Re: Standard Extensions
Gavin Brown <[email protected]>
| Newsgroups | gmane.ietf.provreg |
|---|---|
| Message-ID | <[email protected]> |
On 25/01/2012 00:02, Jay Daley wrote: > > On 19/01/2012, at 1:50 AM, Hollenbeck, Scott wrote: > > Two extensions that are on my todo list to write up but never get to the top: > > 1. Cryptographic signatures. Lots of XML apps do this using a variety of mechanisms: > > - PGP in special tags <pgp></pgp> > - S/MIME as used in XMPP (Jabber) > - SAMLv2.0 HTTP POST 'SimpleSign’ Binding > - Detached PGP signatures (as per .nz DNRS protocol) > - but not XML-Dsig – complete disaster (http://www.cs.auckland.ac.nz/~pgut001/pubs/ xmlsec.txt) I had a stab at an Internet-Draft for this: https://raw.github.com/jodrell/draft-brown-eppSig/master/draft-brown-eppsig.txt There's PHP code that implements signing and validation here: https://github.com/jodrell/draft-brown-eppSig/tree/master/tests it uses XML-DSig, which I accept has some issues. G. -- Gavin Brown Chief Technology Officer CentralNic Ltd Innovative, Reliable and Flexible Registry Services for ccTLD, gTLD and private domain name registries https://www.centralnic.com/ CentralNic Ltd is a company registered in England and Wales with company number 4985780. Registered Offices: 35-39 Moorgate, London, EC2R 6AR. _______________________________________________ provreg mailing list [email protected] https://www.ietf.org/mailman/listinfo/provreg