Re: Where to put VTIMEZONE and VALARM?

[Damon Chaplin <damon@xxxxxxxxxx>]

Eric Busboom wrote:

> How about having the sender do the re-write rather than the client? That
> is, the sender would use a TZID that is unique to the sender, basically
> attaching a UID to every TZID that it uses? The sender should guarantee
> that every TZID name that it sends out is associated with only one
> timezone definition, and that that name is unique to it.
> 
> I imagine that this would result in TZIDs that are correlated to:
>         A Timezone
>         A Vendor
>         A Product
>         A version of the timezone
> 
> So, suppose, for instance, that a TZNAME was:
> 
>         //Gnome/Evolution/1/America/Los_Angeles
> 
> The recipient can be assured that whenever it gets this name, the name
> applies to a single version of a particular timezone, as it is defined by
> the sender.  If the sender makes any changes to the definition, it
> should use a new TZNAME.

But what happens if a malicious app sends out VTIMEZONEs with the
same TZIDs as a proper client app? It could mess up your timezone
database.


I still think the simplest thing to do is just rename clashing
TZIDs, so you get "America/Los_Angeles", "America/Los_Angeles(2)",
"America/Los_Angeles(3)", etc.

Its fairly easy to do and works with existing iCalendar apps.
And it should only happen when you import iCalendar data or get
an iTIP request.

Damon