[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Embedded certificate image
So, with all things taken into account, what is your opinion on what we
Do you argue that we should ignore the feature because it may enhance hash
On 09-07-30 5:32 PM, "Timothy J. Miller" <tmiller@xxxxxxxxx> wrote:
> Stefan Santesson wrote:
>> However, I can't escape that it feels a bit warped if we abandon useful
>> features because we must design protocols to resist weak hashes instead of
>> making sure that we can and do use adequate hash algorithms.
> It's a risk-management decision, in the end. The question is, whose
> risk is it? The protocol designer's, or the end user's?
>> On the second point, the data in both SVG and PDF/A are highly structured.
>> SVG is for example an XML based vector graphic language.
> I can bury arbitrary amounts of unstructured data in both SVG and PDF/A.
> SVG allows the same RFC2397 data URLs that you were discussing
> previously, and you can embed fonts in both PDF/A (it's actually
> required) and SVG. :)
> -- Tim