ISSUE-211

Derived secrets SHOULD

Make 8.3 SHOULD not must

State:
CLOSED
Product:
wsc-xit-past-062008
Raised by:
Ian Fette
Opened on:
2008-05-14
Description:
8.3 says "Any derived secret that convey a similar level of authority as the original secret it MUST also be protected at the same level as the original secret"

I propose that we change the MUST to a SHOULD, as it's just not practical for many sites.
Related Actions Items:
No related actions
Related emails:
  1. Meeting record: 2008-05-14 (from tlr@w3.org on 2008-06-06)
  2. ISSUE-211 (Derived secrets SHOULD): Make 8.3 SHOULD not must [wsc-xit] (from sysbot+tracker@w3.org on 2008-05-14)

Related notes:

2008-05-22 20:17:57: Section 8 is moving to its own item; it's a beyond June issue [Mary Ellen Zurko]

2009-01-16 20:43:32: has been removed from wsc-ui [Mary Ellen Zurko]

Changelog:

2008-05-14 12:02:39: Created issue 'Make 8.3 SHOULD not must' nickname Derived secrets SHOULD owned by Ian Fette on product wsc-xit, description '8.3 says "Any derived secret that convey a similar level of authority as the original secret it MUST also be protected at the same level as the original secret" I propose that we change the MUST to a SHOULD, as it's just not practical for many sites.' non-public [Ian Fette]

2008-05-22 20:17:57: Product changed to wsc-xit-past-062008

2009-01-16 20:43:32: Status changed to 'closed' [Mary Ellen Zurko]


Mary Ellen Zurko <mzurko@us.ibm.com>, Chair, Thomas Roessler <tlr@w3.org>, Staff Contact
Tracker, originally developed by Dean Jackson, is developed and maintained by the Systems Team <w3t-sys@w3.org>.
$Id: index.php,v 1.231 2009/11/16 15:00:54 dom Exp $