W3C home > Mailing lists > Public > public-webappsec@w3.org > November 2016

Re: Signed and indexed packaging proposal.

From: Michael[tm] Smith <mike@w3.org>
Date: Fri, 18 Nov 2016 13:34:23 +0900
To: Martin Thomson <mt@mozilla.com>
Cc: Mike West <mkwst@google.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>, Brad Hill <hillbrad@gmail.com>, yan zhu <yan@mit.edu>, Dmitry Titov <dimich@google.com>, Alex Russell <slightlyoff@google.com>
Message-ID: <20161118043423.v3pgo5zzy7sbz3rf@sideshowbarker.net>
Martin Thomson <mt@mozilla.com>, 2016-11-18 11:08 +0900:
> Archived-At: <http://www.w3.org/mid/CAPLxc=UbbKK96vyMfFtT0t+iPRZZvwUnoU+r3WmYydK-W3FibA@mail.gmail.com>
> 
> On Thu, Nov 17, 2016 at 8:39 PM, Mike West <mkwst@google.com> wrote:
> > Dmitry from the Chrome team has put together a packaging proposal at
> > https://discourse.wicg.io/t/proposal-packaging-for-the-web-signed-and-indexed/1827
> > that's relevant to this group's interests. Review would be ever so much
> > appreciated.
> 
> The link to the proposal is broken in a way I was unable to recover,
> so I can't comment.

It’s cached still here:

https://webcache.googleusercontent.com/search?q=cache:0bvPhAv9ilQJ:https://github.com/dimich-g/webpackage

(Scroll down; the proposal’s a README.md titled “Web Packaging Format Explainer”
which was in a github repo.)

> I abandoned signing for a variety of reasons, so I'd caution that this
> isn't trivial to get right.

Since the “Web Packaging Format Explainer” document is just a very high-
level proposal, it doesn’t really have sufficient details that can be
evaluated about how the signing is meant to work.

  —Mike

-- 
Michael[tm] Smith https://people.w3.org/mike

Received on Friday, 18 November 2016 04:34:54 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:21 UTC