[websec] I-D Action:draft-ietf-websec-mime-sniff-02.txt

Internet-Drafts@ietf.org Sat, 05 February 2011 02:00 UTC

Return-Path: <Internet-Drafts@ietf.org>
X-Original-To: websec@core3.amsl.com
Delivered-To: websec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9B1123A6A3D; Fri, 4 Feb 2011 18:00:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yyeE64qpIC6z; Fri, 4 Feb 2011 18:00:01 -0800 (PST)
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9367E3A659C; Fri, 4 Feb 2011 18:00:01 -0800 (PST)
MIME-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 3.12
Message-ID: <20110205020001.14052.17588.idtracker@localhost>
Date: Fri, 04 Feb 2011 18:00:01 -0800
Cc: websec@ietf.org
Subject: [websec] I-D Action:draft-ietf-websec-mime-sniff-02.txt
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Feb 2011 02:00:04 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Web Security Working Group of the IETF.


	Title           : Media Type Sniffing
	Author(s)       : A. Barth, I. Hickson
	Filename        : draft-ietf-websec-mime-sniff-02.txt
	Pages           : 23
	Date            : 2011-02-04

Many web servers supply incorrect Content-Type header fields with
their HTTP responses.  In order to be compatible with these servers,
user agents consider the content of HTTP responses as well as the
Content-Type header fields when determining the effective media type
of the response.  This document describes an algorithm for
determining the effective media type of HTTP responses that balances
security and compatibility considerations.

Please send feedback on this draft to websec@ietf.org.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-02.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.
ftp://ftp.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-02.txt"><ftp://ftp.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-02.txt>