Re: [ubl-security] Revision of Draft 11 of the UBL Digital SignatureProfile for review

[Jon Bosak <bosak@pinax.com>]

Thank you, Andrea.

Attached is a revised draft.  If no further comments are received within
the next week (ending COB 5 May), I'll consider it approved by the
subcommittee.

Thanks to everyone for all their fine work on this.

Jon

Andrea Caccia wrote:
> This is to inform that ASiC has been published today and is available at this URL: http://pda.etsi.org/exchangefolder/ts_102918v010101p.pdf
> Andrea
> 
> Il giorno 26/apr/2011, alle ore 23.54, Andrea Caccia ha scritto:
> 
>> It's fine for me, thanks. 
>> As soon as ASiC will be published I'll keep you informed and send the URL to update the document.
>>
>> Andrea
>>
>>
>> Il giorno 26/apr/2011, alle ore 22.29, Jon Bosak ha scritto:
>>
>>> [Re-sending this message under a corrected subject header]
>>>
>>> Andrea Caccia wrote:
>>>> Page 5: XAdES contains several modules that permit various levels of security, such as non-repudiation with timestamps and long-term signature verification
>>>> --> XAdES contains several modules that permit various levels of security, such as content commitment and non-repudiation enforcement with timestamps and long-term signature verification
>>> Done.
>>>
>>>> Page 11: Non-repudiation (or content commitment): the document signer cannot deny ...
>>>> --> Non-repudiation / content commitment: the document signer cannot deny…
>>> I think we're trying to say that both terms refer to the same thing, so
>>> I would suggest:
>>>
>>>    <para>Non-repudiation (content commitment): the document
>>>      signer cannot deny its involvement in creating and/or
>>>      approving the document (depending on the context and signer
>>>      role).</para>
>>>
>>>> Page 13: XAdES-T, where a timestamp is added to enforce non-repudiation and as a proof of anteriority. This envelope allows ascertaining the validity of a signature in case the signer certificate is later revoked;
>>>> --> XAdES-T, where a timestamp is added to enforce content commitment and as a proof of anteriority. This envelope allows ascertaining the validity of a signature in case the signer certificate is later revoked;
>>> Here I would suggest:
>>>
>>>    <para><emphasis role="bold">XAdES-T</emphasis>, where a
>>>       timestamp is added to enforce content commitment
>>>       (non-repudiation) and as a proof of anteriority. This
>>>       envelope allows ascertaining the validity of a signature in
>>>       case the signer certificate is later revoked;</para>
>>>
>>>> Page 13: Business requirements. A digital signature can reduce the risks associated with a business transaction (e.g., non-repudiation of a commercial order, proof-of-origin and integrity of an invoice)...
>>>> --> Business requirements. A digital signature can reduce the risks associated with a business transaction (e.g., content commitment of a commercial order, proof-of-origin and integrity of an invoice)…
>>> Done.
>>>
>>> Results are attached.
>>>
>>>> I please ask Jon to apply these changes (after checking English
>>> )
>>>> while thanking him for his patience.
>>> It is my pleasure to play some role in your work, Andrea. Please let me
>>> know when the ASiC URL becomes available.
>>>
>>> Best regards,
>>>
>>> Jon
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>>
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
>

20110428-cd11.zip