Ps i remember we had went thru some song and dance to be able to include crypto in shindig (somewhere mid/end of march). The result was that we added a notice in our NOTICE file about the crypto functions:

http://svn.apache.org/viewvc/incubator/shindig/trunk/NOTICE?revision=639568&view=markup

In this notice it lists which cryptography actions are present in shindig it seems: The following provides more details on the included cryptographic software: Apache Shindig interfaces with the Java JCE APIs to provide digital signing and encryption of messages using the AES, SHA1, and HMAC-SHA1 standards. Apache Shindig interfaces with the OAuth library <http://http://code.google.com/p/oauth/ > to provide digital signing of messages according to the OAuth standard. So should i add a bit like: "Apache Shindig's PHP code interfaces with PHPs mcrypt API's to provide encryption of messages using the AES and HMAC-SHA1 standards, and uses PHPs sha1function to provide digital signing" ?

Ps, I notice the structure in the NOTICE file is pretty java centric still (the "gadget server contributed by google", but there's 2 gadget servers now). Isn't the PHP bit mature enough by now to at least make this distinction in the notice and such files? :)

That reminds me ... I should really provide a patch for the website too, it's currently completely lacking of any reference to such thing like a php version of shindig. Any ideas what would be a good way to go here?

        -- Chris

On May 2, 2008, at 2:14 AM, [EMAIL PROTECTED] wrote:

Adds basic crypto security token logic.


Reply via email to