Re: AW: [dss-x] Proposal for SignatureIdentifier-structure

[Juan Carlos Cruellas <cruellas@ac.upc.edu>]

Dear Detlef,

In fact, what I was thinking is to include information of the identity 
of the signer for identifying the signature, in the absence of other 
properties in the signature....which makes me to think that we should 
try to allocate some element for containing (optionally? some info 
related to signer identity in PGP signatures....

Juan Carlos.
> Yes, the signing certificate should be included - at least 
> in all cases in which there is a signing certificate. As this 
> would not work for all PGP-signatures for example it might be
> a problem to make this requirement strictly mandatory. 
>
> In the end the signed properties, which are included should
> be sufficient to identify the signature unambigiously. Hence
> another good candidate might be the SigningTime (again, if it is 
> included in the signature).
>
> As we can not impose requirements with respect to the existence of
> certain properties, the mechanism should allow to include any signed 
> property and we should only provide recommendations, which signed properties
> SHOULD be used if they are existing. 
>
>