Re: Security Considerations for Link Extensions

[Colm Divilly <colm.divilly@xxxxxxxxxx>]

James Snell wrote:
> Ok, so I'm working on finishing up the basic link extensions draft.
> The Security Considerations are currently TBD. I wanted to take a
> moment to solicit input on appropriate security considerations for
> these optional, advisory extension attributes.
>
> One in particular... hash digest are often used as a simple means of
> verifying that data has not been modified while in transit.. hash
> digests contained within an atom:link cannot be used for that purpose.
> Rather, the hash attribute is used to express the state of the linked
> resource at a given point in time so that a feed consumer can detect
> whether or not the resource has been modified since the link was
> created.
>
>   
That sounds more like an Entity Tag (which are often but not always 
generated using hashes),  so  do we  really mean an Entity Tag or is 
there a reason to restrict this to just using hashes ?
> Other than that, there really shouldn't be any further security
> concerns with regards to the link extensions.. but I welcome being
> corrected on that :-) Thoughts?
>
>