Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of skippy.hammond@gmail.com
 designates 209.85.142.187 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:reply-to:user-agent:mime-version:to:cc:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        b=PTvTy/1hIvJCQjX6jXWnQgOVHX4W50uZ+ZckeD/S0oaOY/4ziKLtfHKQgpAXa3rLVZ
         joBOZ15dwE/UtUA1Me7Dufn4dlYfDnNWOXnzQPzJojUXieMLCv+CIiBjMzxGDZsLsFE8
         dj2330fPloSW5ZoWihPt2QWnEYJwoD4UlDdcY=
Message-ID: <49E2FE60.3060304@gmail.com>
Date: Mon, 13 Apr 2009 18:57:04 +1000
From: Mark Hammond <skippy.hammond@gmail.com>
Reply-To: mhammond@skippinet.com.au
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US;
 rv:1.9.1b3pre) Gecko/20090223 Thunderbird/3.0b2
MIME-Version: 1.0
To: user@couchdb.apache.org
CC: mhammond@skippinet.com.au
Subject: Re: Proposal for digital signatures of documents
References: <f01e36880903091321p2f5f4628i530334fc6171f1ff@mail.gmail.com>
	 <20090310160113.GA20683@uk.tiscali.com>
	 <e282921e0903101527w2a2bac6am7ff7b57e72652dda@mail.gmail.com>
	 <e282921e0904101647v36a268b0v406111a843f2ff77@mail.gmail.com>
	 <49E29B01.3040301@gmail.com>
 <e282921e0904130016n5a2e58ffp14f42a8c1a3fb618@mail.gmail.com>
In-Reply-To: <e282921e0904130016n5a2e58ffp14f42a8c1a3fb618@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

As usual, 2 seconds after I hit 'Send' I think of something else to say...

On 13/04/2009 5:16 PM, Chris Anderson wrote:

> Something like this then? (also a list of signatures, here)
>
>       {
>         "_id" : "89a7stdg235",
>         "_rev" : "1-26476513",
>         "message" : "I said this and I meant it.",
>         "date" : "2009/04/09 15:54:08",
>         "author" : {
>           "name" : "J. Chris Anderson",
>           "url" : "http://jchrisa.net",
>           "photo" : "http://jchrisa.net/profile.jpg"
>         }
>         "foo" : "not signed but still a normal field",
>         "signatures" : [{
>           "signed-fields: [ "message", "date", "author"],
>           etc as described...
>         }]
>      }

I've a slight concern about the name 'signatures' here - its not about 
'signatures' per-se, it's more about the assumptions *any* regular word 
implies about the 'schema' of the database trying to use this facility.

In other words, how can we be sure the field 'signatures' doesn't 
conflict with a field already in the database?

I'm not quite up on the full context of this discussion, but I see 2 
potential solutions:

* Leave it up to the app to dictate the name of the field (ie, 
'signatures' is just an example in the above, but the literal field name 
is up to the app)

or

* Invent a new naming convention for a category of fields somewhere in 
between 'reserved' (ie, those with a leading '_') and 
application-specific ones.  IOW, assuming the couch impl will not let us 
use '_signatures', use something along the lines of '.signatures' - 
something couch will not reject, but something which apps can easily 
avoid.  A leading '.' does have a certain appeal - its almost a 'hidden' 
field...

Cheers,

Mark