Slashdot Mirror


Features of a post-HTTP Internet?

Ars-Fartsica asks: "We've been living with HTTP/HTML ("the web") for a quite a while now, long enough to understand its limits for content distribution, data indexing, and link integrity. Automatic indexing, stateful-ness, whole-network views (flyovers), smart caching (P2P), rich metadata (XML), built in encryption, etc are all fresh new directions that could yield incredible experiences. Any ideas on how you would develop a post-HTTP/HTML internet?"

122 comments

  1. Word to Your Mother by Michael.Forman · · Score: 2, Funny


    Let's all just capitulate and make the official format a Microsoft Word document.

    Michael.

    --
    Linux : Mac :: VW : Mercedes
    1. Re:Word to Your Mother by Tumbleweed · · Score: 2, Funny

      Dude, that wouldn't waste enough bandwidth - I say we make them all PDFs with embedded fonts (FULL fonts), and lots of graphics.

    2. Re:Word to Your Mother by RevAaron · · Score: 1

      Embedded fonts? What are you smoking? The proper way to do it is to just have graphics! That is, if it's a scanned-in document, no OCR, or have the authoring tool render into the big, fat-ass PDF-TIFFs. High color and really high DPI too- that's important in this hi-tek age, eh! Nothing better than a 10 MB PDF for one page of black and white text!

      --

      Working toward a usable PDA environment in the spirit of Newton OS: Dynapad
    3. Re:Word to Your Mother by Tumbleweed · · Score: 1

      No, really, think about it - you could use a different font for each word in the document, then embed each full font in there. That'd totally rawk!

      I agree, though - lots of uncompressed TIFFs are a good thing, too.

      And then people can quote the existing PDF stuff, and add one line (with an entirely new font) that just says, 'I Agree.'

      We'll make good use of that new Verizon fiber to the premesis bandwidth, no problemo!

      I want FTMF - Fiber To My Fingers!

    4. Re:Word to Your Mother by afa · · Score: 1

      But at the same time you enlarging your size of docs, you have to spend more time, especailly precious time, to collect related graphics. Well, let's just use a automatic script to collect unrelated spam information and fill in the docs in a form that will not make the viewers see, in order to waste enough bandwidth, alright?

    5. Re:Word to Your Mother by Anonymous Coward · · Score: 0

      GASP!

      Modded off topic too! We definitely have some MS fans without a sense of humor trolling around. :)

  2. Wrong question. by daeley · · Score: 4, Interesting

    Any ideas on how you would develop a post-HTTP/HTML internet?

    First identify the problem, then you can start devising solutions.

    So what's the problem? You mention certain limits of HTTP/HTML. Would these be overcome with better applications rather than throwing everything out?

    --
    I watched C-beams glitter in the dark near the Tannhauser gate.
    1. Re:Wrong question. by aklix · · Score: 5, Interesting

      HTTP is a transfer protocal that does everything I need it to do. As for HTML, we practically have a post-HTML internet. DHTML, Javascript, CSS, pretty soon Apple's Canvas. It all works nice and pretty. So why would we need a post HTTP, especially if we have other protocals to do other things.

    2. Re:Wrong question. by Anonymous Coward · · Score: 0

      The problem is that everyone tends to see the "web" as a one-size-fits-all solution.

      The fact is that things like Javascript are just ugly hacks, and things like CGI forms are not necessarily the best way to build a user interface.

      Particularly, when you have to open a new socket and do an HTTP POST every time you want to do something, and then re-download the whole "user interface" each page load, it's not as reliable as it could be.

      If you think about it, most "web applications" send WAY too much user interface details over the socket, even with CSS.

      I'd like to see some new protocols and applications that let the client focus more on GUI details, and let the server worry about what it should: serving data. This way, we get more responsive, consistent, and flexible interfaces.

    3. Re:Wrong question. by bedessen · · Score: 1

      Mod parent up.

      I groan every time I use some web "application" that involves submitting a form and waiting 3 to 10 seconds between each step. It's a ridiculous way of making something interactive. Even the best hacks (such as Gmail which uses a pile of javascript and DHTML to make things seem instantaneous) take excrutiating amounts of coding and testing and still fall prey to the "submit and wait for a whole new page" thing for some parts.

      HTTP is great for static pages, but anything remotely interactive would benefit from some kind of persistent connection without scripting hacks.

  3. Why? by MaxwellStreet · · Score: 4, Insightful

    Given that all the technologies you mention work just fine across the internet as we know it....

    Why think about getting rid of html/http?

    The pure simplicity of developing and publishing content is what made the WWW take off the way that it did. Anyone could (and generally did!) build a site. It was an information revolution.

    The other technologies will handle the more demanding apps out there. But HTML/HTTP is why the web (and in a larger sense) the internet is what it is today.

  4. Why does HTTP have to go away? by dougmc · · Score: 3, Interesting
    So, HTTP (and HTML, though the two really have nothing to do with each other, beyond the fact that HTTP is the primary way of delivering HTML) can't do everything. We know this. We have always known this, for as long as we've had HTTP.

    Has something changed that I'm not aware of here?

    HTTP may be the most popular protocol out there, but it's hardly the only one. SMTP is really popular, FTP, NNTP, IRC, whatever all the IM systems use, UDP protocols used by games, DNS ... many of these may be showing their age, but they're not showing any signs of going away any time soon.

    1. Re:Why does HTTP have to go away? by Drakon · · Score: 1

      Hyper-Text Transport Protocol
      Hyper-Text Markup Language

      Have nothing to do with each other?

    2. Re:Why does HTTP have to go away? by dougmc · · Score: 1
      Hyper-Text Transport Protocol
      Hyper-Text Markup Language

      Have nothing to do with each other?
      That is correct. In spite of the similar names, they have almost nothing to do with each other, beyond the fact that html is often delivered via http.
    3. Re:Why does HTTP have to go away? by DLWormwood · · Score: 1
      Hyper-Text Transport Protocol
      Hyper-Text Markup Language

      Have nothing to do with each other?

      Yup, that's correct... (-: They are completely "orthogonal" to each other.

      The notion of HTTP being a "hypertext" related technology is more of a historical accident than anything. (Hypertext was a buzzword of the 90's, everybody made claim to the word.) The developers of HTML wanted a more elegant way of serving web pages than the older protocols like FTP and Gopher, so they contributed to HTTP's development. However, HTTP's stateless nature and generic utility ended up being more useful than just for serving hypertext.

      --
      Those who complain about affect & effect on /. should be disemvoweled
    4. Re:Why does HTTP have to go away? by Lehk228 · · Score: 0, Flamebait

      well DNS still pwns HTTP since almost any http request requires DNS while DNS is used for many non- HTTP purposes


      DNS IS TEH R0X0R
      HTTP SUX P3N0R

      --
      Snowden and Manning are heroes.
    5. Re:Why does HTTP have to go away? by Chess_the_cat · · Score: 1
      In spite of the similar names, they have almost nothing to do with each other, beyond the fact that html is often delivered via http.

      Read that again. Maybe out loud. Then you can hear what an ass you're being.

      --
      Support the First Amendment. Read at -1
    6. Re:Why does HTTP have to go away? by mabhatter654 · · Score: 1
      The stateless nature of HTTP is exactly the problem right now because every body is trying to either shoe-horn states in [i.e PHP] or rebuild their own state keeping thru some other port [i.e. j2ee & .net] What's needed is an Open alternative that bundles all those specs up and makes it easy. I brought up IBM 3730 & 5250 in another post because they are oldie-but-goodie specs that do exactly what everybody is looking for...server-client & client-server interactions, data integrity, ability to pass information to devices, etc... nothing in the base 5250 spec requires them to output ONLY to an ugly green screen. There's plenty of OSS implenemations of clients out there to start building from!

      There really should be a community effort to take the best of what's available OSS...BitTorrent, Jabber, Mozilla, RSS, etc. And wrap up some truely new protcols to implement...Write the RFC's and put it in production via Mozilla, Apache, and PHP...don't wait to beg permission because the corps will stall with their own adgendas untill it's old and stale. If it was included in major browsers like Mozilla and Knoquerer, and pushed for big sites like slashdot we could do it almost overnight!

    7. Re:Why does HTTP have to go away? by DLWormwood · · Score: 1
      The stateless nature of HTTP is exactly the problem right now because every body is trying to either shoe-horn states in

      Yup. But if HTTP wasn't stateless to begin with, it would not have been adopted widely in the first place.

      [BEGIN RANT MODE]

      A lot of government and managerial people seem to forget that freedom from restrictions and overhead are what makes technologies and social processes popular. The current rush to reassert "control" over the Web and the Internet are going to drive away the very people they are trying to gain control over, leaving on the more apathetic people behind who aren't worth controlling anyway.

      Those out there seeking to usurp social convention to gain control have developed this ability to willing forget what it is like to be controlled themselves. It's like that one line from a Star Trek show about how a member of an alien species didn't want to get rid of exploitation, but to become one of the exploiters.

      Of course, in my self-deluded fantasies, I dream of the day when one of the "exploiters" develops Coercive Telepathic Empanty or some such technology, and the technology "escapes" and is used on everyone... Numbness towards our fellow man is what makes Evil possible.

      [RANT MODE OFF]

      --
      Those who complain about affect & effect on /. should be disemvoweled
    8. Re:Why does HTTP have to go away? by mabhatter654 · · Score: 1
      you miss the point...HTTP has gone as far as is reasonable...and thats OK!

      Why can't anybody see that? It's time for something new to be developed that meets the needs of the NEXT 10 years. It's not about "control" or rather my post was that OSS should grab the reins FIRST. HTTP was mostly an OSS-type project and that made it very successful. It's time to put all the ducks in a row and lay out a new course....before THEY do it for us!

  5. LaTeX by Anonymous Coward · · Score: 1, Interesting

    I've been saying for years that if we had only adopted LaTeX as the primary means of displaying Web documents, we'd have a considerably more wonderful content delivery system.

    (LaTeX, being a programming language, is quite adept at laying things out, and accepting new sorts of extensions. It would be ideal for this kind of display ...)

    1. Re:LaTeX by Anonymous Coward · · Score: 0

      why not postscript?

      AC

    2. Re:LaTeX by 0x0d0a · · Score: 1

      I love the concept behind LaTeX. I love the quality of the output from existing LaTeX implementations.

      That being said, the syntax of LaTeX is a pain to learn, a pain to code in, and just not all that great.

      Now, I deal with the syntax because the approach of higher-level formatting is so good, and because the implementation is so good, but boy I wish that it was better.

      Oh, and LaTeX doesn't have the excellent error detection and reporting of, say, perl.

    3. Re:LaTeX by Anonymous Coward · · Score: 0

      try this works great. All the simplicity you could ever want, plus, you can throw your own raw LaTeX code in wherever you like.

      Cheers.

    4. Re:LaTeX by 0x0d0a · · Score: 1

      I've tried lyx. I need xemacs to be happy, though.

