Add "Security Considerations"

dret / I-D

Internet Drafts I've authored or contributed to.

17 stars 13 forks source link

Add "Security Considerations" #82

Closed dret closed 4 years ago

dret commented 7 years ago

currently just a placeholder in the draft; needs to be completed before last call. probably some language about the fact that by definition, out-of-line links should be treated with care because they are not part of the resource they link.

dret commented 4 years ago

link to RFC8288 (only consideration that are not header-specific), also talk about:

context issues (interpretation of relative URIs)
trust issues around links (3rd party links scenario)

dret commented 4 years ago

@hvdsomp, can you please briefly look at the security considerations and give feedback? if they're good enough, next on the list is #126 which depends a bit on the security considerations. thanks.

dret commented 4 years ago

done.