[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: The <any/> element: bane of security or savior of versioni

  • From: "Fraser Goffin" <goffinf@g...>
  • To: "noah_mendelsohn@u..." <noah_mendelsohn@u...>
  • Date: Mon, 22 Oct 2007 18:37:38 +0100

Re:  The <any/> element: bane of security or savior of versioni
>It's also perfectly reasonable, and often useful, to suggest that such additional content is to be stored
> along with other data
 
Completely agree. Indeed in some circumstances there may be a mandatory audit step that occurs before stripping any content such that in the future the message received can be accurately recovered by both sender and receiver such as in the case of non repudiation.
 
On 22/10/2007, noah_mendelsohn@u... <noah_mendelsohn@u... > wrote:
For what it's worth, I've slowly come to believe that the general case for
forwards compatibility is not necessarily that new content is completely
ignored by older applications, but that there be some default rule for
dealing with it.  "Must ignore" is just one example of such a rule.  It's
also perfectly reasonable, and often useful, to suggest that such
additional content is to be stored along with other data, perhaps that it
is to be printed using some default formatting rules, etc.  Note that in
HTML as currently deployed, even elements not named explicitly in the
spec, say <banana>, can be styled using CSS.   One point of view is that
HTML+CSS therefore contains all such elements in its language.  Another is
that <banana> is extension content, but with the rule that it still shows
up in the DOM, still is scriptable, still can be styled via CSS, etc.  So,
I've come around to the view that Must Ignore is just an extreme case of a
default processing rule.  Note that if your very first step in receiving a
V2 message in a V1 processor is to strip out everything that's new, you
can't do things like digital signatures on it.   So my suggestion is that
for forwards compatibility, early versions of a language need a very well
chosen default processing (or default interpretation) rule:  whether the
best rule is Must Ignore, and whether the rule can be implemented by a
transform will depend on the circumstances and the requirements.

Noah

--------------------------------------
Noah Mendelsohn
IBM Corporation
One Rogers Street
Cambridge, MA 02142
1-617-693-4036
--------------------------------------







[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]


PURCHASE STYLUS STUDIO ONLINE TODAY!

Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Cast Your Vote

We need your help – Vote for DataDirect XML Products!

  • Best SOA or XML site

Winners and finalists announced at SOA World Conference in November.

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
Email
First Name
Last Name
Company
Subscribe in XML format
RSS 2.0
Atom 0.3
 

Stylus Studio has published XML-DEV in RSS and ATOM formats, enabling users to easily subcribe to the list from their preferred news reader application.


Stylus Studio Sponsored Links are added links designed to provide related and additional information to the visitors of this website. they were not included by the author in the initial post. To view the content without the Sponsor Links please click here.

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2007 All Rights Reserved.