Re: Atom protocol and digital signatures

[James M Snell]

Antone Roundy wrote:
> 
> Yeah, I'm still lurking here.
> 
> First, let me state the obvious: a signature enables you to verify that
> the data you received hasn't been changed since it was signed by a
> particular entity.  It seems to me that there are a few things we might
> want to do with that ability:
> 
> [snip]
> 2) Verify that the data is as it was when produced by the original
> creator (would require preservation of the signature).
> 
> [snip]
> From what others have said, #2 doesn't sound possible.  #1 clearly is
> possible.  So what about #3?  Might something like this be done?
> 
> [snip]

#2 is possible so long as the server is implemented to do it.  The
client cannot make any blind assumptions about what the server will do.
 Before the client attempts to interact with the server, it had better
know what the server will do.

- James