Re: Start parameter in MIFFY/MTOM

Herve,

I wonder what are the usecases for putting the root part elsewhere than
the first part (necessitating the use of the start parameter). After
all, we expect that the SOAP part is relatively small and that is the
part that contains the instruction on what to do with the incoming
message (including the attachments, of course).

I can't imagine (at the moment) an application that would blindly accept
a potentially large attachment before receiving the part that requires
mustUnderstand checks, for example. It looks like a very good target of
denial-of-service attacks.

Best regards,

                   Jacek Kopecky

                   Systinet Corporation
                   http://www.systinet.com/






On Wed, 2004-01-14 at 13:03, Herve Ruellan wrote:
> Dear all,
> 
> I would like to make sure that all MIFFY or MTOM implementations 
> supporting Multipart/Related packages have to support the "Start" parameter.
>  From reading between the lines of the last MIFFY spec [1], I think this 
> is the case, but I would prefer if it was explicitely said in section 2.1.
> 
> Best regards,
> 
> Hervé.
> 
> [1] http://lists.w3.org/Archives/Public/xml-dist-app/2004Jan/0023.html.
>

Received on Wednesday, 14 January 2004 10:20:49 UTC