1 Jan 18:21
Re: Re: Security and nationality
Addison Phillips <addison <at> yahoo-inc.com>
2007-01-01 17:21:43 GMT
2007-01-01 17:21:43 GMT
Frank Ellermann wrote: >> -- >> Languages and language variations are often closely associated with >> specific social, national, or ethnic affinities. Thus, language tags >> used in content negotiation, like other information exchanged on the >> Internet, might be a source of concern because they might be used to >> infer information about the sender and thus identify potential targets >> for surveillance. >> -- > > Okay. Jukka's proposal is also fine (maybe a bit long). I like the > keyword "private" in Stephane's version (Jukka has "personal", you've > only "information"). > One's language preference in a request header is hardly "private" information. The whole point of having an Accept-Language header is sharing that information in requests. "Personal" is probably better in this context. If we modify my paragraph to say "... infer personal information...", would that fix it? Or do you think that some other instance of "information" is the problem? Also, should we note that highly idiosyncratic Language Preference Lists (to use the 4647 term) might act as a signature for the user? Addison -- --(Continue reading)
>
>We publish the ABNF, which is the normative definition of the
>grammar. Publishing the grammar in yet another format is a recipe for
>subtle inconsistencies between them.
Could it be INFORMATIVE, such in rfc 4287 Appendix B ?
>> so that people can use it in declarative contexts like XML schemas.
>
>May be we could suggest a very simplified regexp such as:
>
>[a-z0-9]+(-[a-z0-9]+)*
>
>(case-insensitive, /i in Perl, re.IGNORECASE in Python)
>
RSS Feed