On Wed, Sep 30, 2009 at 11:46 PM, Dave Cridland <[email protected]> wrote: > See http://tools.ietf.org/html/rfc2244#section-3.1.1 and its description of > the "modtime" attribute. > > I think that's pretty much what you want. And I agree it's going to be > astonishingly rare that it's needed in normal cases, but I'm mildly > concerned that there's a possible timing attack lurking somewhere if this is > not mandated somewhere. >
I don't think so rare ;) In wave-like applications with multiple publishers on the same node, continuing changing the same shared items this is rather likely. so +1 for modtime -- Fabio Forno, Bluendo srl http://www.bluendo.com jabber id: [email protected]
