Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove line on switching VDSes #21

Merged
merged 1 commit into from
Aug 6, 2024
Merged

Remove line on switching VDSes #21

merged 1 commit into from
Aug 6, 2024

Conversation

felixlinker
Copy link
Contributor

I suggest removing the line on migrating between VDSes. I think it's good that the draft addresses an overlap in VDPs. However, I fear that the line I suggest removing might invite people to not worry about security. I think it could be parsed as: "Probably, switching works."

Without the line, I think the draft now emphasizes that (a) you shouldn't expect that overlap in similar concepts leads to the same result, and (b) you must always consider security when migrating.

@robinbryce
Copy link
Contributor

This argument makese sense to me. I am conflicted about re-use too. I raised this PR today: #26

It could be seen as either "making things worse" according to this issue, but possibly "threading the needle" by pushing full responsibility for re-use on to the confirming specification.

I am neutral on both this and my own PR, but very interested in the authors comments

Copy link
Collaborator

@SteveLasker SteveLasker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for the PR, @felixlinker

@OR13 OR13 merged commit e723283 into cose-wg:main Aug 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants