ISSUE-189 (SharedSecretWithWhom): shared secret from UA of web site? [wsc-xit] from Web Security Context Working Group Issue Tracker on 2008-03-19 (public-wsc-wg@w3.org from March 2008)

From: Web Security Context Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Wed, 19 Mar 2008 15:43:44 +0000 (GMT)
To: public-wsc-wg@w3.org
Message-Id: <20080319154344.C78D5BEEC@nelson.w3.org>

ISSUE-189 (SharedSecretWithWhom): shared secret from UA of web site? [wsc-xit]

http://www.w3.org/2006/WSC/track/issues/

Raised by: Stephen Farrell
On product: wsc-xit


The current 7.1.2 [1] seems to be vague as to whether the
shared secret is shared with the UA or site.

Would it be a good/bad idea to ask that this be made clear
to the user (where "this" = "whether the secret is between
user and UA or user and site").

TLR: Reckons that MEZ's input is needed here since she edited
this last.

[1] http://www.w3.org/2006/WSC/drafts/rec/rewrite.html#sharedsecret-goodpractice

Received on Wednesday, 19 March 2008 15:44:27 UTC