not without standard things like checksums to verify the response is complete, not without decent two way comms over a single channel)

      But it also has .NET remoting, which is only between .NET boxes. Maybe that is what MS want everyone to use...

  102. It's called BATCH PROCESSING by Anonymous Coward · · Score: 1, Insightful

    Duh. Why the *#@$ would you do that over ANY interactive protocol anyway?

  103. A seamless change? by jster23 · · Score: 2

    I don't see the world changing so easily.
    The use of HTTP has just caught fire in the last 5 years and the rest of the world has just gotten use to browsers as they are now. I cannot see the momentum of the web changing simply because M$ wants it to. People use it, people need it, and gosh darn it, people like it. Ain't gonna happen any time soon.

  104. How about using protocols the way they were meant? by josh+crawley · · Score: 1

    Ok, He's right. HTTP's old and cumbersome for dyamic webpages... And who's web page is monolithic anymore (other than Geocities tripe like "heres my doggie named Barkie" ). Auction sites need fast updating info. News-posting sites need quick updates...

    Now, what about using FTP for what it was meant for... File Transfer Protocol. I see no reason to embed all the non-text links to a ftp. Mainly, I'm talking about binary executables(zip/exe/gz), large images (50k or bigger) and such. FTP's allow connection control, bandwidth control, and user discrimination(r/w for updates of page admin). FTP's are easier to control, update, and admin. It would be nice to see FTP and SSH have a reunion, but It seems that computers wouldnt have enough resources to do this and handle large amounts of users. The last is just is guess, since I figure that ssh ftp has easily been done (pipe 21 through ssh). Any ideas on the feasibility of ssh FTP with large amounts of users?

    Still, the big Idea is why P2P? Most networks kill broadcast packets, but there's a great use for them. There's big corps like Akamai that handle huge amounts of bandwidth control... CNN, Fox, and other sites upload streaming video and audio. Big news events, those sites were flooded. Why? If systems were set up right, 1 connection could serve hundereds of users. They'd just have to tune to the next broadcast, or watch the 'already started' broadcast.

    My idea is the technology is ALREADY HERE. IPv6 is right around the corner, and we need it. IPv6 records on dns is an issue (2 standards that are non-compatible), however free standards people (read opensource'ers) will standarise this problem.

    Don't forget that MS is JUST A COMPANY who wants to make money. If they have an OPEN STANDARD, I'll listen.

    Screw moderation, just post responses. It's not like moderation means anything.

    Josh Crawley

  105. this just in.... by greymond · · Score: 1

    http is dead - M$ .Net comes out to conquer the internet - woot coldfusion is dead - M$ frontpage extensions show up everywhere with javascript C, java, perl, python, etc... are dead - Everything is now coded with M$ C# or nothing (sarcasm - for those that dont understand)

    1. Re:this just in.... by Anonymous Coward · · Score: 0

      You will be assimilated!!! Ha, ha , ha, ha !!!!

  106. He has a point by underpaidISPtech · · Score: 1, Insightful

    Strictly speaking, sans the MS spin, I think we can all agree that HTTP is overused.

    Trying to build web apps that keep state, etc is a complete pain. Just try avoiding javascript because of different DOMs, and you'll wind up with alot of missing functionality. Then you have to use cookies, and hack up convoluted solutions for a simple problem.

    People don't like cookies, they don't like javascript (stupid hack, mostly used for pop-up hell) and again, different browsers make dynamic content a real bitch.

    What we need is the equivalent of the browser for web servcies (stupid catch-phrase). Whatever you want to call it, we need a client-server app that provides P2P services. I think MS wants to dominate another market by introducing another "browser" (the P2P app to end all p2p apps) only this time, they'll get their foot out the door before anyone like Netscape can compete.
    They fumbled with the browser and wound up having to give it away. I have a feeling that Office .NET will have a built-in P2P app/browser. Add $100 bucks to the office price tag.

    Didn't they buy groove networks? Just change the protocol it operates on.

    Either way, someones going to have to punch a hole in the firewall, we cant just keeping using port 80. Web servers are for http pages. Real-time apps need another port, their own dedicated servers. Not Apache 2.2.13+modssl+PHP+mYSQL+dotNET+MP3+mod_Mono+mod_GT K

    1. Re:He has a point by Anonymous Coward · · Score: 0

      >Strictly speaking, sans the MS spin
      except for yours astroturfer

      >Trying to build web apps that keep state
      What do you know about web apps? You're an underpaidisptech.

      >we need a client-server app that provides P2P services
      Maybe you should go back to MCSE class and look up the definition of client-sever and P2P before making oxymoronic statements

      >I have a feeling that Office .NET will have a built-in P2P app/browser
      Yeah it's called MSN explorer,and it's a peice of shit.

      >we cant just keeping using port 80
      No one ever mentioned port 80, http can operate over any port.

      >Not Apache 2.2.13+modssl+PHP+mYSQL+dotNET+MP3+mod_Mono+mod_GT K
      And what would you suggest astroturfer? IIS6.0+mod_Nimda+WebDAV+OutlookHTTPwebmail?

      You have no idea what you're talking about.
      Go back to helpdesking, and let the real techs
      sort out the infrastructure.

  107. Overused? Yes. Obsolete? No. by nologin · · Score: 1

    The article goes to indicate that the golden HTTP protocol can't do everything, and as such, its days are numbered.

    True, HTTP can't push a full gamut of services on the web. It wasn't designed to do that. That's is where the HT in HTTP becomes most significant (HyperText).

    What is ultimately the problem is the push to get the browser to do everything, including handling your applications (think ASPs) and transactions (e-commerce in particular). This mentality of "the browser must be able to do everything" has become its own monster, relying on a protocol that was really designed to push little more than web pages.

    There is very little that browsers can't do these days. However, you can bet that over 99% of all web browser activity uses HTTP (which isn't necessarily a suitable protocol to do everything)...

    Now, there is plenty of room for other protocols to come in and enhance the web. However, HTTP still has a large role and shouldn't be called dead prematurely. However, if these new protocols were to remain proprietary, you can bet that they will never be as widely accepted as HTTP (which is not proprietary, btw).

  108. Re:What about things that P2P doesn't make sense f by erasmus_ · · Score: 1

    He is not advocating using P2P for everything, merely that a more full-featured protocol would have P2P functionality in it, along with some other features that he mentioned. HTTP will certainly stay here for browsing, I don't see it going away anytime soon, but HTTP2 or whatever you choose to call it will be a lot more suited for today's uses.

    --
    Please subscribe to see the more insightful version of th
  109. HTTP is the best, thus far...put a layer on top by camusatan · · Score: 2, Interesting
    I am familiar with a lot of protocols, and I've got to say, HTTP is my favorite. It's dirt simple, it's extensible, it's fast, it's 8-bit-clean, it's stateless.

    The great thing about HTTP to me is all the stuff that was left out. And if you really want that stuff, there's WebDAV, which also seems to be a decent protocol - but I'd have to look into it more to get a better idea.

    For those people who don't like a gajillion different services running on port 80, then don't run them on port 80! You could have a user-facing webserver responding to port 80, and an XML-RPC server responding on port 8080, and a SOAP server on 8081 - there you go, problem solved.

    The real problem presented by this article - of long-running transactions - definitely is outside of the scope of HTTP. But the best solution to this might be another protocol on top of HTTP. I imagine something that initiates some transaction with a transaction-id, then closes the connection, and waits (possibly days) for a connection to come back with that same transaction-id. Voila. Problem solved. Of course there'd be more to it than that, but that's the basic idea.

  110. Re:From the pages of LinuxQueer Magazine... by The+BOFH+Troll · · Score: 0

    PREACH, BROTHER, PREACH.

    It is time Alan Cocks and Richard Stoolman tied the knot.

    --

    - The BOFH Troll

  111. Microsoft's days are numbered! by gamgee5273 · · Score: 3
    As are Apple's, and Sun's, and Oracle's. Let's not forget FTP, oh and throw SMTP in there, too.

    Maybe I'm just getting a little George Carlin- grumpy lately, maybe it's because I'm writing a eulogy for a friend's funeral, maybe it's because I'm sick of people at MS attempting to form competent sentences (please, stick with those inspired dance routines!), but please tell me: What's days aren't numbered?

    HTTP has its issues, but referring to it as "the cockroah of the internet" and saying its days are numbered, and then saying that MS has a P2P solution!, just goes to show that not only are they power hungry in Redmond but seriously power-tripping...

    Arrgghhhh....

    1. Re:Microsoft's days are numbered! by Spencerian · · Score: 1

      I agree. It's more likely that additional protocols with greater extensibility than HTTP will simply be supported in a browser, or the OS (as MS does it, badly, in recent Windows versions).

      So, instead of typing HTTP://, you might type in something else. I can go for that.

      --

      --
      Vos teneo officium eram periculosus ut vos recipero is.
    2. Re:Microsoft's days are numbered! by StrawberryFrog · · Score: 2
      I'm sick of people at MS attempting to form competent sentences

      Erm, I take it you have read Don Box's books (Essential COM, Effective COM) Go look them up at Amazon, I could be bothered to link. They may be 100% MS-centric, but as a way to understand those technoloiges thay can't be beat.

      He is emphatically no marketroid, and is in fact a brilliant technical explainer, and a coding geek. When will people wake up and realise that MS employes a lot of very clever geeks. Money will do that.

      There may be problems with MS, but you are way off mark in that comment.

      HTTP has its issues, but referring to it as "the cockroah of the internet" and saying its days are numbered

      Read the flipping article! "cockroach of the internet" means that it would survive anything including nuking, and that it's days are emphatically not numbered. See "installed base" and "backward compatibility"

      --

      My Karma: ran over your Dogma
      StrawberryFrog

    3. Re:Microsoft's days are numbered! by gamgee5273 · · Score: 2
      I read the "flipping" article and, as most of the FUD coming from MS nowadays, I found it poorly written and amazingly bad at getting details across. Personally, I really don't care if the dude's an ubergeek and works 200-hour work weeks: I'm sick as shit of MS coming down from the mountain with stone tablets in hand and declaring that something is over, or something is new, or something is presently acceptable. And, personally, I don't consider calling something a cockroach to be a compliment - even if he does think it's going to survive. It's gottne to the point where I really could care less about anything coming out of any MS employee's mouth. The company is continually churning out apologists and cutthroat geeks who have no damned idea how to actually think within the real world - only the world that MS has created.

      I'm sick of it. There are more important things in this life other than Bill (Bill! BILL!) and his twobit company's skewed view of the future.

      I'm going to go over and grumble some more in the corner.

  112. I thought the problem with P2P... by KingPrad · · Score: 1
    was that its load cost increases nearly exponentially with increasing users. This is definitely a problem when there are hundreds of millions of users and billions of independent connections. Aren't most web connections simply a quick send-information request? Why require more data to be sent by both sides?

    It would be foolish to trade HTTP's known limitations accumulated through decades with P2P unknown dangers, simply because we could. HTTP does its job well.

    KingPrad

    --
    Stop the Slashdot Effect! Don't read the articles!
  113. Recursive firewalling by tezza · · Score: 1
    As some other /.ers have pointed out, SOAP et alia [Citrix tunnelling, iPortal Netlet] do their tunnelling over HTTP to a possibly suspect backend process, circumventing the packet level firewalls.

