Re: draft-duerst-iana-namespace-00.txt

[Julian Reschke <julian.reschke at gmx.de>]

Tony Finch wrote:
> The latest RISKS gibes an example of the magnitude of the problem of
> unwanted traffic caused by using URLs instead of URNs for protocol
> identification URIs. Perhaps the security considerations section of the
> draft should describe some ways of mitigating it?
> 
> http://catless.ncl.ac.uk/Risks/25.07.html#subj9
> 
> Tony.

I think this is a misunderstanding.

The URI of a DTD is needed to fetch the DTD. The W3C suffers from 
clients that refetch the DTD all the time.

Contrary to that, XML processors do not resolve namespace URIs, they are 
purely used as identifiers.

BR, Julian

_______________________________________________
IETF mailing list
IETF at ietf.org
https://www.ietf.org/mailman/listinfo/ietf