RE: [dss] Observations on TST

["Nick Pope" <pope@secstan.com>]

Dimitri,

I can live with this.

Nick


> > > >2. The Entrust submission does not include the name of the 
> > issuer in the
> > > >timestamp token.  The rationale is that the token must be 
> > signed and the
> > > >name of the issuer will be found in the subject field of the 
> > certificate
> > > >that verifies the signature.  Perhaps, we should (at least) 
> > allow for the
> > > >optional inclusion of an issuer field, so that a system that uses a
> > > >mechanism other than X.509 certificates for integrity can have a
> > > conformant
> > > >TST.
> > >
> > > Can we assume the signature's ds:KeyInfo identifies the TSA, whether
> > > through a cert or something else?
> > >
> > >
> > Again, lets keep the general structure like a signature
> > 
> 
> I disagree with Nick's proposal, I propose that we follow Tim's 
> suggestion and include an optional issuer field in the time stamp info 
> for the reasons he stated.