[media-types] Re: [MEDIAMAN] From charter: Security ch ecklist

Harald Alvestrand <[email protected]>
Newsgroups gmane.ietf.types
Message-ID <[email protected]>
On 7/17/25 16:03, Alexey Melnikov wrote:
> Hi Harald,
> 
> On 17/07/2025 10:04, Harald Alvestrand wrote:
>> Our charter has the following item on it:
>>
>> Publish a reviewer’s checklist about Security Considerations in media 
>> type applications, either as an RFC or a wiki page.
>>
>>
>> This would seem to overlap somewhat with section 2.8 of 6838bis 
>> ("Security"), but at chartering time, it was probably thought of as 
>> something distinct.
>>
>> Should we pursue this, or ask to have the milestone removed from our 
>> charter?
> 
> IANA already has a checklist, but not many people know about it: 
> <https://www.iana.org/form/media-types>. And yes, there is some overlap 
> with section 2.8 of 6838bis.
> 
> I think we should keep the milestone, as we already have a good base for 
> it. I don't think the milestone requires us to have a separate RFC for 
> this.
> 
> 
> Best Regards,
> 
> Alexey
> 
> 

I'm not certain whether the "security considerations" of the IANA form 
is a checklist that is usable for the reviewer as-is; it is aimed at the 
registrant, not the reviewer. But on this point, the expert really is 
the reviewer.

Harald

_______________________________________________
media-types mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.