[rfc-i] draft-iab-html-rfc-03.txt

[paul.hoffman at vpnc.org (Paul Hoffman)]

On 1 Jul 2016, at 8:06, Russ Housley wrote:

> The security considerations say:
>
>    Since RFCs are sometimes exchanged outside the normal Web 
> sandboxing
>    mechanism (such as using the "rsync" program to a mirror site) then
>    loaded from a local file, more care must be taken with the HTML 
> than
>    is ordinary on the web.
>
> Is that care already factored into the specification?  If so, please 
> say that.  If not, what additional care is needed?

It is not factored in. It is impossible to say what additional care 
would be needed because we cannot anticipate what errors in browsers 
would cause problems with random HTML.

--Paul Hoffman