Re: Color Management for iPad?
Re: Color Management for iPad?
- Subject: Re: Color Management for iPad?
- From: Tom Lianza <email@hidden>
- Date: Sat, 06 Aug 2011 08:26:20 -0400
- Thread-topic: Color Management for iPad?
Hi Graeme,
There are two distinct issues here. On the server side, one assumes that
the builder of the web page is responsible for content so security per se is
not that much of an issue, except that the ICC profile allows for
proprietary tags so by definition, there is a potential issue with unknown
BINARY data and a potential for downstream corruption. On the client side,
if you are going to execute a fully color managed workflow inside the
application, the web application/browser, must interact with specific client
generated data, this is a security no-no. There are fairly well defined
mechanisms for accepting specific client data (desktop physical extent, etc)
that is absolutely necessary for the browser to run. Opening and capturing
an ICC profile is NOT one of those secure API's.
If the color management is happening on the client system via the OS, then
there needs to be a mechanism to push the image and embedded profile down to
the OS layer for processing. Unfortunately, the OS layers all have
different APIs for color management, so the code that was specifically
designed to be non-OS specific suddenly becomes very specific. If you look
into the WebKit code, you will see some of the specific issues. It can be
handled on a platform, by platform basis, but it is quite a bit of work.
Regards,
Tom
On 8/5/11 11:23 PM, "Graeme Gill" <email@hidden> wrote:
> Tom Lianza wrote:
>> I wasn't clear, it's not the profile of the device display, it's the
>> millions of arbitrary profiles that can be attached to the billions of
>> images in the digital domain. This is where the security issue is. That is
>> a digital backdoor that is not easy to certify. Another point is where do
>> you draw the line, are cmyk images OK, how about LAB encodings, why not
>> establish DNG as a web standard?
>
> Hi,
> why is the ICC parsing any more of a security issue than
> the image format parser ? All file parsing poses potential security
> issues, but I don't see ICC profiles as being anything special in
> this regard.
>
> Graeme Gill.
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Colorsync-users mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
The information contained in this e-mail and any accompanying attachments may contain information that is privileged, confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. The company accepts no liability for any damage caused by any virus transmitted by this email or any attachments.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Colorsync-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden