W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2009

Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets]

From: Arthur Barstow <Art.Barstow@nokia.com>
Date: Tue, 7 Apr 2009 16:57:01 -0400
Message-Id: <86A550D2-2DFF-441D-A44A-94AF26E4B150@nokia.com>
Cc: "Hirsch Frederick (Nokia-CIC/Boston)" <Frederick.Hirsch@nokia.com>, Web Applications Working Group WG <public-webapps@w3.org>
To: "ext Priestley, Mark, VF-Group" <Mark.Priestley@vodafone.com>
On Apr 2, 2009, at 6:01 PM, ext Priestley, Mark, VF-Group wrote:

> Comments inline.
> FWIW my view is that if there is a valid use case for a widget being
> able to access information in a signature file, either it should  
> access
> this information using an API or we should add further restrictions to
> the widget digital signature format and processing.

Since Frederick's use cases [1] didn't convince you, what specific  
change(s) do you think is needed in the Widgets DigSig spec?

Defining an API in this spec doesn't seem like a good approach.

-Regards, Art Barstow

[1] <http://lists.w3.org/Archives/Public/public-webapps/2009AprJun/ 
Received on Tuesday, 7 April 2009 20:58:09 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:12:53 UTC