ISSUE-211 (Derived secrets SHOULD): Make 8.3 SHOULD not must [wsc-xit] from Web Security Context Working Group Issue Tracker on 2008-05-14 (public-wsc-wg@w3.org from May 2008)

From: Web Security Context Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Wed, 14 May 2008 12:02:40 +0000 (GMT)
To: public-wsc-wg@w3.org
Message-Id: <20080514120240.0921CBF43@nelson.w3.org>

ISSUE-211 (Derived secrets SHOULD): Make 8.3 SHOULD not must [wsc-xit]

http://www.w3.org/2006/WSC/track/issues/

Raised by: Ian Fette
On product: wsc-xit

8.3 says "Any derived secret that convey a similar level of authority as the original secret it MUST also be protected at the same level as the original secret"

I propose that we change the MUST to a SHOULD, as it's just not practical for many sites.

Received on Wednesday, 14 May 2008 12:03:14 UTC