- From: Sairus Patel <sppatel@adobe.com>
- Date: Wed, 17 Sep 2014 17:43:42 +0000
- To: "robert@ocallahan.org" <robert@ocallahan.org>, Behdad Esfahbod <behdad@google.com>
- CC: "public-svgopentype@w3.org" <public-svgopentype@w3.org>
- Message-ID: <D03F0C61.3878F%sppatel@adobe.com>
I think solid security best practices suggest we also add the uncompressed length of each SVGZ doc (see Adobe's original proposal I pointed to earlier in the thread). So it looks like we need an 'SVG ' table with version 1 (current OFF proposal is version 0), with an optional set of uncompressed lengths (perhaps a particular "uncompressed length" can be set to 0 to indicate that its corresponding SVG doc is not compressed). Since such a version 1 table using SVGZ would not be compatible with version 0 engines (Mozilla's), there would have to be some language indicating version 0 is deprecated in some way or that engines may reject an SVGZ with version 0 due to security reasons. This way, Behdad and others can continue to use SVGZ with version 0. Sairus From: Robert O'Callahan <robert@ocallahan.org<mailto:robert@ocallahan.org>> Reply-To: Robert O'Callahan <robert@ocallahan.org<mailto:robert@ocallahan.org>> Date: Tuesday, September 16, 2014 at 2:07 PM To: Behdad Esfahbod <behdad@google.com<mailto:behdad@google.com>> Cc: Sairus Patel <sppatel@adobe.com<mailto:sppatel@adobe.com>>, "public-svgopentype@w3.org<mailto:public-svgopentype@w3.org>" <public-svgopentype@w3.org<mailto:public-svgopentype@w3.org>> Subject: Re: Compressed SVG? (and a couple of announcements) On Wed, Sep 17, 2014 at 3:30 AM, Behdad Esfahbod <behdad@google.com<mailto:behdad@google.com>> wrote: As a concrete proposal, I like to suggest updating the spec to allow SVGZ where SVG is currently accepted, with no other changes. WDYT? That sounds OK I guess. Rob -- oIo otoeololo oyooouo otohoaoto oaonoyooonoeo owohooo oioso oaonogoroyo owoiotoho oao oboroootohoeoro oooro osoiosotoeoro owoiololo oboeo osouobojoeocoto otooo ojouodogomoeonoto.o oAogoaoiono,o oaonoyooonoeo owohooo osoaoyoso otooo oao oboroootohoeoro oooro osoiosotoeoro,o o'oRoaocoao,o'o oioso oaonosowoeoroaoboloeo otooo otohoeo ocooouoroto.o oAonodo oaonoyooonoeo owohooo osoaoyoso,o o'oYooouo ofooooolo!o'o owoiololo oboeo oiono odoaonogoeoro ooofo otohoeo ofoioroeo ooofo ohoeololo.
Received on Wednesday, 17 September 2014 17:44:13 UTC