Re: 2025-08-20 WebAppSec WG Agenda

On Wed, Aug 20, 2025 at 8:41 AM Mike West <mkwst@google.com> wrote:
> Signature-based Integrity (@mikewest)
> Status update. Ready for PRs against SRI?
> Inline Integrity interest?

Hey Mike, speaking as one of the authors of the HTTP Message
Signatures spec, and having read through the proposal, I'm just
registering general interest in inline integrity. I see why it's
useful, and I like the way you've profiled HTTP Message Signatures.

As a company, we have general interest in the technology because it
would allow us to provide some stronger level of software supply chain
security for the Web-based digital wallets we are developing in the
Verifiable Credentials ecosystem.

If you choose to go forward, and if the WG would find it useful, I'm
happy to provide some reviews from that perspective.

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
https://www.digitalbazaar.com/

Received on Wednesday, 20 August 2025 17:42:49 UTC