      I don't have a problem with text markup -- I just don't like LaTeX's particular syntax. It makes a lot of characters metacharacters (which makes it a pain to past text in). A lot of characters that I think should be "regular" characters are only valid in math mode. I hate the way LaTeX deals with wrapping (I never want text going off the page, really). I hate trying to deal with cell-spanning in tables, which should really be part of the basic tabular environment -- it's easy in HTML, and a pain in LaTeX. I wish LaTeX could let me just say "I want this floating element embedded in the text as close as possible to my text without ruining the look of the document". I wish that it was easier to use LaTeX as a full-blown programming language.

      I've tried other free layout systems, and never liked anything as much as LaTeX, but LaTeX is an awfully long way from perfect.

  6. a better plan... by Tumbleweed · · Score: 0, Offtopic

    ...would be to finally switch to IPv6; that would solve a lot more problems than mucking about with HTTP. Oh yeah, that and banninating IE from the Computosphere.

    1. Re:a better plan... by Anonymous Coward · · Score: 0

      a better plan would be to finally switch to IPv6; that would solve a lot more problems than mucking about with HTTP.
      Isn't that kind of like saying; a better plan would be to finally switch to everyone driving SUV's; that would solve a lot more problems than mucking about with new car stereos.

      In other words: WTF does one thing have to do with the other?

    2. Re:a better plan... by Tumbleweed · · Score: 1

      > In other words: WTF does one thing have to do with the other?

      Nothing; I just meant that if someone wants to go around fixing something, how about problems that are already known, and with a known solution, than to simply go around changing HTTP just because one can.

    3. Re:a better plan... by General+Fault · · Score: 1

      Actually, IPV6 has nothing really to do with HTTP or HTML . The web (as many slashdotters can explain even better than I) is built upon many layers.

      Digital or Analog
      physical transmition type (ethernet, optical cable, phone line, radio waves)
      addressing (IPV4, IPV6, probably more that I am not aware of)
      transport protical (TCP, UDP, etc...)
      packet type (http, ftp, gopher, smtp, etc...)

      That is why you can change one of the layers and none of the others have to know about it. In other words, you can serve up some http content over a digital ethernet connection using IPV6 and TCP or you can serve up that same http content through an analog phone line using IPV4 on a UDP connection, and the reader of the web page will not know the difference.

      So changing to IPV6 is only going to increase the number of addresses on the web (like adding an extra character on a license plate increases the number of cars that can have a license in a given state), and not much else.

      --
      No man is an island... But I wouldn't mind having a bigger moat.
    4. Re:a better plan... by ttuegel · · Score: 1
      Oh yeah, that and banninating IE from the Computosphere.

      Banning IE would be easy if you could get a following. Just put JavaScript code in the 'onload' parameter of the 'body' tag that detects browser and if it detects IE, redirects to the Firefox download page. (I don't remember the code to do this off the top of my head, but it is very feasible) No one could use IE on your site. Get enough people to do this, and you've effectively 'banned' IE from every site except one. Then, people will start to use abandon IE, switching to Firefox (I chose Firefox because it's user-friendly enough for the non-techies who use IE in the first place) and voila! No more IE.

    5. Re:a better plan... by mabhatter654 · · Score: 1

      A more clever idea would be to brand Firefox as a plugin to IE when unsupported pages were called up! That way pages broken in IE would default to Firefox!!!

  7. Forget HTTP. by Spudley · · Score: 5, Interesting

    Forget about replacing HTTP - let's deal with the real problem protocol first: SMTP.

    Please! Someone give us a secure email protocol that doesn't allow address spoofing.

    --
    (Spudley Strikes Again!)
    1. Re:Forget HTTP. by ADRA · · Score: 4, Insightful

      Spoof integrity will always come down to two factors:

      1. Verification of Sender - This will never happen unless systems like cacert.org start to take off. Basically 99% of the internet don't give a damn about certificates, and the ability for anonymity is more limited. A debate about privacy/spam could go on for years if given the chance.

      2. SPF-like protocols - This is the ability to discriminate who is and who isn't allowed to send email from a given domain. This will cause a few things:
      - a. Every mail sender must be from a domain
      - b. Every mail sender has to route through an institutional server (the road warrior problem)
      - c. Every institutional mail server must deny relaying from anyone non-authenticated. (Should be done already)
      - d. Institution must be regarded positively by the community at large. If they aren't, they're completely eliminated from sending emails.
      - e. You have to get DNS servers that you can update.
      - f. You must lock down the DNS server from attacks (Have you done this lately?)

      Anyways, both solutions are possible, but neither are ideal for everyone. SPF has a real chance of shutting down spoammers, but I imagine the wild west internet we know is pretty much over.

      --
      Bye!
    2. Re:Forget HTTP. by Scarblac · · Score: 2, Funny

      Forget about replacing HTTP - let's deal with the real problem protocol first: SMTP.

      What, work on SMTP, while there are children starving somewhere in the world?

      If we listened to people like you, nothing would ever get done. Well, perhaps some starving people would be saved. But that's besides the point, sheesh.

      --
      I believe posters are recognized by their sig. So I made one.
    3. Re:Forget HTTP. by 0x0d0a · · Score: 2, Informative

      This will never happen unless systems like cacert.org start to take off.

      Or decentralized trust systems, but yes.

      Basically 99% of the internet don't give a damn about certificates, and the ability for anonymity is more limited.

      Not really. I can create multiple electronic personas, unless you're trying to enforce a 1:1 id:person ratio.

      2. SPF-like protocols - This is the ability to discriminate who is and who isn't allowed to send email from a given domain. This will cause a few things:

      Where "SPF-like protocols" means "authorization protocols", yes. The problem is really nothing more than an authorization protocol, and not a very good one at that.

      I disagree with you that authorization should take place on a domain level (unfortunately, this is the approach that the SPF people use). By doing so, it means that, say, a single account at ford.com is ever compromised by a baddie, it means that the only solution with domain-level granularity systems is to ban the entire domain.

    4. Re:Forget HTTP. by Dr.+Evil · · Score: 1

      I think trust systems are the best option. Non technical users can have blobs of trust created by their ISP. e.g. MSN trusts that an MSN user is trustworthy, and AOL users are trustworthy, and other trustworthy providers. Technical users can trust friends, trust major service providers, trust friends of friends and revoke trust as abuses occur.

      So AOL or MSN or whatever can establish the one account to one owner relationship. Randomly generated emails, even from valid addresses would be ignored since they're not signed by a trusted source (MS or AOL), and we all know the story for the rest of the web of trust.

      People who sign up for verified accounts only to send spam must have accounts terminated promptly by providers. It's not futile anymore since the provider controls who gets their signature.

      Simplifying the interface to the system without compromising the security of the system is the utterly most important aspect of such a system.

      I have to agree that SPF doesn't make a lot of sense.

      How are the licenses for PGP and GPG? I have to wonder why web mail environments haven't tried stuff like this. You could completely hide all the complexity within the service and between known PGP/GPG-happy services.

    5. Re:Forget HTTP. by 0x0d0a · · Score: 1

      How are the licenses for PGP and GPG? I have to wonder why web mail environments haven't tried stuff like this. You could completely hide all the complexity within the service and between known PGP/GPG-happy services.

      The problem is that the trust system bundled with GPG (not that you couldn't build something on top of GPG's trust system) is binary -- you trust someone or you don't. There's no concept of "sorta trusting persona A, and therefore trusting persona B, which persona A trusts, somewhat less".

    6. Re:Forget HTTP. by clambake · · Score: 1

      Spoof integrity will always come down to two factors:


      I think as long as there is a valid from address I'd be happy. As long as I can send back a 5 gig /dev/random attachment to you, you can send me spam until you are blue in the face.

      Verifying this is as simple as having a two way handshake protocol before delivering mail.

    7. Re:Forget HTTP. by Anonymous Coward · · Score: 0

      How do you expect to prevent spoofing?

      Email is a decentralized system. For a server to accept incoming mail, it has to trust other servers to some degree. So all it takes is a rogue server to pretend to be somebody else.

      But you have to take the other server's word for it when they tell you who they are. There's no way to verify it. Some people seem to think you can do it with reverse-DNS, but this is bad practice; many times it just doesn't work.

      If you want to prevent spoofing, cyptographically sign your messages.

  8. whoops by Tumbleweed · · Score: 2, Funny

    That topic should've been changed to 'PDF To Yo Momma'

    Sorry, my bad.

  9. Rewriting? by Ianoo · · Score: 4, Insightful

    Why is it that developers feel the need to periodically scrap everything they've been working on, then reimplement it, usually in a more half-assed way than the original? (I'm talking to you, Apache programmers! ;)

    But seriously, where's the need to dump HTTP? It's not exactly a complicated protocol, and can be adapted to do many different things. Pretty much any protocol can be tunneled over HTTP, even those you'd normally consider to be connection-orientated socket protocols.

    As for HTML, again - why the need? By using object tags and plug-ins, the browser is almost infinitely extensible. Flash and Java bring more interactive content, streaming brings sound and video, PDF brings exact display of a document to any platform, and people are using all sorts of different XML-type markups every day now, such as RSS, XML-RPC, SOAP, and so on to do all kinds of interesting things like Web Services and RPC.

    Microsoft and the open source community are both working on markup-like things that will enable applications to operate over the web (all via HTTP). XAML and XUL's descendents might well have a big future, especially if the way documents should be displayed is more rigourously specified than HTML.

    1. Re:Rewriting? by Anonymous Coward · · Score: 1, Insightful

      Why is it that developers feel the need to periodically scrap everything they've been working on, then reimplement it [...]?

      Are you a developer? There are lots of reasons, but they are not very good ones. It sounds like it might be discouraging, but it's really quite fun. You know the basic idea of how to do it, because you've done it once already, so you get to think about how to do it better. On a small scale, it is called refactoring. On a large scale it is probably a waste of time. But a lot of people are tempted to do it anyway.

      Programmers are often idealists. They implement something and then feel bad about it, so they later go ahead and reimplement it because it is "ugly" or "crufty". Even if its interface seems to work well, the internal implemenation probably feels to us like it is crufty and liable to break down at any moment. So we overengineer it, layer after layer, to ensure that no ugly, interface-defacing code ever needs to be introduced anywhere. It's kind of compulsive for me, although at least I can see myself doing it and decide whether it is really necessary.

      Now, I don't know the HTTP protocol very well myself, so I don't feel compulsive about reimplementing it. It feels pretty clean from what I've seen.

      As for HTML, on the other hand, it would be beautiful to start with a clean slate on that one. Force XHTML+CSS, force browser rendering standards, force everybody to respect MIME types. If you do that, you feel like you want to change HTTP, just to force everybody to start from scratch so you don't have any partial-compatibilities.

    2. Re:Rewriting? by miyako · · Score: 2, Insightful

      Why is it that developers feel the need to periodically scrap everything they've been working on
      The reason is that often times the original design of something does not facilitate the structured adding of newer features. Mainly because the $foo is first developed nobody has any idea that people will want to be doing $bar 10 years down the road. Finally someone finds a way to allower $bar by tacking on a few things to $foo with superglue and duck tape. At first this is no big deal $bar is just a small little thing and it doesn't invalidate the design of $foo. Eventually more people use duck tape and superglue to add things to $foo and use duck tape and superglue to add more things to $bar untill what your left with is a big ball of tape and glue supported percariously with popsicle sticks and rubberbands. In this case it can be better to then redesign $foo to provide a better structure for things like $bar to be added without so much cruft. Othertimes it's decided that all the things like $bar should just be given a seperate program/protocol/whatever and $foo should to back to what it was originally.
      Let's look at all this in the case of HTTP. Things like Java applets, Flash, even Javascript, are all hacks to get around the limitations of HTTP. Ofcourse I don't think that we are nearing critical mass of things being added onto HTTP, but the problem is certainly comming along. I think the latter of the above solutions is preferable in this case. HTTP is a good protocol and still serves a usefull purpose, what we need though is a second protocol for dynamic content.

      --
      Famous Last Words: "hmm...wikipedia says it's edible"
    3. Re:Rewriting? by pete-classic · · Score: 3, Funny

      Job security.

      Now ask me a hard one.

      -Peter

    4. Re:Rewriting? by Anonymous Coward · · Score: 0

      Java is not feasible for cross-platform browser extension of any kind.

      In order to write a cross-platform Java applet, you must write it twice: once for Sun's VM, and once for Microsoft's.

      MS's VM is missing a lot. Java has changed a lot in the last 5 years, but MS's VM has not. And you can't expect IE users to download a 70MB or so plugin just so you can use some modern APIs. :P

    5. Re:Rewriting? by mabhatter654 · · Score: 1
      J2EE is exactly the motivation for building a new application standard! I'm primarily an AS400 RPG programmer and the interface is wonderful! Most RPG programs are comparible to PHP scripts...really simple ones. The underlying engine supports all of the client-server interactions the programmer writes screens and the client runs them. Of course there are extentions to add client side processing and use of client devices like printers... the key is that writing the app is no more complicated than writing a basic web page right now.

      Sometimes you have to stop trying and rebuild the right tool for the job!

      As far as Java, if it was done right up front by MS it wouldn't be an issue. Your comment is EXACTLY why MS broke the JVM just enough to be a hassle!!! Of course you'll expect IE users to download the XXXMB SP2 pack to make their machines "safe" for the internet...why is it unfair to expect them to have other up-to-date tools!

  10. Don't get rid of statelessness by self+assembled+struc · · Score: 4, Insightful

    The fact that HTTP is stateless is one of the reasons that Apache and the kin scale so effectively. The instant they're done dealing with the request, they cna do something else without thinking about the consquences. Why do I need state on my personal homesite? I don't. Let your application logic deal with state. Let the protocol deal with data transmission period.

    1. Re:Don't get rid of statelessness by AuMatar · · Score: 3, Insightful

      Of course, if we added state, we'd get rid of the need for cookies (and their privacy issues), and make writing web applications one hell of a lot easier.

      If you're not going to make it stateful, don't bother replacing it. As a stateless protocol its about as lightweight as you're going to get.

      --
      I still have more fans than freaks. WTF is wrong with you people?
    2. Re:Don't get rid of statelessness by joeljkp · · Score: 1

      Why can't they just add a new HTTP header called TRANSID or something (transaction ID). It'd be like a cookie, but it'd be invisible to everything except the browser and the server.

      --
      WeRelate.org - wiki-based genealogy
  11. XML + XForms + XMLHttpRequest + canvas by OmniVector · · Score: 1, Insightful

    If all those things in the title were used to develop a website, i think the things one could accomplish are amazing. as it stands you can already use xhtml and xhmlhttprequest to do highly dynamic websites. sometimes i wish so much emphasis wasn't put on backwards compatability in the web. i wish browsers could automatically detect what version of html the webpage requires, and generate warnings if your browser's too old to properly render, with a handy "update here" link.

    PS: Canvas is a new tag from apple, used to draw things into an img like component. apple's working with opera and mozilla to integrate it into their browsers. hopefully this will go somewhere. i've always wanted something like that directly javascript accessable, but have never had the luck. it requires hack extensions like java and flash which don't communicate well with the underlying javascript without using some kludge like liveconnect.

    --
    - tristan
    1. Re:XML + XForms + XMLHttpRequest + canvas by Anonymous Coward · · Score: 0

      ruby -e 'puts "U3RlcCByaWdodCB1cC4gTWFyY2guIFB1c2gu".unpack("m") [0]'

      so just what does that do? compute the value of pi to 20 digits or something?

    2. Re:XML + XForms + XMLHttpRequest + canvas by Anonymous Coward · · Score: 0
      javascript accessable
      These words are mutually exclusive, please continue to provide noscript tags for the unfortunate and the well informed alike.
    3. Re:XML + XForms + XMLHttpRequest + canvas by NoMoreNicksLeft · · Score: 3, Interesting

      Canvas? Try SVG, in a SVG aware browser. Not javascript accessible, rather ECMAscript accessible.

    4. Re:XML + XForms + XMLHttpRequest + canvas by 0x0d0a · · Score: 2, Insightful

      If all those things in the title were used to develop a website, i think the things one could accomplish are amazing. as it stands you can already use xhtml and xhmlhttprequest to do highly dynamic websites.

      "highly dynamic websites". Hmm. What specifically do you mean by this?

      i wish browsers could automatically detect what version of html the webpage requires, and generate warnings if your browser's too old to properly render, with a handy "update here" link.

      Browsers and website designers already have the ability to do this. The reason they don't is that it's a pain in the ass for the user.

    5. Re:XML + XForms + XMLHttpRequest + canvas by blacklite001 · · Score: 1

      perl -e 'use MIME::Base64; print decode_base64("U3RlcCByaWdodCB1cC4gTWFyY2guIFB1c2g u");'

    6. Re:XML + XForms + XMLHttpRequest + canvas by Anonymous Coward · · Score: 0

      Try to build a Web site that uses all of the above at once, and all you'll be likely to accomplish is getting special mention from Vince Flanders.

    7. Re:XML + XForms + XMLHttpRequest + canvas by Anonymous Coward · · Score: 0

      PS: Canvas is a new tag from apple, used to draw things into an img like component. apple's working with opera and mozilla to integrate it into their browsers.

      From what I've seen so far, Apple have invented the tag and Opera and Mozilla folk are saying: WTF are Apple doing making more evil proprietary extensions?

    8. Re:XML + XForms + XMLHttpRequest + canvas by Anonymous Coward · · Score: 0

      "Canvas? Try SVG, in a SVG aware browser."

      SVG aware browser? Last time I checked, that still involved compiling Mozilla yourself didn't it? Or downloading a proprietary thingie from Adobe or Macromedia?

    9. Re:XML + XForms + XMLHttpRequest + canvas by NoMoreNicksLeft · · Score: 1

      Plugins don't count.

      Which rules out IE.

      Mozilla has always been downloadable as a binary with SVG. It's on its way being fully merged into the tree.

  12. XTP by km790816 · · Score: 1

    I heard a bunch of stuff about XTP a while ago, but not much recently.

    Here's what Google finds:

    http://www2.ics.hawaii.edu/~blanca/nets/xtp.html
    http://www.cs.columbia.edu/~hgs/internet/xtp.html

  13. Start by learning... by Anonymous Coward · · Score: 0

    ...what the words you are using mean.

    smart caching (P2P)

    "P2P" isn't smart caching. And many common implementations actually use HTTP.

    rich metadata (XML)

    XML is an easy to parse syntax for hierarchical data. It has nothing to do with "rich metadata".

    Any ideas on how you would develop a post-HTTP/HTML internet?"

    Sure. I'd refactor XHTML to include more useful element types (e.g. <navigation>). I'd switch protocols like SMTP and formats like RFC2822 over to Unicode/XML. I'd make maintaining state something intrinsic to HTTP. But first of all, I'd beat people who use buzzwords without understanding what they mean with one gigantic, fuck-off-big cluestick.

  14. The question indicates misunderstanding by SpaceLifeForm · · Score: 2, Informative
    The Internet is not just HTTP.

    Please study TCP/IP better before you ask such a question again.

    --
    You are being MICROattacked, from various angles, in a SOFT manner.
  15. Unification by Cranx · · Score: 4, Interesting

    First, I would re-design IP to take variable-length addresses, so IPv4, IPv6 and everything else to come are all compatible and interchangable.

    Then I would re-design DNS so that you have to provide not just a domain name to resolve to an IP number, but a "resource type" such as SMTP, HTTP, etc. (similar to MX records, but generic). Each resource type would have its own associated IP number and port.

    I would unify all the protocols under a single HTTP-like protocol and make everything, FTP, SMTP, NNTP, etc. a direct extension of it.

    I would merge CGI and SMTP DATA into a single "data" mechanism that could be used with any of the protocols uniformly.

    I would clean up the protocol so it's possible to concatenate multiple lines together without ambiguity, and uniformly, so the method for multiple line headers is the same as multiple lines of data.

    I would also move SSL authentication into that protocol, rather than having it at the TCP level. This would make shared hosting simpler and would save us a LOT of IPv4 numbers.

    I would peel the skin off of anyone who suggests that XML become an integral part of that protocol. XML is wordy, wasteful, hard to read and should be a high-level choice, not a low-level foundation.

    That's not all I can think of, but that's all I'm going to bother with right now. =)

    1. Re:Unification by avalys · · Score: 2, Funny

      Why don't you cure cancer, solve the world's energy problems, and establish world peace while you're at it?

      --
      This space intentionally left blank.
    2. Re:Unification by The+Master+Control+P · · Score: 1

      "First, I would re-design IP to take variable-length addresses, so IPv4, IPv6 and everything else to come are all compatible and interchangable."

      That's been considered before, and was rejected because handling variable length addresses would place an enormous strain on routers and DNS servers.

    3. Re:Unification by Cranx · · Score: 1

      I disagree with whomever feels that way, then.

      If you kept the same model of bit-patterning the numbers (network bits high, host bits low), a single byte (or smaller bit pattern) could be added to the packet to represent the number length (00000100 for IPv4 and 00000110 for IPv6).

      Lookups could be speeded up because you could pre-hash the router lookup table by separating IP networks by length of their number. If a packet came in with an IP number length of 7, you could search for a routing solution straight out of the "size 7 table", skipping all the networks listed in the size 4, 5 and 6 tables.

      I see no fundamental barrier to something like this.

  16. REST by StupidEngineer · · Score: 2, Insightful

    Forget ditching HTTP, it's good even with its quirks. It's easy to use... And it's near perfect for applications designed with the REST philosophy in mind.

    Instead of ditching HTTP, let's ditch SOAP-RPC.

  17. Re:The question indicates misunderstanding by Anonymous Coward · · Score: 0

    I blame the /. editors for allowing such a stupid question to be posted.

