[ebxml-cppa] Re: Security Details

[Arvola Chan <arvola@tibco.com>]

Tony:

 

I think it is intended that TrustAnchors may occur any number of times. Each TrustAnchors element represents a certificate chain rooted from one trusted Certificate Authority. The other party's certificate must be signed by one of the certificates in any of the certificate chains in order to be valid.

 

-Arvola

-----Original Message-----
From: Tony Weida <rweida@hotmail.com>
To: Arvola Chan <arvola@tibco.com>; Peter Ogden <pogden@cyclonecommerce.com>
Cc: CPPA <ebxml-cppa@lists.oasis-open.org>
Date: Monday, February 04, 2002 1:08 PM
Subject: Security Details

Arvola and Peter,

 

Under SecurityDetails, the XSD specifies maxOccurs="unbounded" for both TrustAnchors and SecurityPolicy.

 

Since the TrustAnchors element contains one or more AnchorCertificateRef elements, shouldn't there be at most one TrustAnchors element?

 

Since SecurityPolicy has unconstrained contents, and considering (if nothing else) the aesthetic appeal of a "unified" security policy, shouldn't there be at most one SecurityPolicy element?

 

Thanks,

Tony