W3C home > Mailing lists > Public > xml-dist-app@w3.org > January 2004

Re: Start parameter in MIFFY/MTOM

From: Jacek Kopecky <jacek.kopecky@systinet.com>
Date: Wed, 14 Jan 2004 16:20:45 +0100
To: Herve Ruellan <herve.ruellan@crf.canon.fr>
Cc: XMLP Dist App <xml-dist-app@w3.org>
Message-Id: <1074093644.2268.95.camel@localhost>


I wonder what are the usecases for putting the root part elsewhere than
the first part (necessitating the use of the start parameter). After
all, we expect that the SOAP part is relatively small and that is the
part that contains the instruction on what to do with the incoming
message (including the attachments, of course).

I can't imagine (at the moment) an application that would blindly accept
a potentially large attachment before receiving the part that requires
mustUnderstand checks, for example. It looks like a very good target of
denial-of-service attacks.

Best regards,

                   Jacek Kopecky

                   Systinet Corporation

On Wed, 2004-01-14 at 13:03, Herve Ruellan wrote:
> Dear all,
> I would like to make sure that all MIFFY or MTOM implementations 
> supporting Multipart/Related packages have to support the "Start" parameter.
>  From reading between the lines of the last MIFFY spec [1], I think this 
> is the case, but I would prefer if it was explicitely said in section 2.1.
> Best regards,
> Hervé.
> [1] http://lists.w3.org/Archives/Public/xml-dist-app/2004Jan/0023.html.
Received on Wednesday, 14 January 2004 10:20:49 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 22:01:25 UTC