[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: [OASIS Issue Tracker] Commented: (EMFW-13) DE 2.0 Signing - any ## other is missing from root element for signing
[ http://tools.oasis-open.org/issues/browse/EMFW-13?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=29750#action_29750 ] Martena Gooch commented on EMFW-13: ----------------------------------- What type of signing is appropriate for the DE 2.0 and is the location of ##other sufficient to enable this? The consensus was that the signing component of the DE should allow for signing the entire message when the EDXLDistribution wrapper element is used. Signing ensures receivers can verify the integrity of an entire DE message; however, signing of content objects themselves should be left to the creators of those content objects and enabled by the corresponding content object schema, not the DE 2.0. The location of ##other needs further review to determine whether it is in the correct spot in the schema. Our intent is to allow signing of the entire DE 2.0 when the EDXLDistribution wrapper is used, but otherwise content providers are responsible for their own signing and encryption of their content objects and if DE 2.0 components, like Content, are used with other wrappers then the user is responsible for signing using whatever mechanisms are provided by the other wrapper. Reference: 03-06-12-Minutes-IF-Subcommittee Meeting Notes ----- No Action Items for the IF Committee Our intent is to allow signing of the entire DE 2.0 when the EDXLDistribution wrapper is used, but otherwise content providers are responsible for their own signing and encryption of their content objects and if DE 2.0 components, like Content, are used with other wrappers then the user is responsible for signing using whatever mechanisms are provided by the other wrapper. > DE 2.0 Signing - any ## other is missing from root element for signing > ---------------------------------------------------------------------- > > Key: EMFW-13 > URL: http://tools.oasis-open.org/issues/browse/EMFW-13 > Project: OASIS EDXL Distribution Element > Issue Type: Bug > Components: Schema > Affects Versions: csprd01 - Public Review Draft #1 > Environment: Mitre-Don McGarry > Reporter: Martena Gooch > Priority: Minor > Fix For: csprd01 - Public Review Draft #1 > > > Any ##other is missing from root element for signing of the entire DE message -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]