[websec] MIME sniffing test suite? Is there one?

Larry Masinter <masinter@adobe.com> Mon, 24 October 2011 06:12 UTC

Return-Path: <masinter@adobe.com>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 596DE21F8C1F for <websec@ietfa.amsl.com>; Sun, 23 Oct 2011 23:12:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.574
X-Spam-Level:
X-Spam-Status: No, score=-106.574 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZSUYXNZC5zlV for <websec@ietfa.amsl.com>; Sun, 23 Oct 2011 23:12:44 -0700 (PDT)
Received: from exprod6og111.obsmtp.com (exprod6og111.obsmtp.com [64.18.1.27]) by ietfa.amsl.com (Postfix) with ESMTP id 0362F21F8AF2 for <websec@ietf.org>; Sun, 23 Oct 2011 23:12:43 -0700 (PDT)
Received: from outbound-smtp-2.corp.adobe.com ([193.104.215.16]) by exprod6ob111.postini.com ([64.18.5.12]) with SMTP; Sun, 23 Oct 2011 23:12:44 PDT
Received: from inner-relay-4.eur.adobe.com (inner-relay-4b [10.128.4.237]) by outbound-smtp-2.corp.adobe.com (8.12.10/8.12.10) with ESMTP id p9O6CeBb014778 for <websec@ietf.org>; Sun, 23 Oct 2011 23:12:41 -0700 (PDT)
Received: from nahub01.corp.adobe.com (nahub01.corp.adobe.com [10.8.189.97]) by inner-relay-4.eur.adobe.com (8.12.10/8.12.9) with ESMTP id p9O6CdLV018451 for <websec@ietf.org>; Sun, 23 Oct 2011 23:12:40 -0700 (PDT)
Received: from nambxv01a.corp.adobe.com ([10.8.189.95]) by nahub01.corp.adobe.com ([10.8.189.97]) with mapi; Sun, 23 Oct 2011 23:12:39 -0700
From: Larry Masinter <masinter@adobe.com>
To: "websec@ietf.org" <websec@ietf.org>
Date: Sun, 23 Oct 2011 23:12:37 -0700
Thread-Topic: MIME sniffing test suite? Is there one?
Thread-Index: AcySE+2oqo4DdAroTrKwcrMRm2XPDQ==
Message-ID: <C68CB012D9182D408CED7B884F441D4D0605EFA3CE@nambxv01a.corp.adobe.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [websec] MIME sniffing test suite? Is there one?
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Oct 2011 06:12:45 -0000

I think it would be really helpful to have a test suite for MIME sniffing where we can test out what browsers do and various cases where sniffing *should* improve the experience, as well as test cases where sniffing makes things worse, if there are some.

Probably focusing on the test suite would help resolve some of the issues.

I'm willing to help populate the test suite but perhaps someone could to put up the infrastructure?

Larry