[OAI-implementers] Re: Should OAI-PMH over HTTPS be permitted?

[Dan Stowell]

I may have missed something here, but what is the *point* of OAI-PMH over 
HTTPS? Surely any OAI-PMH data is public, so there's no need at all to 
secure the channel?

I'd agree with the apparent consensus that HTTPS shouldn't be required of a 
harvester. However, my system ( http://myopia.sf.net ) is written in PHP 
which automatically includes HTTPS support so it could handle HTTPS with no 
code changes. (Currently it exposes an OAI interface; I'm developing OAI 
harvesting ability too.)

Best,
Dan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dan Stowell
Faculty Information Support Officer (Life Sciences), UCL
http://www.ucl.ac.uk/is/fiso/lifesciences/

Room B07A, Drayton House, 30 Gordon Street, London
Phone: +44 (0)20 7679 5472      (within UCL: dial 25472)
Email: d.stowell at ucl.ac.uk