  18. Flash by beholder77 · · Score: 1, Interesting

    Macromedia did a great presentation to my org on the idea of turning websites into live applications with flash. As a web developer I found the whole idea to be quite cool. Flash seems to give a heck of a lot more flexiblity and control than any HTML/Javascript hackery I've seen. The apps I saw demo'ed were even communicating with a DB server using web services.

    Flash has it's drawbacks of course (proprietary and non-indexable being pretty critical), but if opened up to a standards body, it could very well be the next HTML.

    --
    Success is as dangerous as failure, hope as hollow as fear.
    1. Re:Flash by Anonymous Coward · · Score: 0

      Try SVG. It does most of flash and is an open standard.

    2. Re:Flash by file+cabinet · · Score: 1

      What makes a site good on the internet successful? its content. imo, flash limits content capabilities. Javascript has its use... you don't overuse it and you don't under use it. Javascript and flash can be effective tools for improving usability but that is about all they are good for.

  19. Everything changes by Anonymous Coward · · Score: 0

    Thos of us who have been using the "internet" for a LONG time realize this. Everything changes.

    Gopher use to be the most popular way to get information on the internet, that has been replaced by HTTP. Who uses gopher anymore? It's still out there, it's still usable.

    Look at the history, the internet was started to exchange data with colleges. Ok great, email was pretty much it's first major use, then along came FTP, and then along came gopher, then along came HTTP.

    HTTP will never be replaced or "go away" something new may come out to be used the most.

    Personally I want a protocal to replace IP. I want verified connection lists, basically a firewall built into the protocal, to only allow verified connections and warn on others.

    I want IP privacy masking, meaning If I connect to a server, it won't record my IP, and my IP will never be seen on the public network. The phone company can "block caller ID" Why can't an ISP block "host IP?"

    The list could go on and on

  20. What about the non-HTTP Internet? by Gothmolly · · Score: 2, Informative

    You gloss over, with a sweep of your clueless wand, the rest of us who rely on the Internet for things like SMTP, SSH, Muds, Usenet, IM and VPNs.
    Please don't assume that my Internet is the same as your Intarweb.

    --
    I want to delete my account but Slashdot doesn't allow it.
  21. The comment indicates mis-reading by gray+peter · · Score: 1
    Or maybe just reading too quickly. The question posed is "...how you would develop a post-HTTP/HTML internet?". There's nothing at all wrong with the question, and in fact it most certainly does indicate that the author is distinguishing between the "Internet" and HTTP (HTTP being 1 protocol which happens to run over the Internet).

    So instead of trying to prove that you're smarter than the average \.er by playing with semantics, how 'bout putting that noggin to better use and answering the question. Clearly you are an expert on the field in question and must have some good ideas.

    My suggestion? Think of a browser-website connection as analagous to a client-server database development. Where is the latency? It's in establishing connections. What if HTTP had connection pooling? Seems like it would speed things up significantly.

    --
    May no camel spit in your yogurt soup.
    1. Re:The comment indicates mis-reading by Dachannien · · Score: 1

      So instead of trying to prove that you're smarter than the average \.er by playing with semantics,

      Actually, I think it's a fair comment. The question becomes somewhat ambiguous when the line between the World Wide Web (which is ostensibly what the article poster meant) and the Internet as a whole is blurred. Is the intention to redevelop IP and/or TCP/UDP to be better suited for the distribution of web content, to the possible detriment of other forms of Internet content? Or is the question what it appears to be to the uncareful reader, that being to arrive at a new application-level protocol suite for more efficient/effective distribution of web content without breaking the levels below?

  22. There is no problem with SMTP by Anonymous Coward · · Score: 2, Interesting

    If you think there's a problem with SMTP, then you don't understand what it's doing.

    Claiming that there's a 'spoofing' problem with SMTP is like saying there's a 'spoofing' problem with HTTP, because *anyone* can put up a website claiming to be anyone else.

    It's *NOT* a problem with the delivery protocol.

    There already is a way of preventing address spoofing with email - it's called PGP, and using it doesn't require any change of SMTP.

  23. Come up with something people want. by Captain+Rotundo · · Score: 1

    Do you remember the Net prior to HTTP and the web? if so you can easily see why "the web" took off like it did.

    You need to develop a new protocol/app that provides something people actually want without added complexity and you'll replace the web as quickly as the web replaced usenet/gopher/ftp/irc (I know it didn't replace all of those things but for the majority of uses and people it did to some degree render them obsolete)

    Of course if your new system was really a wanted thing and was open enough to become a world wide standard someone would probably just patch it into a browser in someway as to make it accessible from current websites the way flash is accessable from HTML, and then not only would people call your thing "the web" anyway they would only be using the bare minimum to get the new *feature* they wanted.

    The Web took off because it worked. You couldn't really patch images and hyperlinks onto FTP the way you can seemlessly access email/usenet/(*insert here*) over HTTP with the proper server. just wouldn't work.

  24. Oh, yeah by 0x0d0a · · Score: 4, Insightful

    Let's see:

    * The primary addressing mechansim would be content-based addressing (like SHA1 hashes of the content being addressed). We have problems with giving reliable references for things like bibliographies. We are gradually moving in this direction. P2P networks are now largely content-addressed, and bitzi.com provides one of the early centralized databases for content-based addressing.

    * We would have a global trust mechanism, where people can evaluate things and based on how well other people trust their evaluations, those people can take advantage of their evaluations. Right now, web sites have very minimal trust mechanisms (lifetime of domain, short domain names, and the generally-ignored x.509 certs). This would apply not just to domains, but be more finely-grained and apply to content beneath it.

    * The concept of creatable personas would exist. Possibly data privacy laws would end up requiring companies not to associate personas, or perhaps we would just make it extremely difficult to associate such personas. You would maintain different personas which may, if so desired, be separate. Such personas would be persistent, and could be used to evaluate how trustworthy people are -- e.g. if Mr. Torvalds joins a coding forum and makes some comments about OS design, he can simply and securely export his persona (a pubkey and some other data) from the other locations that he has been using that persona (like LKML, etc) and benefit from the reputation that has accrued to that persona. This would eliminate impersonation "this is the *real* Linus Torvalds website", etc.

    * Such trustable, persistent personas would allow for the creation of systems to allow persistent contact information to be provided ('snot that hard). This means no more dead "email addresses".

    * Domain names not be used as the primary interface mechanism to users for finding and identifying data providers. This is halfway handled already -- most people Google for things like "black sabbath" instead of looking for the official Black Sabbath website by typing out a single term. It's still possible for people to "choose their visual appearance", though, and Visa looks very much like "visa-checking.com", as long as end users have control over how domains are presented to users.

    * P2P becomes a primary transport mechanism for data -- from an economic standpoint, this means that consumers of data are responsible for subsidizing continued distribution of that content, and shifts the burden from the publisher of the content -- one step removed from consumers funding the production of their content. It solves many of the economic issues associated with data distribution. For this to happen, P2P protocols will have to be strongly abuse-resistant, even if that means a lesser degree of performance or efficiency. Many existing systems have severe flaws -- Kazaa, for instance, allows corrupted data to be spread to users, and conventional eDonkey (sans eMule extensions) does not provide any mechanism to avoid leeching, which destroys the economic benefits. Sadly, one of the few serious attempts to address the stability of the system was also from Bram Cohen of BitTorrent and abandoned -- called Mojo Nation, it used a free-market economic system to determine resource allocation, and was fairly abuse resistent. I have some efforts in this direction, but don't use a free-market model.

    * Email and instant messaging will merge to a good degree (or perhaps one will largely "take over"). Up until now, it has mostly been techncial limitations in existing software that has kept one from supplanting the others -- email provides poor delivery-time guarantees, instant messaging provides message size limitations. Email uses a strictly thread-based model, instant messaging uses a strictly linear model. Probably someone will coin a new, stupid term for the mix of the twain (like "instant mail").

    * Personas and global trust networks (not extremely limiting binary-style trust, a la PGP/GPG), as mention

    1. Re:Oh, yeah by isj · · Score: 1
      I have to add a few things on you comments about RPC.

      SOAP is a hack to ram things through HTTP

      I completely agree. It was borne out of the need to tunnel RPC through HTTP due to misguided and zealous firewall administrators, added with the then-current hype: XML. The result is a bloated protocol.

      sunrpc complicated and ugly

      It isn't. The interface specification is close to C:

      struct Foo {
      int x;
      string x&lt;&gt;;
      };
      program Boo {
      version something
      void Bar(Foo f) = 1;
      }
      and after the stubs have been generated by rpcgen you can do stuff like:
      CLIENT *client=clnt_create(host,Boo,1,"udp");
      Foo f;
      ...
      Bar(&f,&result,client);
      However, sunrpc is lacking authentication and its age is showing because it has not been developed the past few years. But the on-the-wire protocol is lighweight (XDR), the encoding/decoding routines very fast, and everything is documented. And everything Unix system supports it. You can also get it for Windows, Java, etc.

      CORBA is complicated

      Yes. The OMG (Object Management Group) unnecesarily tied it to a naming service, evangalized UML, and assumed that you had full control of the environment where it is running. It doesn't help that the IDL-to-C++ mapping is using non-standard classes (no STL). (but to be fair, OMG did not have a choice at the time). But CORBA IDL is very nice:

      module Boo {
      exception BarFailed { ... };
      interface XYZ {
      struct Foo {
      long x;
      string y;
      };
      void Bar(in Foo) raises (BarFailed);
      }
      }
      And it can be used in C++ like this:
      try {
      servant->Bar(f);
      } catch(.....BarFailed) {
      ...
      }
      But the memory ownership in the IDL-to-C++ is complicated. It does map rather nicely to Java though...


      Ideally, I would like to see an IDL like CORBA, with stub generation like rpcgen or idl, with a on-the-wire format like XDR. And without the tie-ins to other components. And forget about objects being portable across the network. Posibility of fine-grained access control would also be nice (defaulting to full access for ease of testing).

    2. Re:Oh, yeah by bofkentucky · · Score: 1

      HTML will finally fail.....

      If MS Office/OpenOffice would output CSS+XHTML+SVG, then it would be useful. Right now you have to learn a third-party client (Nvu, Moz Composer, Dreamweaver) that outputs decent (Nvu) to horrible (Frontpage 2003/FPExpress) code. I have yet to find a WYSIWYG editor that isn't brain-dead, the W3C Amaya browser/editor is decent, but slower than molasses.

      --
      09f911029d74e35bd84156c5635688c0
  25. Privacy by 0x0d0a · · Score: 1

    Personally I want a protocal to replace IP. I want verified connection lists, basically a firewall built into the protocal, to only allow verified connections and warn on others.

    IPSec? At the application level, SSL?

    I want IP privacy masking, meaning If I connect to a server, it won't record my IP, and my IP will never be seen on the public network. The phone company can "block caller ID" Why can't an ISP block "host IP?"

