Questions on query string redaction

[jeanbisutti]

The specifications:

https://github.com/open-telemetry/semantic-conventions/blob/main/docs/http/http-spans.md

1. Should the percent-encoded parameter names be ignored?
   For example the percent-encoding of sig is %73%69%67. Should%73%69%67 be ignored?

2. Should the parameter names be case-sensitive?
   For example, should x-goog-signature be ignored?

[arminru]

cc @open-telemetry/semconv-http-approvers

[joaopgrassi]

My understanding is that the values of the keys are to be redacted, not the keys themselves.

[jeanbisutti]

Let me clarify the first question from an example.

With percent-encoding, sig becomes %73%69%67.

If the url contains the %73%69%67 parameter name, has the parameter value of this parameter to be redacted?

For the second question, if the url contains the SIG parameter name, , has the parameter value of this parameter to be redacted?

[joaopgrassi]

I see.

My opinion on casing would be to be case-insensitive.

As for the url-encoded of keys and if their values should be redacted, probably trickier but without giving too much thought I'd say its value should also be redacted.

[trask]

my understanding is that query string parameter keys are case-sensitive