Subject: Re: [websec] WEBSEC and The Need for More Than DNSSEC

From: Tobias Gondrom <[email-masked]>
Date: Mon, 01 Nov 2010 17:23:02 +0000

I agree with Jeff in that this is out of scope of the current websec
charter, especially as it fits nicely with the frame of NEA's charter:
http://datatracker.ietf.org/wg/nea/charter/

Kind regards, Tobias
chair of websec

On 10/29/2010 12:05 AM, =JeffH wrote:
> > Some minimal standard of
> > compliance, such as the use of digital signatures for the core
> > components of the browser or server software might represent WEBSEC
> > level one (1) compliance.
> > ...
> > The use of digital signatures in establishing the integrity of the
> > two sides of the client-server relationship
>
> This is entirely out-of-scope for the websec wg. You should perhaps go
> investigate the work occuring in the NEA (network endpoint assessment)
> working group <http://tools.ietf.org/wg/nea/charters>.
>
> Our chartered scope for websec is HTTP applications security (modulo
> some scope restrictions), in a protocol-specific on-the-wire sense.
>
> =JeffH
>
>
>
>
> _______________________________________________
> websec mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/websec