attachment
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi,</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
We are investigating how we should support the bucket of IPP attributes that contain URI values pointing to printer resources, such as</div>
<ul style="direction: ltr; text-align: left; flex-direction: column; display: flex;">
<li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); direction: ltr; align-self: start; text-indent: 0px; margin: 0in 0in 0.0001pt;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">printer-more-info-manufacturer</span></li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); direction: ltr; align-self: start; text-indent: 0px; margin: 0in 0in 0.0001pt;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">printer-icons</span></li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); direction: ltr; align-self: start; text-indent: 0px; margin: 0in 0in 0.0001pt;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">Printer-icc-profiles -> profile-url</span></li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0); direction: ltr; align-self: start; text-indent: 0px; margin: 0in 0in 0.0001pt;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">etc.</span></li></ul>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 1em 0in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt;">
<span style="color: rgb(0, 0, 0);">For this bucket of attributes, under the current
</span><span style="color: blue;"><u><a href="https://ftp.pwg.org/pub/pwg/candidates/cs-ippinfra10-20150619-5100.18.pdf" id="OWA2cd46106-cef4-07cb-9ace-f4f679464118" class="x_x_x_OWAAutoLink" title="Original URL: https://ftp.pwg.org/pub/pwg/candidates/cs-ippinfra10-20150619-5100.18.pdf. Click or tap if you trust this link." shash="r84/HK2+kUwwTEkKWWqnKxtcgsG96Bv4AOlvXbw2Rtovw920kRGbFr53C66CqgOxuyFTIOe3KO0O4EOzYbxm1vYq73cE2OAHgZobUalo1X7HjGi5u4UlhU/I1AFd53UR5Ey2tdfoaRvwzJ69AVT2A58NoCHKRMh59P7TLUWaZ0o=" originalsrc="https://ftp.pwg.org/pub/pwg/candidates/cs-ippinfra10-20150619-5100.18.pdf" data-auth="Verified" data-linkindex="4" data-loopstyle="linkonly" style="color: blue; margin: 0px;">IPP-Infra</a></u></span><span style="color: rgb(0, 0, 0);"> section
4.2.6 "Printer ICC Profiles, Icons, and Other URIs", </span></div>
<div class="elementToProof" style="direction: ltr; text-align: left; text-indent: 0px; margin: 1em 0px 1em 30pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<img size="100705" contenttype="image/png" style="max-width: 992px;" data-outlook-trace="F:1|T:1" src="cid:67cae771-944e-4ef7-82f7-bfca8e6c90de"></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 1em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
</div>
<div class="elementToProof" style="direction: ltr; text-align: left; text-indent: 0px; margin: 1em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
In our case, it would be in the following IPP-Infra model:</div>
<div class="elementToProof" style="direction: ltr; text-align: left; text-indent: 0px; margin: 1em 0px 1em 30pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<img size="25445" contenttype="image/png" style="max-width: 992px;" data-outlook-trace="F:1|T:1" src="cid:7b41cb68-fec1-471d-80e9-52b65def42a9"></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
The current IPP-Infra spec implies that both the physical printer ("Proxy") and the cloud service ("Infrastructure Printer") both return values for these IPP attributes that are "Public Internet Accessible". The spec defines "Public Internet Accessible" as
"can be accessed via the public Internet without additional credentials or authentication".</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
We have some security / privacy concerns regarding the cloud service ("Infrastructure Printer") providing URI value(s) that are open to the world without needing any credentials. For the physical printer ("Proxy"), at least the IPP-Infra spec offers an alternative
where it can upload the resource files to the cloud service ("Infrastructure Printer").</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
For example, we would not want an in-development printer which sent this info to the cloud service to have their printer icon and details to be exposed to the Internet.</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
We feel that it should at least be an option for the cloud service ("Infrastructure Printer") to lock down access to the resource behind some credentials.</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Appreciate any insight you have to mitigate concerns.</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Regards,</div>
<div class="elementToProof" style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Jimmy</div>
</body>
</html>