FW: [dss] Groups - Digital Signature Service Core Protocols, Elements, and Bindings (oasis-dss-1.0-core-spec-wd-32.doc) uploaded

["Nick Pope" <pope@secstan.com>]

Forwarding on behalf of Rich Salz


-----Original Message-----
From: Rich Salz [mailto:rsalz@datapower.com]
Sent: 08 July 2005 21:47
To: Nick Pope
Cc: dss@lists.oasis-open.org
Subject: Re: [dss] Groups - Digital Signature Service Core Protocols,
Elements, and Bindings (oasis-dss-1.0-core-spec-wd-32.doc) uploaded


I skimmed through this; sorry, I really wish I had more time, but I didn't.

Apologies if I'm raising old issues.

Section 3.3 says to use C14N as the default.  I think exc-c14n (with no 
inclusion list) is better.  Same for 3.5, and any other places where 
c14n is specified.

Starting at line 890 the font size grew.  Anyone else see this?

Should we have more re=use of ws-security?  E.g.,
	Use WS-Security timestamp
	Use ws-security token references
	Use ws-security UserName token

In section 6.2, I think we should define some SOAP fault codes.

I think we should hsave a soap 1.1 binding

I like the use of SAML NameIdentifier.

Overall, a very nice job.

	/r$

PS:  I'm on vacation all next week.
-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html