commit 85d303ea3bf753f9eeaa5a11cfa3c22bcd6326c6
parent 09c942b89fd7e199cabcd1843211b80367616f19
Author: Florian Dold <florian.dold@gmail.com>
Date: Thu, 17 Jan 2019 03:36:46 +0100
payto: fix spec problem with financial amount syntax
Diffstat:
1 file changed, 10 insertions(+), 6 deletions(-)
diff --git a/standards/draft-dold-payto.xml b/standards/draft-dold-payto.xml
@@ -1,6 +1,7 @@
<?xml version="1.0" encoding="US-ASCII"?>
<!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
<!ENTITY RFC3986 SYSTEM "http://xml.resource.org/public/rfc/bibxml/reference.RFC.3986.xml">
+<!ENTITY RFC3629 SYSTEM "http://xml.resource.org/public/rfc/bibxml/reference.RFC.3629.xml">
]>
<?xml-stylesheet type='text/xsl' href='rfc2629.xslt' ?>
@@ -161,8 +162,9 @@
]]>
</artwork>
</figure>
- The fraction MUST be smaller than 10^8. The unit value MUST be smaller than 2^53. The use of commas
- is optional for readability and they MUST be ignored.
+The unit value MUST be smaller than 2^53.
+If present, the fraction MUST consist of no more than 8 decimal digits.
+The use of commas is optional for readability and they MUST be ignored.
</t>
<t>
@@ -187,7 +189,7 @@
</section>
-<section anchor="encoding" title="Encoding">
+<section anchor="encoding" title="Internationalization and Character Encoding">
<t>
Various payment systems use restricted character sets.
An application that processes 'payto' URIs MUST convert
@@ -198,9 +200,10 @@
</section>
<section anchor="security" title="Security Considerations">
-<t>Applications handling the payto URI scheme MUST NOT initiate any
- financial transactions without prior review and confirmation from the user,
- and MUST take measures to prevent clickjacking <xref target="HMW12"/>.
+<t>All 'payto' URIs SHOULD be treated as coming from an untrusted source.
+In particular, interactive applications handling the payto URI scheme MUST NOT initiate any
+financial transactions without prior review and confirmation from the user,
+and MUST take measures to prevent clickjacking <xref target="HMW12"/>.
</t>
</section>
@@ -224,6 +227,7 @@ The "payto" URI scheme is to be registered in the "Permanent URI Schemes" regist
</section>
+<!-- see https://tools.ietf.org/html/rfc5226#section-4.1 -->
<section anchor="payto-registry" title="Payment Target Type Registry">
<t>
This document defines a registry for payment methods. The name of the registry
