[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: A media type for the machine-readable copyright format ?

Charles Plessy <plessy@debian.org> writes:

> I have the following questions about my draft (see below).

>  - Is a charset parameter helpful in the cases a program would fall back
>  on text/plain, or is it useless or confusiong as the machine-readable
>  copyright spec already requires files to be encoded in UTF-8 ?

I would leave charset in.  A lot of MIME software will look at that for
any text/* type and will expect 7-bit ASCII if it's not present.

>  - Would an optional parameter "revision" be useful, or is this premature ?

I think it's a good idea.  You may get some pushback on encoding that in
the subtype instead of in a parameter, but I think a parameter is the
right approach.

>  - About security, the discussion on debian-devel leads me to think that
>  there is no need to worry.  I included a short comment suggesting that
>  field values should be sanitised as usual.  Does anybody see other
>  potential security issues ?

No, your security considerations seem reasonable to me.

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: