ATSC and CEA are developing standards that include the ability to download
digital signed applications.  Their current specifications reference the W3C
Recommendation for XML Digital Signature for Widgets (18 April 2013).
However, the associated Widgets Digital Signature Namespace
(http://www.w3.org/ns/widgets-digsig/) contains a statement that
"Implementers should be aware that this document is not stable." which has
raised questions as to the stability and suitability of referencing Widget
DigSig.  The alternative would be to reference XAdES with the C and T forms
to allow for the inclusion of timestamp and certificate revocation
information which are not included in Widget DigSig.

I would be pleased to receive any information regarding the stability of
Widget DigSig and whether referencing XAdES would provide a better
alternative.

Thank-you,

Andrew Twigger

Reply via email to