Title: Security Extensions For HTML
Author(s): E. Rescorla, A. Schiffman.
Status: EXPERIMENTAL
Date: Aug 1999
Length: 8134
This memo describes a syntax for embedding S-HTTP negotiation parameters in HTML documents. S-HTTP, as described by RFC2660, contains the concept of negotiation headers which reflect the potential receiver of a message's preferences as to which crypto- graphic enhancements should be applied to the message. This document describes a syntax for binding these negotiation parameters to HTML anchors.
1. Introduction
2. Anchor Attributes
We define the following new anchor (and form submission) attributes:
DN -- The distinguished name of the principal for whom the
request should be encrypted when dereferencing the anchor's url.
This need not be specified, but failure to do so runs the risk
that the client will be unable to determine the DN and therefore
will be unable to encrypt. This should be specified in the form
of RFC1485, using SGML quoting conventions as needed.
NONCE -- A free-format string (appropriately SGML quoted) which
is to be included in a SHTTP-Nonce: header (after SGML quoting
is removed) when the anchor is dereferenced.
CRYPTOPTS -- Cryptographic option information as described in
[SHTTP]. Specifically, the cryptopt-list production.
[sh-index] Back to list of manuals
|
| |
