RE: [dss] Fwd: RE: UPU CPC EPM Positioning Proposal vis-a-vis the OASIS DSS

["Nick Pope" <pope@secstan.com>]

Trevor,

Sorry, yes I agree that we should use the same protocol.

Unless it is already there and I have missed it, I suggest that we should
add that there is a protocol to obtain a time-stamp token (and verify
time-stamp token ???), and that this requirement may be met using the
signing request / response.

I also missed the words hidden in 3.1.2:
"We will also define an XML Timestamp Token format, which will be similar to
an RFC 3161 TimeStampToken, and can be used for time-stamping XML-DSIG
signatures.  We will leave this format extensible to support linking schemes
in the future."

I suggest that is made more prominent by putting a new sub-heading
"3.1.3 Time-stamp token"

Finally, I would also perhaps suggest that the XML time-stamping can be
provided through a profile of DSS, and so that we add to 3.10.2:

- Time-stamping service profile.

Nick


> -----Original Message-----
> From: Trevor Perrin [mailto:trevp@trevp.net]
> Sent: 10 July 2003 10:28
> To: Nick Pope; dss@lists.oasis-open.org
> Subject: RE: [dss] Fwd: RE: UPU CPC EPM Positioning Proposal vis-a-vis
> the OASIS DSS
>
>
> At 10:09 AM 7/10/2003 +0100, Nick Pope wrote:
> >Content-Transfer-Encoding: 7bit
> >
> >Steve,
> >
> >There are two aspects of requirements that I suggest need to be
> identified
> >separately in the requirements document
> >
> >a) Requirements for a time-stamp or time-mark to be applied to a digitial
> >signature (which is currently addressed in the requirements document)
> >
> >b) Requirements for a service which provides a time-stamp similar to RFC
> >3161 (which needs to be added).
>
> As far as the format of the token, isn't that discussed in 3.1.2 and
> 3.2.2?  As far as the protocol that produces the token, we
> discussed it at
> least a little bit (see below), and I hoped at least you and I were in
> agreement we could use the Signing protocol for this?
>
> http://lists.oasis-open.org/archives/dss/200305/msg00075.html
> http://lists.oasis-open.org/archives/dss/200305/msg00076.html
>
> Trevor
>
>
> You may leave a Technical Committee at any time by visiting
http://www.oasis-open.org/apps/org/workgroup/dss/members/leave_workgroup.php