Re: [pki-tc] Transaction-PKI - Indefinitely put on hold

[Arshad Noor <arshad.noor@strongauth.com>]

Anders,

You are probably aware that this project is within the scope of
the Applications Guidelines subcommitee.

You also know that the AGSC is going to start discussing this
project in detail, starting the first week of February, where all
such issues will be debated.

Can you please post AGSC-related questions to just the AGSC alias,
and/or hold your questions for the AGSC meeting, rather than waste
the TC's bandwidth in this manner?  It does not serve the TC's,
the AGSC's nor your own purpose to have these e-mails show up on
the TC alias, until we have a consensus in the AGSC and specific
recommendations for the TC to vote on.

If you are unfamiliar with how subcommitees must work in relation
to the TC, you should familiarize yourself with the process.
(http://www.oasis-open.org/committees/process.php).

Arshad Noor
StrongAuth, Inc.


Anders Rundgren wrote:
> http://www.oasis-open.org/committees/download.php/16304/agsc-tpki-requirements-00.txt
>  
> /"3) The signing capability must be native in the browser; i.e.
>    there must be no downloaded applets or locally installed
>    plug-ins"/
> // 
> /"6) The capability must work with all major browsers - Firefox,
>    MSIE, Opera and Safari;"
> /
> // 
> // 
> If requirement #3 is combined with requirement #6, which we must assume 
> is appropriate to do, we run into an interesting situation since MSIE 
> (Microsoft's Internet Explorer) in its current 6.x version, without 
> installing any "forbidden" extension code, AFAIK, is actually not able 
> to sign anything.
>  
> Fortunately some PKI-TC members have reportedly spotted a person who 
> will show us "wannabe" browser gurus, that with a some JavaScript 
> trickery from IBM, MSIE can indeed do things that not even Microsoft 
> knew it could.
>  
>  
> ------------------------------------------------------------------------
> Having requested more information on this since months back, I have a 
> feeling that this person is not for real, and that we are actually just 
> waiting, and most likely for nothing.
> ------------------------------------------------------------------------
>  
>  
> Anders Rundgren
>  
>