Public Comment

[Juan Carlos Cruellas <cruellas@ac.upc.edu>]

Dear Antonio,

The SignatureObject was never intended to support more than
one signature. InputDocuments containing more than one signature is a
different story alltogether, and is supported.This makes that
verification of multiple signed documents that enclose their signatures
may be requested in one message.

The core expects verification of all signatures if present in the
InputDocuments element of the Verify. The EPM profile
(Profile for Universal Postal Union's Electronic Post Mark profile of DSS)
also supports verification of specific signatures if our NodeName
optional input is specified. The core and the EPM must verify all
signatures present in the InputDocuments element if present.
This is default behavior in the core, but the user must include
the signatures in an InputDocuments element.

This committee decided not to allow separated multiple signatures
of multiple documents because of the complexity that it would bring
to the processing and also because it could be arguable that
separated multi-signature verification would be frequent enough to
make the savings worth the complexity.

In any case, with the current specifications, if such a case
occurred, one always could try pipelining requests to the server.

Finally, please note that a second CD version of the DSS documents
will be available very shortly through the DSS home page

Best regards

Juan Carlos Cruellas.