[OpenID] Signing method for XRD

Drummond Reed drummond.reed at cordance.net
Thu Jun 18 01:06:16 UTC 2009


Hans, in your message below, did you mean, "... is it _now_ easy to avoid
all issues..."?

> -----Original Message-----
> From: general-bounces at openid.net [mailto:general-bounces at openid.net] On
> Behalf Of Hans Granqvist
> Sent: Tuesday, June 16, 2009 10:46 AM
> To: Peter Williams
> Cc: general at openid.net
> Subject: Re: [OpenID] Signing method for XRD
> 
> It seems the major hurdles to using xmldsig are "it's too hard to
> implement" and "there is no good API in the {foo, bar, baz, ...}
> language"
> 
> Since we envision a world of interconnected services, is it not easy
> to avoid all issues by creating and set up a signing/verification
> service endpoint. Internal or external, just use this service for all
> nasty xml signature needs. I've done this myself a few times and use
> it wherever http is spoken. It's pretty easy.
> 
> Hans
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general




More information about the general mailing list