W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > July to September 1999

Re: How to sign several resources (XML and XSL)?

From: Milton M. Anderson <miltonma@gte.net>
Date: Thu, 23 Sep 1999 00:35:18 -0400
Message-ID: <015001bf057d$0bb18f20$7bf5fed0@hkyxztrz>
To: "David Burdett" <david.burdett@commerceone.com>, "DJ" <jevans@differential.com>, "Winchel 'Todd' Vincent, III" <winchel@mindspring.com>, "Andreas Siglreithmayr" <andreas.siglreithmayr@ixos.de>, "W3c-Ietf-Xmldsig (E-mail)" <w3c-ietf-xmldsig@w3.org>
Cc: "IETF Trade (E-mail)" <ietf-trade@lists.eListX.com>

-----Original Message-----
From: David Burdett <david.burdett@commerceone.com>
Date: Wednesday, September 22, 1999 11:39 PM
Subject: RE: How to sign several resources (XML and XSL)?


>... otherwise how do you know the context for the XML data?
>
>You know the context because interpretation of the XML data is being done
by
>software from a presumably reliable source to do the interpretation that is
>built according to a specification that describes the semantics of data
>
>... I now feel that we're getting very close to the topic of "trusted"
>applications  and I'm not sure we want to go there ...

Even if XSL is signed, you still have to assume a "trusted" browser.
It's impossible not to go there...

Milt
Received on Thursday, 23 September 1999 00:31:29 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:07 GMT