    As the next gen of firewalls start tearing apart the HTTP stream looking for encoded application level stuff, you're going to see a marked decrease in performance of the tunnelling, again. This race for further and further tunnelling will make it v. inefficient.

    New killer apps will have their own methods and resort to HTTP encapsulation only when unavoidable. One or more of these killers will reach a suitable critical mass that firewall holes are demanded by senior execs.

    Thus HTTP will exist as the standard encapsulation for those apps not yet worthy, and the others will get their access.

    Next to go is the strict adherence to TCP over IP for internal networking [RTP,something else over IPv6], and possibly a switch back to old school Token Bus on Ethernet for some segments.
    Note: conjecture warning

    --
    [% slash_sig_val.text %]
  114. yeah right by axehind · · Score: 1

    "a Microsoft .Net engineer declares HTTP's days are numbered" This just goes to show that .Net engineer's have a high use of narcotics.

    1. Re:yeah right by erasmus_ · · Score: 1

      Never mind the fact that he does not actually say this ever, but this is rather the Slashdot take on it.

      --
      Please subscribe to see the more insightful version of th
  115. Standard Microsoft strategy by Animats · · Score: 2
    I wouldn't be surprised if this is preparatory FUD laying the groundwork for MS to introduce some kind of DRM-laden, proprietary, charge-per-use, license-to-implement, no-OSS-allowed, caters-completely-to-huge-business protocol that will warp the web into some kind of horrific, ad-laden, taxed, corporate space where all fun and creativity will be sucked out leaving a soulless morass of stuff-we-must-buy.

    That may well be the case. Look back at the famous Microsoft "Halloween Memo", which contains a discussion of how to reduce the value of the "wire protocol" (i.e. TCP/IP, HTTP) in favor of putting value into the "services and implementation".

    From that memo:
    MSMQ is a great example of a distributed technology where most of the value is in the services and implementation and NOT in the wire protocol. The same is true for MTS, DTC, and COM+.
    ... Make Integration Compelling -- Especially on the server.
    ... The rise of specialty servers is a particularly potent and dire long term threat that directly affects our revenue streams.

    So it's an established strategy of Microsoft to come up with ways to mahe HTTP less important. The key issue here is that if the value is in an openly documented protocol, anyone can interoperate with it. If proprietary software, preferably protected with intellectual property rights, is required to interoperate, those annoying "specialty servers" (by which they mean HTTP-based web servers) just go away.

  116. Reporters line of logic. by interstellar_donkey · · Score: 5, Funny

    1. As everyone knows, the WWW is the Internet.

    2. Since the web runs using HTTP, http runs the Internet.

    3. HTTP can't do everything the Internet can offer.

    4. While there are other protocols out there (like ftp, p2p, telnet), only hackers and pirates use them, so they must be insecure.

    5. Therefore, we must change http or the Internet is doomed.

    --
    The Internet is generally stupid
  117. duh by cweiblen · · Score: 5, Funny
    I need a way to send a request to a server and not the get result for five days

    Try sending an email to MS customer support

    --
    -- It's better to be pissed off than pissed on.
  118. More de-commoditization by fanatic · · Score: 2

    In the Halloween memo, some Microsoftie argued that their main defense against Open Source and Free software would be theb 'de-commoditization' of the network protocols - that is, getting people to use proprietary protocols, that MS can control, rather than standard protocols, which they can't and which anyone con implment servers and clients for. I've read the link, and it's garbage. For example:

    The problem, said Box, is that the intermediaries--that is, the companies that own the routers and cables between the client and server--will not allow single transactions that take this long.

    Complete and total nonsense. The intermediary routers have no idea that your session has taken 5 minutes and couldn't care less. (Some firewalls or edge-routers with reflexive access lists may need their timers adjusted, but these are at the ends of the conversation, not in the middle.)

    I need a way to send a request to a server and not the get result for five days."

    It exists. Its called email. Hack up an SMTP client and server app and you're done.

    The reason that peer-to-peer applications do work today, said Box, is that programmers create hacks to get around the limitations of the protocol, and this is not good.

    Stupid and irrelevant. P2P may need different protocols, but this is no reason to stop using http in general.

    My experience has been that technical people tend to focus honestly on facts. The fact that so many of Microsoft's technical people lie so much is further condemnation of the inherent dishonesty of their corporate culture.

    --
    "that's not encryption - it's a new perl script that I'm working on..." - from some Matrix parody
  119. zdnet.com.com explanation by Anonymous Coward · · Score: 1, Informative

    All the CNet sites are whatever.com.com.

    It's so they can share cookies. Any site in a domain can share cookies (for example, www.slashdot.org, apple.slashdot.org, and bsd.slashdot.org share your login info cookies). That's why, for example, all the ABC/Disney sites redirect to whatever.go.com.

    So, with the .com.com domain, all the CNET sites can maintain their identities (news.com, download.com, etc) while sharing cookies through the .com.com domain.

  120. MS is know for its ..... inovativeness by Zapdos · · Score: 1

    NOT.
    They know that eventually IIS will lose. How do they make that a non issue? They redesign their^H^H Internet, so that the other products wont be used either. When they try this move there will be a new anti-trust law suit.

  121. Re:How about using protocols the way they were mea by Anonymous Coward · · Score: 0

    Newsflash! Josh Crawley, a noted expert on .. .. announced today that moderation is useless and that Slashdot should immediately change their model and rewrite Slashcode! More at 11.

  122. Overweight Protocols by daperdan · · Score: 1

    We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will melt the Internet.
    Almost seems like he feels that the HTTP protocol is overweight and that it's putting strain on the Internet. If you're comparing HTTP protocol to SOAP wouldn't that be like Ricki Lake calling Oprah Fat?

  123. HTTP is being replaced with... by Refrag · · Score: 5, Funny

    MSTP .Net

    Microsoft will be anouncing Microsoft Transfer Protocol .Net which will be used by the WWN (World Wide .Net) for anything from ms-mail (sending electronic messages to friends and family) to paying your ms-mortgage.

    --
    I have a website. It's about Macs.
  124. Comment about shared work by shawnmelliott · · Score: 1

    ...sounds like OpenSource
    Last Paragraph
    "Microsoft has some ideas (on how to break the independence on HTTP), IBM has some ideas, and others have ideas. We'll see," he said. But, he added, "if one vendor does it on their own, it will simply not be worth the trouble"

    what about not having Vendors work on anything and let those who remember the good old days of low level protocol work do it. You know. Experience. Open source. More trusted. The last thing we need is IBM, Microsoft and others beefing up a protocol to use Digital Copyright Enforcement

  125. Wide Load coming thru... by Anonymous Coward · · Score: 0

    I know what dis lame story needs... some PAGE WIDENING WOO HOO!!

  126. exaggeration by f00zbll · · Score: 3, Interesting
    After reading the article I couldn't help but wonder what Don Box is thinking when he says:

    "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."

    If I am reading his statement correctly, Box feels HTTP is not suitable for processes that take long period to get a response. Even if you remove HTTP layer from SOAP, you would still have a problem. Say some one decides to by pass HTTP, use raw sockets and establish persistent connections. This means a stateful application has to be built on top of SOAP. I'm just guessing, but if Box is saying RPC has to have sessions and be stateful, that isn't a full solution. If a process like "place a stock order for MSFT when the price is less than 50.00 buy," a stateful application may not be the best solution. It might take 1 day or 2 months for the price to drop below $50.00.

    Microsoft is a supporter of XLang which tries to address the problem of stateful transactions. One of the problems of this approach that I can see is it is limited in scalability and timeout. Once you say all transactions need to be stateful, what is an acceptable timeout? Do all transaction require the same timeout period? What are the rules governming timeout, persistence, and garbage collection of invalid/expired states?

    Why not use event based protocol with rules to provide a higher level of abstraction than XLang. The way XLang treats transaction is with case statements. On the surface that sounds fine, until you realize for every company you do business with, you will have to add cases to handle new situations, which rapidly makes the system harder to maintain. EBXml in my mind uses a better approach, which divides business and functional logic and suggests rules as a possible mechanism. HTTP isn't really the problem for long processes (as in weeks and months). A better solution is event based protocol, so using HTTP isn't a big deal. This doesn't mean there are cases where HTTP is really bad for transactions. Cases where response time is a huge factor in processing a transaction, a persistent connection would be more suitable. Things like day trading applications where response time affects the price, you would be better off using persistent connections for RPC. It would suck for a day trading application to loose a buy order because there was a sudden spike in requests and the system couldn't reconnect to send confirmation. Having a persistent connection in this case is the best solution, because response time has to be rapid.

  127. Re:eXtensible Application Transport Protocol (XATP by Wesley+Felter · · Score: 2

    How is XATP better than BEEP?

  128. RE: HTTP's Days Numbered by TheUndertaker · · Score: 1

    Just because some Microsoft engineer says HTTP days are numbered doesn't mean it is. Again, they're just doing PR stints.

    I'd hate to say it, but I strensously doubt what this person has to say will change anything.

    My two cents. . .

  129. I think you're missing the point by jon_c · · Score: 5, Informative

    Mr. Box was not saything that HTTP is not good as a Hyper Text Transfer protocol, he was stating that it's being manipulated to perform RPC, which is true. The theme of the artical was on how HTTP is bad for RPC, which you seem to also agree with.

    Simply because this guy now works at Microsoft does not mean he has an agenda for evil. As a matter of fact before working for Microsoft Mr. Box started a little company called DevelopMentor, He's also written a few books One of which is concedered "The" book on COM, Essential COM, ask any COM developer worth their salt if they own a copy, they do.

    I've known of Mr. Box for years now and trully recpect him as a technical writter and developer and I honestly don't think that he would shill for Microsoft.

    -Jon

    --
    this is my sig.
    1. Re:I think you're missing the point by maxpublic · · Score: 2

      Simply because this guy now works at Microsoft does not mean he has an agenda for evil.

      This is kinda like saying that just because you sold your sold to the Devil doesn't mean you're damned.

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
    2. Re:I think you're missing the point by photon317 · · Score: 1


      DevelopMentor - Seems to be about .NET, VB and the other crap MS calls development.

      His Books - about COM, which is a Windows thing.

      And yeah, he does work at Microsoft. All in all, I'd say these thigns put him in the Microsoft camp, and yeah, that does make him pure evil.

      It's one level of evil to have Microsoft try to dominate the world with horribly ill-designed software and protocols. It's an even more dangerous evil when the designs have a small amount of merit, because then they're more likely to succeed in shutting out the rest of the world.

      --
      11*43+456^2
  130. Re:How about using protocols the way they were mea by josh+crawley · · Score: 1

    You think I really care about moderation? What's it give me? Absolutely jack shit.... and jack left town. The only reason why I said dont mod me up in favor of resonding is that you can do only 1 or the other.

    Hell, you wont even put a name to your post.

  131. Re:Don Box is only half baked by Anonymous Coward · · Score: 1, Interesting

    Actually there is a need for this type of protocol to support applications talking with applications on different computers, otherwise known as web services. SOAP addresses this and Microsoft's .NET goo simply takes this approach. Their marketing department has "hyjacked" the whole purpose of XML (SOAP is a XML schema) as their own. Typical for large corporations.

