[Telepathy] Spec for file-transfer and tubes
naba.kumar at nokia.com
Thu Mar 15 02:06:32 PDT 2007
ext telepathy-bounces at lists.freedesktop.org wrote:
> Be aware of the security risks posed by a remote party being allowed to tell what to launch locally.
> With MIME types, you can invent your own vendor-specific types as you like.
Of course, it's MC launching the application so it has full liberty to
do any security checks, including but not limited to:
1) Always prompting the user for the newly arrived tube. It doesn't make
sense to start the handling app right away (blackjack in middle of work?).
2) Accepting tubes only from known contacts
3) For really advance setup, checking host certificate etc.
More information about the Telepathy