Re: Widgets 1.0: Digital Signature feedback

On 2008-05-27 12:23:10 +1000, Marcos Caceres wrote:

> > specified in different ways.  I'd like to suggest that the
> > capitalisation, attribute names and attribute contents are consistent
> > between the two documents.  I understand that the auto updates
> > document is a very early draft.

+1

> The current proposal supports both SHA-1 and MD5. From my own
> experience, MD5 seems to be more commonly used by developers to
> hash binary content (though I have no evidence to back this up).
> Also, I can't guarantee that any of that stuff will be in there
> after I re-write it... but if it is, your comments will be taken
> into consideration.

I'd suggest that you just reuse the algorithm URIs from the various
XML security specs in the autoupdate spec. Also, note MD5 is pretty
much dead these days, so there is no point whatsoever in giving it
any special status.

-- 
Thomas Roessler, W3C  <tlr@w3.org>

Received on Tuesday, 27 May 2008 09:14:49 UTC