    We now enter the era of XML schema wars, which is essentially a "data format" battle. i.e. XML based Word v.s. XML based PDF. .NET v.s. ___.

    It's clear that there are enough companies and people out in the world who won't choose Microsoft goo of the week, leaving the practicality of effective open and vendor neutral standards a reality.

    What Microsoft does is completely irrelevant since there are various alternative systems evolving. Simply ignore Microsoft and implement your solutions as YOU see fit adopting whatever standards you find appropiate. A beautiful aspect of reality is that anybody can create their own "world view", shared with others or not, within the framework reality. This is especially true in computing. If people find your "world view" or "system" more valuable and more useful than someone else's, they will adopt it. Evolution in action.

  132. What nonsense by rseuhs · · Score: 5, Insightful
    Next, let's discuss Microsoft realizing that .NET is a "stupid idea." Microsoft doesn't care about setting up a scapegoat because they're 100% sure it will work, and they're probably right. The whole company has been restructured to work with .NET and it is not going away. Latest copy of Windows in development is Windows.NET, latest set of development tools is Visual Studio.NET, latest certification is MCSD.NET. Getting a trend here yet?

    Yeah, I know with the Linux-hype over, some people feel very "objective" when they treat Microsoft's marketing schemes like the word of god.

    However:

    .NET is essentially just the next incompatible-to-everything-but-itself Win32API with some Java-ideas and pseudo-language-independence thrown in.

    Will it become the standard on Windows? Sure, just like the Win32API - just like any api Microsoft pushes.

    Will it harm or endange other operating systems? No. Worst case is that everything stays the same and Linux can't run Windows-programs. Best-case is that Mono allows Windows-compatibility which would benefit Linux greatly.

    .NET is nothing new, it's just the next API Microsoft *HAS* to push, otherwise nobody upgrades. And it could be Microsoft's biggest mistake if it runs on Linux.

    1. Re:What nonsense by erasmus_ · · Score: 1

      Incompatible with everything? And here I was thinking Microsoft was trying really hard to make XML, SOAP, and DHTML part of their cornerstones for Web development with .NET. Let me guess, MS is trying to "taint" all of them, right? Personally, I'm all for compatibility, but to me the movement to create a compatible version on Linux is a good sign, as it means this is actually something being worth compatible with. At least we can both agree that it would benefit Linux (and all of us) greatly.

      --
      Please subscribe to see the more insightful version of th
    2. Re:What nonsense by rseuhs · · Score: 3, Insightful
      XML, SOAP, DHTML etc. are not core parts. (And XML allows binary sections which means that you can put *everything* no matter how incompatible into an XML, BTW)

      The important thing is the API which will be incompatible to everything else. If it isn't it would be very bad for Microsoft.

      I suspect that .NET is incompatible to everything else, but projects like Mono could endanger this incompatibility and become big problems for Microsoft.

      Linux can only win. Worst case is that everything stays as incompatible as it is now, best case is that .NET becomes multi-platform which would kill Windows in a few years.

      The reality will probably be something in between: Compatibility will be better than current Wine/Win32 compatibility, but not 100% - yet Linux could make big inroads also on desktops if Windows-compatibility is good enough.

      The way I see it is that Bill Gates and Steve Ballmer fell victim to a big delusion: That Windows could survive on a leveled playing-field.

    3. Re:What nonsense by erasmus_ · · Score: 2, Insightful

      I really like your optimism, but I think that as you point out, reality does not include Windows being killed off "in a few years." Nor do I understand why it necessarily has to die? I think most people would agree that competition is good for markets, and OS market is no different. I do not want to see one clear victor, but rather have Linux make significant inroads and have these 2 OSs and all their associated technologies push each other to become better. Even though I realize it's a different business model, I think even Linux could risk stagnation with nothing to complete with.

      --
      Please subscribe to see the more insightful version of th
    4. Re:What nonsense by rseuhs · · Score: 3, Interesting
      I really like your optimism,

      No, you don't. You are much more comfortable in believing that .NET is a grand masterplan invented by the evil geniuses at Microsoft to take over the world.

      Reality is that Microsoft is just an ordinary company that makes a lot of mistakes and screws up a lot. Probably even more than other companies. Of course they make tons of cash because IBM gave them the x86-OS monopoly. But *anybody* no matter how incompetent can make tons of cash with that.

      Some things that might change your mind:

      - Windows was not an evil plot to take over everything. Windows was already abandoned after v2.0 and Microsoft's strategy was to go with OS/2. However a Microsoft employee played with it in his free time and laid the foundation for Windows 3.0 which was picked up after relations to IBM went worse and OS/2 was delayed and delayed. So Windows was essentially an accident, if that employee wouldn't have played with it, OS/2 and IBM would probably dominate today! (which would be much worse BTW, because it's hardware and software)

      Most Microsoft projects were big failures: Windows/Mips, Windows/PowerPC, Windows/Alpha, "Homer" Project, Modular Windows, "Otto" Projekt, MMOSA (Set-Top-boxes Operating System), WebTV, Blackbird/Internet Studio (1995), proprietary MSN which should replace the Internet, COOl (C++ Object Orientated Language), PenWindows, Microsoft Bob.

      In 12 Months we can also add "XBox" to the list. Just look at Japanese sales which were so low that retailors cancelled orders IN THE FIRST WEEK of the launch!!

      And I'm also very excited to see the European launch where the XBox will cost nearly twice as much as the PS2.

      (And unlike those other projects, XBox is very visible and will scratch Microsoft's reputation of being invincible.)

      but I think that as you point out, reality does not include Windows being killed off "in a few years."

      What's the point in running Windows if you can get all the apps on another platform, too? I don't think PC-makers would sacrifice 20% (and increasing) share of their revenue to go directly to Microsoft if there was an other OS that could run all the apps reliably.

      And most people will use whatever comes on the PC. (as long as it runs their apps)

      Nor do I understand why it necessarily has to die?

      Did I say that? I said that it would die, not that it's necessary. I personally wouldn't care if Windows lifes forever if I could run all apps on Linux. But on a leveled playing-field, Windows simply doesn't have much of a chance. On a leveled playing-field Windows will die, not because I want it to, but because of basic market forces. It's not like there is a big community around Windows that writes drivers. If the hardware-maker doesn't do a driver, there will be no driver. Microsoft couldn't write all the drivers, even if they wanted to.

      Just look at server and embedded system markets. On those, almost all apps are available on Linux, therefore Windows starts to fade, because there is no added value for the money. Of course a lot of companies use Windows on servers because they are used to it, but show me any startup-company that uses Windows on servers.

      Companies grow and shrink, come and go. Without startups, a platform is doomed to fail.

      The same is happening on embedded systems. Even in the PDA-sector (which is a tiny part of embedded) where WinCE should be strong, all new PDA-designs are Linux-based. Show me any company that has *started* to produce PDAs in the last 2 years that uses WinCE - there are none.

      In non-PDA embedded areas, WinCE's situation is even worse.

    5. Re:What nonsense by erasmus_ · · Score: 1

      I don't like your optimism? I thought I was being nice and honest, but obviously you know better.

      Reality is that Microsoft is just an ordinary company that makes a lot of mistakes and screws up a lot. Probably even more than other companies

      I completely agree. In fact, your list of failed projects is very interesting, as I have not heard of quite a few of them. But allow me to differ in a few areas.

      Full disclosure aside, I own an Xbox, and I do admit that it's possible it will fail. But I don't think it would be for the reasons you stated. A North American company trying to break through a market in Japan cannot do well, and MS did not really expect their launch numbers there to be very high. Considering the strong support they're getting from developers like Sega and Team Ninja, I think their future chances are pretty good. Don't forget that GameCube's launch numbers were even worse - we are in an economic downturn still, after all.

      As for the hardware drivers question, the only reason there is no large community writing drivers for Windows is because of course there is no reason for it. I don't think most developers are very excited about writing drivers - they're programs with very narrow purpose that are obseleted on a whim by the hardware manufacturer with a minor product revision. As Linux gains support, hardware companies will try to ensure to make both Windows and Linux drivers inhouse, and I hope to see independent need for driver writing go away. Linux community has more exciting and better applications to create.

      --
      Please subscribe to see the more insightful version of th
    6. Re:What nonsense by big_hairy_mama · · Score: 2

      Not trying to be pedantic, but XML does not allow binary sections. You cannot say "&#0", for example. The best you can do is encode the data in Base64 or something.

    7. Re:What nonsense by rseuhs · · Score: 2
      I don't like your optimism? I thought I was being nice and honest, but obviously you know better.

      Maybe I was a bit harsh, my apologies.

      A North American company trying to break through a market in Japan cannot do well, and MS did not really expect their launch numbers there to be very high.

      Did they also expect retailors to cancel orders in the first days after release?

      Of course Microsoft will say that numbers will be above "expectations", as always. However, most MS-products lately (Win2K, WinME, WinXP, OfficeXP) had a rather dissapointing start.

      As for the hardware drivers question, the only reason there is no large community writing drivers for Windows is because of course there is no reason for it.

      You really think that anybody would write drivers for Windows in their free time? Why? What's the point?

      Linux offers a lot compared to Windows, especially for programmers: Openness, freedom, etc.

      The only thing Windows offers is great app-support, if that goes away (and you could run the same apps on Linux), why should any programmer write drivers for it?

      I don't think most developers are very excited about writing drivers - they're programs with very narrow purpose that are obseleted on a whim by the hardware manufacturer with a minor product revision. As Linux gains support, hardware companies will try to ensure to make both Windows and Linux drivers inhouse, and I hope to see independent need for driver writing go away. Linux community has more exciting and better applications to create.

      Considering the quality of many drivers written by the vendor, I think that it would be the best if vendors would do open-source drivers which could then be reviewed and fixed by the community.

    8. Re:What nonsense by CoolVibe · · Score: 2
      > I think even Linux could risk stagnation with nothing to complete with.

      Uh, what about the BSD's? Solaris? IRIX? AIX? HPUX? Don't say Linux doesn't have competition. You can see Linux as an alternative, but there are also alternatives to Linux :-)

    9. Re:What nonsense by rseuhs · · Score: 2
      Uh, what about the BSD's? Solaris? IRIX? AIX? HPUX? Don't say Linux doesn't have competition. You can see Linux as an alternative, but there are also alternatives to Linux :-)

      Exactly, and even inside Linux there is competition: SuSE, Mandrake, debian, etc.

      It's like it should be: Competition in a leveled playing-field, that means every player is compatible (= using the same APIs) as the others.

    10. Re:What nonsense by Secret+Coward · · Score: 1
      Worst case is that everything stays the same and Linux can't run Windows-programs.

      No. Worst case is, many major web sites start providing services that are only available to people who use .NET, and the public rabidly, and blindly adopts it. Linux (and any other non-MS OS) would be unable to utilize those services. Even if Linux developers were to reverse-engineer the .NET system, they would be unable to implement key aspects due to patents.

      End result: Linux users are unable to utilize key services used all over the internet.

    11. Re:What nonsense by sheldon · · Score: 2

      The guy who says "Linux will win" is now claiming every product that Microsoft creates is a complete failure.

      Lordy, lordy, if only I could have some of what this guy is smoking!

    12. Re:What nonsense by ahde · · Score: 2

      This is the same playing field that Netscape won on? Microsoft has a 95% market penetration and a 100% OEM lockup (not counting Apple, which Microsoft is the primary application developer for anyway)

    13. Re:What nonsense by ahde · · Score: 2

      Having to write our own drivers is what made linux. How many kernel hackers got into it by writing (or modifying a driver?) If we had had them handed to us there wouldn't be nearly the developer base and thus user base that there is. It'd just be ESR (and other VMS-empire fans), a bunch of ISPs and a few scientific places.

      Without the need to write our own drivers Linux would just be a toy Unix for x86

    14. Re:What nonsense by rseuhs · · Score: 2
      Are you Bill-Gates lovers all visually impaired or illiterate?

      I said Windows, not IE.

      The successor of DOS which now costs 10 - 20% of desktop system revenues and costs more each year.

      The only reason why PC-makers ship it is because of the apps.

    15. Re:What nonsense by erasmus_ · · Score: 1

      All I was saying is that writing an actual useful application that could be used by many people may ultimately more satisfying and rewarding than writing one specific driver that only a handful of people need, although it may very well be challenging and interesting, not to mention a good learning experience. Having never written a driver, I very well may be mistaken :)

      --
      Please subscribe to see the more insightful version of th
  133. http == qwerty by peter303 · · Score: 3, Insightful

    Sure both have flaws. But they are so entrenched, they'll never be displodged.

    1. Re:http == qwerty by Anonymous Coward · · Score: 0

      qwerty has flaws? And what might they be?

    2. Re:http == qwerty by Anonymous Coward · · Score: 0

      fortunately, http is probably entirely implemented by software which can be easily updated or replaced without affecting the user interface significantly, whereas qwerty keyboards all have phsyical manifestations which are more expensive to replace, and doing so requires retraining of every keyboard user! i think once the "trenches" fill up with enough "dead bodies" then http will start to retreat.

  134. RMI.NET? by shodson · · Score: 1

    Seriously, MS would never adopt RMI though, and RMI has it's own problems that makes it not viable for large-scale internet/P2P connectivity. I know .NET has their own non-HTTP protocol called "remoting" that you can use to bundle web services together without using HTTP but I don't know how viable it is for wide-scale communications on the Internet, it's recommended for LAN use. But MS may try to extend .NET remoting as the next-gen protocol.

    But I have to agree that everybody building P2P applications on top of web services will soon run into a wall due to HTTP's stateless nature.

    At Ubero we built our own wire protocol, DCTP (distributed computing transport protocol) that suits our needs very well and allows us to extend it as we need to.

    1. Re:RMI.NET? by Anonymous Coward · · Score: 0
      I know .NET has their own non-HTTP protocol called "remoting"

      Remoting is abstract and has no defined protocol or transport. It uses the concept of channels, which are abstract and permit the implementor to build whatever they want, and as long as both the client and the server speak the same thing, they're all good. Microsoft's .NET comes with two channels: a binary TCP channel which passes base64 serialized classes, or a SOAP HTTP channel which passes XML serialized classes.

      Microsoft .NET Http Remoting Channels
  135. Nonsense by swm · · Score: 2
    If it takes three minutes for a response, it is not really HTTP any more," Box said.

    The problem...is that the intermediaries--that is, the companies that own the routers and cables between the client and server--will not allow single transactions that take this long.

    Nonsense

    Transactions comprise state, and the state is on the clients and the servers, not the routers.
    Routers just move packets.
    And cables...cables just carry electical fields.

    1. Re:Nonsense by kawika · · Score: 2

      You are assuming an Ideal Net where the wires and boxes between your Ethernet card and the destination Ethernet card will leave your packets alone. With NAT, proxies, firewalls, and the like in between, it doesn't work out that way. Examples: 1) The SonicWall NAT firewall/router on my cable modem terminates idle connections after 15 minutes. 2) Some HTTP proxies impose a 1024 character limit on GET requests. 3) Comcast's "transparent proxy" ignores the destination IP address and uses a DNS lookup on the Host header instead.

  136. Swoosh, in a galaxy far, far away by inerte · · Score: 1

    HTTP is not obsolete. Microsoft is saying that HTTP doesn't work for what THEY want the net to be, or should I say .NET?

    They will go something like this on the near future:

    "See, we have Win2k + IIS that can do XYZ. Sadly, your current choices, Linux + Apache, only support HTTP. Buy from us what we say it's good and none is going to get hurt".

    If there are so many things wrong with HTTP, why Microsoft itself is using it, and supporting? I thought that when you realize that a technology is bad, you try to replace it. Not from one instant to another, and ironically/timely, at the same time you are about to launch a product that, while in theory works fine with HTTP, works better with a protocol designed by who? Who?

    Yep, you guessed, Microsoft. Or do you thing that .NET won't work with HTTP? It might be sub-optimal, but then again, you must have previously made the decision to addopt .NET.

    Conversion of technologies, with MS controlling. I heard this talk a long time ago, thanks...

    Also, at the bottom of the article, Don Box says, to legitimize MS actions, that W3C or (insert random organization) is also thinking like MS is... Whatever, because like he said "MS to succed alone".

    Yep, main point back, it's not for the healthy of the Internet, but for Microsoft.

    Nice wrong way of doing business.

  137. Of course... by Mupp252 · · Score: 2, Funny



    Of course HTTP is dead! All I type in now to get to a site is WWW...

  138. 'P2P' Technology = Workarounds for IP4, HTTP, etc by Josh · · Score: 1


    If P2P has a technical meaning beyond 'networking apps where each end is both client and server' then it is all about providing workarounds for the hurdles that exist because of firewalls, NAT, IPV4, dynamic IP, roaming user, asymmetric connections, etc. Designing network applications for use over HTTP transport that can't deal with it being high latency, mostly asymmetric, stateless at the transport level and not providing IPv6 services is just committing to broken design, nothing more. Trying to do a marketing pirouette to make it sound like that design is so innovative it requires a new internet infrastructure is a nice try at a coverup for bad design/planning.

  139. How about the WWW-WWW? by bayduv1n · · Score: 1

    On a very simplistic level it seems that the http protocol is:

    What - path/object in URL

    Where - host:port

    hoW - method (get, put, post...)

    Perhaps we need another three W's:

    Who - public keys

    When - expiry date

    Why - in response to X

    The who, when, and why could be used at the network border to allow authorized responses to travel through at some later date. This may resolve the issues identified.

    Just my $0.02
  140. If MS truly thinks they can do better by twocents · · Score: 1

    then I think they should. Microsoft seems to often be very critical of anything they don't sell, however, and http was being used to serve web pages while MS was still in Windows 3.11, were they not?

    And I do understand the protocols evolve and emerge, so again if they have some ideas, they should develop, offer, and advance - it's not as if they don't have a few R&D dollars.

    Of course, most that probably glanced at the article thought it meant that one will no longer have to see http:// in the address bar.

  141. JXTA is the future by Anonymous Coward · · Score: 0

    He's right if he's implying P2P is the future. If you want to keep the net open and "free", support open protocols like JXTA (http://jxta.org), not proprietary Microsoft protocols.

  142. Re:What about things that P2P doesn't make sense f by Znork · · Score: 2

    You have to take into account Microsofts vision of the internet being a Single System Image (running MS distributed Total World Domination protocol, of course), with nodes being partitioned on this single system image (this is their 10-20 year plan).

    Permanent connection states are useful in that context. Over rpcish services, or http, it would be very difficult to gain the form of control over connecting machines that a single system image would require, since much of it by design is user request oriented. Two way RPC calls wont go through corporate firewalls in the necessary fashion. So they need to push into a different way of communication to loosen up the control that corporations want to retain over their networks and consumers to some extent want to retain over their PC's. Making p2p long-term connections ubiquitous would lay the ground for that in the way they need.

  143. Broken Assumptions by kingosric · · Score: 1
    From the article:
    "If it takes three minutes for a response, it is not really HTTP any more," Box said.
    From RFC 2616 (HTTP/1.1)
    HTTP communication usually takes place over TCP/IP connections....This does not preclude HTTP from being implemented on top of any other protocol on the Internet, or on other networks. HTTP only presumes a reliable transport; any protocol that provides such guarantees can be used; the mapping of the HTTP/1.1 request and response structures onto the transport data units of the protocol in question is outside the scope of this specification.
    HTTP over SMTP anyone?
    1. Re:Broken Assumptions by kc8apf · · Score: 1

      I believe you are interpreting the RFC's usage of protocol. It means you could use HTTP over say IPX. SMTP runs on TCP and while SMTP is a protocol, they are referring to the actual network transport protocol, be it IPX, AppleTalk, TCP. They are just saying you can run it on any sort of network system as long as you can guarantee a reliable connection.

      --
      kc8apf
  144. WHY? by Penguinoflight · · Score: 0

    ... would we switch protocols from a set standard that works just fine, and not switch to a decent operating system?

    So much for the "change isn't good" argument by M$.

    --
    "And we have seen and do testify that the Father sent the Son to be the Savior of the World"
    1 John 4:14
  145. RPC over HTTP *should* be dead! by dpilot · · Score: 2

    That's why we have 65535 ports, to allow for better simplification of protocols. Unfortunately some peoples' idea of security is to clamp down on as many ports as possible. Even more unfortunately, they don't seem to realize just how easy it is to tunnel over HTTP or any other protocol, so all they've bought is the illusion of security at the expense of complexity.

    Perhaps the others things that should be dead are the Great Divide at 1024, or at least move it up a bit, and perhaps RPC, itself. I need to understand the security implications of RPC - whether it truly can be secured, or if rpc.statd exploits will haunt us until the Day of Valenti. (When the Internet becomes a TV-like Radio-like broadcast-only medium.)

    --
    The living have better things to do than to continue hating the dead.
  146. Re:What about things that P2P doesn't make sense f by Mark+Pitman · · Score: 1

    Maybe I am reading into the article a little bit, but I think what he is talking about is a protocol that would do something similar to what you are talking about. Sure, you could write an application that makes an RPC call over HTTP and then the "server" responds by making an RPC call back to the "client". But having that happen at the protocol level, and having it be an accepted standard would be a lot better for interoperability between various platforms and languages. SOAP is limited by the protocol it is running on top of. When you make a call over HTTP, the response is sent back through the same connection.

  147. if it takes 3 minutes for a response... by gruntvald · · Score: 1

    .... it is not http anymore. That's right - it's http running on IIS. fuck you M$, XML-RPC will eat your lunch, and you've been asking for it for some time now. Go shove that in your .NOT

  148. Freudian Slip by Mr+Z · · Score: 1

    Again, with emphasis on the inadvertant Freudian slip:

    "Microsoft has some ideas (on how to break the independence on HTTP), IBM has some ideas, and others have ideas. We'll see," he said. But, he added, "if one vendor does it on their own, it will simply not be worth the trouble."

