RE: [legalxml-courtfiling] A question from LegalXML-OASIS CourtFiling

["Nick Pope" <pope@secstan.com>]

Jim,

The general view is that one should sign before encrypting.  Otherwise the
signature is applied blind to the content and it is possible to get the
signature applied to someone else's data.

Nick

> -----Original Message-----
> From: Cabral, James E. [mailto:JCabral@mtgmc.com]
> Sent: 17 May 2004 22:43
> To: John Messing; legalxml-courtfiling@lists.oasis-open.org
> Subject: RE: [legalxml-courtfiling] A question from LegalXML-OASIS
> CourtFiling
>
>
> John,
>
> I recall part of the question was whether you sign it before you encrypt
> it or vice versa?
>
> BTW, if the document is attached as an additional MIME Part, the mime
> tools will do the encoding when the document is attached so you will be
> forced to do the encryption first.
>
> Jim Cabral
>
>
> -----Original Message-----
> From: John Messing [mailto:jmessing@law-on-line.com]
> Sent: Monday, May 17, 2004 1:13 PM
> To: legalxml-courtfiling@lists.oasis-open.org
> Subject: [legalxml-courtfiling] A question from LegalXML-OASIS
> CourtFiling
>
> In New Orleans, I was tasked to contact the W3C XML encryption list or
> if that is not active any more, some of the more knowledgeable members
> about technical issues involving encryption, for use with court orders
> in Blue.
> Here is a draft for consideration and comment by the TC before I send
> it.
> ------------------------------------------------------------------------
> ------------------------------------------------
>
> I have been asked to pose a question to the xmlenc list. The
> LegalXML-OASIS CourtFiling TC is exploring the use of XMLEnc for
> redacting orders and pleadings or portions of orders and pleadings in
> cases where confidentiality is required.
>
> The questions are based upon the hypothetical example of an XML document
> which is treated as a binary and converted to BASE64 encoding for
> transmission in an XML envelope or container.
>
> 1. If it is to be encrypted, should XMLEnc or simply S-MIME encryption
> be used?
> 2. Regardless of the answer to 1, should the BASE64 encoding precede the
> encryption, or the reverse?
> 3. Does the answer to 2 change if only parts of the document are to be
> encrypted rather than the whole document, and if so, in what way(s)?
>
> Thanks for beforehand. Best regards.
> etc.
>
> ------------------------------------------------------------------------
> -----------------------------------------------
> Internet communications are insecure. If you would like to initiate
> secure communications, these can be made available upon request.
>
> The information contained in this message may be legally privileged and
> confidential.  It is intended to be read only by the individual or
> entity to whom it is addressed or by their designee. If the reader of
> this message is not the intended recipient, you are on notice that any
> distribution of this message, in any form, is strictly prohibited.
>
> If you have received this e-mail in error, please immediately notify the
> sender by "Reply" command and/or John H. Messing, P.C. by telephone at
> (520) 547-7933 and permanently delete the original and any copies or
> printouts thereof. Although this email and any attachments are believed
> to be free of any virus or other defect, it is the responsibility of the
> recipient to ensure that a message is virus free. John H. Messing, John
> H. Messing PC and Law-on-Line Inc. take no responsibility for any loss
> or damage.
>
> To unsubscribe from this mailing list (and be removed from the roster of
> the OASIS TC), go to
> http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/member
> s/leave_workgroup.php.
>
>
> To unsubscribe from this mailing list (and be removed from the
> roster of the OASIS TC), go to
> http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
members/leave_workgroup.php.