Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide some guidance on how security can be layered on top of CE #1305

Merged
merged 1 commit into from
Jul 25, 2024

Conversation

duglin
Copy link
Collaborator

@duglin duglin commented Jul 16, 2024

Fixes #1290
Fixes #1288

@AxelNennker see what you think of this PR. On a previous call we discussed your PR (#1290) and there was some concern about it making our spec look a bit too JSON specific. So, we decided to provide the same type of guidance you're looking for in the Primer along with a non-JSON example. Let us know what you think.

Copy link
Contributor

@jskeet jskeet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can't comment on whether the examples are well chosen ones, but I think this is a useful addition in general.

<dsig:DigestValue>DCDNxibEA3BHpFMtzvj7hxd7p5A=</dsig:DigestValue>
</dsig:Reference>
</dsig:SignedInfo>
<dsig:SignatureValue>jocgUrZPKR8jvery4gG4V34qx7/yxOESPJq//iS3Q5Ps7lPADNBEVK4Y50HIdrkodcYLZjBkvuGMT89nTeT24W/Dw/XEeMWXRmy/Mj1/rza8JMaP46F+2MZ6tlGWlyA2tRZNExe5TPA8Wo6jTSN3KX3aLoLkwRsLBt50Zr8zz8xFtadZciNWnsD6y/UgQzNYfLovMw54AHGk+5FzRWMgwtTseISWxSF+9zsgiQStrrXzy1SaRycQTAjz4PF6HebGWJcECLa+r/iLtigbTmgL3Mj7mkmw90M3mNncqZKBFmjNxTZCPiMQHbSvTgOBe8REwCrclHJkyYP14NsxEg6LZQ==</dsig:SignatureValue>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Possibly wrap this, in the same way that the base64 in the JSON is wrapped?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good idea!

@duglin
Copy link
Collaborator Author

duglin commented Jul 24, 2024

ping @AxelNennker - any thoughts?

@duglin
Copy link
Collaborator Author

duglin commented Jul 25, 2024

Approved on the 7/25 call

@duglin duglin merged commit dc92e42 into cloudevents:main Jul 25, 2024
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Improve Privacy and Security section in spec
2 participants