    I'm sure they meant "break the dependence on HTTP" (which, for applications that don't fit HTTP's model but are using it anyway, that's a good thing). But saying "Microsoft has some ideas on how to break independence" is just beautiful. :-)

    --Joe
  149. P2P over HTTP was to bypass firewalls by addikt10 · · Score: 2, Insightful

    The only reason that all these applications run over HTTP is so that the applications don't have to worry about Firewalls.

    Business Network administrators don't want employees downloading music using napster, Real, Quicktime, or WMA. Except for napster, all of those applications run more efficiently over their native protocol than HTTP, but they fall back to HTTP and make it through the firewall when there is an issue.

    So, call it like it is - they are just looking for a more efficient way to bypass firewalls.

    On the other hand, if a service is explicitly named in their new standard, then it would help administrators. Maybe the next generation firewall would be able to be configured for: OK to HTML, but any RTSP requests get logged and sent to NULL.

    JB

  150. Don Box! by codepunk · · Score: 1

    Who gives a rats about Don Box. He is one huge M$ schill and almost purely reponsible for the messy SOAP protocol. The Fact of the matter is that XML-RPC did everyting that SOAP does but did it in a manner that WAS more efficient. The comes along M$, IBM and Don Box and decides that we need this stuff modeled in such a way that it is easier to produce COM hooks. SOAP was designed with one thing an one thing only in mind, M$. OS programmers where continually bitching about it during the RFC development process but that stuff was just thrown aside. Hell Don Box told us Open Source developers to shutup and he would address the issues (Yea Right) . SOAP is horribly inefficent and SLOW in comparison to XML-RPC. Where I work this is why we are sticking with our XML-RPC implementations and will not touch SOAP with a 10 ft pole.

    --


    Got Code?
  151. Read between the lines by BitHerder · · Score: 4, Funny

    "But, he said, we can't stay on HTTP forever, despite all the investment and engineering that have gone into it. Among the problems with HTTP, said Box, is the fact that it is a [Not Owned By Microsoft] Remote Procedure Call (RPC) protocol; something that one [Non-MS] program (such as a [Netscape] browser) uses to request a [Potentially Unlicensed] service from another program located in another [NOT WINDOWS] computer (the server) in a network without having to understand [Proprietary] network details.

    "We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will [Never Own The Internet Right Down To The Roots]. We at least have to raise the level of abstraction, so that we have an industry-wide [Monopoly] way to do long-running requests--I need a way to [Make Money Writing Books On How To Use Our Protocol].

    1. Re:Read between the lines by I+The+Man+in+Black+I · · Score: 1

      Heh, LoL. :D

      --

      <sig>what-mib-says | mib2english</sig>
    2. Re:Read between the lines by bakuretsu · · Score: 1

      Did you ever see the Kevin Nealon Subliminal News sketches he used to do? This reminds me of that, I had a good laugh, thanks ;-)

      --

      --
      The Bailiwick - DESIGNHUB2005
  152. The new protocol: by TeknoHog · · Score: 2

    HTTP is obsolete when it is replaced a variant of RFC1149 in which pigs fly.

    --
    Escher was the first MC and Giger invented the HR department.
  153. Actually, Cringely is relying on a web of trust .. by crovira · · Score: 3, Interesting

    that may or may not exist.

    Just because I get an email from some machine, doesn't mean that it really originated there or that it wasn't maliciously crafted or altered by some sleeper virus.

    You know why M$ wants to get rid of the TCP/IP stack don't you. They didn't write it, and it works. It replaced their own, which didn't work.

    They want to stamp out any trace of non M$ code in their OS.

    Maybe BelCore or Multics organization, or even IBM should sue them for copyright or patent violation on the use of recursive structures like sub-directories.

    If they rip out the stack, I predict a wave of new virus exploits the likes of which hasn't been seen yet.

    --
    MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
  154. Cool quote by letxa2000 · · Score: 2
    A quote from the article: "I need a way to send a request to a server and not the get result for five days."

    He must be accessing a Microsoft-based server if he needs to get a result in five days! :)

    1. Re:Cool quote by Anonymous Coward · · Score: 0

      Haha, oh you're so funny! Please stop, you're killing me!

      I'm sure when you submit a loan application via a web form you're expecting a definitive reply right away. If not, they MUST be running Windows.

    2. Re:Cool quote by letxa2000 · · Score: 2
      I'll bite that trollbait...

      Actually, I don't apply for loans over the web.

      And if you do submit an app over the web and want to check on it five days later, what's wrong with HTTP to do it?

  155. That's it! by The+Cat · · Score: 2

    It works! Therefore it is obsolete! Maybe we should replace it with NetBEUI? Huh? Let's break all the existing web applications all at once and start over with a buggy, untested, unproven, bloated, unnecessary, poorly documented protocol with no tools which nobody uses yet.

    Ever try to get "Network Neighborhood" to work in Windows 9x? I've never seen HTTP not work.

    Leave it alone. It works.

    1. Re:That's it! by screwtheNSA · · Score: 0

      Sure!
      I use Proxim's PC card 802.11b LAN cards for connection to my three desktops, two laptops; all linked to the iNET with an 802.11b "wireless" modem.
      I restrict my file sharing and drive sharing, but multi-user modem sharing is easily configured under network neighborhood. Proxim "makes" you run a single password on ALL network connected systems for the reasons given, "security", of course.

      Symphony cards are cheap to buy, give great range(over 150 feet here) and only sacked my billfold of $29.00 for each 802.11b PC LAN card!

      Initial "fine tuning" is a bit rough, and the CD asks for windoze 98SE\options\cabs so it can copy drivers for the LAN card.

      The only "problem" for these cards is that you CAN'T share a scanner, but you can share mapped drives, printers and selected files.

      I have yet to try encrypted data from one to many/one transfers, but see no reason why this should not work.

      One other thing I will try, is to set the network password to <blank> just to see if it will still function as a LAN, manual states no, but if all were set to <blank> as a password, then it should still work....I shall see.

      --
      206.39.38.2, DDN-BLK-36, DOD NET INFO CENTER. 800.365.3642 206.36.0.0-206.39.255.255 NET RANGE.
  156. Microsoft should know by Coward+Anonymous · · Score: 1

    "It's all hackery, it's all ad-hoc and none of it is interoperable," he added.

    Every protocol they have ever come up with is a hodge-podge of non-interoperable, often inoperable, ad-hoc junk.

    Take a look at SMB (aka CIFS), for instance: it consists of at least 3 different incompatbile sub-protocols, breaks every network coding rule you could possibly learn in college (network stack abstraction is one, word alignment issues are another) and generally has more exceptions than rules.

    So you see, the world will be much prettier if MS designs an inoperable protocol to replace the operable HTTP

  157. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  158. Re:opera by phyxeld · · Score: 1

    Opera kicks ass. On my mac here at work, it loads the 200-comment-long nested-view slashdot threads in a fraction of the time InternetExplorer5 does. I keep IE open for doing actual work though; it's kind of handy having a seperate browser history for work-related and non-work-related web browsing.

    --
    __
    Choose mnemonic identifiers. If you can't remember what mnemonic means, you've got a problem. - Larry Wall
  159. Eh? by The+Cat · · Score: 3, Funny

    "I need a way to send a request to a server and not the get result for five days."

    No doubt so the server can be rebooted three or four times...

  160. solution by y2dt · · Score: 3, Funny

    i know! how about letting microsoft embrace and extend HTTP and make a new protocol that they control.

    they can start implementing it in IE and Windows first, then over time completely remove support for things like HTTP.

    i think i just threw up in my mouth.

  161. Asymmetry in HTTP a bad thing? by WMNelis · · Score: 1

    Excerpt from article:

    Another problem with HTTP, said Box, is that it is asymmetric. "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond. For peer-to-peer applications this is not really suitable,"

    I don't know about you, but I don't want anyone "initiating an exchange" with my machine. I'll do the initiating thank you.

    --

    Sig free since 2/6/2002
  162. Protocols never die by metoc · · Score: 4, Insightful

    HTTP is a protocol that was developed as a solution to a problem. That didn't mean we stopped using POP, FTP, Gopher, Telnet, KERMIT, etc., as they were developed to solve different problems. Now the new problem is Web Services, and the solution should not mean that we will stop using HTTP it to deliver web pages, or FTP to move files. We should not fear a new protocol (assuming it is good & worthy). As long as the solution has an IETF RFC number, with all the consultation and work required, it can be implemented by anyone. Remember HTTP wasn't invented by Microsoft, Netscape or even Linus. If you don't want Microsoft, AOL, Oracle or the MPAA developing the next solution, then come up with a great idea and start submitting RFCs.

    1. Re:Protocols never die by Anonymous Coward · · Score: 0

      well, actually, "we" did stop using gopher. maybe if you climb out of your tunnel for a bit and take a look around...

  163. One protocol to rule them all... by verbatim · · Score: 2

    Microsoft (or at least it's engineers) want one whiz-bang protocol to service everything. Why? Humm. Control? Nah, they'd have to standardize it.

    Why the rush away from streamlined protocols? Why not create a menu of simple and useful protocols that do one job and do it very well. By having a so-called "super protocol" that handle everything, you end up with a bloated, slow, and ugly mess.

    What do they want to replace it?

    Oh, I bet this is a ploy to duck around that Windows isn't powrful enough to handle large web services... oops, I've said too much.

    --
    Price, Quality, Time. Pick none. What, you thought you had a choice?
  164. Reasons behind .NET by Juiblex · · Score: 1

    Don't forget that the main reason behind .NET is that it will save Microsoft even if it is forced to be divided into separate smaller companies, because it is making Microsoft Office software more dependent on the Microsoft Windows and on it's servers and softwares for Internet, i.e, it is serving as a 'glue' for all MS softwares.

    Also, I think .NET on Linux is very bad for the Free Software Community, because MS holds patents for this plataform, and if someday they make Linux users dependent on .NET plataform, then it will be possible for them to charge royalties in the future.

    Do you think a company this large, with this vast amount of money, would be stupid or good? No, they are evil, they just want to LOOK stupid. Just remember how they dominated the OS market, first making the IBM computer users dependent on DOS, and then charging for it.

    1. Re:Reasons behind .NET by rseuhs · · Score: 2
      Don't forget that the main reason behind .NET is that it will save Microsoft even if it is forced to be divided into separate smaller companies, because it is making Microsoft Office software more dependent on the Microsoft Windows and on it's servers and softwares for Internet, i.e, it is serving as a 'glue' for all MS softwares.

      This simply won't work. Application service providers simply don't work for the masses. NOBODY likes the concept, even die-hard Microsoft fans are rather sceptical about it.

      What's the point in sending all your data around the world constantly anyway? Who will pay for the bandwidth? What's the added value? Why should anybody upgrade Office if everybody uses Office 97 anyway?

      .NET will just be the next Win32API and Microsoft hopes that all Windows users will upgrade to Windows.NET.

      Do you think a company this large, with this vast amount of money, would be stupid or good?

      Stupidity is directly proportional to company-size.

      See for yourself., it's just a cartoon, but it's closwer to reality than most people think.

  165. everyone misses the point... by Just+Jeff · · Score: 1

    it doesn't matter what excuse microsoft uses to proclaim HTTP dead, microsoft will simply proclaim it. By that time, microsoft internet software, like internet explorer and internet information server, will have already quietly been enabled with MS-WWW-P which is, of course, prorietary, secret, DMCA protected, etc.,etc. When Bill throws the switch, all non-microsoft web entities will cease to function. At least as far as all of the microsoft-only lemmings can tell.

