[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Security Considerations for Link Extensions
- To: Atom Syntax <atom-syntax@xxxxxxx>
- Subject: Security Considerations for Link Extensions
- From: James Snell <jasnell@xxxxxxxxx>
- Date: Tue, 25 May 2010 12:07:37 -0700
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=4oUUsNLueCgQ0euLBjT/8nxmoK7ivn5cpdtCJD8kDHU=; b=dyff3RCs6G6kYjCe3xydLIlBViDY47hR2JIkJY1i5NFOi/B4FwJPjnQjNV5szZP/mP /zap8riSsgP0X0y3080+fyvSXy9K1niaKIJCtokLW74q7ob8gV3RNy8KMyK9rED0DOvm E0ZCplc8aYbFSau16dCzcrZCxaARgF/GFTdyA=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=FQ0bTKxsus5kfsagwukhNB/zkexcqQCDFIRpRt6vhrA/HfMnDPi0tt3Jto4GafZ2tW goE6zaNrZ5ujwfegdqHpV3TNXbjhutwVEMpd4VSGiynmJdgj7tK36FuvqG1mJoddccOm OXUuipY6arukl3l3gcR/AdNrLrbpP02mBn9qA=
- List-archive: <http://www.imc.org/atom-syntax/mail-archive/>
- List-id: <atom-syntax.imc.org>
- List-unsubscribe: <mailto:atom-syntax-request@imc.org?body=unsubscribe>
- Sender: owner-atom-syntax@xxxxxxxxxxxx
Ok, so I'm working on finishing up the basic link extensions draft.
The Security Considerations are currently TBD. I wanted to take a
moment to solicit input on appropriate security considerations for
these optional, advisory extension attributes.
One in particular... hash digest are often used as a simple means of
verifying that data has not been modified while in transit.. hash
digests contained within an atom:link cannot be used for that purpose.
Rather, the hash attribute is used to express the state of the linked
resource at a given point in time so that a feed consumer can detect
whether or not the resource has been modified since the link was
created.
Other than that, there really shouldn't be any further security
concerns with regards to the link extensions.. but I welcome being
corrected on that :-) Thoughts?
--
- James Snell
http://www.snellspace.com
jasnell@xxxxxxxxx