RE: [ebxml-msg] ds:Signature Algorithm

[David Fischer <david@drummondgroup.com>]

Yes, I know, there are good cases for both separate signatures and for signing
over previous signatures.

We decided to exclude all signatures two con calls ago when we could not figure
out how to add a signature without breaking a previous signature (how do you
know which signature to process first and then you must exclude the later
signatures when processing the earlier ones).  We decided NOT to discuss, in the
spec, the use of multiple signatures.

As with all things in this group, nothing is final ;-^.

Regards,

David Fischer
Drummond Group.

-----Original Message-----
From: Doug Bunting [mailto:dougb62@yahoo.com]
Sent: Tuesday, October 23, 2001 5:17 PM
To: ebXML Msg
Subject: Re: [ebxml-msg] ds:Signature Algorithm


David,

Are we really deciding to exclude ALL signature elements?  I can see some
very good use cases (validating someone else's signature for example) for
signing a previous signature.

Separately, when was that decision made?

thanx,
    doug

----- Original Message -----
From: "David Fischer" <david@drummondgroup.com>
To: "Christopher Ferris (E-mail)" <chris.ferris@east.sun.com>
Cc: "ebXML Msg" <ebxml-msg@lists.oasis-open.org>
Sent: Tuesday, 23 October 2001 15:04
Subject: [ebxml-msg] ds:Signature Algorithm


Chris,

Since we are deciding to exclude ALL signature elements, shouldn't we get
rid of
the
http://www.w3.org/2000/09/xmldsig#enveloped-signature algorithm and just
use:

   <XPath> not(ancestor-or-self::ds:Signature) </XPath>

which would exclude ALL ds:Signature elements?  Or better yet:

   <XPath> not(ancestor-or-self::ds:Signature |

ancestor-or-self::*[@soap:actor="http://oasis-open.org/committees/ebxml-msg/
next
MSH"] |
ancestor-or-self::*[@soap:actor="http://schemas.xmlsoap.org/soap/actor/next"
] )
</XPath>

Regards,

David Fischer
Drummond Group.


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>