Re: Security - question about nonrepudiation

[christopher ferris <chris.ferris@east.sun.com>]

Tim,

I don't think so, because the CPP/A covers the technical
dsetails of the digital signing (algorithm, etc.) whereas the
BPSS just indicates that the document should be signed, not how.

Cheers,

Chris

"Collier, Timothy R" wrote:
> 
> All,
> 
>         If two parties agree on complimentary roles within a process
> specification, and agree on the document properties (in particular signing)
> don't the nonrepudiation elements in the delivery channel characteristics
> become superfluous?  After all, the parties have agreed on a process
> specification that includes acknowledgement of receipt, and they have agreed
> on which documents have signatures attached (in the document exchange).  To
> me NRR sounds like a requirement on the BP, and NRO is a document
> requirement for digital signature.
>         I have heard that the delivery channel is an implementation
> convenience, which is ok, but it seems even for that the authenticated tag
> covers the digital signature requirement. And the implementation already is
> monitoring the runtime process according to the BPSS.
>         Do you think the nonrepudiation tags in the delivery channel express
> unique requirements that are not already covered?
> 
>         Tim
> 
> ------------------------------------------------------------------
> To unsubscribe from this elist send a message with the single word
> "unsubscribe" in the body to: ebxml-cppa-request@lists.oasis-open.org