Mark - during the March 5 widgets voice conference we discussed this
issue that you raised [1]. Marcos created this issue from the
following e-mail thread:
<http://lists.w3.org/Archives/Public/public-webapps/2009JanMar/
0521.html>
A couple of the people on the call asked for some more information,
in particular the specific threat scenario.
We would appreciate it if you would please elaborate on your concern.
-Regards, Art Barstow
On Feb 22, 2009, at 11:53 AM, ext Web Applications Working Group
Issue Tracker wrote:
ISSUE-83 (digsig should not be read at runtime): Instantiated
widget should not be able to read digital signature [Widgets]
http://www.w3.org/2008/webapps/track/issues/83
Raised by: Mark Priestley
On product: Widgets
Need to mention somewhere that the digital signature must not be
accessible by the start file once the widget is running.
