Re: [dss-x] PDF Advanced Electronic Signatures Profile - Early Draft

[Andreas Kuehne <kuehne@trustable.de>]

Hi Martin,

my last minute comments:

3.3.2.1: Don't require Base64 encoding. DSS is handling with binary data
in many ways, e.g. as attachments. The pure volume of BAse64 caused many
complaints ... I don't want to start here again ;-)

DocumentHash: Does it make any sense? It boils down to a plain PKCS1
signature (still missing in DSS). Any knowledge about PDF ist stripped
out if you coma along with just a hash ... 

3.3.2.2.1.1: It's completely valid to use different hashing algos for
document and signatures hashes. And the timestamp may even apply a
different one ..

Greetings,

Andreas