    W3C refuses to give Bill the keys to the Net? Make W3C irrelevant. Make a new net. Make an ALL-MS-IE-IIS-ALL-THE-TIME net. Why not? From Bill's point of view, are there really any other players? Why waste a lot of time with standards? Look how well its working with MS-Office...

    It might be a good thing... The rest of us will suddenly live in what we've been striving for all along -- a microsoft-free net. At least until Microsoft buys cisco...

  166. Huh by wizarddc · · Score: 1

    Is anyone else surprised that ZDnet has the com.com URL? I thought NSI kept all those. Maybe they offered up the right price.

    --
    Th
  167. Old warriers never die they just fade away by Anonymous Coward · · Score: 0

    McArhtur

  168. Has Mr. Box ever worked Help Desk? by Ashtoreth · · Score: 1

    "If people can't search the Web they call the IT department, so the IT department makes sure HTTP is always working. We have engineered the hell out of it."

    Well, um...the answer to this is actually no. When they call us, the users normally have a problem with DHCP or a corrupted TCP/IP stack if they're running some version of Windows. I can't recall http ever being broken. I've had entire machines crash, a router go down, and of course leased lines die before but the protocol break? No. I've seen things not configured properly but the protocol did not break.

    HTTP works for what it was designed to do. It was to be a simple protocol meant for quick transfers of TEXT. Client machine makes a request. Server responds. Connection ends. How many companies actually run an FTP server anymore? For MS, the Windows update runs completely on HTTP and scans your computer to see what you have installed. Their FTP server contains almost nothing and you must download patches via HTTP.

    I'm all for another protocol to do all the interactive content. This also scares me though cause I'm thinking of Oracle's dream of Internet Appliances and someone else owning all the software and you do subscriptionware. I don't mind subcribing to a website like books24x7 or oreilly but subcribing to my software? And someone else holding my data? No. This sounds like another ploy to do that. And let me guess, it will work best on WebTV.

    What I don't want to see is the MS weed mentality touching a new protocol during its infancy. Or... then I think about it and wonder what life would be like if MS would take all its windows users to their MSN and we can have the internet back. I kinda like that idea.

  169. It's not what Mr. Box does with the idea that .... by bubbha · · Score: 1

    ...scares me, it's what Crazy Bill does. Innovation vs. Strategy...one thing leads to another.

    --
    I want to be alone with the sandwich
  170. Not peer to peer obsolete? by Anonymous Coward · · Score: 0

    Well this then implies that all of MS' server products will be obsolete as they are not peering with the computers in the traditional 'client' role. Be careful also because this smells stinky... if MS is pushing p2p uber alles, then this being up the point of if you use .NET are then therefore required to serve up content for others against your will/ without your knowledge? This is really the larger implication of client/server being obsolete, isnt it?

  171. OT: Now that's odd... by Gordonjcp · · Score: 1

    I was sure this would be a prime subject for the "BSD is dying" guy to update his spiel with. It seems not. Ah well, you don't need to be Kreskin to predict that "BSD is dying" trolling is dying, I suppose :-)

  172. Oh sure, HTTP's obsolete by rnturn · · Score: 2, Insightful

    Because Microsoft cannot control it. And they haven't figured out how to corrupt it like they did Kerberos. So it's gotta go.

    Yah, let's throw out a simple protocol and replace it with something that only people who've been to a half dozen Microsoft approved training classes can understand. No one really believed in that Open standards stuff anyway. IMHO, Microsoft has really come full circle now. At one time (back in the earliest days of the PC) they were the ones encouraging people to use PCs and escape the tyranny of the priesthood inhabiting the corporate data center. Now it is Microsoft that's encouraging the use of ever more complex technologies that no one except... tada!... another priesthood will be able to understand.

    And Microsoft doesn't want to come up with something that would coexist with HTTP. That would make it too easy to label their technology as proprietary and easy to dismiss. Of course, even today, can anyone really argue that Microsoft's products are any less proprietary than the products they were competing against when Microsoft was the underdog?

    Personally, I smell some Microsoft software -- loaded down with more software patents than you can shake a stick at -- just waiting in the wings to be offered up as the silver bullet that will solve this (artificial) protocol crisis. Just wait until Microsoft starts pushing the idea that all the software you are currently using for Internet-related things should be replaced. I can imagine a backlash like you wouldn't believe.

    I recently read an opinion piece -- wish I could remember where -- that made the comment that Microsoft's arrogance would eventually cause them to do something that would cause their customers to run away in droves. I think that the author was really onto something.

    --
    CUR ALLOC 20195.....5804M
  173. Everything on port 80. by saintlupus · · Score: 2

    You've clearly never been a user on a network with stupid-bitch admins who block everything.

    The fact that your employer's organization obviously leaves a bit to be desired is not something that can be solved with software engineering.

    On the other hand, the fact that the admin at my site is calm and reasonable about this sort of thing is cancelled out by these idiotic decisions to run everything on port 80.

    Don't always assume everyone else is in a boat full of shit.

    --saint

  174. What about freenet? by Cyno · · Score: 1


    I'm amazed I didn't see a million posts about www.freenet.org. Freenet is a distributed, encrypted data sharing network that makes use of a web browser and proxy to allow you to browse all of freenet from your local node. Plus you can post data anonymously onto the network without requiring DNS. Something ICANN is sure to love. ;)

    Oh, and your web browsing experience could very easily be protected under the DMCA from corporate/government spying, since its encrypted.

  175. .NET is the .COM bubble by Anonymous Coward · · Score: 0

    .NET is the next .COM bubble

  176. Re:eXtensible Application Transport Protocol (XATP by jeremie · · Score: 1

    They're not quite doing the same thing, so it's hard to draw a direct comparison, but if you've read the BEEP specs it should be pretty easy to see the differences by reading the XATP draft. If anything, it might make more sense to look at a flavour of BEEP running over XATP.

    If your interested in following this up in more detail, please feel free to join the spec-dev@xatp.org list.

  177. This will be the day I never use the Web again... by Anonymous Coward · · Score: 0

    If I ever have to use a url that says "MStp://slashdot.org/" instead of "http://slashdot.org/", I'll never use the known World Wide Web again.

  178. 5-day-long requests are an expensive order by LatJoor · · Score: 3

    ADMISSION: This post is the result of original ideas added to shameless [plagiarism | merciful summation] of other posts on this topic.

    From the article:

    I need a way to send a request to a server and not the get result for five days.

    How about email?

    As so many people have said, the whole problem comes from an over-reliance of HTTP. If you need the request in 5 days, you probably need some other kind of service.

    However, his complaint about the time-frame of HTTP requests has deeper implications than he perhaps realizes. For example, if your request takes 5 days, you'd better be ready to compensate your content provider for machine usage, because it must be extremely resource intensive. (Maybe MS passport could help out. .)

    If I'm requesting a reply over a 5-day time frame, ideally I would not need to have my machine powered up to receive the replay, as most machines are turned off daily. So, some kind of asynchronous protocol with intermediate storage -- like email -- would be required.

    So, we need a service that checks for the latest server responses whenever you start it up, and automatically keeps track of how much you should be charged for each transaction. Actually, I think an HTTP/SMTP implementation would not be poorly suited, at least with a Free Software application server doing the heavy lifting. (See another posting on MS and intellectual "property" sharing.)

    A new PHP function: do_5_day_request_and_charge_for_it($user, $args)
    {
    do_lots_of_stuff($args);
    charge_lots_of_money($user);
    }

    I'll write that function if you promise royalties off each function call :)

    Of course, if you wanted a seriously secure system, you would either require credit card info beforehand or require payment before issuing the response (at least for new users) to discourage fraud.

  179. MS Admits .NET's Defects in Plain Sight by smagruder · · Score: 2
    "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."


    It's nice to see Microshaft coming around. :)

    --
    Steve Magruder, Metro Foodist
  180. What about the "waka" protocol by Roy Fielding? by justsomecomputerguy · · Score: 2, Interesting

    I did a little searching based on the phrase "replace HTTP" and found the link

    http://apachecon.com/2001/EU/html/speakers.html

    Which points to decsriptions of workshops and seminars being discussed at Apachecon, the parts relevant to this discussion being:

    Roy Fielding
    Sessions: waka: a replacement for HTTP

    Roy T. Fielding is chairman of the Apache Software Foundation and chief scientist at eBuilt, Inc.
    He is a founder of several open-source software projects (including Apache httpd), architect of the current Hypertext Transfer Protocol (HTTP/1.1), and co-author of the Internet standards for HTTP and Uniform Resource Identifiers (URI). He received his Ph.D. in Information and Computer Science at the University of California, Irvine.

    There is a popup link that says:

    The waka protocol is designed to be a replacement for HTTP as the primary application-level protocol for the transfer of hypermedia information over the Web. It is based on the same architectural principles as HTTP/1.1, but without the baggage of preexisting syntax restrictions. Waka has a tokenized, self-descriptive syntax for communicating multiple asynchronous data streams over a single transport connection. This talk provides an introduction to the waka protocol and insights to its eventual impact on the Web Architecture.

    Sounds impressive to me, does anyone else know more?

  181. I never thought this could happen... by Anonymous Coward · · Score: 0

    HTTP is the primary protocol for the world-wide web

    C'mon, what's happened with slashdot?????

  182. Above is not a troll. by Rooktoven · · Score: 1

    Seems reasonable to me...

    --

    Acquiescence leads to obliteration
  183. Horse before the cart... by MousePotato · · Score: 3, Interesting
    I hate stories like this. The title would lead you to belive that http:// is on its way to being dead. While that may or may not be true in regards to hhtp the same could be said for anything and everything(face it we are all a little closer to the day WE are going to die with every tick of the clock).

    What I want to know is this; what is going to replace http? The article really doesn't say other than alluding to p2p as the way of the future.

    Now, I may agree that p2p will be way cool as its uses are just barely beginning to be explored but I don't think we will see http disappear any time soon. I wouldn't be surprised if five years from now things are essentially the same as they are now in this respect and http is still a staple of many things web related.

    And this;
    "We have to do something to make it (HTTP) less important," said Box. "If we rely on HTTP we will melt the Internet. We at least have to raise the level of abstraction, so that we have an industry-wide way to do long-running requests--I need a way to send a request to a server and not the get result for five days."


    Why? If you make a request and it takes you that long to respond... your clients will search for a different source for the data. How many customers do websites lose for loading slow in the first place? You might as well use snailmail for that kind of stuff.

    So... mod me down if you must but somebody please explain what Box is talking about here.
  184. HTTP is passive by Anonymous Coward · · Score: 0

    Another problem with HTTP, said Box, is that it is asymmetric. "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond. For peer-to-peer applications this is not really suitable," he said. The reason that peer-to-peer applications do work today, said Box, is that programmers create hacks to get around the limitations of the protocol, and this is not good. "It's all hackery, it's all ad-hoc and none of it is interoperable," he added.

    one is passive! That is just fine with me. I don't need the websites I visit to COME to me. I thought the "push-model" died a long time ago. I get enough spam already, now they want to move that from the email client to the browser? No thanks. And again, MSZDNET has no clue what they are talking about. Did David Coursey write that piece? Forgot to look.

