ISSUE-83: Instantiated widget should not be able to read digital signature

digsig should not be read at runtime

Instantiated widget should not be able to read digital signature

State:
CLOSED
Product:
HISTORICAL: Widgets [Bugs and Issues are tracked via Bugzilla https://www.w3.org/Bugs/Public/describecomponents.cgi?product=WebAppsWG]
Raised by:
Jeremiah Albrant
Opened on:
2009-02-22
Description:
Need to mention somewhere that the digital signature must not be accessible by the start file once the widget is running.
Related Actions Items:
No related actions
Related emails:
  1. Re: Proposal for ISSUE-83 (from marcosc@opera.com on 2009-04-23)
  2. RE: Proposal for ISSUE-83 (from Mark.Priestley@vodafone.com on 2009-04-23)
  3. Re: Proposal for ISSUE-83 (from marcosc@opera.com on 2009-04-23)
  4. [widget-digsig] updated Widget Signature editors draft (from frederick.hirsch@nokia.com on 2009-04-22)
  5. Re: Proposal for ISSUE-83 (from Art.Barstow@nokia.com on 2009-04-22)
  6. Re: Proposal for ISSUE-83 (from marcosc@opera.com on 2009-04-21)
  7. Proposal for ISSUE-83 (from frederick.hirsch@nokia.com on 2009-04-21)
  8. [widgets] Draft Minutes from 16 April 2009 Widgets Voice Conference (from art.barstow@nokia.com on 2009-04-16)
  9. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Frederick.Hirsch@nokia.com on 2009-04-14)
  10. [widgets] Agenda for 16 April 2009 Voice Conference (from art.barstow@nokia.com on 2009-04-14)
  11. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from marcosc@opera.com on 2009-04-13)
  12. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Art.Barstow@nokia.com on 2009-04-13)
  13. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from marcosc@opera.com on 2009-04-09)
  14. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Art.Barstow@nokia.com on 2009-04-09)
  15. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from marcosc@opera.com on 2009-04-09)
  16. RE: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Mark.Priestley@vodafone.com on 2009-04-09)
  17. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Art.Barstow@nokia.com on 2009-04-07)
  18. RE: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Mark.Priestley@vodafone.com on 2009-04-03)
  19. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from frederick.hirsch@nokia.com on 2009-04-02)
  20. RE: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from Mark.Priestley@vodafone.com on 2009-04-02)
  21. Re: [widgets] Agenda for 5 March 2009 Voice Conference (from marcosc@opera.com on 2009-03-06)
  22. Re: ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from art.barstow@nokia.com on 2009-03-05)
  23. Re: [widgets] Minutes from 5 March 2009 Voice Conference (from frederick.hirsch@nokia.com on 2009-03-05)
  24. [widgets] Minutes from 5 March 2009 Voice Conference (from art.barstow@nokia.com on 2009-03-05)
  25. RE: [widgets] Agenda for 5 March 2009 Voice Conference (from BS3131@att.com on 2009-03-05)
  26. [widgets] Agenda for 5 March 2009 Voice Conference (from art.barstow@nokia.com on 2009-03-04)
  27. Re: Reminder: January 31 comment deadline for LCWD of Widgets 1.0: Packaging & Configuration spec (from marcosc@opera.com on 2009-02-22)
  28. ISSUE-83 (digsig should not be read at runtime): Instantiated widget should not be able to read digital signature [Widgets] (from sysbot+tracker@w3.org on 2009-02-22)

Related notes:

From
http://lists.w3.org/Archives/Public/public-webapps/2009JanMar/0346.html:


----------------
[mp] The hole is that signature files are excluded from the generation
of the signature values in any other signature files. This means that
if, for example, an attacker added to the widget resource a signature
file containing some malicious content, the malicious content of that
file wouldn't be covered by any of the other signatures but the widget
user agent thinks the entire widget resource is signed. This could
happen regardless of whether or not the signature file was actually
valid, or was just named according to the convention for digital
signature.

To be abused by an attacker it would either be necessary to inject a
reference to the file into the widget, which might be difficult, or to
hijack an existing reference to a signature file by swapping the
intended signature file for the attacker's signature file (with the same
name). While this later attack depends on the author providing such a
reference in their widget, there are two reasons why the author may
currently choose to do this - to get some information about the
signature to display to the user, or possibly more likely, to get around
the need to sign everything in their widget resource (I thought of this
as a way around signing everything so developers will too!).

It's not a big hole and the attacks require some "assistance" from
developers, but unless there's a reason not to it should be pretty easy
to close.

Marcos Caceres, 22 Feb 2009, 18:08:46

http://lists.w3.org/Archives/Public/public-webapps/2009JanMar/0346.html

Marcos Caceres, 22 Feb 2009, 18:09:22

Closed via the consensus on new text for the P&C spec added by Marcos on 23-Apr-2009.

Arthur Barstow, 23 Apr 2009, 10:23:46

Display change log ATOM feed

Chair, Staff Contact
Tracker: documentation, (configuration for this group), originally developed by Dean Jackson, is developed and maintained by the Systems Team <w3t-sys@w3.org>.
$Id: 83.html,v 1.1 2016/01/25 10:26:23 carine Exp $