- From: Milton M. Anderson <miltonma@gte.net>
- Date: Thu, 23 Sep 1999 00:35:18 -0400
- To: "David Burdett" <david.burdett@commerceone.com>, "DJ" <jevans@differential.com>, "Winchel 'Todd' Vincent, III" <winchel@mindspring.com>, "Andreas Siglreithmayr" <andreas.siglreithmayr@ixos.de>, "W3c-Ietf-Xmldsig (E-mail)" <w3c-ietf-xmldsig@w3.org>
- Cc: "IETF Trade (E-mail)" <ietf-trade@lists.eListX.com>
-----Original Message----- From: David Burdett <david.burdett@commerceone.com> Date: Wednesday, September 22, 1999 11:39 PM Subject: RE: How to sign several resources (XML and XSL)? >... otherwise how do you know the context for the XML data? > >You know the context because interpretation of the XML data is being done by >software from a presumably reliable source to do the interpretation that is >built according to a specification that describes the semantics of data > >... I now feel that we're getting very close to the topic of "trusted" >applications and I'm not sure we want to go there ... Even if XSL is signed, you still have to assume a "trusted" browser. It's impossible not to go there... Milt
Received on Thursday, 23 September 1999 00:31:29 UTC