  185. http=internet? by sicrik · · Score: 1

    Okay, to me this is a response to management...http is not the internet. There already a host of standard protocols. HTTP sits on top of TCP/IP. Don't worry about it...they're just trying to get you to think there's a problem. There's not. HTTP is convenient and powerful, and everyone knows it. But, it's not the internet. When MS starts advertising the New Internet, just remember: you read it here first. If you need new services, just have your admins open up a new port on the firewall. If they won't, you don't need it anyway.

    --
    -- An image is worth about 2.5E4 characters.
  186. Pfeh by mkb · · Score: 3, Interesting

    As Bruce Schneier says, the cutting edge is always moving, but the low-end is here to stay.

    Old standards have a way of hanging on, even when there are superior replacements. Look at all the strange, vestigial crap in PC hardware. Look at NTSC video, 8.3 filenames. You'd be amazed how many large companies keep important data in VSAM files instead of real databases. People might start using new standards for new applications, but the old standards will still cling in the old applications or eveb in new applications that must interact with old ones.

    Are there exceptions where old technology was phased quickly? Sure. The cost of change can be high, and business people generally want technology that is Good Enough rather than following the latest and greates trends just for their own sake.

    You should see the old tech that is still used in the finantial sector. In these parts, the rule of thumb is "If it ain't broke, don't fix it." When you are dealing with people's money (and government regulations therof), the cost of botching a change is very high.

    --mkb

  187. Instructions for you by Anonymous Coward · · Score: 0

    READ
    READ AGAIN
    NO REALLY, GO BACK AND READ AGAIN

    Maybe somewhere around there you will see that the post you're replying to didn't say anything about web browsers.

  188. Careful what you wish for by Chris+Johnson · · Score: 4, Funny
    "I need a way to send a request to a server and not get the result for five days."

    ...Windows XP Datacenter :D

  189. If Microsoft Had it's way.... by LordKazan · · Score: 1

    .... everything would be peer to peer - including your private information

    --
    If you cannot keep politics out of your moderation remove yourself from the Mod Lottery.. NOW!
  190. interesting related work: REST by Arthur+Gleckler · · Score: 1

    There's some interesting related work here on REST (Representational State Transfer):

    http://internet.conveyor.com/RESTwiki/moin.cgi

    This is an architectural style for building web services, etc. that may be more appropriate for HTTP than how XML-RPC and SOAP are typically used. If I understand it, the claim is not that XML-RPC and SOAP are fundamentally flawed, but that they are often used in a way that doesn't take full advantage of the power of HTTP.

  191. *chuckle* by sheldon · · Score: 5, Interesting

    I've never heard Don Box described as just a .Net engineer. That'd be like calling Richard W. Stevens just a "C programmer."

    Thanks for the laugh. It's always good to be reminded just how out of touch /. is with the Windows world.

    1. Re:*chuckle* by sheldon · · Score: 2

      Oops, that's W. Richard Stevens. Just glanced at my copy of APUE and realize I transposed that. :(

  192. Look! Another Linux fan boy! by sheldon · · Score: 2

    "Linux can only win."

    I always love this statement. I've been hearing it what? For the past 8 years or so.

    But even though I keep hearing it over and over and over again, it still hasn't come any closer to reality.

    The way I see it is that you have fell victim to your own big delusion.

  193. Even more clever, blames streets for street crime by xixax · · Score: 2
    "Well you see, *anyone* can drive on these street things! It's terrible! I left my front door wide open and some guy just walked on down the street into my lounge room and stole my VCR!

    "So we have this great idea where we'll set up cops on the streets to look for people carrying VCRs. That'll stop anyone from being bad. If you want to walk on the street, you'll need a licence from us, but we'll do it cheaply..."

    It'd be laughable except there are enough morons out there to believe that poor security in Outlook is somehow the fault of TCP/IP.

    Xix.

    --
    "Everything is adjustable, provided you have the right tools"
  194. Re:Look! Another Linux fan boy! by rseuhs · · Score: 2
    So Nr 1 on embedded systems and Nr 2 on servers with the biggest growth (Nr 1 this or next year) is not a success?

    On the desktop it is beginning

  195. Re:Look! Another Linux fan boy! by sheldon · · Score: 2

    I think you ought to double check your numbers. Linux is nowhere near #2 on servers, or #1 on embedded systems... unless you severely limit your definition of those markets.

  196. Gaming by cyberbob2010 · · Score: 0

    I remember back when we tried using p2p in the ealry days. Not everything is suitable for P2P
    Especially not gaming. doom without a centraized server is not a good thing (2 people geting the same item at the same time, etc...)
    anyways, server based sites are MUCH better. Crackers would have a field day with small peices of data that could be manipulated each time it was sent to another comp.
    maybe i just have the concept wrong but i think it holds alot of security risks

    --
    We seldom regret saying too little but often regret saying too much.
  197. See "Transaction Processing" by Anonymous Coward · · Score: 0
    If you didn't know about hidden fields vs. cookies, perhaps you can reduce your pain with a book on system design using the Transaction Procssing model.

    The biggest problem I have making a good web developer is most MS types tend to design-think using a client/server mentality. It's no wonder the brain trust at MS believes HTTP sucks. They don't yet build anything near a truly large systems, and haven't yet learned what it takes to do so.

  198. Re:Look! Another Linux fan boy! by rseuhs · · Score: 2
    These are the 2000 numbers for general purpose servers, Linux being second with 27% share:

    link

    Webserver machines, Linux being second with 29% share: link

    Domains hosted: Linux being number one with 35%/30%: link

    Can you post any statistic where Linux is not second on servers?

  199. Bah! by Anonymous Coward · · Score: 0

    > the client can give no feedback about it
    > other than unexpectedly closing the connection

    Bah! The client can simply issue a new request refering to the active transcation. It can ask the server for anything it needs, even a "graceful", server initiated, shutown of the "push" data stream.

    > no prioritization or unsolicited messages
    > are possible.

    Why not? I can push a multi-part data stream and have javascript pull it apart. Been there, done that, have the T-shirt. Each message unit is just a packet of arbitrary data.

    BTW, what is an "unsolicited message"? Doesn't a client need to know how to deal with all its possible inputs? I mean, I don't know many real time quote and news streaming clients that could handle an unsolicited "Dear Mom, Today's been a hard day..." e-mail thrown into their data stream.

  200. Re:Look! Another Linux fan boy! by rseuhs · · Score: 2

    Damn, those links didn't work:

    http://www.netcraft.com/Survey/index-200007.html
    http://www.netcraft.com/Survey/index-200106.html

  201. Have you been? by Anonymous Coward · · Score: 0
    Have you ever participated in a standards setting body? Well, your second paragraph pretty much hits the nail on the head.

    The only major difference is you got to see much of the process as it grew up in the public eye. Do you really think a "standard" is better when 50-100 people sit in a room and ask those questions, comming up with only those few ideas they are capable of at the time?

    I think not. All that is the standard "web", HTTP and all, has grown up in a standard setting process that was far, far, healther than most.

  202. What the post *should* read by English+Nazi · · Score: 0, Offtopic

    ...will slowly loose favor.

    Should be "slowly *lose* favor." One of my Favorite Fuckups (TM). "Lose" is the opposite of win; "loose" is the condition of your bowels after eating cheap Mexican food. Just so you know.

  203. Long live UUCP by Anonymous Coward · · Score: 0

    Starting to sound like .NET is "embrace and extend UUCP"

  204. client-server architecture by chrgray · · Score: 1

    Architecture changes over time, what is "right" for today becomes "wrong" for tommorow.

    When client-server architecture was right, there was more bandwidth considerations, and various other problems that prevented peer-to-peer from becoming a viable architechure until now.

    --
    Without computer security, there would be no hackers.
  205. Re:UDP and Parchive == TCP? by Anonymous Coward · · Score: 0

    What happens when UDP 6, 7, and 22 are lost?

    It may be old, but a good deal of thinking went into both TCP/IP and UDP/IP. Why waste your time trying to reinvent them until you've taken some time to learn them?

    BTW, TCP isn't resource inconsiderate. A packet to say "hi", a few acks to let the sender toss data it won't ever have to retransmit, and a packet to say "bye". Shocking, simply horrible.

  206. Re: What is Communist Anarchism? by screwtheNSA · · Score: 0

    Have a problem you would like resolved?
    Can't locate your "party member"?
    Look in the green pages under <Government services *see Microsoft* Contact your legal representative in the Microsoft alumni listings.
    Or visit "us" on the web at: http/www.microsoft.gov/services/representatives/st ate/corp_level_BSA.htm.

    *Gotta love a company that just CAN'T let a day pass without trying to violate yet another anti-trust law*!

    George B.: Yes Bill, that was a fine "donation" you made to the patriot act, but that was yesterday's anti-trust fines! What'll you buy for me TODAY Bill?

    --
    206.39.38.2, DDN-BLK-36, DOD NET INFO CENTER. 800.365.3642 206.36.0.0-206.39.255.255 NET RANGE.
  207. ok i see people complain about by Anonymous Coward · · Score: 0

    slashdot posting apache releases and what not. how come i dont see anyone b.itching about how this shouldn't have been posted? the most useless garble ever. how many m$ employees talk to the press and end up in the paper... i'm surprised its not like Dr Whackjob Joe "microsoft is responsible for 9/11"
    mannnnnnn

  208. Re:What about things that P2P doesn't make sense f by Anonymous Coward · · Score: 0
    this is their 10-20 year plan

    Haha! You're deluding yourself. Microsoft does not have a 10-20 year plan.

  209. Re:Look! Another Linux fan boy! by sheldon · · Score: 2

    The web server marketshare is important, but not a leading indicator of the total server market share.

    As far as the reports showing tremendous growth of Linux in the server market, these only come from IDC. Both Gartner and Goldman Sachs have published numbers which dramatically dispute the IDC figures.

    In the case of both Gartner and Goldman Sachs, they established their numbers by random surveys of corporate purchases. The IDC numbers are apparently "estimated" from Linksys CD shipments, ftp downloads and a variety of other questionable sources.

    It's also interesting to note that all reporting of IDC numbers are from 1999 and 2000, whereas the Gartner and Goldman Sachs surveys were done in 2001. If nothing else this indicates that Linux is not a growing market.

    As far as the embedded market, Wind River's VxWorks is still the dominant player, with Linux having only a small niche in comparison.

  210. just another thing... by Anonymous Coward · · Score: 0

    ...where hambuger eaters from microsoft are sadly mistaken.

  211. Did you read the article? by zapfie · · Score: 1

    microsoft is going to have to do something FAR more impressive to convince me they have a good reason to scuttle the most re-purposeable protocol on the internet.

    Where is anyone in the article implying Microsoft is the solution to this? Where does anyone in the article express interest in eliminating HTTP?

