Re: [EXTERNAL] Feedback request on "printer-icons" and "printer-more-info-manufacturer" in PWG IPP-Infra
Michael Sweet via ipp <[email protected]>
| Newsgroups | gmane.ietf.ipp |
|---|---|
| Message-ID | <[email protected]> |
All,
Continuing this thread concerning resource URIs and the Same Origin policy that is used in web browsers for this sort of thing:
1. Web Browsers support a HTTP extension called Cross-Origin Resource Sharing (CORS), which is documented here:
https://fetch.spec.whatwg.org/#http-extensions
The kicker is that this extension is used to allow PUT and POST requests - GET, HEAD, and OPTIONS requests are *not* limited in any way. So it doesn't look like CORS is a solution for IPP resources.
2. Sharing OAuth bearer tokens across domain names probably won't work in the general case, either, because the resource URI passed in the authorization request will be different...
Given these discoveries, I think we just need to reword the conformance requirements to be explicitly clear, something like:
4.2.6 Printer ICC Profiles, Icons, and Other URIs
URIs reported by the Proxy to the Infrastructure Printer in an Update-Output-Device-Attributes (section 5.10) request MUST be Public Internet Accessible, Network Accessible without credentials, or hosted by the Infrastructure Printer (with the same credentials) so that both the Infrastructure Printer and Client can access them. The following Printer attributes, if supported by the Proxy, MUST be reported with Public Internet Accessible, Network Accessible, or Infrastructure Printer hosted URIs: "printer-icc-profiles" ("profile-uri" member attribute), "printer-icons", "printer-more-info-manufacturer", and "printer-strings-uri".
In short: public Internet, private Intranet, or server-hosted using the same credentials.
Thoughts?
________________________
Michael Sweet
_______________________________________________
ipp mailing list
[email protected]
https://www.pwg.org/mailman/listinfo/ipp
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkIbDzcZsP1Y8+PQFvmfHXsgfMkQFAmY7ibcACgkQvmfHXsgf MkRgzxAAsmNAv7Y2ET9FmrgI/5NNbYIkRW/ecPToXbdM+DR1wajJIc8RrfJWIMob TwuCFAAkHl+WHst3tlihO3B4a6zf3id5tflcapjPD3VenLqxUmxYwT2ZgTfrCkJ+ iRj8u7UTDxFzLEQ4emGLqPXGG2QAmX7D6wtUeejYiIAxIqdB2wxjBMDPP9CegKIJ czxTry9TYTSxB43PK7tVtBCfw8RX3KW1DEFjVh7Ic5GGvl5taATBdbbnxO7wa6k7 gb2m5hGu51wdS2m1FFG2tA6QSF0OWXRElTAnmaJvV+fouiUnZ5lUqUi6ohxO8Zdy pjwFv69o6+qTy5yey8ez0kpBR3iteSP8tAN1tLgpT38U9SlBE30gutfsuCw+vycG PWT9ccPIYJlDcnO2jHZ1MpED6BiK8hyn81yN2lI4GlmtTZxOffNG+6M2+YFl7VpK hLa7qqW/zCKW78AoYjcusKCT6EiwnD978Qfc3nNh96ILKpA3c/nnRk3nAwH4zXhu gzZTUmCGwBS9Ge/m2Lpvgrpld7RW1mbRyyKVOMNLT9DVkbi7dmMuSQIf1oiHdMnP lq1nAzt02dYdMHhvcu4O1A9v+4K3LomTG5v1UQotnm9Qe/80S9X9OHb/ubFHCwnh ZGfzfsXUKNfgex/lA4tLi65MqV341Kq3B9L3Ns1M5Wvds522KvI= =lr1B -----END PGP SIGNATURE-----