[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Question about section 9.3 of APP



> From: owner-atom-protocol@xxxxxxxxxxxx 
> [mailto:owner-atom-protocol@xxxxxxxxxxxx] On Behalf Of Yaron Goland
> Sent: 20 June, 2007 20:24
> To: atom-protocol@xxxxxxx
> Subject: Question about section 9.3 of APP
> 
> 
> Section 9.3 of APP that states:
>    To avoid unintentional loss of data when editing Member Entries or
>    Media Link Entries, Atom Protocol clients SHOULD preserve all
>    metadata that has not been intentionally modified, 
> including unknown
>    foreign markup as defined in Section 6 of [RFC4287].
> 
> My understanding of this text is that if a client encounters 
> content it does not understand in a GET then when the client 
> updates the entry with a PUT the client is expected to 
> include in the PUT's content information that the client did 
> not understand.

Something just occurred to me while reading the above quote from 
section 9.3  I was wondering whether preserving foreign markup 
could be used as a form of denial of service attack on an APP 
server where repeated PUT's increase the size of entries, such
that all disk space on the server is used up.  Anybody have any
thoughts on this?


Andy.