    This article is about breaking the dependance on HTTP for all tasks. There are places where HTTP makes a lot of sense, and places where it doesn't. The main goal expressed was to develop a standardized protocol to use when HTTP doesn't make sense. (e.g. p2p support, transactions that take extended periods of time)

    Quotes from the article (emphasis mine): (please note that Box is the Microsoft engineer being interviewed)
    ---
    Box likes to think of HTTP as the "cockroach of the Internet" because "after the holocaust it will be the only protocol left standing."
    ---

    ---
    "One of the big challenges facing Web services is our reliance on HTTP," said Box. However, there is nothing wrong with HTTP per se, as its ubiquity and high dependability means it is the only way to get an a reliable end-to-end connection over the Internet, he added.
    ---

    ---
    "We have to do something to make it (HTTP) less important," said Box.
    ---
    Note he did not express any desire to elimite HTTP.

    ---
    Several working groups are working on the problem at the W3C, the organisation responsible for Web standards. And even though Microsoft is working on the problem too, Box did say that Microsoft is unlikely to succeed alone.
    ---
    Therefore if anyone is going to try to "scuttle" anything (which is not what this article suggests, see above), it is going to be a group effort, not tied solely to any one vendor.

    ---
    "Microsoft has some ideas (on how to break the independence on HTTP), IBM has some ideas, and others have ideas. We'll see," he said. But, he added, "if one vendor does it on their own, it will simply not be worth the trouble."
    ---

    --
    slashdot!=valid HTML
  212. What about Freenet? by Nemith · · Score: 1

    Freenet is a free p2p transfer protocol used for webpages. Although for me it is dirt slow, isn't this what Box is describing. Every machine both a server and a browser.

  213. Size is not important by dybdahl · · Score: 1

    The difference between object oriented programming like .net and streamed programming like http, is that a webserver can start sending the html web page via http before it has completed calculating the web page. http does not need random access, whereas .net classes do.

    Random access to properties and methods is one of the basic foundations for classes.

    Some would complain that http is ascii. Well, all e-mails are sent as ascii. In order to send national characters like æøåéüñ, you can use MIME encoding. Unicode can also be embedded in 8 bit character streams. Ascii is good, because it's easy to debug, easy to troubleshoot.

    http has been tested for many years. Many webservers out there still don't conform 100% to the standard (like not allowing HEAD requests for instance), and if you want a truly idenpendent standard, it will take lots of years before .net comes up with anything as stable as http. By then, replacing http will be unthinkable.

    The most optimal technology seldom wins. But the technology that first gets widespread, often does. How many http servers have we got today? How many .net api based web servers do we have today?

    .net is useful, but not as a http replacement.

    Dybdahl.
    M.Sc.E.E. in networking

  214. Mod parent UP!!! by rycamor · · Score: 1

    'nuff said.

  215. Re:Look! Another Linux fan boy! by rseuhs · · Score: 2
    I see no link there.

    Put up or shut up.

  216. http problem not!! by Anonymous Coward · · Score: 0

    Lets just look at this from the correct perspective:

    1: P2P developers could use any protocol they like there are many to choose from, hell invent another if you like
    2. Most sensibl;e P2P developers choose http not because of what it is or does but because it passes through firewalls, thus P2P clients/servers can talk to the outside world!
    3. There for the problem is a security issue. i.e. use a protocol taht traverses security!
    4. Microsoft are partly to blame for the proliferation of firwalls in organisations, and in many ways here are suffering from there own past actions and mistakes
    5. If microssoft and or anyone else come up with a new protocol, I.T managers and security staff will take a long time to open the gates into the corporate network to anything new!!
    6. Therefore microsoft (and everyone else for that matter) need to clean up their security before this would ever be accepted. It looks like We will all just have to deal with building layers on HTTP me thinks..

  217. Re:Look! Another Linux fan boy! by Anonymous Coward · · Score: 0

    Linux Has successed. You are blinded by microsoft.
    Linux is a free, stable powerfull platform maybe we (as linux users) don't want to eat up the internet with a 90% *monopoly*. But if 90% of people with a computer would be linux people then we would have failed. Keep the internet free, diferent, helpfull and it a success.

  218. Blame the messenger by StrawberryFrog · · Score: 2
    I read the "flipping" article and, as most of the FUD coming from MS nowadays, I found it poorly written and amazingly bad at getting details across.

    Er, yes I agree, it was frustratingly short on detail. Now is that Don Box or some ZDNet hack's fault?

    The article is vauge, non-technical and vacous, but having read things that Don Box has written, I seriously doubt that the fault lies with him.

    --

    My Karma: ran over your Dogma
    StrawberryFrog

    1. Re:Blame the messenger by gamgee5273 · · Score: 2
      But did he sign-off on the article? More and more these days a news organization (for right or wrong) will go back to their sources and make sure that the source is cool with what was written. For all we know Box was speaking completely tongue-in-cheek and the ZDNet hack had no clue how to look through that.

      That said, Box's cred would rise greatly if he weren't basically a spokespuppet for MS. And if he isn't a spokespuppet, maybe it's time to leave MS.

  219. Re:Look! Another Linux fan boy! by Anonymous Coward · · Score: 0

    Boo hoo! I'm a poor little linux fan boy who can't stand it when my overly optimistic predictions of linux destroying Microsoft don't come true.

    I think I'll go make myself feel better by trolling slashdot.

  220. J++ and .NET by einhverfr · · Score: 2

    MS loses, says Screw this, and drops JVM based on lawsuit result, and stops J++ tool development

    Well, according to Microsoft, they are working on a .NET version. It just is not ready yet and will be called J#. Of course it is .NET rather than Java, but the tool itself continued in a different form.

    --

    LedgerSMB: Open source Accounting/ERP
    1. Re:J++ and .NET by erasmus_ · · Score: 1

      What are the chances of this being successful? I think pretty low, considering that Java hardcore programmers will stay away from MS tools and MS developers will either stick with VB.NET or choose to learn C#. I'm sure they feel they need to still have some Java support just to please a small portion of their customers, but I think similarly to Visual FoxPro, Java is unlikely to get front running from any Microsoft marketing or incentives due to the concentration on other languages.

      Incidentally, any good links about J# that you've come across?

      --
      Please subscribe to see the more insightful version of th
    2. Re:J++ and .NET by einhverfr · · Score: 2

      I don't know. The problem with J# is that they are trying to access the Java libraries in .NET applications. This itself seems rather questionable to me and a bit of a difficult task to do well, but why not? It will allow Java developers to write .NET software when they have to.

      The problem is as follows: Most developers do not choose their environments-- the application designers choose it for them.

      I myself am a little amused by .NET. I think it has a few interesting aspects:

      1: It can't compete against Java unless it is platform independent (i.e. if Mono or Portable.Net succeeds) but
      2: If it is platform independent, it open up the door to OS competition...

      --

      LedgerSMB: Open source Accounting/ERP
    3. Re:J++ and .NET by erasmus_ · · Score: 1

      Yes, many people seem to think that it's a potential lose/lose for MS as you described, but I think MS is really hoping to sucker people in now with the promise of platform independence, and when those initiatives fail, people would then be targeting Windows only. Now, I personally like many concepts of .NET, but I can see why it's a risky initiative. I think 2002 will be an interesting year for development either way the way things are shaping up.

      --
      Please subscribe to see the more insightful version of th
    4. Re:J++ and .NET by einhverfr · · Score: 2

      I think that the current situation is a lose/lose situation for Microsoft, and that .NET is a contingency plan for the possibility that subscription licensing will fail. The current OS market is simply unsustainable and when computers begin to saturate their market, the OS market may collaps in upon itself (and give Linux a real competitive advantage similar to the one that Windows has against proprietary UNIX in markets where the competition exists).

      Basic problem:
      Sagging PC sales threatens Windows revenue.

      Primary solution:
      1: look towards subscription licensing to keep revenues up.

      2: Diversify the business by moving toward subscription services like the passport merchant accounts, etc.

      Contingency plan:
      1: Push cross-platform development for the web services and then sell supporting services, development environments, etc. .NET is structured so that it can fulfill the requirements for this contingency.

      This is my interpretation of MS's actions.

      --

      LedgerSMB: Open source Accounting/ERP
    5. Re:J++ and .NET by erasmus_ · · Score: 1

      My only question to this is that if computer saturation really does happen and the OS market "collapses", then how does Linux not get affected by that? In a saturated market, why would Linux have this "real competitive advantage", wouldn't the existing computers already run an OS and probably not switch soon?

      --
      Please subscribe to see the more insightful version of th
    6. Re:J++ and .NET by einhverfr · · Score: 2

      It is all about distribution of the cost of development. Linux can be competitive because companies will continue to need special features that they can fund development for. The open source development model (and business model for consulting firms) allows software development to be somewhat separated from the hardware market. Linux would still be affected, but not nearly to the extent that Windows would be.

      I assume this thread will be soon retired, so if you want to continue this conversation, please email me.

      --

      LedgerSMB: Open source Accounting/ERP
  221. "a Microsoft .Net engineer " :) by sofad · · Score: 1

    Don Box is not really " a MS.NET engineer".
    He's the guy behing DevelopMentor.
    He's an ex C++/Unix guy who uses EMACS. (He admitted it at the .NET intro in chicago).

    Check out http://www.donbox.com

  222. Http's Days are numbered? by RogueAngel7 · · Score: 1

    Hahahahahahahahahahahahahahahahahaha...

    not as long as there are stupid people with homepages...

    (this web site is brought to you by the commands ctrl-c and ctrl-v)

    RA7
    -

    --
    "Consistency is the hobgoblin of small minds" - RWE
  223. Three minutes for response by sglane81 · · Score: 1

    "If it takes three minutes for a response, it is not really HTTP any more,"

    Is this in reference to IIS?

    Spelling nazis: I know referring is misspelled above. It is misspelled in the HTTP protocol too. ;)

    --
    This is the Internet. You can say "fuck" here. - AC
  224. Re:What about the "waka" protocol by Roy Fielding? by Roy_Fielding · · Score: 1

    Waka has not yet been released in specification form due to the economy sucking away all of my free time, and that talk never happened because ApacheCon 2001 Europe was cancelled. I did get a lot of work done on it during my vacation just prior to 9/11.

    I recently changed jobs and am now chief scientist at Day Software. My protocol work will get back on track soon and I will be able to introduce waka at ApacheCon 2002.

    However, I should note that Don Box (whom I know from UCI) is mistaken in his complaints. HTTP is not an RPC (SOAP is, but SOAP is not and never will be part of the HTTP standard). HTTP has included an asynchronous completion mechanism since 1994 (see the 202 Accepted response). I have no idea why folks at Microsoft can't read the specification of HTTP and make use of the protocol as it was designed to be used.

    I have plenty of reasons to replace HTTP with a better protocol, but none of them involve making the Web act like a DCOM service, which is simply a bad architecture for the Internet.

  225. What article did you read? by twitter · · Score: 2
    The one I read was titled, "Microsoft Guru: stamp out http." After extoling the robustness and reliability of http, Microsoft's mouthpiece declares http unusable because trasnactions on the internet take too long for MicroShit's bloated applications and, "Only one entity can initiate an exchange over HTTP, the other entity is passive, and can only respond."

    Sounds like the Microsoft I know. Clueless bullshit used to destroy a usefull tool so that they can puch adverts over the new broadcast media. Pull is what makes the internet work. Push is what M$ wants. No thanks, next.

    --

    Friends don't help friends install M$ junk.