    Oh, it can. Lots of ISPs provide web proxies, in particular (they'd probably be tickled pink if people would regularly use proxies, and save them bandwidth costs). However, it makes it even easier for the ISP to track you. The majority of people I've talked to interested in masking are primarily interested in not having illegal activities tracked, and if anything, it's easier for police to find out an identity by going to the ISP and asking for their logs.

    There's already been a full anonymity service provided by Zero Knowledge Systems. They even provided onion-skin routing within their own network to make external traffic analysis on their network a pain in the ass. Nobody bought it -- people don't understand or want to pay for anonymity. ZKS went on to do other things.

  26. I don't like Flash by 0x0d0a · · Score: 3, Insightful

    I really hate Flash.

    I hate Flash for a lot of reasons.

    *) Lots of web designers think animation is a good idea. They tend to use it more than a user would like (especially since the "is it cool" metric, where users are asked for initial impressions of a site rather than to use the thing for a month and their feelings on usability) is wildly tilted toward novelty. Animation is almost never a good idea from a usability standpoint on a website.

    *) Lots of people doing Flash try to do lots of interface design, going so far as to bypass existing, well-tested and mature interface work with their own pseudo-widgets. They usually don't know what they're doing.

    *) Flash is slow to render.

    *) Flash is complex, and it's hard to secure the client-side Flash implementation compared to, say, a client-side HTML rendering engine.

    *) The existing Flash implementation chews up as much CPU time as it can get.

    *) Flash does not allow user-resizeablity of font sizes.

    *) Flash does not allow for meta-level control over some things, like "music playing in the background". Some websites provide a button for this. I don't want to have control if the designer choose to give me control -- I never want that software playing music if I choose to not have it do so.

    *) Flash does not allow user-configurable font colors (and for some reason, too many Flash designers seem to think that "ten-pixel high light blue text on dark blue looks great to them, so everyone should also be able to read their site as easily).

    *) Because Flash maintains internal state that is not exposed via URL, it's not possible to link to a particular state of a Flash program -- this means that you can only link to a Flash program, not a particular section of one. This is very annoying -- I can link to any webpage on a site, but sites that are simply one Flash program disallow deep linking. (I'm sure that concept gets a number of designers up somewhere near orgasm, but it drives users bananas.)

    *) The existing Flash implementation is not nearly as stable as the other code in my web browser, and takes down the web browser when it goes down.

    *) As you pointed out, I can't search for a "page" in a Flash program.

    Really, the main benefit of avoiding Flash to me is that it keeps web designers from doing a lot of things that seem appealing to them but are actually Really Bad Ideas from a user standpoint. Almost without exception, Flash has made sites I've used worse (the only positive example I can think of was either a Javascript or Flash in which the manufacturer of a hardware MP3 player demoed their interface to website users).

    I *have* seen Flash used effectively as a "vector data movie format", for which it is an admirable format -- I suspect most Slashdotters have seen the Strong Bad cartoons at some point or another. But I simply do not like it as an HTML replacement.

    1. Re:I don't like Flash by whatever3003 · · Score: 1
      absolutley ~ all those points hit the nail on the head. However not all websites are designed with the intention to communicate information, but rather create some sort of environment; an experience, but this really borders on an interactive movie of sorts.

      But if the designer gets the tickle to make your browsing experience something of a movie and not provide a (point for point) site map alternative ~ your screwed and theyve screwed themselves.

      I browse with plug-ins off personally, flash ads are a pet hate.
      *hugs Opera*

      ~ LSH

      --
      "Those who do not want to imitate anything, produce nothing." -- Salvador Dali
  27. Constant-size addresses by 0x0d0a · · Score: 1

    I see no fundamental barrier to something like this.

    No, but it is easier for a chip engineer to make optimizations with constant-length addresses.

    And, honestly, as long as we're using IPv6 addresses as actual addresses, as they're intended to be used, I just cannot see length being an issue again. (Problems will come up if some idiot tries ramming additional data into the thing, like a MAC address.)

    1. Re:Constant-size addresses by Cranx · · Score: 1

      I just cannot see length being an issue again

      I guess I this at the core of the issue for me. I can imagine not being to imagine right now needing anymore than what IPv6 allows.

      It's not just a matter of having enough addresses for all the hosts we may have, there's an allocation issue. Every network is going to watch giant swaths of address space, so the ceiling that IPv6 provides is much lower than the sum of hosts that can fit in it. Lots of addresses are going to go to waste in one network while other networks starve for addresses.

      I just think "fixed" length addresses is going to bite humans in the butt again one day.

  28. Re:The question indicates misunderstanding by Anonymous Coward · · Score: 0

    Yeah, you're basically an idiot.

  29. Critique by 0x0d0a · · Score: 1

    First, I would re-design IP to take variable-length addresses, so IPv4, IPv6 and everything else to come are all compatible and interchangable.

    As I go into detail in in my post futher in this thread, I don't think that this is a good idea. It makes optimizations harder, and IPv6 should never need to be extended as long as it is properly used. Furthermore, unless a new protocol uses the *exact same* routing mechanisms and *only* changes address length, compatibility gets broken anyway. I think the gain may not be what you're hoping for -- you couldn't just slap IPX on an IP network, for example.

    I do think that the fact that the BSD sockets API was designed to deal so poorly with long addresses is a real disaster, though. The *endpoints* of a connection-oriented address generally only care about the length of the address.

    Then I would re-design DNS so that you have to provide not just a domain name to resolve to an IP number, but a "resource type" such as SMTP, HTTP, etc. (similar to MX records, but generic). Each resource type would have its own associated IP number and port.

    SMTP/HTTP are not resource types. They are protocols.

    You could have a "WWW" resource type, I guess.

    This is already done, with well-known ports -- the advantage of using well-known ports is that the additional network traffic and latency is avoided.

    I would unify all the protocols under a single HTTP-like protocol and make everything, FTP, SMTP, NNTP, etc. a direct extension of it.

    Hmm. I dunno. I guess you could wrap these in HTTP, but where's the benefit of doing so? You can't really reuse any significant functionality and you'd slightly increase complexity (since everything would need to be linked to an HTTP library).

    I would merge CGI and SMTP DATA into a single "data" mechanism that could be used with any of the protocols uniformly.

    Hmm. I'm not quite sure what the benefit to doing so would be.

    I would clean up the protocol so it's possible to concatenate multiple lines together without ambiguity, and uniformly, so the method for multiple line headers is the same as multiple lines of data.

    Wouldn't this just impose overhead on protocols that use an eight-bit-clean and non-line-oriented interface, like FTP DATA?

    I would also move SSL authentication into that protocol, rather than having it at the TCP level.

    Not sure what you mean ... I guess you'd make every protocol SSL-tunneled? I mean, I think it's a good idea (more plaintext services becoming encrypted == better), but you can already do that, and the main reason that people don't is because of (now archaic) patent issues and because of CPU load. Also, SSL adds overhead, not just on the CPU, but in latency.

    This would make shared hosting simpler and would save us a LOT of IPv4 numbers.

    I don't see why this would be the case.

    I would peel the skin off of anyone who suggests that XML become an integral part of that protocol. XML is wordy, wasteful, hard to read and should be a high-level choice, not a low-level foundation.

    Thank you. I've seen one utterly idiotic proposal for doing something like what you're proposing and ramming everything through XML, which is ridiculous.

    XML may be the most overused and oversold format ever. It's neat for a certain set of tasks, but it has no benefit for many things that it is used for.

    1. Re:Critique by DLWormwood · · Score: 1
      SMTP/HTTP are not resource types. They are protocols.
      You could have a "WWW" resource type, I guess.
      This is already done, with well-known ports -- the advantage of using well-known ports is that the additional network traffic and latency is avoided.

      I think you misread what the original poster meant. He wanted a given DNS name to resolve to completely different IPs depending on intended use. For example, "tempuri.org" could resolved to one IP if being accessed in "Web" domain, while the DNS server would return a different address if being used for a "Database" domain. This could have potentially reduced name disputes, if organizations didn't have the pig-headed need to lay claim to any name that merely resembles or contains their valued "trademarks" and "servicemarks."

      Relying on a port number would require either server (or a third server, mostly likely) to dispatch requests to a single IP, then route traffic to other IPs based on intended use. He wanted the shift the burden of traffic differentiation up a level.

      Not that I agree with this. It would put too much of a burden on the DNS system, only to make the lives of select few domain admins easier.

      --
      Those who complain about affect & effect on /. should be disemvoweled
    2. Re:Critique by Anonymous Coward · · Score: 0

      > "P2P" isn't smart caching.

      Almost all existing P2P filesharing-oriented servents reshare downloaded files. From that standpoint, the statement is not unreasonable.

      It is as long as clients download from other clients indiscriminately, which is what the majority, if not all, do. HTTP already provides caching - and it's caching that works well, as you almost always get resources from a computer that is closer to you on the network. Typical P2P clients retrive resources from all over the place, leading to not only slower downloads, but unnecessary transfers.

      Gnutella uses an HTTP-like protocol, which is as close as I can think of.

      It is actually HTTP. Not "like" HTTP. HTTP.

      > I'd refactor XHTML to include more useful element types (e.g. <navigation>).

      I disagree. The current behavior of navigation controls operates on a meta-level -- the operator never gets control over what they do. In the past, giving website designers over control of web browser controls

      I think you misunderstood. When I mentioned a <navigation> element type, I was thinking of a container for navbars and the like, not a replacement for browser controls. For instance, browsers could automatically provide a "skip to navigation" function and hide the navigation when printing documents out.

      I could see a *new* set of interface controls "recommended-back", "recommended-forward", "recommended-up", "recommended-help", etc being introduced, but not overloading the existing controls.

      HTML 4.01 already provides this. Look into the <link> element type.

      > I'd switch protocols like SMTP and formats like RFC2822 over to Unicode/XML.

      Why do you dislike the existing MIME-encoded method of handling Unicode data?

      It's not MIME per se, it's the irregular mixture of ASCII + whitespace significance in the protocol (e.g. EHLO ...), followed by a different syntax for ASCII metadata (the RFC 2822 headers), and then a completely arbitrary format following. Don't forget ASCII-armored PGP sigs. Throw in the fact that implementations can and do vary quite widely, and it turns into a tangled mess you just want to go away.

      Chuck it all through XML, you don't have to worry about encodings, you don't have to worry about parsing, all you have to do is pull out the addressing etc with a couple of xpath statements. The rest is handled by the XML parser you use, and will be consistent across all implementations. No ASCII armoring of digital signatures required, that can be handled in a standard way by XML signature. It's much more regular.

      > I'd make maintaining state something intrinsic to HTTP.

      Why? Demands for state maintenance vary widely across HTTP-using systems

      With all due respect, I disagree. The basic mechanisms in use today don't vary much at all, but cookies are a kludge with all sorts of special cases. Netscape's original design was decent for its time, but hasn't been significantly improved upon since its introduction.

      What if you need five megs of state (different mechanism from cookies), or need to have the client aware of the content of the state?

