El jue, 13-03-2008 a las 16:13 -0700, Brian Eaton (JIRA) escribió:
> [ 
> https://issues.apache.org/jira/browse/SHINDIG-92?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
>  ]
> 
> Brian Eaton updated SHINDIG-92:
> -------------------------------
> 
>     Attachment: nocipher.patch
> 
> This patch removes the encryption functions, but leaves authentication 
> (HMAC-SHA1) in place.
> 


If encryption is useful, I'd say that we should follow the export
procedure and have it done early, rather than back off now and have to
fill the forms later. I posted the URI because I have a few days with a
lot of work but I didn't want to let it pass through when I spotted it,
and crypto audit/assessment has been an active item in several apache
lists lately.

Regards
Santiago

> > Crypto utility functions for gadget server
> > ------------------------------------------
> >
> >                 Key: SHINDIG-92
> >                 URL: https://issues.apache.org/jira/browse/SHINDIG-92
> >             Project: Shindig
> >          Issue Type: Improvement
> >          Components: Gadgets Server - Java
> >            Reporter: Brian Eaton
> >            Assignee: Kevin Brown
> >         Attachments: crypto.patch, nocipher.patch
> >
> >
> > Shindig will eventually need some crypto utility functions.  I've put some 
> > together based on JCE and the Apache Codec libraries.
> 
-- 
Santiago Gala
http://memojo.com/~sgala/blog/

Reply via email to