Subject: [Ietf-calsify] Issue 74: deprecate PROCEDURE from ACTION property in VALARM

From: aki.niemi at nokia.com (Aki Niemi)
Date: Wed Feb 7 03:41:09 2007

All,

Bernard pointed out an issue we haven't been tracking, but for which
there was audible consensus way back in the IETF65 meeting.

The issue is whether to deprecate "PROCEDURE" from the list of possible
values in an ACTION property in a VALARM.

Reasons for this are that this feature has had very poor interop, and
most importantly is a serious security risk (you don't want to allow
arbitrary code execution this way).

The consensus in IETF65 was for deprecating; any opposite views?

Cheers,
Aki