Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] from Arthur Barstow on 2009-03-05 (public-webapps@w3.org from January to March 2009)

From: Arthur Barstow <art.barstow@nokia.com>
Date: Thu, 5 Mar 2009 12:36:41 -0500
To: Mark Priestley <Mark.Priestley@vodafone.com>
Cc: Web Applications Working Group WG <public-webapps@w3.org>
Message-Id: <7D783369-D01B-441E-A711-AC57810FF625@nokia.com>

Mark - during the March 5 widgets voice conference we discussed this  
issue that you raised [1]. Marcos created this issue from the  
following e-mail thread:

  <http://lists.w3.org/Archives/Public/public-webapps/2009JanMar/ 
0521.html>

A couple of the people on the call asked for some more information,  
in particular the specific threat scenario.

We would appreciate it if you would please elaborate on your concern.

-Regards, Art Barstow

On Feb 22, 2009, at 11:53 AM, ext Web Applications Working Group  
Issue Tracker wrote:

>
> ISSUE-83 (digsig should not be read at runtime): Instantiated  
> widget should not be able to read digital signature [Widgets]
>
> http://www.w3.org/2008/webapps/track/issues/83
>
> Raised by: Mark Priestley
> On product: Widgets
>
> Need to mention somewhere that the digital signature must not be  
> accessible by the start file once the widget is running.
>
>
>

Received on Thursday, 5 March 2009 17:37:40 UTC