Missing statement / paragraph about requring secure transport for IPP Wi-Fi Extensions

Hi Mike,

Someone within HP was asking me about the new IPP Wi-Fi Configuration Extensions registration and we were looking it over, and I was comparing it against AirPrint 1.7. I noticed that AirPrint 1.7 included the following in the definition of "printer-wifi-password" and "printer-wifi-ssid":

This attribute can only be set via an authenticated Set-Printer-Attributes request over a secure channel, or via an unauthenticated IPP USB connection when the Printer is in its initial setup state.

The equivalent is absent in the attribute definitions in IPP Wi-Fi Configuration Extensions. I guess I missed this? I did find this in section 7.2 Set-Printer-Attributes: "printer-wifi-password" and "printer-wifi-ssid" but it doesn't go quite as far as I think we want it to go:

Printers MUST support unauthenticated Set-Printer-Attributes requests over IPP-USB when
Wi-Fi networking has not yet been configured. This allows a Client to configure the Wi-Fi
networking of a Printer over USB.

The Security Considerations lacks mention of Secure Transport as well. But I think we need to add this.

Sorry for not catching this earlier...how should we handle this? There's not really an errata system for Registrations...

Smith

/**
    Smith Kennedy
    Wireless & IPP Standards - IPG-Print Platform Operations
    IEEE ISTO Printer Working Group | Wi-Fi Alliance | Bluetooth SIG | Connectivity Standards Alliance
    Vice Chair, IEEE ISTO Printer Working Group
    HP Inc.
*/

_______________________________________________
ipp mailing list
[email protected]
https://www.pwg.org/mailman/listinfo/ipp