Article:		Secure RSS Syndication
Subject:		Now Atom's finished...?
Date:		2005-07-15 17:33:56
From:		danbri
http://www.tbray.org/ongoing/When/200x/2005/07/14/Atom-1.0 It seems Atom's finalised. How does this technique compare to the XML Enc stuff in Atom? Could greasemonkey be used to implement a subset/profile somehow? dan

Previous Message

Next Message

• Now Atom's finished...?
  2005-07-15 19:52:19 Joe Gregorio [Reply]
  
  Dan,
  According to the Atom 1.0 spec it is only allowable to encrypt the root element of the document, be it a 'feed' or an 'entry'. This means that the intermediary, in this case Bloglines, would need to be given the key to decrypt the feed before it would be usable. While XML Encryption may be helpful in other situations, it doesn't help in this case where I don't want to hand over my password and/or key to an intermediary (Bloglines).

  
  Atom does have a benefit, in that it can carry XHTML as a native format. That's good because microformats are really defined as a profile of XHTML.
  
  
  

  • Now Atom's finished...?
    2005-07-16 07:14:00 pitture [Reply]
    
    If you don't want Bloglines to be able to see your key, you probably shouldn't put it in plaintext in the script (Greasemonkey scripts don't seem to be completely hidden from the page they are running on, at least at the moment: <http://diveintogreasemonkey.org/experiments/script-leak.html>).