W3C home > Mailing lists > Public > public-wsc-wg@w3.org > May 2008

ISSUE-211 (Derived secrets SHOULD): Make 8.3 SHOULD not must [wsc-xit]

From: Web Security Context Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Wed, 14 May 2008 12:02:40 +0000 (GMT)
To: public-wsc-wg@w3.org
Message-Id: <20080514120240.0921CBF43@nelson.w3.org>


ISSUE-211 (Derived secrets SHOULD): Make 8.3 SHOULD not must [wsc-xit]

http://www.w3.org/2006/WSC/track/issues/

Raised by: Ian Fette
On product: wsc-xit

8.3 says "Any derived secret that convey a similar level of authority as the original secret it MUST also be protected at the same level as the original secret"

I propose that we change the MUST to a SHOULD, as it's just not practical for many sites.
Received on Wednesday, 14 May 2008 12:03:14 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 14 May 2008 12:03:14 GMT