Public Comment

[comment-form@oasis-open.org]

Comment from: arm@dif.um.es

Hello!

Some time ago I sent an e-mail with some comments but I don't remember if I used this channel or not. I think I put several comments but now I only remember one. Anyway, I send another time my comment.
I'm working with the specification and developing a web service based on it. I have a comment about it. In the section 4.3.1 (Multiple-Signature Verification) it is said that it can be serveral ds:Signature elements. However, in the oasis schema the signature object is like this
<xs:element name="SignatureObject">
 <xs:complexType>
  <xs:sequence>
    <xs:choice>
     <xs:element ref="ds:Signature"/>
      <xs:element ref="dss:Timestamp"/>
      <xs:element ref="dss:Base64Signature"/>
      <xs:element ref="dss:SignaturePtr"/>
      <xs:any processContents="lax"/>
    </xs:choice>
     <xs:element name="DTD" type="xs:base64Binary" minOccurs="0"/>
    </xs:sequence>
		</xs:complexType>
	</xs:element>
With this specification it is only possible to put a ds:Signature. Is this a mistake or the additional signatures should be place in the Optional Inputs?
I think it could be resolved with 
<xs:sequence maxoccurs="unbounded"> or   <xs:choice maxoccurs="unbounded">

I would like to know your opinion,
Thanks for your attention,
Regards,
Antonio.