W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2009

Re: [widget-digsig] Updated Widget Signature editors draft

From: Frederick Hirsch <Frederick.Hirsch@nokia.com>
Date: Fri, 24 Apr 2009 08:22:55 -0400
Cc: Frederick Hirsch <Frederick.Hirsch@nokia.com>, "marcosc@opera.com" <marcosc@opera.com>, Web Applications Working Group WG <public-webapps@w3.org>
Message-Id: <6C0AB4B8-55D5-4442-9302-D14545576038@nokia.com>
To: "ext Priestley, Mark, VF-Group" <Mark.Priestley@vodafone.com>
how about this:

Note that with an optional algorithm interoperability  may not always  
be possible if user agents have not implemented it.  Implementation of  
this algorithm is encouraged since it can become mandatory in a  
subsequent release of this specification, and this may become  
necessary if a security issue is discovered with the currently  
required algorithm.

regards, Frederick

Frederick Hirsch
Nokia



On Apr 24, 2009, at 5:20 AM, ext Priestley, Mark, VF-Group wrote:

>
> "I would like to see some text cautioning authors not to rely on  
> this algorithm, since it is optional in user agents."
>
> Agreed - in fact I think a general statement about use of optional  
> algorithms would be beneficial
>
>
> -----Original Message-----
> From: public-webapps-request@w3.org [mailto:public-webapps-request@w3.org 
> ] On Behalf Of Marcos Caceres
> Sent: 24 April 2009 09:46
> To: Frederick Hirsch
> Cc: Web Applications Working Group WG
> Subject: Re: [widget-digsig] Updated Widget Signature editors draft
>
> Hi Frederick,
> Thanks for updating the spec! comment below.
>
> On Fri, Apr 24, 2009 at 3:14 AM, Frederick Hirsch <frederick.hirsch@nokia.com 
> > wrote:
>> I have updated the Widget Signature draft to reflect decisions on
>> today's call, as follows:
>>
>> Added ECDSAwithSHA256 as SHOULD  signature algorithm
>
> I would like to see some text cautioning authors not to rely on this  
> algorithm, since it is optional in user agents.
>
>> Removed editor  notes re feedback on signature algorithms Removed
>> editor note with Signature Properties reference, since we've removed
>> section 9 Added FIPS-186-3 reference
>>
>> http://dev.w3.org/2006/waf/widgets-digsig/
>>
>> Note that we will need to update the Signature Properties reference,
>> when that specification is published with this specification.
>>
>> regards, Frederick
>>
>> Frederick Hirsch
>> Nokia
>>
>>
>>
>>
>>
>
>
>
> --
> Marcos Caceres
> http://datadriven.com.au
>
Received on Friday, 24 April 2009 12:24:16 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:31 GMT