attachment
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Mike,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I think this is much clearer.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-ligatures:standardcontextual">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.75pt;text-autospace:none"><b><span style="font-size:11.0pt;color:black;mso-ligatures:standardcontextual">Uli Wehner<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-left:.75pt;text-autospace:none"><span lang="JA" style="font-size:11.0pt;font-family:"MS Mincho";color:black;mso-ligatures:standardcontextual">$B%&%j!&%t%'!<%J!<(B</span><span style="font-size:10.0pt;color:black;mso-ligatures:standardcontextual"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> ipp <ipp-bounces@pwg.org>
<b>On Behalf Of </b>Michael Sweet via ipp<br>
<b>Sent:</b> Wednesday, May 8, 2024 10:19 AM<br>
<b>To:</b> Jimmy Wu <Jimmy.Wu@microsoft.com><br>
<b>Cc:</b> Michael Sweet <msweet@msweet.org>; PWG IPP Workgroup <ipp@pwg.org><br>
<b>Subject:</b> Re: [IPP] [EXTERNAL] Feedback request on "printer-icons" and "printer-more-info-manufacturer" in PWG IPP-Infra<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">All,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Continuing this thread concerning resource URIs and the Same Origin policy that is used in web browsers for this sort of thing:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">1. Web Browsers support a HTTP extension called Cross-Origin Resource Sharing (CORS), which is documented here:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> <a href="https://fetch.spec.whatwg.org/#http-extensions">https://fetch.spec.whatwg.org/#http-extensions</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> The kicker is that this extension is used to allow PUT and POST requests - GET, HEAD, and OPTIONS requests are *not* limited in any way. So it doesn't look like CORS is a solution for IPP resources.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">2. Sharing OAuth bearer tokens across domain names probably won't work in the general case, either, because the resource URI passed in the authorization request will be different...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Given these discoveries, I think we just need to reword the conformance requirements to be explicitly clear, something like:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<div>
<p class="MsoNormal">4.2.6 Printer ICC Profiles, Icons, and Other URIs<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">URIs reported by the Proxy to the Infrastructure Printer in an Update-Output-Device-Attributes (section 5.10) request MUST be Public Internet Accessible<span style="color:#FF2600">, Network Accessible without credentials, or hosted by the
Infrastructure Printer (with the same credentials) </span>so that both the Infrastructure Printer and Client can access them. The following Printer attributes, if supported by the Proxy, MUST be reported with Public Internet Accessible<span style="color:#FF2600">,
Network Accessible, or Infrastructure Printer hosted </span>URIs: "printer-icc-profiles" ("profile-uri" member attribute), "printer-icons", "printer-more-info-manufacturer", and "printer-strings-uri".<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In short: public Internet, private Intranet, or server-hosted using the same credentials.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thoughts?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">________________________<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Michael Sweet<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>