Registration of MIME media type application/vnd.surety.tokenstore

[Greg Thompson]

> -----Original Message-----
> From: moore at cs.utk.edu [mailto:moore at cs.utk.edu]
>
> > Security considerations: Surety Token Store files contain no executable
> > code.
>
> that's good to know, but it doesn't really say anything about
> security risks.
> is there any inherent risk to running software that uses such things?
> for instance, does such software disclose information about the recipient
> or the recipient's files, does it communicate with other network
> sites without
> the recipient's knowledge, does it alter recipient files, etc?
>
> especially given that you've said nothing at all about the
> purpose of this type,
> it's very hard to assess risk from the information provided.
>
> Keith

fair enough.

MIME media type name: application

MIME subtype name: Vendor Tree - vnd.surety.tokenstore

Required parameters: none

Optional parameters: none

Encoding considerations: Surety Token Store files contain binary data, and
must be transferred in such a way as to guarantee that no loss of
information takes place.

Security considerations: Surety Token Store files contain "Tokens" used by
the Surety Digital Notary Service.  These Tokens are used in the course of
conducting transactions with Surety Digital Notary Servers.  No personal
data is stored in a Token, and no part of a Token contains any executable
code.  Certain operations performed with Tokens within the context of an
application developed to use these Tokens may contact servers over the
Internet.  These communications do not transmit any information about the
user or the user's machine to the remote server, and only take place as a
direct result of the user's actions.

Interoperability considerations: The Surety Token Store file format is
designed such that compliant files may be parsed and generated on any
platform, independent of machine byte-ordering and word size.  As such, they
may be used with any supported product in the Surety Digital Notary Service
on any supported platform.

Published specification: none

Applications which use this media type: Surety Digital Notary Service

Additional information:

  Magic number(s): none
  File extension(s): .sts
  Macintosh File Type Code(s): none

Person & email address to contact for further information:
standards at surety.com

Intended usage: common

Author/Change controller:
Written by Greg Thompson.  This type may be revised by any employee of
Surety, Inc.