Re: [EXTERNAL] Feedback request on "printer-icons" and "printer-more-info-manufacturer" in PWG IPP-Infra
Uli Wehner via ipp <[email protected]>
| Newsgroups | gmane.ietf.ipp |
|---|---|
| Message-ID | <IA1PR17MB6121CB9C8A3A6C9491894B00A4E52@IA1PR17MB6121.namprd17.prod.outlook.com> |
Mike, I think this is much clearer. Regards Uli Wehner ウリ・ヴェーナー From: ipp <[email protected]> On Behalf Of Michael Sweet via ipp Sent: Wednesday, May 8, 2024 10:19 AM To: Jimmy Wu <[email protected]> Cc: Michael Sweet <[email protected]>; PWG IPP Workgroup <[email protected]> Subject: Re: [IPP] [EXTERNAL] Feedback request on "printer-icons" and "printer-more-info-manufacturer" in PWG IPP-Infra All, Continuing this thread concerning resource URIs and the Same Origin policy that is used in web browsers for this sort of thing: 1. Web Browsers support a HTTP extension called Cross-Origin Resource Sharing (CORS), which is documented here: https://fetch.spec.whatwg.org/#http-extensions The kicker is that this extension is used to allow PUT and POST requests - GET, HEAD, and OPTIONS requests are *not* limited in any way. So it doesn't look like CORS is a solution for IPP resources. 2. Sharing OAuth bearer tokens across domain names probably won't work in the general case, either, because the resource URI passed in the authorization request will be different... Given these discoveries, I think we just need to reword the conformance requirements to be explicitly clear, something like: 4.2.6 Printer ICC Profiles, Icons, and Other URIs URIs reported by the Proxy to the Infrastructure Printer in an Update-Output-Device-Attributes (section 5.10) request MUST be Public Internet Accessible, Network Accessible without credentials, or hosted by the Infrastructure Printer (with the same credentials) so that both the Infrastructure Printer and Client can access them. The following Printer attributes, if supported by the Proxy, MUST be reported with Public Internet Accessible, Network Accessible, or Infrastructure Printer hosted URIs: "printer-icc-profiles" ("profile-uri" member attribute), "printer-icons", "printer-more-info-manufacturer", and "printer-strings-uri". In short: public Internet, private Intranet, or server-hosted using the same credentials. Thoughts? ________________________ Michael Sweet _______________________________________________ ipp mailing list [email protected] https://www.pwg.org/mailman/listinfo/ipp