[Bug 22909] Needs non-normative Security Considerations section

https://www.w3.org/Bugs/Public/show_bug.cgi?id=22909

--- Comment #2 from Glenn Adams <glenn@skynav.com> ---
Under X.1, suggest adding the following:

"In the context of using certain Key Systems, it is possible that
Initialization Data, Key Data, or Media Data may contain active content
[SECURITY GLOSSARY]. If a User Agent performs the interpretation or execution
of such active content, then it should consider the threats, risks, and
safeguards described in [ACTIVE CONTENT]."

[SECURITY GLOSSARY] Shirey, R., Internet Security Glossary, Version 2, RFC
4949, August 2007, IETF.

[ACTIVE CONTENT] Jansen, W, et al., Guidelines on Active Content and Mobile
Code, Special Publication 800-28, Version 2, 2008, National Institute of
Standards and Technology (NIST).

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Tuesday, 13 August 2013 17:08:48 UTC