[OpenID] XRI TC - An Outsiders perspective
SitG Admin
sysadmin at shadowsinthegarden.com
Sun Jul 12 21:07:28 UTC 2009
>Whenever a new technology is released people react in one of two ways.
>1) Awesome! This is so simple. How come we never thought of this?
>2) Jeez! This is so complicated! Do I need this?
Or the oft-hushed "1.5) Finally, was wondering when someone would put
this into production." ;)
>I was suggesting we dont use XMLDSig at all. Maybe we should look at PKCS7
>which is available everywhere. Also transporting a signed document is not a
>problem if we were to select a proper Content Type.
And then translate "on the spot" every time we need to parse the
file? In the past, I have had to port a document between multiple
computers, operating systems, and applications, to get it into a
readable form, because the final (preferred) reader was not directly
compatible with the original format. XMLDSig provides a way for each
layer to translate it to "native" format as needed, without affecting
the ability of any layer (even the last) to verify its signature
later on.
-Shade
More information about the general
mailing list