W3C home > Mailing lists > Public > public-xmlsec@w3.org > December 2011

Re: [widgets] How to divorce widgets-digsig from Elliptic Curve PAG?

From: Philippe Le Hegaret <plh@w3.org>
Date: Tue, 13 Dec 2011 16:14:46 -0500
To: Arthur Barstow <art.barstow@nokia.com>
Cc: Frederick Hirsch <frederick.hirsch@nokia.com>, Thomas Roessler <tlr@w3.org>, Marcos Caceres <marcosscaceres@gmail.com>, Doug Schepers <schepers@w3.org>, Rigo Wenning <rigo@w3.org>, public-webapps <public-webapps@w3.org>, "public-xmlsec@w3.org" <public-xmlsec@w3.org>
Message-ID: <1323810886.31498.15.camel@chacal>
On Tue, 2011-12-13 at 13:14 -0500, Arthur Barstow wrote:
> Hi All,
> 
> The Widgets DigSig spec [W-DigSig] has been sitting in PR for over 4 
> months now, blocked on the Elliptic Curve PAG [ECC-PAG]. AFAICT, this 
> PAG has just started its unspecified length Fishing Expedition seeking 
> some unspecified level of funds to pay for some type of analysis that 
> will take some unknown amount of time to complete ...
> 
> Given this, and not wanting to block on the ECC PAG any longer, what are 
> the options to move widgets-digsig to REC ASAP?
> 
> Some options:
> 
> 1. Replace [XMLSig1.1] dependency with XMLSig 1.0. I presume this would 
> require a new 3-week LC but the CR could be zero-length, presumably no 
> re-testing would be required, and the only thing blocking PR->REC is the 
> length of the new CfE that would be needed.
> 
> 2. Move the tainted algorithm(s) in XMLSig1.1 to XMLSig1.Next so 
> XMLSig1.1 is not affected by the PAG and XMLSig1.1 can then continue on 
> the REC track.
> 
> 3. Others?

An other one was for the Director to decide to move the document forward
anyway because W-DigSig doesn't depend on ECC.

Thomas, any suggestion?

Philippe
Received on Tuesday, 13 December 2011 21:17:00 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 13 December 2011 21:17:01 GMT