Subject: [http-auth] HTTP Signatures security considerations

From: Manu Sporny <[email-masked]>
Date: Tue, 11 Jun 2013 22:44:03 -0400

I took about two hours today to start the Security Considerations for
HTTP Signatures document. It has a very long way to go. The latest
editor's draft can be found here:

https://payswarm.com/specs/source/http-signatures-audit/

We're going to be discussing this in more detail during the call
tomorrow. Once we're done with the security audit of the spec, we can
fix up any issues that we find in the main spec text and ask for a more
public review of the complete spec.

-- manu

-- 
Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
Founder/CEO - Digital Bazaar, Inc.
blog: Meritora - Web payments commercial launch
http://blog.meritora.com/launch/