Ps i remember we had went thru some song and dance to be able to
include crypto in shindig (somewhere mid/end of march). The result was
that we added a notice in our NOTICE file about the crypto functions:
http://svn.apache.org/viewvc/incubator/shindig/trunk/NOTICE?revision=639568&view=markup
In this notice it lists which cryptography actions are present in
shindig it seems:
The following provides more details on the included cryptographic
software:
Apache Shindig interfaces with the Java JCE APIs to provide digital
signing and encryption of messages using the AES, SHA1, and HMAC-SHA1
standards.
Apache Shindig interfaces with the OAuth library <http://http://code.google.com/p/oauth/
> to provide digital signing of messages according to the OAuth
standard.
So should i add a bit like: "Apache Shindig's PHP code interfaces with
PHPs mcrypt API's to provide encryption of messages using the AES and
HMAC-SHA1 standards, and uses PHPs sha1function to provide digital
signing" ?
Ps, I notice the structure in the NOTICE file is pretty java centric
still (the "gadget server contributed by google", but there's 2 gadget
servers now). Isn't the PHP bit mature enough by now to at least make
this distinction in the notice and such files? :)
That reminds me ... I should really provide a patch for the website
too, it's currently completely lacking of any reference to such thing
like a php version of shindig. Any ideas what would be a good way to
go here?
-- Chris
On May 2, 2008, at 2:14 AM, [EMAIL PROTECTED] wrote:
Adds basic crypto security token logic.