[websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt

Internet-Drafts@ietf.org Sun, 08 May 2011 00:45 UTC

Return-Path: <Internet-Drafts@ietf.org>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8A87E06A3; Sat, 7 May 2011 17:45:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.574
X-Spam-Level:
X-Spam-Status: No, score=-102.574 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hXmWszwnhaok; Sat, 7 May 2011 17:45:02 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0265EE06A6; Sat, 7 May 2011 17:45:02 -0700 (PDT)
MIME-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 3.53
Message-ID: <20110508004502.3883.40670.idtracker@ietfa.amsl.com>
Date: Sat, 07 May 2011 17:45:02 -0700
Cc: websec@ietf.org
Subject: [websec] I-D Action:draft-ietf-websec-mime-sniff-03.txt
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 May 2011 00:45:02 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Web Security Working Group of the IETF.


	Title           : Media Type Sniffing
	Author(s)       : A. Barth, I. Hickson
	Filename        : draft-ietf-websec-mime-sniff-03.txt
	Pages           : 24
	Date            : 2011-05-07

Many web servers supply incorrect Content-Type header fields with
their HTTP responses.  In order to be compatible with these servers,
user agents consider the content of HTTP responses as well as the
Content-Type header fields when determining the effective media type
of the response.  This document describes an algorithm for
determining the effective media type of HTTP responses that balances
security and compatibility considerations.

Please send feedback on this draft to websec@ietf.org.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-03.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.
ftp://ftp.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-03.txt"><ftp://ftp.ietf.org/internet-drafts/draft-ietf-websec-mime-sniff-03.txt>