Re: [ubl-security] Revision of Draft 11 of the UBL Digital Signature Profile for review

[Andrea Caccia <andrea.caccia@studiocaccia.com>]

It's fine for me, thanks. 
As soon as ASiC will be published I'll keep you informed and send the URL to update the document.

Andrea


Il giorno 26/apr/2011, alle ore 22.29, Jon Bosak ha scritto:

> [Re-sending this message under a corrected subject header]
> 
> Andrea Caccia wrote:
>> Page 5: XAdES contains several modules that permit various levels of security, such as non-repudiation with timestamps and long-term signature verification
>> --> XAdES contains several modules that permit various levels of security, such as content commitment and non-repudiation enforcement with timestamps and long-term signature verification
> 
> Done.
> 
>> Page 11: Non-repudiation (or content commitment): the document signer cannot deny ...
>> --> Non-repudiation / content commitment: the document signer cannot deny…
> 
> I think we're trying to say that both terms refer to the same thing, so
> I would suggest:
> 
>     <para>Non-repudiation (content commitment): the document
>       signer cannot deny its involvement in creating and/or
>       approving the document (depending on the context and signer
>       role).</para>
> 
>> Page 13: XAdES-T, where a timestamp is added to enforce non-repudiation and as a proof of anteriority. This envelope allows ascertaining the validity of a signature in case the signer certificate is later revoked;
>> --> XAdES-T, where a timestamp is added to enforce content commitment and as a proof of anteriority. This envelope allows ascertaining the validity of a signature in case the signer certificate is later revoked;
> 
> Here I would suggest:
> 
>     <para><emphasis role="bold">XAdES-T</emphasis>, where a
>        timestamp is added to enforce content commitment
>        (non-repudiation) and as a proof of anteriority. This
>        envelope allows ascertaining the validity of a signature in
>        case the signer certificate is later revoked;</para>
> 
>> Page 13: Business requirements. A digital signature can reduce the risks associated with a business transaction (e.g., non-repudiation of a commercial order, proof-of-origin and integrity of an invoice)...
>> --> Business requirements. A digital signature can reduce the risks associated with a business transaction (e.g., content commitment of a commercial order, proof-of-origin and integrity of an invoice)…
> 
> Done.
> 
> Results are attached.
> 
>> I please ask Jon to apply these changes (after checking English
> )
>> while thanking him for his patience.
> 
> It is my pleasure to play some role in your work, Andrea. Please let me
> know when the ASiC URL becomes available.
> 
> Best regards,
> 
> Jon
> 
>