RE: DSS-X: action #0041

["Pope, Nick" <Nick.Pope@thales-esecurity.com>]

Juan Carlos,

I have a feeling that may have similar aims in mind in providing a record of
the verification of one or more signatures from a sever, that may be both
used for verification.

However, I have not had the time to look into this in detail so you may be
right that they are original.

Nick

> -----Original Message-----
> From: Juan Carlos Cruellas [mailto:cruellas@ac.upc.edu]
> Sent: 19 November 2007 17:43
> To: 'Nick Pope'; dss-x; Juan Carlos Cruellas
> Subject: DSS-X: action #0041
> 
> Nick,
> 
> At the last conf call I mentioned the message sent to the list on
> merging the  "*Signed Verification Response profile" with "multiple
> signature verification report".
> 
> *You may find my message at:
> http://www.oasis-open.org/apps/org/workgroup/dss-
> x/email/archives/200711/msg00032.html
> 
> At the last conf call, however, it was suggested to make a profile
> managing at the same time:
> 
> 1. Capability for returning one report on the verification of each
> signature (my initial proposal).
> 2. Capability for making that the report contains an extensive list of
> details on the verification process (ie, certificates checked, OCSP
> responses, et, etc) (based on the schema that Detlef circulated some
> time ago).
> 
> BUT having multiple conformance levels.
> 
> My feeling is that the profile for allowing the verification servers to
> give back a signed VerifyResponse is ortogonal to the aforementioned
> profile.
> What is your view?
> 
> Thank you
> 
> Regards
> 
> Juan Carlos.
> 
> *
> 
> *