      You can mantain state on the server side. All you need is a unique ID. If the client needs to be aware of the content, you do what you normally do and provide it with the content.

      There are a lot of systems that can't afford to maintain state, like embedded systems.

      I disagree. Where are the HTTP clients that can't store a few KB in memory during a website visit?

    3. Re:Critique by Cranx · · Score: 1

      SMTP/HTTP are not resource types. They are protocols.

      You could have a "WWW" resource type, I guess.


      My idea was to change DNS to allow IP numbers to be returned for arbitrary identifiers the way MX works, but more generically; not "resource types" per se. You can store numbers for HTTP, WWW, MAIL, TELNET, PORN, whatever you want.

      This is already done, with well-known ports -- the advantage of using well-known ports is that the additional network traffic and latency is avoided.

      Well-known ports are very problematic in that it assumes there are a fixed-number of protocols to assign standard ports to, and it assumes everyone is cooperating. By allowing the arbitrary identifiers to determine the port, you can drop "well known ports" altogether.

      Hmm. I dunno. I guess you could wrap these in HTTP, but where's the benefit of doing so? You can't really reuse any significant functionality and you'd slightly increase complexity (since everything would need to be linked to an HTTP library).

      Lots of reasons, but the two main ones I can think of are: combined code base (as quality of code increases, it increases for all protocols) and it would make it easier to implement protocols and work with them. All the different internet protocols, while very similar, have their own little quirks.

      Also, any time you added some desired new feature to the protocol, it is immediately available to all the descendant protocols.

      (DATA MERGE) Hmm. I'm not quite sure what the benefit to doing so would be.

      Same as above; uniformity and a central code base simply makes it easier to implement, debug, etc. It's just a code quality, efficiency thing.

      I would clean up the protocol so it's possible to concatenate multiple lines together without ambiguity, and uniformly, so the method for multiple line headers is the same as multiple lines of data.

      Wouldn't this just impose overhead on protocols that use an eight-bit-clean and non-line-oriented interface, like FTP DATA?


      I would actually keep the data channel FTP has and make that part of the protocol; it's very efficient. Although perhaps I would make it part of the new data scheme, where you would provide metadata through the protocol, and deliver the data either through the protocol or, optionally, through an 8-bit data connection.

      Not sure what you mean ... I guess you'd make every protocol SSL-tunneled? I mean, I think it's a good idea (more plaintext services becoming encrypted == better), but you can already do that, and the main reason that people don't is because of (now archaic) patent issues and because of CPU load. Also, SSL adds overhead, not just on the CPU, but in latency.

      This would make shared hosting simpler and would save us a LOT of IPv4 numbers.

      I don't see why this would be the case.


      Hmm...hard to explain briefly. Virtual hosting is done at the HTTP layer; when a connection is made, browsers request resources by providing a domain name and resource. A web server can "switch" off to the appropriate virtual host using the domain name given. SSL is negotiated before it gets to HTTP, and the domain name is not part of the negotiation. Certificates are matched by both domain name and IP address, but there's no way to hand off a different certificate based on the domain name because SSL negotiation doesn't use domain name information during the handshake. That doesn't happen until the HTTP layer. So you need a unique IP address for each virtual web host which has an SSL certificate. If you could move SSL negotiation into the protocol layer and out of TCP, you could switch off based on the domain name given. You could, actually, switch off based on lots of different criteria, but that's how I think most hosters would do it.

      XML may be the most overused and oversold format ever. It's neat for a certain set of tasks, but it has no benefit for many things that it is used for.

    4. Re:Critique by Cranx · · Score: 1

      You understood my DNS idea, I just wanted to add to your comments.

      Relying on a port number would require either server (or a third server, mostly likely) to dispatch requests to a single IP, then route traffic to other IPs based on intended use. He wanted the shift the burden of traffic differentiation up a level.

      This isn't how it would work. When a client resolves a domain name, it would provide a domain name and "use ID" and would get, in return, an IP address and port and would go directly to the IP/port.

      It would put too much of a burden on the DNS system, only to make the lives of select few domain admins easier.

      It wouldn't be any more difficult than what all mail clients have to do right now to determine the MX record for a domain name. All software would have to provide that "use ID" and then connect to an IP/port, rather than how things are done now where there is no "use ID" and the port is assumed. It wouldn't burden anyone very much.

    5. Re:Critique by boneshintai · · Score: 1

      Well-known ports are very problematic in that it assumes there are a fixed-number of protocols to assign standard ports to, and it assumes everyone is cooperating. By allowing the arbitrary identifiers to determine the port, you can drop "well known ports" altogether.

      No, you don't. You simply move the problem from "well-known ports" to "well-known labels".

      Lots of reasons, but the two main ones I can think of are: combined code base (as quality of code increases, it increases for all protocols) and it would make it easier to implement protocols and work with them. All the different internet protocols, while very similar, have their own little quirks.

      Not all "internet protocols" are sufficiently similar to be wedged into a single, request-response-oriented protocol. Consider X11 (6000 + display #) or VNC (5800 + display #, 5900 + display #), for instance. Or IRC (6667), to pick something a little closer to the canonical set of 'core' (text-based) internet protocols. All of these protocols have been designed with a specific task in mind, and not one of them maps well to HTTP's request-response structure: they're all asynchronous.

    6. Re:Critique by Cranx · · Score: 1
      Well-known ports are very problematic in that it assumes there are a fixed-number of protocols to assign standard ports to, and it assumes everyone is cooperating. By allowing the arbitrary identifiers to determine the port, you can drop "well known ports" altogether.
      No, you don't. You simply move the problem from "well-known ports" to "well-known labels".
      If they move to "well-known labels", isn't that "dropping well-known ports?" Ports and labels are two different animals. Well-known ports are a finite number of numbers, and labels are a nearly infinite number of text IDs. I wasn't advocating eliminating "well-known" anything, but re-designing DNS to have generic MX-like "use IDs" that return IP+port.
      Not all "internet protocols" are sufficiently similar to be wedged into a single, request-response-oriented protocol. Consider X11 (6000 + display #) or VNC (5800 + display #, 5900 + display #), for instance. Or IRC (6667), to pick something a little closer to the canonical set of 'core' (text-based) internet protocols. All of these protocols have been designed with a specific task in mind, and not one of them maps well to HTTP's request-response structure: they're all asynchronous.
      Which is why I only mentioned unifying protocols similar to HTTP, such as SMTP, FTP, NNTP, etc. Not all protocols could be unified that way, although you could perhaps initiate connects through a unified protocol that then handed-off to tighter, more efficient protocols.
    7. Re:Critique by 0x0d0a · · Score: 1

      It is as long as clients download from other clients indiscriminately, which is what the majority, if not all, do. HTTP already provides caching - and it's caching that works well, as you almost always get resources from a computer that is closer to you on the network. Typical P2P clients retrive resources from all over the place, leading to not only slower downloads, but unnecessary transfers.

      I guess it comes down to what you define as "smart caching".

      It certainly caches, the question is whether it's considered to be smart or not. I guess you do not.

      It is actually HTTP. Not "like" HTTP. HTTP.

      Try sending "GET /" to your favorite Gnutella client, and see whether you get "file not found" or "syntax not understood".

      HTML 4.01 already provides this. Look into the <link> element type.

      I'm aware of this; this is currently provided in browsers by overloading existing controls instead of adding new "recommended navigation" controls.

      No ASCII armoring of digital signatures required, that can be handled in a standard way by XML signature.

      I don't know why there's any reason to armor signatures at all, frankly, outside of archaic mail clients -- the modern format is to slap the signature in as an attachment, which means that it'd be just as easy to base64-encode the attached signature as it would a .gif that's being sent.

      I mean, there *is* some parsing code involved, and theoretically one could rework headers and whatnot to be in XML, but there is huge amounts of deployed software that uses the existing parsing code, and it's not as if an XML-based storage of them would be significantly better in any way that I can see. If anything, I view base64 encoding as more regular than that encoding XML does (IIRC, "With all due respect, I disagree. The basic mechanisms in use today don't vary much at all, but cookies are a kludge with all sorts of special cases. Netscape's original design was decent for its time, but hasn't been significantly improved upon since its introduction.

      Okay, I guess I should say ... what issues do you have with cookies being used to store state?

      I disagree. Where are the HTTP clients that can't store a few KB in memory during a website visit?

      Embedded devices. Sure, each one isn't expensive -- you're talking maybe a few cents of additional cost to add some more onboard RAM -- but it is per-unit, which sucks.

    8. Re:Critique by funky+womble · · Score: 1
      This isn't how it would work. When a client resolves a domain name, it would provide a domain name and "use ID" and would get, in return, an IP address and port and would go directly to the IP/port.
      We've already got one of those: rfc2782... It's in use already, but mainly in-site as part of DNS service discovery (rendezvous/zeroconf) and ActiveDirectory - it's not supported by e.g. standard web browsers, email clients etc.

      There are problems with using site-variable port numbers: it makes identifying traffic types a little tricky, having implications for e.g. traffic prioritisation, blocking malicious/unwanted traffic. As such it's probably more useful on a network within one administrative domain than on the internet. There's no corresponding method for looking up service types given a port number and IP address (e.g. additional records to in-addr.arpa) to help out, possibly because it would be rather difficult to place any degree of trust in that data anyway: you can't really have an unknown DNS server controlling your firewall policy. This is a bit of a different thing than MX records, where port numbers can't be defined.

      It wouldn't be any more difficult than what all mail clients have to do right now to determine the MX record for a domain name. All software would have to provide that "use ID" and then connect to an IP/port, rather than how things are done now where there is no "use ID" and the port is assumed. It wouldn't burden anyone very much.
      For protocols already in common use, it would add delays and/or place more load on DNS in the changeover period (which is likely to be protracted). Other problems too. Someone types in example.com - what do you need to lookup? www.example.com A, example.com A, example.com SRV? What about sites where these are different - which address do you connect to? Then, do you send them off all at once (reduces delays in the common instance but has a tendency to increase delays overall)? How long do you wait for replies? - they could come back out of order. Or do you send them serially, which will add some delay to the majority of lookups, but is on-the-whole friendlier to the networks and DNS servers.

      A web browser vendor is unlikely to be particularly happy to add and default-enable a feature that adds to the time taken to resolve the majority of names - but realistically, you won't have very high takeup on the server side until most clients threaten not to connect unless it's done. For newer protocols it's simpler, since there often need be no fallback to A record, and indeed SRV records are being used on some newer protocols. Still, the traffic identification problem is still there.

      Adding this to HTTP is a bit different than the case with adding MX to email: many more people will notice the increased time to resolve the name. With email, the delay is in the background, after the message has left the end-user's mail client and enters the transport system: it's almost invisible. With interactive requests such as HTTP, any delay is immediately obvious.

      Since it doesn't really buy you anything you don't get from an address-translating device on the IP address of example.com, and given the complexities and problems it adds, who's going to use it?

    9. Re:Critique by Cranx · · Score: 1

      There are problems with using site-variable port numbers: it makes identifying traffic types a little tricky

      This IS a real problem with the idea, but I think it could be worked out with some creative thinking.

      Someone types in example.com - what do you need to lookup? www.example.com A, example.com A, example.com SRV? What about sites where these are different - which address do you connect to? Then, do you send them off all at once (reduces delays in the common instance but has a tendency to increase delays overall)? How long do you wait for replies? - they could come back out of order. Or do you send them serially, which will add some delay to the majority of lookups, but is on-the-whole friendlier to the networks and DNS servers.

      You can still map IPs to any canonical name you want; "use IDs" wouldn't change that. You just need to provide the "use ID" to get the IP for the server you want to connect to.

      One nice thing about "use IDs" though is you can STOP using canonical names like www.domainname.com to map IPs to protocols, and use them only for mapping to hosts. You would only have domainname.com and a "use ID" of HTTP. You would also have "use IDs" for other protocols used with the domain name, and you could return a different IP+port for each of them.

      A web browser vendor is unlikely to be particularly happy to add and default-enable a feature that adds to the time taken to resolve the majority of names - but realistically, you won't have very high takeup on the server side until most clients threaten not to connect unless it's done. For newer protocols it's simpler, since there often need be no fallback to A record, and indeed SRV records are being used on some newer protocols. Still, the traffic identification problem is still there.

      Remember, this is a re-design. I wouldn't take into account any difficulty they have converting their software to the new way of doing things. We're designing to "get it right."

      Adding this to HTTP is a bit different than the case with adding MX to email: many more people will notice the increased time to resolve the name. With email, the delay is in the background, after the message has left the end-user's mail client and enters the transport system: it's almost invisible. With interactive requests such as HTTP, any delay is immediately obvious.

      Why would it take more time? The only difference is that you're giving the DNS server a "use ID" and it looks up the domain name, then finds the IP+port which is mapped to that ID. That shouldn't take any noticeable additional time.

      Since it doesn't really buy you anything you don't get from an address-translating device on the IP address of example.com, and given the complexities and problems it adds, who's going to use it?

      Everyone, it's how things would be done in the re-design; you would have no choice.

    10. Re:Critique by Anonymous Coward · · Score: 0

      Try sending "GET /" to your favorite Gnutella client

      That hasn't been a correct HTTP request since HTTP 0.9. Try actually reading the protocol specification. It uses HTTP.

      > HTML 4.01 already provides this. Look into the <link> element type.

      I'm aware of this; this is currently provided in browsers by overloading existing controls instead of adding new "recommended navigation" controls.

      Not in any browser I know of; it's usually provided as a supplementary toolbar.

      I mean, there *is* some parsing code involved, and theoretically one could rework headers and whatnot to be in XML, but there is huge amounts of deployed software that uses the existing parsing code

      Err... the whole point of this article is what we would do differently if we had a brand-new Internet to work on. Legacy code isn't an issue.

      what issues do you have with cookies being used to store state?

      The main issues I have are that it is far too tightly coupled with DNS and that it is something that web developers cannot rely upon or even not rely upon. What I mean is, you can't rely on it, as people switch off cookies, you have to go to annoying lengths to figure out if your cookies are being ignored, your cookies can be ignored on a case-by-case basis, making any previous determinations invalid, cookies can be "read-only" throwing systems completely out of whack, and so on.

    11. Re:Critique by 0x0d0a · · Score: 1

      That hasn't been a correct HTTP request since HTTP 0.9.

      Which all newer HTTP specifications require backwards compatibility with.

      Try actually reading the protocol specification. It uses HTTP.

      Try actually using the servents. The document does not reflect how the GnutellaNet operates. Given the way the GDF operates (mostly trying to formalize existing practices rather than coming up with new protocol specs from scratch), it is unlikely that it ever will.

      Not in any browser I know of; it's usually provided as a supplementary toolbar.

      Okay, you've piqued my interest. Which browser have you used that provides separate buttons specially for use of this tag, be it in a separate toolbar or what? I don't see any such controls in Firefox, Konqueror, or Mozilla, which is all that I have installed on my system.

      Err... the whole point of this article is what we would do differently if we had a brand-new Internet to work on. Legacy code isn't an issue.

      But we'd need to provide benefits for that rewrite.

      The main issues I have are that it is far too tightly coupled with DNS and that it is something that web developers cannot rely upon or even not rely upon.

      The issues you state are privacy issues, and deliberately chosen. The fact that websites other than the granting one generally may not retrieve state from the browser (I assume that's what you mean by "tied to DNS") is pretty much necessary to avoid data leakage about your browsing habits to other websites. I feel quite strongly that administrators of one website should not be able to monitor what users do off of their website. The other issue, that cookies may not be available, falls into the same category. I used to deny cookies and whitelist particular sites, because I did not like the privacy implications (a webmaster has no need to see me as anything other than a series of requests -- he can tack a CGI argument representing my ID onto the end of an URL, if he feels it necessary to maintain server-side state, like a shopping cart). I currently just blacklist some sites, and convert all permanent cookies into session cookies, which keeps me reasonably happy and makes it reasonably difficult for folks like DoubleClick to associate my different identities together. Should I have to give up this privacy because a webmaster feels that it is necessary to use cookies instead of embedded identifiers in URLs?

    12. Re:Critique by Anonymous Coward · · Score: 0

      > That hasn't been a correct HTTP request since HTTP 0.9.

      Which all newer HTTP specifications require backwards compatibility with.

      That's definitely untrue. The spec writers deliberately state that they won't address backwards compatibility.

      > Try actually reading the protocol specification. It uses HTTP.

      Try actually using the servents. The document does not reflect how the GnutellaNet operates.

      Okay, I just fired up gtk-gnutella, opened a connection and issued an HTTP request by hand. It responded with a correct HTTP response conforming to RFC 2616. The software and the specifications appear to agree with me, not you.

      Which browser have you used that provides separate buttons specially for use of this tag, be it in a separate toolbar or what? I don't see any such controls in Firefox, Konqueror, or Mozilla, which is all that I have installed on my system.

      It's an element type, not a tag. Mozilla calls it the "site navigation toolbar", and you can switch it on in the View menu. I think Firefox only supports it when you install the extension. Opera calls it the "navigation bar" and you can also switch it on in the View menu. I don't think Konqueror supports it.

      But you stated "this is currently provided in browsers by overloading existing controls" - which browsers do this?

      The issues you state are privacy issues, and deliberately chosen.

      Oh, I know that. But they are solved in a very simplistic manner that causes lots of problems and isn't very robust. For instance, you state that one domain can't retrieve cookies that another domain set for privacy reasons. Of course, I understand that. But why can't a website supply a list of domains that are permitted to do so? The current types of workarounds employed by the likes of Passport are numerous, very fragile, and should not be necessary.

      The other issue, that cookies may not be available, falls into the same category. I used to deny cookies and whitelist particular sites, because I did not like the privacy implications (a webmaster has no need to see me as anything other than a series of requests -- he can tack a CGI argument representing my ID onto the end of an URL, if he feels it necessary to maintain server-side state, like a shopping cart).

      This kind of hack is exactly why current cookies are a problem.

      For instance, what happens when you click a link that takes you to an external website? That ID shows up in their logs. You want to restrict it to a certain IP address? Sorry, clients and IPs don't have a one-to-one relationship, that doesn't work.

      I'm not saying you should give up your privacy, just that if they are disabled, there should be a real way of finding that out, instead of the *nasty* kludges currently in use.

      Furthermore, what difference does it make to you whether your session is being tracked by in-URL ID or in-cookie ID? Your session is still being tracked, either way.

  30. Don't be nasty by 0x0d0a · · Score: 3, Insightful

    You know exactly what he meant, and simply couldn't pass up the opportunity to bash him to demonstrate your maximum geekiness.

    Please study TCP/IP better before you ask such a question again.

    You know what I've found? Professors and people that generally understand a subject are generally not assholes towards people that make an error in it (maybe if they're frusterated) -- they try to correct errors. It's the kind of people that just got their MSCE who feel the need to demonstrate how badass they are by insulting others.

    The question was not unreasonably formatted. The most-frequently used application-level protocol on the Internet is HTTP. The only other protocol directly used much by almost all Internet users are the mail-related protocols. The main way that people retrieve data and interact with servers on the 'Net is HTTP. Often, the HTTP-associated well-known ports 80 and 443 are the only non-firewalled outbound ports allowed to Internet-connected desktop machines. You're using a Web browser to read this at the moment. Other protocols are increasingly tunneled over HTTP. Saying that we have an "HTTP Internet" is entirely reasonable.

    1. Re:Don't be nasty by Anonymous Coward · · Score: 0

      The main way that people retrieve data and interact with servers on the 'Net is HTTP. Often, the HTTP-associated well-known ports 80 and 443 are the only non-firewalled outbound ports allowed to Internet-connected desktop machines. You're using a Web browser to read this at the moment. Other protocols are increasingly tunneled over HTTP. Saying that we have an "HTTP Internet" is entirely reasonable.

      not so much.... if you wanted to extend your logic to its full, and obviously wrong, conclusion, then it would be more correct to say that we have a "cdp Internet", as I would be willing to bet that that is what most of the traffic is.. ... well... that and RIP/OSPF/(insert favorite routing protocol here).... course, adding all that up, it would probably be more correct (thinking both physically and uh... protocol-wise) to say we have a "Cisco Internet"... which is probably rather close to the truth...

      The internet is more than the sum of it's protocols ;-) .... anywhore, insofar as the really important hardware goes, HTTP is barely a protocol, if you don't like the way it works, simply design a new protocol. Honestly, there's only what, a dozen or so distinct messages that can be sent by HTTP? GET, POST, and various error numbers.

      HTML is where the *REAL* complication comes into play... and I would agree with just about anyone who tried to tell me it's inherently broken. Competing browsers that all have slightly different methods of adhering to (or creating) "standards" ... bah... HTML is the real target of the submitters question... leave HTTP out of it.

    2. Re:Don't be nasty by Anonymous Coward · · Score: 0
      if you wanted to extend your logic to its full, and obviously wrong, conclusion, then it would be more correct to say that we have a "cdp Internet", as I would be willing to bet that that is what most of the traffic is.

      Jeez, that's a bad bet. Are you really suggesting that, on a (say) gigabit link, when full, five hundred megabits are consumed by CDP?

      well... that and RIP/OSPF/(insert favorite routing protocol here).

      50% overhead for routing protocols? You *must* be shrooming. I'd hazard a guess that the majority of the BGP-running routers out there couldn't handle routing table updates pouring into them at multi-gigabit speeds, and many not even at 50 megabits.

  31. Critique by 0x0d0a · · Score: 1

    "P2P" isn't smart caching.

    Almost all existing P2P filesharing-oriented servents reshare downloaded files. From that standpoint, the statement is not unreasonable.

    And many common implementations actually use HTTP.

    Not that I'm aware of. Gnutella uses an HTTP-like protocol, which is as close as I can think of.

