Re: [ubl-security] Draft 10 of the UBL Digital Signature Profile for review

[Andrea Caccia <andrea.caccia@studiocaccia.com>]

Sorry for this long delay, I attach here a PDF with comments, deleted (barred) and added text (in red). It addresses also Ken's question.
Thank you for al the corrections and fixes.

Andrea

cd10-UBL-DSig-1.0+ac.pdf

Il giorno 12/apr/2011, alle ore 16.17, Jon Bosak ha scritto:

> Hello Andrea,
> 
> Have you had a chance to look at Ken's question yet?
> 
> Jon
> 
> Andrea Caccia wrote:
>> I apologize too for not reacting yet, I'll do by the end of this week.
>> Andrea
>> Il giorno 04/apr/2011, alle ore 03.12, G. Ken Holman ha scritto:
>>> At 2011-03-19 21:49 -0400, Jon Bosak wrote:
>>>> Please review this new draft carefully, keeping in mind that the editor
>>>> (me) has very little knowledge of digital signature technology and can
>>>> easily introduce technical errors in the process of working with the
>>>> language.
>>> I found something I didn't see before: Both the Terms and Definitions
>>> (1.1.1) and section 2.2 make reference to an enveloping signature,
>>> yet we don't provide a profile for such.  Should we explicitly
>>> acknowledge (perhaps in section 2.4) that we are not providing a
>>> profile for such (so the reader realizes nothing is inadvertently
>>> missing), or change the existing text to say something along the
>>> lines of "Two of the ways an XML Signature may be described are as
>>> detached and enveloped."?  It might be enough that in 2.4 we alread
>>> say "specifies two profiles..." so the reader knows nothing is
>>> missing.
>>> 
>>>> This document is intended to form part of UBL 2.1 and will be included
>>>> in UBL 2.1 PRD2.  In order to keep to our projected schedule for PRD2, I
>>>> am setting a one-week review cycle for the draft attached.  If any
>>>> member of the Security SC sees something that needs to be corrected or
>>>> added to this draft, please register the change to this mail list before
>>>> COB Sunday 27 March 2011.
>>> Please forgive me that my leave of absence prevented me from submitting my comments in a timely fashion.
>>> 
>>> The document looks good to me, Jon ... thank you for your efforts.
>>> 
>>> I hope this helps.
>>> 
>>> . . . . . . . . . . Ken
>>> 
>>> --
>>> Contact us for world-wide XML consulting & instructor-led training
>>> Crane Softwrights Ltd.          http://www.CraneSoftwrights.com/o/
>>> G. Ken Holman                 mailto:gkholman@CraneSoftwrights.com
>>> Legal business disclaimers:  http://www.CraneSoftwrights.com/legal
>>> 
>>> 
>>> ---------------------------------------------------------------------
>>> To unsubscribe from this mail list, you must leave the OASIS TC that
>>> generates this mail.  Follow this link to all your TCs in OASIS at:
>>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php