[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: PaceSecurityServices & Digest auth
On Wed, 30 Jun 2004 18:44:40 -0700, Ezra Cooper <ezra@xxxxxxxxxxxx> wrote:
I'd like to express support for specifying some authentication method(s)
for use with Atom
As a matter of fact, I think Atom not only should, but must provide some
sort of security guidelines, including authentication (but maybe stuff
including encryption of sensitive information etc as well). Why? As RFC
3470 says:
Given the lack of security services in XML, it is imperative that
protocol specifications mandate additional security services to
counter common threats and attacks; the specific required services
will depend on the protocol's threat model.
So, Atom SHOULD define some sort of authentication method in the
specification, or at least give some references.
--
Asbjørn Ulsberg -=|=- asbjornu@xxxxxxxxxxx
«He's a loathsome offensive brute, yet I can't look away»