RE: [widget-digsig] Updated Widget Signature editors draft

 
"I would like to see some text cautioning authors not to rely on this algorithm, since it is optional in user agents."

Agreed - in fact I think a general statement about use of optional algorithms would be beneficial


-----Original Message-----
From: public-webapps-request@w3.org [mailto:public-webapps-request@w3.org] On Behalf Of Marcos Caceres
Sent: 24 April 2009 09:46
To: Frederick Hirsch
Cc: Web Applications Working Group WG
Subject: Re: [widget-digsig] Updated Widget Signature editors draft

Hi Frederick,
Thanks for updating the spec! comment below.

On Fri, Apr 24, 2009 at 3:14 AM, Frederick Hirsch <frederick.hirsch@nokia.com> wrote:
> I have updated the Widget Signature draft to reflect decisions on 
> today's call, as follows:
>
> Added ECDSAwithSHA256 as SHOULD  signature algorithm

I would like to see some text cautioning authors not to rely on this algorithm, since it is optional in user agents.

> Removed editor  notes re feedback on signature algorithms Removed 
> editor note with Signature Properties reference, since we've removed 
> section 9 Added FIPS-186-3 reference
>
> http://dev.w3.org/2006/waf/widgets-digsig/
>
> Note that we will need to update the Signature Properties reference, 
> when that specification is published with this specification.
>
> regards, Frederick
>
> Frederick Hirsch
> Nokia
>
>
>
>
>



--
Marcos Caceres
http://datadriven.com.au

Received on Friday, 24 April 2009 09:24:49 UTC