Re: [integrity] What should we hash? from Boris Zbarsky on 2014-03-13 (public-webappsec@w3.org from March 2014)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Thu, 13 Mar 2014 01:54:40 -0400
To: Devdatta Akhawe <dev.akhawe@gmail.com>, Mark Nottingham <mnot@mnot.net>
CC: "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <53214820.3000504@mit.edu>

On 3/13/14 1:37 AM, Devdatta Akhawe wrote:
> Does "representation" or "the message payload before content codings
> are applied." sound right to others? Boris?

I can't speak to the right terminology, but I believe that's the right 
concept.

One interesting issue here is cases in which the browser does NOT plan 
to undo the content-encoding, though.  This typically comes up in "save 
as" scenarios, so may not be relevant here?

-Boris

Received on Thursday, 13 March 2014 05:55:11 UTC