- From: Boris Zbarsky <bzbarsky@MIT.EDU>
- Date: Tue, 22 Jan 2013 17:45:44 -0500
- To: public-html@w3.org
On 1/22/13 5:38 PM, Ian Fette (イアンフェッティ) wrote: > What exactly do you mean by "out of band"? "Outside of any public standards process." > FWIW other specs also leave things "out of band" -- e.g. in SSL you (the > browser vendor / distro) need to somehow determine what set of root CAs > to include. Yes, and that's been an interop problem in the past... > I suspect it's the fact that a (non-free) license may be required under > some proposals, but I don't want to mischaracterize you. The last set of proposals I saw leaves the actual encryption module interfaces undefined to an extent that it's not just that you need a license to implement one, it's that you can't implement one yourself without reverse-engineering existing ones. Has that actually changed since then? -Boris
Received on Tuesday, 22 January 2013 22:46:13 UTC