OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

ebxml-cppa message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: Security - question about nonrepudiation



All,

	If two parties agree on complimentary roles within a process
specification, and agree on the document properties (in particular signing)
don't the nonrepudiation elements in the delivery channel characteristics
become superfluous?  After all, the parties have agreed on a process
specification that includes acknowledgement of receipt, and they have agreed
on which documents have signatures attached (in the document exchange).  To
me NRR sounds like a requirement on the BP, and NRO is a document
requirement for digital signature.
	I have heard that the delivery channel is an implementation
convenience, which is ok, but it seems even for that the authenticated tag
covers the digital signature requirement. And the implementation already is
monitoring the runtime process according to the BPSS.
	Do you think the nonrepudiation tags in the delivery channel express
unique requirements that are not already covered?  


	Tim



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC