OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

office message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [office] Groups - OFFICE-2656 Demonstration ofdocumentsignature.xml (OFFICE-2656-documentsignature.zip) uploaded


Hi Dennis,

On 04/30/10 23:44, dennis.hamilton@acm.org wrote:
> The document named OFFICE-2656 Demonstration of documentsignature.xml
> (OFFICE-2656-documentsignature.zip) has been submitted by Dennis Hamilton
> to the OASIS Open Document Format for Office Applications (OpenDocument) TC
> document repository.
> 
> Document Description:
> This Zip package contains an extract of a META-INF/documentsignature.xml
> file.  
> 
> 1. In the only known-to-me established implementation of ODF 1.2 package
> signatures, a bug in how URIs of the form "#fragment" should
> fail, since the correct URI is
> "#META-INF/documentsignature.xml#fragment"

Why do you think that would be the correct URI? We don't have any 
specific rules about fragment URIs. A "#fragment" references the id 
"fragment". I fail to see why the URI should look like the one you 
suggest. Where in the specification did you find rules that say so?

> 
> 2. Demonstration that the references to resources that are part of the
> signed material are always references to the extracted file streams and not
> the compressed (or encrypted) Zip content.  In particular, the references
> to fragments could not possibly be usable in that case, including
> cross-references in package file META-INF/documentsignature.xml itself.

Can you please explain what you mean by that? What in file demonstrates 
that references always unencrypted uncompressed data?

Thank you

Michael
> 
> View Document Details:
> http://www.oasis-open.org/committees/document.php?document_id=37563
> 
> Download Document:  
> http://www.oasis-open.org/committees/download.php/37563/OFFICE-2656-documentsignature.zip
> 
> 
> PLEASE NOTE:  If the above links do not work for you, your email application
> may be breaking the link into two pieces.  You may be able to copy and paste
> the entire link address into the address field of your web browser.
> 
> -OASIS Open Administration


-- 
Michael Brauer, Technical Architect Software Engineering
StarOffice/OpenOffice.org
Sun Microsystems GmbH             Nagelsweg 55
D-20097 Hamburg, Germany          michael.brauer@sun.com
http://sun.com/staroffice         +49 40 23646 500
http://blogs.sun.com/GullFOSS

Sitz der Gesellschaft: Sun Microsystems GmbH, Sonnenallee 1,
	   D-85551 Kirchheim-Heimstetten
Amtsgericht Muenchen: HRB 161028
Geschaeftsfuehrer: Jürgen Kunz


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]