- From: Harry Halpin <hhalpin@w3.org>
- Date: Mon, 12 May 2014 15:57:41 +0200
- To: "Salz, Rich" <rsalz@akamai.com>, "public-webcrypto-comments@w3.org" <public-webcrypto-comments@w3.org>
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/12/2014 03:56 PM, Salz, Rich wrote: >> Do you view these comments as "formal objection"? Formal objections need to be filed by May 20th, ideally beforehand. > > When do you need an answer? > > On the one hand, I don't want to be an ass. On the other hand, you > asked for IETF review and you got it, in the form of email from > Kenny and colleagues. > > There is no risk in incorporating the security concerns into the > document; a weak mechanism is not going to suddenly "get better" > it's only going to get weaker. Given that, I do not understand such > strongly-expressed concern about putting such advice into the > current document. I am also puzzled that nobody else on the WG has > expressed any real opinion (we security types are a paranoid > bunch:). As such, I am leaning toward making this a formal > objection, but I will need to discuss with colleagues first. So, > when do you need to know? > > Thanks. > > /r$ > > -- Principal Security Engineer Akamai Technologies, Cambridge, MA > IM: rsalz@jabber.me; Twitter: RichSalz > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTcNNVAAoJEPgwUoSfMzqcgVAP/1RA1LVSrmJKlX1IGVbA99UK ZHPGQa65KmVHTUgRhpt3vDH+E41wg2K8Q0jX7QpWCVzquDwkNTPf03WB88rZfk3w atPcbF+hb+RDDU9xIA0MErF7YgupXAFPl/XaaR9ewafEvZBhFe7P/flWVauY6hH7 iQEqxkuQzEW5iCCa3CPNot9xWqVAaj5Csk5CkzB6AN15KCcU0PcfGPA4wWY6OQm0 ILOKeggWa/EWuwB+VXr4Muv0XNoAvfmhjxZoLsdwQ+W0hV3ST3t6TANJOsCQZkxd K7nKK92pAgfBoXHkjf2NnIolYVyQaUNPD6LHO6eaM/BBKDmL6kFFIjMnWBen+ViL d1tDuNIu6r3uCmBoxn5MW3eengX9Ki49POL2h5QsBMRH1o6t5LHRa32AAE8uI2kE OH2SOKH/Nl586Etqnl7YhnBGQq+wzAOZ0IvgQTE3f3RYvHnHpjPutiDNMKCac5Af rijSe5gspkrYWmAujo5FtOeQgHwWdjrIQyw1p6wq1BYt8tMQulbrWZGmPsh8NE1d tfbSlJRrASQva2zzzZz7/SSOjiX+9o9Mre4AIGX/7ug3Q7jd5CRPQLbPRCY91Tcg Avuu4m4ikZMabHTMZ+C5nycpBAxNIK5xdk5AhCCQylhQzH8/3M77Od43nqjleoje IZCSZVTgn8JQD5A83A1E =WXTv -----END PGP SIGNATURE-----
Received on Monday, 12 May 2014 13:57:50 UTC