Re: Last Call: draft-nottingham-site-meta (Defining Well-Known URIs) to Proposed Standard
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Last Call: draft-nottingham-site-meta (Defining Well-Known URIs) to Proposed Standard



> Do people find this interesting? To specify it, we'd just need to describe a
> format (e.g., a space-separated list of tokens).
>
>> Depending on how the server is configured a query to
>> http://example.com/.well-known/ might return the list of files in that
>> directory. It might be nice to actually encourage that. The only downside I
>> see is that it might make it easier for an attacker to find out what you run
>> and know what to exploit, but without that the attacker could still play 20
>> questions and find out.

I like it.  I understand Eran's issue, but I don't see the point in
waiting before making the specification.

Barry

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.