[OpenID] XRI TC - An Outsiders perspective

SitG Admin sysadmin at shadowsinthegarden.com
Sun Jul 12 21:07:28 UTC 2009


>Whenever a new technology is released people react in one of two ways.
>1) Awesome! This is so simple. How come we never thought of this?
>2) Jeez! This is so complicated! Do I need this?

Or the oft-hushed "1.5) Finally, was wondering when someone would put 
this into production." ;)

>I was suggesting we dont use XMLDSig at all. Maybe we should look at PKCS7
>which is available everywhere. Also transporting a signed document is not a
>problem if we were to select a proper Content Type.

And then translate "on the spot" every time we need to parse the 
file? In the past, I have had to port a document between multiple 
computers, operating systems, and applications, to get it into a 
readable form, because the final (preferred) reader was not directly 
compatible with the original format. XMLDSig provides a way for each 
layer to translate it to "native" format as needed, without affecting 
the ability of any layer (even the last) to verify its signature 
later on.

-Shade



More information about the general mailing list