Issue raise by Slava from Hallam-Baker, Phillip on 2003-04-04 (www-xkms@w3.org from April 2003)

From: Hallam-Baker, Phillip <pbaker@verisign.com>
Date: Fri, 4 Apr 2003 11:48:53 -0800
To:
Cc: "'www-xkms@w3.org'" <www-xkms@w3.org>
Message-ID: <CE541259607DE94CA2A23816FB49F4A301AE2263@vhqpostal6.verisign.com>

A while ago it was pointed out that the register operations were vulnerable
to a cut and paste attack so you can construct a reissue message from a
register. Two options:

1) Introduce OperationSpecifier and explain that you have to include it and
it has to match

2) Define RegisterKeyBinding, ReissueKeyBinding etc... This gives us schema
validation for free

I have written 1 but 2 is looking better, please advise.

Received on Friday, 4 April 2003 14:48:56 UTC