'Re: [kc-kde] stat of issue #38?'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: kc-kde
Subject: Re: [kc-kde] stat of issue #38?
From: "Timothy R. Butler" <tbutler () uninetsolutions ! com>
Date: 2002-06-03 4:29:01
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Here is my summary for this week. Would someone be kind enough to commit it 
for me (due to the pending nature of my cvs account, as noted before)?

  Thanks,
       Tim

On Sunday 02 June 2002 02:01 pm, Timothy R. Butler wrote:
> If my day goes as planned, I will submit a summary later today. I will need
> to ask someone to commit it for me however, as I have not yet received a
> CVS account (I sent an encrypted password in already, I just have not
> received a confirmation yet).
>
>   -Tim
>
> On Sunday 02 June 2002 01:15 pm, Aaron J. Seigo wrote:
> > Hi all..
> >
> > what's the status of issue #38? i see there are three summarries in there
> > now ... will there be more? will it be released this week?
> >
> > the curious want to know =)

- -- 
- ----------------------------------------------------------------
Timothy R. Butler                    tbutler@uninetsolutions.com 
Universal  Networks                       http://www.uninet.info        
Christian Portal and Search Tool:       http://www.faithtree.com
Open Source Migration Guide:                  http://www.ofb.biz
============= "Christian Web Services Since 1996" ==============
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8+vCOK37Cns9gJ0gRAlKsAJ9fFK+lUuQV5suL6fIZTVn20O4KvwCfZVOS
yEnYzpV9JK9wkW8QLyS9guI=
=drfp
-----END PGP SIGNATURE-----

["kc 2002.06.02.xml" (text/xml)]

<section
  title="KOffice Mimetypes Submitted to IETF for Public Review"
  author="Timothy R. Butler"
  email="tbutler@uninetsolutions.com"
  subject="Draft template for registration of KOffice mimetypes "
  archive="http://lists.kde.org/?l=koffice-devel&m=102189872531684&w=2"
  posts="28"
  startdate="May 20, 2002 12:37:13 +0200"
  enddate="2002-05-26 19:24:37 +0200"

<p>Continuing his attempt to help get KDE's mimetypes registered with IANA,
<a href="mailto:Marc.Mutz@uni-bielefeld.de>">Marc Mutz</a> wrote in saying:</p>

<quote who="Marc Mutz">
<p>Now that the ZIP format has arrived in KOffice, we can finally register
the KOffice mime types.</p>

<p>Please read the template thouroughly, since I intend to send it to the
ietf-types mailing list for a two-week comment period before it goes 
into the IANA registry.</p>

<p>I have changed the magic numbers from what I found in kdelibs/kio/magic
in anticipation that the new mime types will also be used internally 
(at least you already test for both app/x-kapp and app/vnd.kde.kapp in 
the source).</p>
</quote>

His message continued with a generic registration that could be used for the \
various KOffice applications. Marc finished off with a question, saying, <quote \
who="Marc Mutz">Please tell me for which KOffice apps this template holds and for \
which it needs modifications.</quote> Marc's message created a flurry of responses, \
including an answer to his question from <a href="david@mandrakesoft.com">David \
Faure</a>:

<quote who="David Faure">
<p>I think it applies to those, they all use the KoDocument methods for \
loading/saving: karbon, kchart, kformula, kivio, kontour, kpresenter, kspread, \
kword</p>

What do we do about the apps that are not released yet?
kdatabase and kplato will surely use xml+zip, but we could register those apps
only when they exist, right?

Krita: will it have xml+zip as a native format, or will it only load/save images \
(jpeg, png etc.) ? Kugar doesn't appear to have an xml+zip format.
</quote>

<p>After the discussion had settled, Marc wrote in again with an update:</p>

<quote who="Marc Mutz">
<p>Following is the expanded list of mime types for these KOffice apps:
kword, kspread, kpresenter, kformula, kchart, kivio, kontour, karbon</p>

This public review will be not be very extensive, though, so don't count
on others doing it - do it yourself! ;-)
</quote>

<p><a href="mailto:nicog@snafu.de">Nicolas Goutte</a> responded with a question \
concerning the security information included in the proposal:</p>

<quote who="Nicolas Goutte">
<p> I am sorry to be picky again!</p>

<p>"ZIP archives, XML files and supported image files"</p>

Do WMF (Windows Meta Files) count as images too? What is the security status
of those
</quote>

<p>A small discussion on security ensued, to which <a \
href="mailto:zander@planescape.com">Thomas Zander</a> replied:</p>

<quote who="Thomas Zander">
svg/eps/wml etc are all embedded in the document (but that is optional to
begin with). The document that uses the mime-type is a zip; so basically
you can include any executable/shell script virus in there as you want.
The statement that it does not introduce extra security concerns it therefor
complete.

For the people that are afraid that I am sidestepping the problem with that;
on the question of using any scripts or other possible virii like code in the
archive we keep and always will have the statement that we believe in seperation
of document-data and executable-data. We will never allow something to be
executed when it (or its container) is marked as document data.
</quote>

<p>Finally, Marc wrote in saying <quote who="Marc Mutz">As you've seen, I 
just sent the mime type reg's to ietf-types@iana.org for a two-week \
review.</quote></p>

</section>

_______________________________________________
kc-kde mailing list
kc-kde@mail.kde.org
http://mail.kde.org/mailman/listinfo/kc-kde

[prev in list] [next in list] [prev in thread] [next in thread] 