Re: [integrity]: latency tradeoffs from Frederik Braun on 2014-01-16 (public-webappsec@w3.org from January 2014)

From: Frederik Braun <fbraun@mozilla.com>
Date: Thu, 16 Jan 2014 09:32:54 +0100
To: public-webappsec@w3.org
Message-ID: <52D79936.5040902@mozilla.com>

On 15.01.2014 19:48, Devdatta Akhawe wrote:
> I tend to agree with Adam. Latency is really important and progessive
> authentication is a good way to do that. Merkle trees seem like the
> right construct, unless another browser vendor disagrees and wants
> some other algorithm.

Yes, Merkle trees are a nice tool. Thanks for this suggestion, Adam.

> 
> My only concern: I am not sure whether we want to make this a
> requirement for the first version of the spec or make it a requirement
> in the second version.
> 

For the sake of simplicity & progress, I would tend to go with hashes
*for now*. I am fine with including this as something optional though.

Received on Thursday, 16 January 2014 08:33:22 UTC