Re: [ubl-security] Where to go from here

[Jon Bosak <bosak@pinax.com>]

I think that it would be inappropriate to offer alternatives even
in the first draft of a specification; the idea is to do your best
to propose a solution and then see whether others find problems
with it.  If we're going to propose alternatives, then I think we
have to start over with a conversation on ubl-dev, perhaps
beginning with a paper outlining the alternatives and requesting
discussion.

As this would essentially reset the XAdES Profile work back to
zero, it's not an outcome that would be very good for the progress
of UBL.

I'm assuming that there is not a simple solution that could later
be scaled up to address a wider range of use cases; if there is
such a solution, then that's probably what we should adopt.

Jon

Oriol Bausą Peris wrote:
> So if PRD1 does not dictate a solution, maybe we could include both approaches so that we can continue this good debate with others and finally get more "global" solution for PRD2.
> 
> I think the line started by Roberto identifying requirements and their solution is maybe the best approach to get to the simplest hence complete solution.
> 
> Best regards, 
> Oriol
> 
> El 27/08/2010, a las 15:29, Jon Bosak escribió:
> 
>> G. Ken Holman wrote:
>>> Thanks for the debate.  Please decide and we'll move on with
>>> user testing.  We can change it all for PRD2 if you wish.
>> That's the key point to keep in mind here.  PRD1 is not dictating
>> a solution, it's asking for testing and input.  Given the Security
>> SC's decision about which method to try, we can (if you think it's
>> a good idea) include the other approaches in the PRD1
>> documentation so that reviewers can consider them as well.
>>
>> Alternatively, we can remove XAdES from PRD1 and issue it as a
>> separate draft with a request for comments.
>>
>> Jon
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
>