Replace UID parameters with the UUID parameters for Team Calendar to improve the security

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Unresolved
    • None
    • Component/s: Apps - Team Calendar
    • None
    • 1
    • 1

      Issue Summary

      Confluence uses the UID parameter to match the event in the calendar in the format of:

      <timezone>-<generated-id>@<hostname>

      There has been some improvement on the iCalendar specification: New Properties for iCalendar:

      This specification updates[RFC5545 by stating that "UID" values MUST NOT include any data that might identify a user, host, domain, or any other security- or privacy-sensitive information.

      It is RECOMMENDED that calendar user agents now generate "UID" values that are hex-encoded random Universally Unique Identifier (UUID) values as defined in Sections 4.4 and 4.5 of [RFC412.

      The following is an example of such a property value:

      UID:5FC53010-1267-4F8E-BC28-1D7AE55A7C99

      Expected Results

      The team calendar should use UUID (which does not contain any data that might identify a user, host, domain, or any other security- or privacy-sensitive information)

      Actual Results

      The Team Calendar events are tied with VEVENT_UID values that contains the host name of the Confluence server.

      Workaround

      Required, if there is no workaround please state:
      Currently there is no known workaround for this behavior. A workaround will be added here when available

            Assignee:
            Unassigned
            Reporter:
            Suat Kandiş (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: