emergency-msg — archive

cap:image and cap:audio

From: Brian Pattinson
To: [email protected]
Date: Mon, 07 Jul 2003 19:49:00 -0000

 MHonArc v2.4.5 -->
















emergency-msg message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: cap:image and cap:audio




From: "Pattinson, Brian E" <[email protected]>
To: "'[email protected]'" <[email protected]>
Date: Mon, 7 Jul 2003 15:04:03 -0500 






Title: cap:image and cap:audio





The spec as it stands carries audio files and images as references to the actual files.  While this reduces the size of the alert message, it has a disadvantage.  If the message is digitally signed, the protection this provides is not extended to the image/audio files.  So a hacker could replace the picture of a missing child with one of Mickey Mouse for example, and the security and validation mechanisms would not detect the alteration.

I suggest we may want to actually embed the files in the xml document (as Base64 encoded strings perhaps), so that the message integrity can be verified.

Thoughts/comments?


Regards,
Brian Pattinson
Unisys Corporation








Follow-Ups:

RE: [emergency-msg] cap:image and cap:audio
From: "Nasseam Elkarra" <[email protected]>








[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]