[rfc-i] draft-iab-html-rfc-03.txt

Paul Hoffman paul.hoffman at vpnc.org
Fri Jul 1 10:02:19 PDT 2016

On 1 Jul 2016, at 8:06, Russ Housley wrote:

> The security considerations say:
>    Since RFCs are sometimes exchanged outside the normal Web 
> sandboxing
>    mechanism (such as using the "rsync" program to a mirror site) then
>    loaded from a local file, more care must be taken with the HTML 
> than
>    is ordinary on the web.
> Is that care already factored into the specification?  If so, please 
> say that.  If not, what additional care is needed?

It is not factored in. It is impossible to say what additional care 
would be needed because we cannot anticipate what errors in browsers 
would cause problems with random HTML.

--Paul Hoffman

More information about the rfc-interest mailing list