W3C home > Mailing lists > Public > public-appformats@w3.org > May 2008

Re: Widgets 1.0: Digital Signature feedback

From: Thomas Roessler <tlr@w3.org>
Date: Tue, 27 May 2008 11:14:12 +0200
To: Marcos Caceres <marcosscaceres@gmail.com>
Cc: md84419@googlemail.com, public-appformats@w3.org
Message-ID: <20080527091411.GC283@iCoaster.does-not-exist.org>

On 2008-05-27 12:23:10 +1000, Marcos Caceres wrote:

> > specified in different ways.  I'd like to suggest that the
> > capitalisation, attribute names and attribute contents are consistent
> > between the two documents.  I understand that the auto updates
> > document is a very early draft.

+1

> The current proposal supports both SHA-1 and MD5. From my own
> experience, MD5 seems to be more commonly used by developers to
> hash binary content (though I have no evidence to back this up).
> Also, I can't guarantee that any of that stuff will be in there
> after I re-write it... but if it is, your comments will be taken
> into consideration.

I'd suggest that you just reuse the algorithm URIs from the various
XML security specs in the autoupdate spec. Also, note MD5 is pretty
much dead these days, so there is no point whatsoever in giving it
any special status.

-- 
Thomas Roessler, W3C  <tlr@w3.org>
Received on Tuesday, 27 May 2008 09:14:49 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 27 May 2008 09:14:51 GMT