Re: [Cellar] Security considerations: recursive elements

Reto Kromer <lists@reto.ch> Wed, 17 January 2018 21:09 UTC

Return-Path: <lists@reto.ch>
X-Original-To: cellar@ietfa.amsl.com
Delivered-To: cellar@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93DFA12D84D for <cellar@ietfa.amsl.com>; Wed, 17 Jan 2018 13:09:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level:
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f47K_NKobDnJ for <cellar@ietfa.amsl.com>; Wed, 17 Jan 2018 13:09:27 -0800 (PST)
Received: from smtp-sh2.infomaniak.ch (smtp-sh2.infomaniak.ch [128.65.195.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EC0512D82E for <cellar@ietf.org>; Wed, 17 Jan 2018 13:09:27 -0800 (PST)
Received: from smtp7.infomaniak.ch (smtp7.infomaniak.ch [83.166.132.30]) by smtp-sh.infomaniak.ch (8.14.5/8.14.5) with ESMTP id w0HL9PQn012703 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for <cellar@ietf.org>; Wed, 17 Jan 2018 22:09:25 +0100
Received: from Castor.local (84-73-238-96.dclient.hispeed.ch [84.73.238.96]) (authenticated bits=0) by smtp7.infomaniak.ch (8.14.5/8.14.5) with ESMTP id w0HL9O4t057972 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for <cellar@ietf.org>; Wed, 17 Jan 2018 22:09:25 +0100
Date: Wed, 17 Jan 2018 22:09:25 +0100
From: Reto Kromer <lists@reto.ch>
To: cellar@ietf.org
X-Priority: 3
In-Reply-To: <ef896210-ed4b-7afe-5e4f-bd99298acb51@mediaarea.net>
Message-ID: <r470Ps-10116i-70DE1309AF7F4C55AEAD4DB4F8F01ABC@Castor.local>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Mailsmith 2.4 (470)
X-Antivirus: Dr.Web (R) for Unix mail servers drweb plugin ver.6.0.2.8
X-Antivirus-Code: 0x100000
Archived-At: <https://mailarchive.ietf.org/arch/msg/cellar/axM6z9NNisfB2un4U9h7CG3LqMo>
Subject: Re: [Cellar] Security considerations: recursive elements
X-BeenThere: cellar@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Codec Encoding for LossLess Archiving and Realtime transmission <cellar.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cellar>, <mailto:cellar-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cellar/>
List-Post: <mailto:cellar@ietf.org>
List-Help: <mailto:cellar-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cellar>, <mailto:cellar-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jan 2018 21:09:29 -0000

Jerome Martinez wrote:

>I am not in favor of writing a number, because there is no good
>number to provide,

Me neither.

>I hesitate in writing such kind of text in a "parser" section
>instead of security section, like the JSON RFC does.

I would suggest in the parser section.

Best regards, Reto