Disallow URL inclusion?

[matejcik]

The more I think about it, the more I think it's a bad idea to allow inclusion of ABI or other information by (non-file) URL.

For one, this requires that the consumer has an Internet connection.

For two, and more importantly, content hosted outside the specfile* can change or disappear at any time. It is not possible to, e.g., sign over the spec, if it includes an external resource. Even if you add a checksum of the content at the time of creation, if the resource disappears, you can no longer reconstruct its contents and the spec becomes worthless.

*) what's a good term for the individual JSON descriptions? spec? specfile? descriptor?