ebxml-cppa message

Subject: [ebxml-cppa] Purpose of CertificateRef in CollaborationRole

From: Peter Ogden <pogden@cyclonecommerce.com>
To: "ebXML-CPPA (E-mail)" <ebxml-cppa@lists.oasis-open.org>
Date: Mon, 17 Dec 2001 23:13:15 -0700

Can anyone provide any thoughts or historical perspective on the intended use of the CertificateRef that exists in the CollaborationRole element?

Arvola recently renamed it "DefaultSigningCertificateRef", which would indicate that it can be used whenever a signing cert is needed. But the list archive has several threads which indicate that CertificateRef(s) under DocExchange/../NonRepudiation are to be used for this purpose. Furthermore, section 7.5.3.3 of the v1.0 CPPA spec, which pertains to the CertificateRef in the CollaborationRole, contains the following note:

---

Note: This certId attribute relates to the authorizing role in the Process Specification while the certificates identified in the delivery-channel description relate to Message exchanges.

---

This seems to imply that the CertRef in the CollaborationRole element is to be used by some business process, not by a messaging service. Is this still a valid comment?

Respectfully,

Peter Ogden