Re: [dss-x] nonce support for RFC 3161 timestamp missing?

[Andreas Kuehne <kuehne@trustable.de>]

Hi Juan Carlos,

that's why I filed issue DSSX-11 to be sure ne detail will be lost.

Greetings,

Andreas

> Hi Andreas,
>
> It is OK for me...as long as the text in the new spec makes an
> explicit mention to this in normative text.
>
> Regards
> Juan Carlos.
> El 21/3/17 a las 18:07, Andreas Kuehne escribió:
>> Hi Juan Carlos,
>>
>> frankly I don't see any reason why the ServicePolicy should not serve as
>> a holder for RFC3161's 'reqPolicy'.
>> And this timestamping topic is another reason to support a set of
>> policies.
>>
>> Greetings,
>>
>> Andreas
>>> Hi,
>>>
>>> I agree that it seems that the request does not incorporate the
>>> nonce...but in the RFC3161 there is also another field: reqPolicy,
>>> which I am not sure can be asimilated to the ServicePolicy...if we are
>>> going to "mimic" the request from the RFC 3161, shouldn't mimic also
>>> this field?. I am not saying that we should exactly mimic, just that
>>> if we add the nonce, maybe we should also add the reqPolicy, unless we
>>> clearly feel that the servicePolicy element could play the same role
>>>
>>> Regards
>>> Juan Carlos.
>>>
>>>
>>> El 21/3/17 a las 13:22, Mr. Stefan Hagen escribió:
>>>> Hi Andreas,
>>>> On 21/03/17 13:15, Andreas Kuehne wrote:
>>>>> Hi experts,
>>>>>
>>>>>
>>>>> I just came across the nonce element in the RFC 3161 :
>>>>>
>>>>> "The nonce [...] allows the client to verify the timeliness of the
>>>>> response when no local clock is available. [...] the same nonce value
>>>>> MUST be included in the response "
>>>>>
>>>>> We do mention the nonce in the core document but only in terms of
>>>>> verification processing. I can't find a way to include a nonce
>>>>> value in
>>>>> a request. Did we just forget to mention the optional input
>>>>> 'Nonce'? If
>>>>> yes, it would be a good moment to add it into the refurbished core
>>>>> ;-)
>>>> the latter and yes the suggested remediation also :-)
>>>>
>>>> Thank you!
>>>>
>>>> Best,
>>>> Stefan
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe from this mail list, you must leave the OASIS TC that
>>> generates this mail.  Follow this link to all your TCs in OASIS at:
>>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>


-- 
Andreas Kühne 
phone: +49 177 293 24 97 
mailto: kuehne@trustable.de

Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612

Director Andreas Kühne

Company UK Company No: 5218868 Registered in England and Wales