Re: [ebxml-msg] ds:Signature Algorithm

[Christopher Ferris <chris.ferris@sun.com>]

I don't recall a decision to exclude all Signatures.

Cheers,

Chris

David Fischer wrote:

> Yes, I know, there are good cases for both separate signatures and for signing
> over previous signatures.
> 
> We decided to exclude all signatures two con calls ago when we could not figure
> out how to add a signature without breaking a previous signature (how do you
> know which signature to process first and then you must exclude the later
> signatures when processing the earlier ones).  We decided NOT to discuss, in the
> spec, the use of multiple signatures.
> 
> As with all things in this group, nothing is final ;-^.
> 
> Regards,
> 
> David Fischer
> Drummond Group.
> 
> -----Original Message-----
> From: Doug Bunting [mailto:dougb62@yahoo.com]
> Sent: Tuesday, October 23, 2001 5:17 PM
> To: ebXML Msg
> Subject: Re: [ebxml-msg] ds:Signature Algorithm
> 
> 
> David,
> 
> Are we really deciding to exclude ALL signature elements?  I can see some
> very good use cases (validating someone else's signature for example) for
> signing a previous signature.
> 
> Separately, when was that decision made?
> 
> thanx,
>     doug
> 
> ----- Original Message -----
> From: "David Fischer" <david@drummondgroup.com>
> To: "Christopher Ferris (E-mail)" <chris.ferris@east.sun.com>
> Cc: "ebXML Msg" <ebxml-msg@lists.oasis-open.org>
> Sent: Tuesday, 23 October 2001 15:04
> Subject: [ebxml-msg] ds:Signature Algorithm
> 
> 
> Chris,
> 
> Since we are deciding to exclude ALL signature elements, shouldn't we get
> rid of
> the
> http://www.w3.org/2000/09/xmldsig#enveloped-signature algorithm and just
> use:
> 
>    <XPath> not(ancestor-or-self::ds:Signature) </XPath>
> 
> which would exclude ALL ds:Signature elements?  Or better yet:
> 
>    <XPath> not(ancestor-or-self::ds:Signature |
> 
> ancestor-or-self::*[@soap:actor="http://oasis-open.org/committees/ebxml-msg/
> next
> MSH"] |
> ancestor-or-self::*[@soap:actor="http://schemas.xmlsoap.org/soap/actor/next"
> ] )
> </XPath>
> 
> Regards,
> 
> David Fischer
> Drummond Group.
> 
> 
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
> 
> 
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
> 
> 
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>