Skip to content
This repository was archived by the owner on Jul 7, 2025. It is now read-only.

Commit 0e21fdf

Browse files
committed
changes in Security Considerations to address AD's comments
1 parent 7357ff9 commit 0e21fdf

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

draft-ietf-httpapi-deprecation-header.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -188,11 +188,10 @@ The `deprecation` link relation type should be added to the permanent registry o
188188

189189
# Security Considerations
190190

191-
The Deprecation header field should be treated as a hint, meaning that the resource is indicating (and not guaranteeing with certainty) that it will be or is deprecated. Resource documentation SHOULD provide additional information about the deprecation, potentially including recommendation(s) for replacement.
191+
The Deprecation header field should be treated as a hint, meaning that the resource is indicating (and not guaranteeing with certainty) that it will be or is deprecated. Deprecated resources almost MUST function as before, even though one might consider non-functional details such as making them progressively less efficient with longer response time for example.
192192

193-
In cases where the Deprecation header field value is a date in the future, it can lead to information that otherwise might not be available. Therefore, applications consuming the resource SHOULD verify the resource documentation and if possible, consult the resource developer to discuss potential impact due to deprecation and plan for possible transition to recommended resource.
193+
Resource documentation SHOULD provide additional information about the deprecation, potentially including recommendation(s) for replacement. Applications consuming the resource SHOULD check the referred resource documentation to verify authenticity and accuracy. In cases where a `Link` header field is used to provide documentation, one should assume that the content of the `Link` header field may not be secure, private or integrity-guaranteed, and due caution should be exercised when using it. Also, in cases where the Deprecation header field value is a date in the future, it can lead to information that otherwise might not be available. Therefore, applications consuming the resource SHOULD, if possible, consult the resource developer to discuss potential impact due to deprecation and plan for possible transition to a recommended resource(s).
194194

195-
In cases where a `Link` header field is used to provide documentation, one should assume that the content of the `Link` header field may not be secure, private or integrity-guaranteed, and due caution should be exercised when using it. Applications consuming the resource SHOULD check the referred resource documentation to verify authenticity and accuracy.
196195

197196
--- back
198197

@@ -281,9 +280,9 @@ Organization: PayPal
281280

282281
This revision has made the following changes:
283282

284-
* Changed 'URI-identified resource' to 'resource (in the sense of [URI])'
285-
* Uses Notational Conventions for Structured Fields as suggested in HTTP Editorial Style Guide
286-
* Security Considerations moved below the IANA Considerations
283+
* Fixed references for structured fields, RFC9111 instead of RFC7234
284+
* Security Considerations is Heading#1
285+
* Removed redundant example
287286

288287
# Acknowledgments
289288

0 commit comments

Comments
 (0)