W3C home > Mailing lists > Public > w3c-dist-auth@w3.org > July to September 1996

RE: Draft WG charter

From: Yaron Goland <yarong@microsoft.com>
Date: Wed, 18 Sep 1996 09:09:26 -0700
Message-ID: <c=US%a=_%p=msft%l=RED-44-MSG-960918160926Z-14155@tide21.microsoft.com>
To: "'Jim Whitehead'" <ejw@ics.uci.edu>, "'Ben Laurie'" <ben@gonzo.ben.algroup.co.uk>
Cc: "'w3c-dist-auth@w3.org'" <w3c-dist-auth@w3.org>
Down that path lay madness.
			Yaron (We Need a Non-Versioning client and Security Sub-Group) Goland

From:  Ben Laurie[SMTP:ben@gonzo.ben.algroup.co.uk]
Sent:  Wednesday, September 18, 1996 7:54 AM
To:  Jim Whitehead
Cc:  w3c-dist-auth@w3.org
Subject:  Re: Draft WG charter

Jim Whitehead wrote:
> Ben Laurie wrote:
> >>
> >> Here is a proposed draft charter for this working group, which will
> >> be discussed at the Cambridge meeting.  Especially if you are
> >> not attending, I welcome your feedback.
> >
> >Pardon me if I've missed something but there seems to be no mention whatsoever
> >of security/authentication/permissions in this draft.
> >
> >BTW, which Cambridge?
> >
> Good points.
> Security is an item we are going to leave up to other groups to provide for
> us.  However, our draft charter should make this clear.
> We have been operating under the assumption that MD5 authentication would
> be sufficient for our needs -- if something better than MD5 comes along, we
> would hope we could use it.  Again, the draft should state this.
> Aside from locking, our work is *not* going to address access control or
> permissions.  This is a huge issue, and I feel that we would never finish
> if we had to produce a consensus access control draft.  This is an
> important issue, and one which will hopefully be addressed by *another*
> working group.  But, the draft should make mention of this.

Fair enough. But there is an aspect of permissioning that probably should be
addressed by this WG, namely, the ownership/permissions of the file (or
equivalent entity) on the server. Not what they should be, of course, but how
one sets them.



Ben Laurie                  Phone: +44 (181) 994 6435
Freelance Consultant and    Fax:   +44 (181) 994 6472
Technical Director          Email: ben@algroup.co.uk
A.L. Digital Ltd,           URL: http://www.algroup.co.uk
London, England.            Apache Group member (http://www.apache.org)
Received on Wednesday, 18 September 1996 12:12:42 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 20:01:08 UTC