Re: Draft charters available; please comment.

On 7/5/06, spam filter <spam+w3c@jeff-nelson.com> wrote:
> http://www.w3.org/2005/Security/htmlauth-charter
>
>
>
> >     * a W3C Recommendation that describes an annotation mechanism that supports at least HTTP Digest Authentication, and possibly other authentication mechanisms as the working group sees fit
>
> I'm not as familar with these requirements.  It looks like we're
> specifying an annotation of authentication meta-data.


Further, could someone elaborate on these requirements?  For example,
are there any existing products which are exemplary of the annotation
or meta-data we'd standardize through this working group?

For example, if I had to speculate, I think there are QoS issues that
could be specified using an annotation, such as

Site supports personalization
Site supports mutual auth
Site supports ZKPP derived session key
Site lexical password format requirements
Proof of mutual auth
How and where to show personalization proof

Is this the intended direction?

 - Jeff