    Sure. I'd refactor XHTML to include more useful element types (e.g. ).

    I disagree. The current behavior of navigation controls operates on a meta-level -- the operator never gets control over what they do. In the past, giving website designers over control of web browser controls has widely resulted in poor decisions being made -- IE has taken a "web designer has control" approach, Mozilla a "user has control". Plus, it only takes a small percentage of poor usage or abuse of controls ("back" keeping people on the same ad, for instance) to make a control not worth it.

    I could see a *new* set of interface controls "recommended-back", "recommended-forward", "recommended-up", "recommended-help", etc being introduced, but not overloading the existing controls.

    I'd switch protocols like SMTP and formats like RFC2822 over to Unicode/XML.

    Why do you dislike the existing MIME-encoded method of handling Unicode data?

    What would be the benefit of XML usage?

    I'd make maintaining state something intrinsic to HTTP.

    Why? Demands for state maintenance vary widely across HTTP-using systems -- web browsers can be pigeonholed, sure, but cookies are already there and work nicely. What if you need five megs of state (different mechanism from cookies), or need to have the client aware of the content of the state? There are a lot of systems that can't afford to maintain state, like embedded systems.

    But first of all, I'd beat people who use buzzwords without understanding what they mean with one gigantic, fuck-off-big cluestick.

    I really don't think that he was all that awful, really.

  32. ADA and citation issues by 0x0d0a · · Score: 1

    Use of such a mechanism is not compliant with the Americans with Disabilities Act. The proper, legal approach is to embed WAVE files of the text being read, and verbal descriptions of all graphics.

    Furthermore, citation is a significant problem on the Internet (for example, used resources can go away if cited by URLs). We need to solve the citation problem -- the appropriate approach is to embed all files used as sources of content for the existing file (which would, in turn, contain copies of all *their* sources, etc).

    1. Re:ADA and citation issues by Tumbleweed · · Score: 1

      Actually, to further ADA compliance, it should be full video (with captioning), that way not only do the blind get access, but the deaf as well. Yeah, this is sounding good.

      Time to apply for ISO?

    2. Re:ADA and citation issues by 0x0d0a · · Score: 1

      Time to apply for ISO?

      Oh, surely not quite yet. The ISO committes are good at being certain not to avoid including anything that someone might want, but they aren't perfect, and we need to be sure to avoid missing crucial features.

      Actually, to further ADA compliance, it should be full video (with captioning), that way not only do the blind get access, but the deaf as well.

      This is a good example. We were ready to go to ISO with this. But there are more -- what about dual-language law in states bordering Mexico? We should also include Spanish subtitles. And to only include Spanish and English would not fully serve the needs of, for example, Swahili speakers -- surely they deserve their own subtitles.

      Consider the problem of dealing with revisions -- only a few file formats allow revision-tracking. Clearly, we should not exclude such a useful feature. Each file should also contain deltas from all previous revisions of that file -- much like a file in a CVS repository.

    3. Re:ADA and citation issues by SirTalon42 · · Score: 1

      "Consider the problem of dealing with revisions -- only a few file formats allow revision-tracking. Clearly, we should not exclude such a useful feature. Each file should also contain deltas from all previous revisions of that file -- much like a file in a CVS repository."

      What about data corruption? Thats a huge problem these days. We have 3 copies of the documents imbedded inside itself, that way if one is corrupted, you have 2 more chances. Also each version will also have 3 copies. Whats the point of a revision control system if all the copies have been corrupted?

      Another major threat is misdirrection. I propose all documents are signed. Using keys equal to the square of the size of the document (with a minimum of 1099511627776k keys). Also ever access attempt should be forced to factor a large prime number to prevent mass flooding, AND every access attempt should be given one of those pictures w/ text in it to prevent bots from just swarming over sites downloading the content. The minimum security should have at least 50 characters in the picture to authenticate.

      Of course this will only work for 56k users, people with broadband and up will be required much high protection.

    4. Re:ADA and citation issues by Mysticalfruit · · Score: 1

      Well, if your going todo it right, you should go mil-spec and have it contain a whole set of manuals explaining how the thing works all the way down to an entire print out of the source code with full sensible comments.

      Also, since they might have a machine that's not completely compatiable, includes should be schematics and instrucutions for making their own machine altair style.

      --
      Yes Francis, the world has gone crazy.
  33. So why criticize the article author? by 0x0d0a · · Score: 1

    That is correct. In spite of the similar names, they have almost nothing to do with each other, beyond the fact that html is often delivered via http.

    What you are saying is not contrary to what the article author said in the first place.

    1. Re:So why criticize the article author? by dougmc · · Score: 1

      I was not criticizing the article (or question) author for saying http/html. I was asking why he felt they needed to go away at all.

  34. XML by jesboat · · Score: 1

    All documents should be XML (or some other data discription language.) CSS's sucessor should be used to assign elements presentation. Possibly by converting them to other element trees.

    The XML should be psuedo-standardized, so browsers would be able to recognize TV-Listing-ML/Search-Result-ML and present it in an alternate form, if you wanted, with headers and footers added (to make advertisers happy, unfortonately necessary for a new Web protocol to suceed.)

    1. Re:XML by hsoft · · Score: 1

      I agree with you, but on this point:

      CSS's sucessor should be used to assign elements presentation. Possibly by converting them to other element trees.

      I would like to point that XSLT already exists, and it is not a replacement to CSS, but a complement. XSLT = data format CSS = style

      --
      perception is reality
  35. HTTP is fine by billcopc · · Score: 2, Interesting

    HTTP is fine, a stream-transfer protocol can only do so much.

    HTML however feels rather clunky now with all these bloated half-supported standards tacked onto it. We still don't have consistent rendering across the board, and it's still a pain in the posterior to publish anything. CSS, that wretched hammer of aborted salvation, is yet another limited hack.

    We used to have HTML glitches and workarounds, now we have CSS glitches and workarounds; design compromises in a system that was supposed to break the boundaries of visual layout. Well here we are 5 years later and the graphics artists are still using Flash instead of CSS... I even collapsed and learned the dark art of PHP-generated Flash to do some things that just weren't worth the trouble in CSS. Content is king, but we have 256mb video cards and we want to use them!

    --
    -Billco, Fnarg.com
  36. It's been tried by ehvoy · · Score: 1

    It's been tried but it requires Windows 2000 Professional or better, Microsoft Internet Explorer 6, IIS 6, and SQL Server 2000 or better. Version 2 requires Microsoft Longhorn.

  37. No XML please. by TheOnlyCoolTim · · Score: 1

    I think the nicest thing I can say about XML is that sometimes it isn't blatantly inferior to any other solution. Sometimes.

    Tim

    --
    Omnia vestra castrorum habetur nobis.
  38. Pro Jax! by Graymalkin · · Score: 1

    I don't really see a need to wholly move away from HTTP and HTML. They're both extremely flexible and will likely be very useful for many years to come. They're both relatively basic systems that aren't terribly difficult to implement with a modicum of programming talent. They're also extremely lightweight which makes it much easier to use them on equipment with very little power of memory.

    Because HTML is fairly verbose and well formed HTML is regularly laid out it isn't terribly difficult to parse. Computers with a fraction of the processing power and memory available to modern PCs can easily handle HTML files. Well formed HTML and especially XHTML documents are actually very useful because they can not only be easily parse but also easily handled by a variety of output devices. What is doubly useful about HTML is it can also point in an implementation neutral means to other documents. This is what hypertext is all about, text that can describe itself to anyone who is listening.

    HTTP as a protocol is extremely useful because it is stateless and as such has very low overhead. Because of this it is very easy to implement and maintain. These features also make the protocol very robust and extensible. It can handle binary and textual data equally well and even tunnel other types of protocols inside of itself. These features that don't need to be replaced or necessarily enhanced.

    --
    I'm a loner Dottie, a Rebel.
  39. The future by DocUK · · Score: 1

    I think the future of the internet will be using technology such as the BitTorrent idea, to take advantage of the high client to server ratio to distribute content more effectively. This would truly make the web (the World Wide Web that is) interconnected.

  40. XML-Enabled Telnet by maxchaote · · Score: 1

    Doesn't sound like much, but the biggest improvement over HTTP is merely a persistent connection.

    My ideal vision of the future of the internet is basically a version of Apache that supports persistent connections, so I can go back to the days of BBS, only with graphics and streaming video added. Or would we call them MMOBBSes now?

  41. Some limitations of HTTP and HTML by j1m+5n0w · · Score: 1

    People accept the limitations of html and http because its currently the best thing out there. It does have problems, though:

    Scalability. A server that isn't well provisioned can easily be slashdotted or DDOSed into oblivion. Not everyone can afford a DS3 or akamai. This problem could be solved through replication.

    Document identity. A document's location is a permanent part of its file name. If a document moves, its contents are the same, yet its name changes. Sometimes, its nice to be able to retrieve a document knowing only its name, hash or, md5sum. This how many distributed hash table-based p2p systems, like chord, tapestry, freenet, and CAN work.

    Lack of Backlinks. There's no way to ask "what points to this page?" without crawling the whole web. (I know google allows backlink querries, but they're not necessarily up to date.)

    Lack of meaning in links. I would like to be able to associate adjectives and weights with my links, as a hint to search engines. As in "a href=http://slashdot.org relevance=1.0, accuracy=-0.5, novelty=0.8". I think this sort of thing is supposed to be addressed by the semantic web.

    -jim

  42. but HTTP is not concurrent! by mabhatter654 · · Score: 1
    HTTP's fundamental flaw for web applilcations is that it doesn't have concurrent sessions like telnet. That means no matter what you do, in the end all the things like Javascript, XML, Sessions and the such will never be more than ugly hacks around the basic problem that HTTP doesn't keep track of the state of what's going on between machines.

    For a web applications solution [HTTP is a great protocol that should't go anywhere!], I'd propose a new protocol much like IBM's 3730 or 5250 terminal sessions... as a starting point. The idea is that the machines should negotiate a connection and then maintain it's integrity while the app is running. Nowdays, most people have reliable enough connections to support this and having a persistant client-server connection would solve many of the programming issues involved. I'd add a laundry list of new features starting with the ability to peer-to-peer browsers, co-browsing, as well as all the latest security implentations. The main difference is that the machines have to have some element of trust between them...you would be cedeing control of your "browser" to whatever server you were on ...that would require heavy-duty java-style sandboxing of your system and between systems you might be linked to.

    The only way to get a good version would be to start as OSS...otherwise it would be immediately hijacked in any "committee". Like I said, a starting point would be the old terminal sessions..perhaps bring them up-to-date by allowing the stream to include XHTML markup and a DOM instead of strict screen coordinates! Ideally, it'd be "just a plugin" for mozilla or firefox. One key point I would try to make is to make it as radically different from HTTP/HTML we have now as possible! because it would start out OSS It should be "hobbled" in some respect to force people not to use it for general browsing purposes. That way we could start to push multi-protocol sites rather than just shoving everything into HTTP or it's successor.