[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Last and final consensus pronouncement



The atom:author element name is embarrassing. Make it atom:creator.
There were no objections to that.

wunder

--On May 26, 2005 10:26:54 AM -0700 Tim Bray <Tim.Bray@xxxxxxx> wrote:

> 
> <co-chair-mode>
> On behalf of Paul and myself:  This is it.  The initial phase of the  WG's work in designing the Atompub data format specification is  finished over, pining for the fjords, etc.  Please everyone reach  around and pat yourselves on the back, I think the community will  generally view this as a fine piece of work.
> 
> Stand by for announcements on buckling down on Atom-Protocol.
> 
> Note that this is a pronouncement, not a "call for further debate".   Here are the next steps:
> 
> 1. Editors take the assembled changes and produce a format-09 I-D.   Sooner is better.
> 2. They post the I-D.
> 3. Paul sends Scott a message, cc'ing the WG, that we're done.
> 4. At this point there may be objections from the WG.  We decide  whether to accept the objections and pull the draft back, or tell the  objectors they'll have to pursue the appeal process.
> 5. The IESG process takes over at this point and we'll eventually  hear back from them.
> 
> Last two draft changes:
> 
> 1. PaceAtomIdDOS
> 
> We think that the WG has consensus that it is of benefit to add a  warning to section 8 "Security Considerations".  The language from  PaceAtomIdDos is mostly OK, except that the late suggestion of  talking about spoofing instead of DOS seemed to get general support.   I reworded slightly.  We'll leave it up to the editors to decide  whether a new subsection of section 8 is required.
> 
> "Atom Processors should be aware of the potential for spoofing  attacks where the attacker publishes an atom:entry with the atom:id  value of an entry from another feed, perhaps with a falsified  atom:source element duplicating the atom:id of the other feed. Atom  Processors which, for example, suppress display of duplicate entries  by displaying only one entry with a particular atom:id value, perhaps  by selecting the one with the latest atom:updated value, might also  take steps to determine
whether the entries originated from the same  publisher before considering them to be duplicates."
> 
> 2. PaceAtom10
> 
> http://www.intertwingly.net/wiki/pie/PaceAtom10
> 
> We just missed this one in the previous consensus call; seeing lots  of +1's and no pushback, it's accepted.
> </co-chair-mode>
> 
> 
> 



--
Walter Underwood
Principal Architect, Verity