Below is the important part of a mail i send to the list last week. I got no replies to it at the time, probably due to holidays and everything, but since it might be important for doing things correctly and in the apache way, I'm reposting it:

On May 2, 2008, at 2:52 AM, Chris Chabot wrote:

Ps i remember we had went thru some song and dance to be able to include crypto in shindig (somewhere mid/end of march). The result was that we added a notice in our NOTICE file about the crypto functions:

http://svn.apache.org/viewvc/incubator/shindig/trunk/NOTICE?revision=639568&view=markup

In this notice it lists which cryptography actions are present in shindig it seems: The following provides more details on the included cryptographic software: Apache Shindig interfaces with the Java JCE APIs to provide digital signing and encryption of messages using the AES, SHA1, and HMAC- SHA1 standards. Apache Shindig interfaces with the OAuth library <http://http://code.google.com/p/oauth/ > to provide digital signing of messages according to the OAuth standard. So should i add a bit like: "Apache Shindig's PHP code interfaces with PHPs mcrypt API's to provide encryption of messages using the AES and HMAC-SHA1 standards, and uses PHPs sha1function to provide digital signing" ?

Reply via email to