Re: [dss-x] A detail on the client side signing

[Juan Carlos Cruellas <cruellas@ac.upc.edu>]

El 23/05/2011 10:05, kuehne@trustable.de escribió:
Hi Andrea,

I missed the former call, sorry for that....you mention an "additional 
signing attribute", do you actually mean an additional optional input to 
be added to the request?

Regards

Juan Carlos
> Hi all,
>
> while discussing the client side signing issue someone came up with the demand of 'associating the request with info for the (human) signer' .
>
> I would like to generalize this topic to the core. The client requesting a signature usually doesn't know which type of signer that will process the request. So it would be a good practice to add an additional signing atrribute containing some kind of info to enable a human signer to identify the request, generally.
>
> Such an id info could also be useful in machine-only environmants to audit the signing process. So I would vote for adding such info to the core and not into an additional profile.
>
> Greetings
>
> Andreas
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>