[saag] Fwd: [widgets] New WD of Widgets 1.0: Digital Signatures spec published on March 31

Thomas Roessler <tlr@w3.org> Fri, 03 April 2009 09:13 UTC

Return-Path: <tlr@w3.org>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost []) by core3.amsl.com (Postfix) with ESMTP id F3F693A67B7 for <saag@core3.amsl.com>; Fri, 3 Apr 2009 02:13:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.002
X-Spam-Status: No, score=-10.002 tagged_above=-999 required=5 tests=[AWL=-0.396, BAYES_00=-2.599, DATE_IN_PAST_12_24=0.992, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([]) by localhost (core3.amsl.com []) (amavisd-new, port 10024) with ESMTP id DSC3L8Hx3vZL for <saag@core3.amsl.com>; Fri, 3 Apr 2009 02:13:13 -0700 (PDT)
Received: from homer.w3.org (ssh.w3.org []) by core3.amsl.com (Postfix) with ESMTP id BD8A93A68C7 for <saag@ietf.org>; Fri, 3 Apr 2009 02:13:02 -0700 (PDT)
Received: from iCoaster.does-not-exist.org (homer.w3.org []) by homer.w3.org (Postfix) with ESMTP id 5E18C4EF69; Fri, 3 Apr 2009 05:14:04 -0400 (EDT)
Received: from localhost ([]) by iCoaster.does-not-exist.org with esmtp (Exim 4.66) (envelope-from <tlr@w3.org>) id KHHGF1-001VIR-PY; Thu, 02 Apr 2009 18:57:01 +0200
Message-Id: <E8598CF1-BEA8-4E38-BD1B-B473B24FAA5A@w3.org>
From: Thomas Roessler <tlr@w3.org>
To: saag@ietf.org
Content-Type: multipart/alternative; boundary=Apple-Mail-49-538700211
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Thu, 2 Apr 2009 18:57:01 +0200
References: <120077F4-0B65-4032-B5A2-FA8FA1330695@nokia.com>
X-Mailer: Apple Mail (2.930.3)
Cc: Arthur Barstow <art.barstow@nokia.com>, Frederick Hirsch <Frederick.Hirsch@nokia.com>
Subject: [saag] Fwd: [widgets] New WD of Widgets 1.0: Digital Signatures spec published on March 31
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Apr 2009 09:13:14 -0000


Note that the document is referencing an upcoming version of XML  
Signature, which is currently in Working Draft status.

There is an expectation that this profile (not the base spec) might  
undergo a W3C last call relatively soon, so this would be a good time  
to review the specification.

Thomas Roessler, W3C  <tlr@w3.org>

Begin forwarded message:

> From: Arthur Barstow <art.barstow@nokia.com>
> Date: 2 April 2009 18:21:19 GMT+02:00
> To: public-webapps <public-webapps@w3.org>
> Subject: [widgets] New WD of Widgets 1.0: Digital Signatures spec  
> published on March 31
> Archived-At: <http://www.w3.org/mid/120077F4-0B65-4032-B5A2-FA8FA1330695@nokia.com 
> >
> On March 31 a new WD of the Widgets 1.0 Digital Signature spec was  
> published and announced on the W3C's home page:
> [[
> 2009-03-31: The Web Applications Working Group has published a  
> Working Draft of Widgets 1.0: Digital Signatures. This document  
> defines a profile of the XML Signature Syntax and Processing 1.1  
> specification to allow a widget package to be digitally signed.  
> Widget authors and distributors can digitally sign widgets as a  
> trust and quality assurance mechanism. Prior to instantiation, a  
> user agent can use the digital signature to verify the integrity of  
> the widget package and perform source authentication. This document  
> specifies conformance requirements on both widget packages and user  
> agents.
> ]]
> Please review this new WD as soon as possible, preferably within the  
> next two weeks:
> <http://www.w3.org/TR/2009/WD-widgets-digsig-20090331/>
> -Regards, Art Barstow