W3C home > Mailing lists > Public > www-tag@w3.org > October 2006

RE: [metadataInURI-31] New draft of metadata in URI finding includes section on malicious metadata

From: Rice, Ed (ProCurve) <ed.rice@hp.com>
Date: Sun, 1 Oct 2006 22:26:16 -0500
Message-ID: <C91FD2C6C8E31445A2C55A27DFF493B37406A0@G3W0072.americas.hpqcorp.net>
To: <noah_mendelsohn@us.ibm.com>, <www-tag@w3.org>
Cc: "Williams, Stuart (HP Labs, Bristol)" <skw@hp.com>

Hi Noah,

I reviewed the document and am happy with the explanation.  Thanks for
adding that section.

I'd say its good to publish :)

-----Original Message-----
From: www-tag-request@w3.org [mailto:www-tag-request@w3.org] On Behalf
Of noah_mendelsohn@us.ibm.com
Sent: Sunday, October 01, 2006 8:49 AM
To: www-tag@w3.org
Cc: Williams, Stuart (HP Labs, Bristol)
Subject: [metadataInURI-31] New draft of metadata in URI finding
includes section on malicious metadata

I am pleased to announce the availability of a new draft of the finding:

"The use of Metadata in URIs" [1,2,3,].  The principle change is the
addition of a section [4] on malicious metadata, using an example of a
site serving a URI ending in ".jpeg" with a representation that is a
malicious executable.  There are a few other changes, primarily as
promised in response to comments made by Stuart Williams and David
[5].  While it would probably be prudent for at least one other TAG
member to do an end-to-end check before we publish, I think most
reviewers will do fine if they focus on the new section at [4], and
perhaps quickly review my response to Stuart at [5].

Although comments on TAG findings are always welcome, I should point out
that the TAG has as early as June signaled its intention to publish this
one, albeit now with the new section if it meets with approval.  Clearly
review of of the recent changes is in order before we publish,  but
there is a good chance that comments on other aspects of the finding
will be queued for consideration should we later wish to republish.  In
short, I think it's about time to ship this.

Thank you!


[1] http://www.w3.org/2001/tag/doc/metaDataInURI-31
[2] http://www.w3.org/2001/tag/doc/metaDataInURI-31-20061001.html
[3] http://www.w3.org/2001/tag/doc/metaDataInURI-31-20061001.xml
[5] http://lists.w3.org/Archives/Public/www-tag/2006Sep/0110.html

Noah Mendelsohn
IBM Corporation
One Rogers Street
Cambridge, MA 02142
Received on Monday, 2 October 2006 03:26:31 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:56:13 UTC