[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

RE: XHTML adoption curve

• To: "Xml-Dev@Lists. Xml. Org (E-mail)" <xml-dev@l...>
• Subject: RE: XHTML adoption curve
• From: Doug Ransom <Doug.Ransom@p...>
• Date: Wed, 17 Apr 2002 13:48:43 -0700

> -----Original Message-----
> From: Doug Ransom 
> Sent: Wednesday, April 17, 2002 1:48 PM
> To: 'Peter V. Mikhalenko'
> Subject: RE:  XHTML adoption curve
> 
> 
> SSL can be used to provide authenticated transfer of the 
> document, but it also involves encryption (expensive) and 
> specific web server configurations.  In contrast, a content 
> developer could use their x.509 certificate to sign their 
> HTML page during editing, so there are no specific web server 
> integration issues -- the author of the document is 
> seperately identified from the owner of the web site.  
> 
> By having signed documents in a browser, users can verify the 
> author of the document without SSL.  Companies with 
> information, like etrade, might use this technology so people 
> know the data they are looking at is real, not faked by 
> someone who registered etrae.com etc. If the signing 
> technology is available and big delivery firms like etrade 
> can get value out of it, browser vendors are likely to 
> support signature verification -- they already can deal with 
> PKI anyway so the leap is not huge.
> 
> X.509 certificates can be used for many PKI purposes beyond 
> SSL -- I use free ones from thawte for secure email,they are 
> used for code signing, etc.  X.509 certs will be used for XML 
> signing, so an XHTML module would be a good start.
> 
> 
> 
> > -----Original Message-----
> > From: Peter V. Mikhalenko [mailto:xml-dev@s...]
> > Sent: Monday, April 15, 2002 5:17 PM
> > To: Doug Ransom
> > Subject: Re:  XHTML adoption curve
> > 
> > 
> > Hello, Doug!
> > 
> >  DR> I thought of a little carrot that might help improve the HTML
> >  DR> developer affinity for XHTML:  Signed XHTML.  If XHTML 
> pages were
> >  DR> signed in a specific manner with using x.509 based 
> PKI, browsers
> >  DR> could inform users they can trust the content of the page.
> > 
> > So what about SSL Certificates (using X.509)? Browsers DO 
> > inform users they
> > can trust the content of the page. Yeah, they are working 
> only in the
> > transport layer, but I think it is a good idea to certify the 
> > source, not
> > the document.
> > 
> > 
> > __
> > Peter V. Mikhalenko
> > Lead Developer
> > Sigent Interactive Agency
> > peter@s...
> > 
> 

• Prev by Date: RE: XML Schema WROX Book
• Next by Date: RE: XHTML adoption curve
• Previous by thread: Re: XHTML adoption curve
• Next by thread: RE: XHTML adoption curve
• Index(es):
  • Date
  • Thread