[Bug 25607] Need to advise authors about security considerations

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25607

--- Comment #32 from Harry Halpin <hhalpin@w3.org> ---
Rich Salz and others,

   We think, given that the Working Group may have a finite lifespan and the
crytographic landscape does indeed change, that the CFRG would be the right
place to maintain the security considerations per algorithm.

   I would propose that once a suitable document is created as an IETF RFC, it
would then be linked to the Web Crypto spec, with appropriate text to encourage
developer to read the RFC. 

 Would an informational RFC, based on Graham and Rich's analysis but maintained
by the CFRG, on security considerations per algorithm satisfy this comment
without formal objection? 

      cheers,
          harry

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Monday, 28 July 2014 15:46:02 UTC