[websec] draft-ietf-websec-mime-sniff-02

Adam Barth <ietf@adambarth.com> Sat, 05 February 2011 01:56 UTC

Return-Path: <ietf@adambarth.com>
X-Original-To: websec@core3.amsl.com
Delivered-To: websec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D9B93A68FD for <websec@core3.amsl.com>; Fri, 4 Feb 2011 17:56:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.696
X-Spam-Level:
X-Spam-Status: No, score=-3.696 tagged_above=-999 required=5 tests=[AWL=-0.719, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G085KCb7wVWz for <websec@core3.amsl.com>; Fri, 4 Feb 2011 17:56:25 -0800 (PST)
Received: from mail-vw0-f44.google.com (mail-vw0-f44.google.com [209.85.212.44]) by core3.amsl.com (Postfix) with ESMTP id 5A5C53A69B0 for <websec@ietf.org>; Fri, 4 Feb 2011 17:56:25 -0800 (PST)
Received: by vws7 with SMTP id 7so2019523vws.31 for <websec@ietf.org>; Fri, 04 Feb 2011 17:59:51 -0800 (PST)
Received: by 10.220.91.212 with SMTP id o20mr3065580vcm.140.1296871191244; Fri, 04 Feb 2011 17:59:51 -0800 (PST)
Received: from mail-vw0-f44.google.com (mail-vw0-f44.google.com [209.85.212.44]) by mx.google.com with ESMTPS id c8sm612277vcc.9.2011.02.04.17.59.50 (version=SSLv3 cipher=RC4-MD5); Fri, 04 Feb 2011 17:59:50 -0800 (PST)
Received: by vws7 with SMTP id 7so2019513vws.31 for <websec@ietf.org>; Fri, 04 Feb 2011 17:59:49 -0800 (PST)
Received: by 10.220.182.71 with SMTP id cb7mr3504062vcb.73.1296871189412; Fri, 04 Feb 2011 17:59:49 -0800 (PST)
MIME-Version: 1.0
Received: by 10.220.165.212 with HTTP; Fri, 4 Feb 2011 17:59:19 -0800 (PST)
From: Adam Barth <ietf@adambarth.com>
Date: Fri, 04 Feb 2011 17:59:19 -0800
Message-ID: <AANLkTi=Sop4F4OBWAmBGLsr=ZN8p1xC8w19WF--YU_tA@mail.gmail.com>
To: websec <websec@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Subject: [websec] draft-ietf-websec-mime-sniff-02
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Feb 2011 01:56:26 -0000

I've uploaded a new draft of the media type sniffing document:

http://www.ietf.org/id/draft-ietf-websec-mime-sniff-02.txt

This version includes support for H.264 and contains a hook for
sniffing for video specifically.  (Although now that I look at it, I
realize that I've goofed it up and forgotten to include Ogg---will fix
in next version.)

The H.264 signature is somewhat more complex than the other
signatures, but it appears to be necessary due to the structure of
H.264 video files.  Please let me know that that signature will cause
any trouble for you.

Thanks,
Adam