[Telepathy] Spec for file-transfer and tubes

Naba Kumar naba.kumar at nokia.com
Thu Mar 15 02:06:32 PDT 2007


Hi,
ext telepathy-bounces at lists.freedesktop.org wrote:
> 
> Be aware of the security risks posed by a remote party being allowed to tell what to launch locally.
> With MIME types, you can invent your own vendor-specific types as you like.
> 
Of course, it's MC launching the application so it has full liberty to 
do any security checks, including but not limited to:

1) Always prompting the user for the newly arrived tube. It doesn't make 
sense to start the handling app right away (blackjack in middle of work?).

2) Accepting tubes only from known contacts

3) For really advance setup, checking host certificate etc.

Thanks.

Regards,
-Naba


More information about the Telepathy mailing list