Re: [oauth] Another Charter Text Update

["Hannes Tschofenig" <[e-mail]>]

Hi Stephen, 

>> Furthermore, OAuth 1.0 defines three signature methods used 
>to protect 
>> requests, namely PLAINTEXT, HMAC-SHA1, and RSA-SHA1. The group will 
>> work on new signature methods and will describe the 
>environments where 
>> new security requirements justify their usage. Existing signature 
>> methods will not be modified but may be dropped as part of the 
>> backwards compatible profiling activity. The applicability 
>of existing 
>> and new signature methods to protocols other than HTTP will 
>be investigated.
>
>Note that the term "signature" here is used consistently with 
>OAuth 1.0 and encompasses both asymmetric digital signatures, 
>symmetric authentication and even use of a plaintext secret. 
>The WG may decide to modify this terminology as part of its 
>work, so keeping the existing usage is correct at this point in time.

Do you think that the term "signature" needs to be clarified given that I
mention the three signature methods available in OAuth 1.0 the same
paragraph? 

Ciao
Hannes