RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded

["Gregor Karlinger" <gregor.karlinger@cio.gv.at>]

Karel,

> -----Original Message-----
> From: Karel Wouters [mailto:Karel.Wouters@esat.kuleuven.ac.be] 
> Sent: Monday, March 31, 2003 4:40 PM
> To: Gregor Karlinger
> Cc: dss@lists.oasis-open.org
> Subject: RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded
> 
> 
> Gregor,
> 
> I looked into my "archives" and to my surprise, I only had 
> two things on WYSIWYS.
> 
> You know of them, but I include the refs for the TC.
> 
> the CMS 2001 paper of Karl Scheibelhofer:
> What You See Is What You Sign - Trustworthy Display of XML 
> Documents for Signing and Verification", Proceedings of CMS 
> 2001 Conference, Darmstadt, Germany, 21-22 May 2001, pp. 
> 3-13, Kluwer Academic Publishers, ISBN 0-7923-7365-0.
> 
> his RSA conference paper
> "What You See Is What You Sign",
> Proceedings of the RSA Conference 2001 Europe (Online), 15-18 
> October 2001, Amsterdam, Netherlands.
> 
> and his Ms. thesis:
> "Signing XML Documents and the Concept of WYSIWYS" 
> http://www.iaik.tugraz.at/teaching/11_diplomarbeiten/archive/s
> cheibelhofer.pdf
> 
> Work that is, I guess, related to the AIDA project: 
> http://aida.infonova.at/aida.htm

Yes, this is related to the AIDA project.

They have chosen a slightly different approach, let me try to explain
it in a few words: In an XML (raw data format)/HTML (viewer format)
scenario they sign the raw data format, and rely on a respository with
style-sheets signed by a trusted third party. The client program used by
the verifying party extracts hints about the type/class of the XML 
data signed, makes a repository lookup with these parameter in order
to get a trusted style-sheet, and uses this style-sheet to produce
the viewer format.

/Gregor

smime.p7s