[WRAP] Wrap Artifact Binding/Mobile Profile
Breno de Medeiros
breno at google.com
Tue Feb 16 14:53:16 UTC 2010
On Tue, Feb 16, 2010 at 04:22, John Bradley <ve7jtb at ve7jtb.com> wrote:
> I suspect the advantage to extending the association is more political,
> that way you can call it an extension.
I could, but I'd be fabricating. The association request is not extensible.
> I think practically it is better to keep the exchange of long term secrets
> (Association) separate from the artifact resolution process.
I agree.
> If we want to do per request shared secrets say SHA256 vs re-using the long
> term one I don't have a big problem with that.
> I don't yet see a super compelling reason for it though.
> John B.
Ditto.
More information about the specs
mailing list