Some issues with v1.0 of the core, which should be considered during update to v1.1

["Huehnlein, Detlef" <Detlef.Huehnlein@secunet.com>]

Hi,

as discussed at our last phone conference, I see the following 
issues, which should be changed in an updated version of the DSS core: 

1. <SignResponse> only allows up to ONE <SignatureObject> 

   According to the definition of <SignResponse> in section 3.2 of the core it is only possible to return 
   up to ONE <SignatureObject>. In order to support batch-signature scenarios, in which 
   multiple documents must be processed in one step 
   (cf. https://www.bsi.bund.de/cae/servlet/contentblob/477234/publicationFile/30615/BSI-TR-03114_pdf.pdf) 
   it would be necessary to allow multiple <SignatureObjects> to be returned in one <SignResponse>.

2. <Result> only allows up to ONE <ResultMinor>
  
   In a similar manner it would be helpful if the definition of <Result> would 
   allow multiple <ResultMinor>-Elements, which could appear if the 
   <ResultMajor> indicates a warning (e.g. urn:oasis:names:tc:dss:1.1:resultmajor:Warning).

3. Missing element definitions in the schema
  
   While the following elements are explained in the Core-document, 
   it would be good, if they would also appear in the Core-schema definition:

   - <element name="SignatureForm" type="anyURI" />
   - <element name="IncludeEContent" />
   - <element name="VerifyManifests" /> 
   - <element name="UseVerificationTime" type="dss:UseVerificationTimeType" />

BR,
  Detlef 

--
Dipl. Inform. (FH)
Dr. rer. nat. Detlef Hühnlein
Principal
secunet Security Networks AG
Sudetenstraße 16
96247 Michelau
Telefon +49 9571 896479
Mobil   +49 171  9754980
detlef.huehnlein@secunet.com
www.secunet.com

secunet Security Networks AG
Kronprinzenstr. 30
45128 Essen
Amtsgericht Essen HRB 13615

Vorstand:
Dr. Rainer Baumgart
Thomas Koelzer
Thomas Pleines

Aufsichtsratsvorsitzender:
Dr. Karsten Ottenberg

Diese E-mail kann vertrauliche Informationen enthalten. Falls Sie diese E-Mail irrtümlich erhalten haben, informieren Sie bitte unverzüglich den Absender und löschen Sie diese E-Mail von jedem Rechner, auch von den Mailservern. Jede Verbreitung des Inhalts, auch die teilweise Verbreitung, ist in diesem Fall untersagt. Außer bei Vorsatz oder grober Fahrlässigkeit schließen wir jegliche Haftung für Verluste oder Schäden aus, die durch Viren befallene Software oder E-Mails verursacht werden.

This e-mail may contain strictly confidential information and is intended for the person to which it is addressed only. Any dissemination, even partly, is prohibited. If you receive this e-mail by mistake, please contact the sender and delete this e-mail from your computer, including your mailserver.
Except in case of gross negligence or wilful misconduct we accept no liability for any loss or damage caused by software or e-mail viruses.