Re: future of Identity on the Web from Edward O'Connor on 2011-10-25 (public-identity@w3.org from October 2011)

From: Edward O'Connor <eoconnor@apple.com>
Date: Tue, 25 Oct 2011 13:20:59 -0700
To: public-identity@w3.org
Message-id: <m2ehy07rh0.fsf@eoconnor.apple.com>

Hi Henry,

Harry wrote:
>> WebID was not viewed as very convincing by the vast majority of
>> attendees at the workshop and there were serious security concerns
>> raised by Brad Hill.

And you replied:
> you keep saying that Harry, but I don't think I know of these security
> concerns.

In [1] you cite Brad's primary concern, though I can't find his original
email. You quote him as saying

> Primarily, I believe that interrupting the TLS handshake as part of
> the protocol is a complete non-starter for a variety of reasons.

…and I think this objection of his still stands.


HTH,
Ted

1. http://lists.w3.org/Archives/Public/public-xg-webid/2011May/0127.html

Received on Tuesday, 25 October 2011 20:21:27 UTC