Signing Documents (Was: ten years of www-talk!)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm about ready to tackle the signing of web documents again.  After
reviewing the discussion last April, the best suggestion I've received is
to use HTTP content-negotiation a la <http://www.w3.org/TR/photo-rdf/>.
That is to have some sort of mime-type for a signature that could be
retrived instead.

This still strikes me as a poor solution because a document and it's
signature are different resources, and I think that content-negotiation is
for determining the format of the same resource.

There was some mention of HTTP extensions somewhere.  Anyone have comments
on this?

The solution really ought to be implemented as an HTTP solution so that
all resources can be signed.

- -- 
Russell O'Connor                           roconnor@math.berkeley.edu
           <http://www.math.berkeley.edu/~roconnor/>
``This is not a time, as it is never a time, to seek vengeance, but a
time to seek the courage to forgive'' -- George W. Bush
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (SunOS)
Comment: For info see http://www.gnupg.org

iD8DBQE75cwSZG3em5NXM14RAkgzAJ4jslG0uyWZNr4ojeRoyjmn0ipLjACfXTJi
n9LSm+ThUH66ADpzSjdpkXA=
=m9/H
-----END PGP SIGNATURE-----

Received on Sunday, 4 November 2001 18:15:33 UTC