Re: [xri] Rewriten SimpleSign page

[George Fletcher <george.fletcher@corp.aol.com>]

Hi Nat,

Is a new XML element (SDSIG) required because of limits in the size of
XML attribute values? I was kind of hoping we could have one XML element
(XRD) and just use different attributes to specify whether the XRD
signature is external or included. Something like...

<XRD sigVal="base64 signature" sigData="base64 of binary XRD 'file'"
sigAlg="signature algorithm" certURI="URI to cert" />

for representations that need to support multiple signatures. This way
the receiver only has one XML element to parse rather than needed to
look for either <XRD> or <SDSIG>.

I suppose that if the XRD is rather large this could get cumbersome for
an XML attribute. If we have to add child elements anyway, then using a
different XML element doesn't make much difference to the receiver.

Thanks,
George

Nat Sakimura wrote:
>
> I have re-written the XrdOne/SimpleSign page to reflect the talks today.
>
> http://wiki.oasis-open.org/xri/XrdOne/SimpleSign
>
> Hope this is simple enough and close to an agreement.
>
> I have changed <SXRD> element name to <SDSIG> to generalize it.
> Perhaps that's too much of a generalization though.
> Also, instead of ds:KeyInfo, I have flattened things and defined
> <CertURI>, <Certs>, <SigAlg>.
>
> We do not gain much by borrowing just ds:KeyInfo from XML Dsig.
> If we have XML Dsig processor, we would be using XML Dsig after all.
>
> =nat
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail. Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>