Re: Proposed text to add to security considerations from Cantor, Scott on 2011-08-16 (public-xmlsec@w3.org from August 2011)

From: Cantor, Scott <cantor.2@osu.edu>
Date: Tue, 16 Aug 2011 16:04:37 +0000
To: "Frederick.Hirsch@nokia.com" <Frederick.Hirsch@nokia.com>, "hal. Lockhart" <hal.lockhart@oracle.com>
CC: "public-xmlsec@w3.org" <public-xmlsec@w3.org>
Message-ID: <CA700D38.1314B%cantor.2@osu.edu>

On 8/16/11 11:59 AM, "Frederick.Hirsch@nokia.com"
<Frederick.Hirsch@nokia.com> wrote:
>
>I understand the intent of the last sentence but wonder whether rather
>than "generate alerts" it might be better to say stop processing requests
>from that origin?

How about "treat as suspect"?

>Otherwise I think this is good and I think we should incorporate into XML
>Encryption 1.1 editors draft.

+1, I like it.

-- Scott

Received on Tuesday, 16 August 2011 16:07:06 UTC