RE: [dss-comment] Public Comment

["Nick Pope" <nickpope@secstan.com>]

Inma,

Thanks for your comment.  We discussed this yesterday at our TC meeting.

Generally we agree with your comment on the need for clarification for
handling verification time.  There was interest in your suggestion of
indicating the time period but this was considered to be a more complex
requirement and may be better address by a profile extending the core
functionality for a particular need.

We will be responding more fully in due course but I wanted to let you know
that your input is valued and we will be looking further into the issue you
raised.

Regards

Nick
co-chair OASIS DSS

> -----Original Message-----
> From: comment-form@oasis-open.org [mailto:comment-form@oasis-open.org]
> Sent: 21 April 2006 13:40
> To: dss-comment@lists.oasis-open.org
> Subject: [dss-comment] Public Comment
>
>
> Comment from: inma@dif.um.es
>
> Name: Inma Marín
>
> Title: IT Consultant
>
> Organization: University of Murcia
>
> Regarding Specification: DSS Core Committee Draft 3 (DSS Core Elements)
>
>
>
> I have a question regarding <dss:VerificationTime> element. In
> the specification it is said that this element "instructs the
> server to determine the signature's validity at the specified
> time, instead of the current time". How is this verification,
> taking into account the verification time, accomplished?
>
>
>
> I suppose that, once the server has checked that the signature is
> valid, he checks the signing certificate validation by
> considering the verification time. But, what happens if the
> signature has a timestamp token? should that timestamp token be
> checked taking into account the verification time, too?
>
>
>
> Could you be so kind as to clarify the process of verifying a
> signature by checking the verification time, please?
>
>
>
> I also noticed that <dss:VerificationTime> includes a date time
> but, it is possible to indicate a period of time, that is,
> re-define this element to include before and/or after date time?
> Have you considered this possibility?
>
>
>
> Thank you very much in advance.
>
>
>
> Regards,
>
> Inma.
>
>
>
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dss-comment-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: dss-comment-help@lists.oasis-open.org
>
>