OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

emergency-if message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: [OASIS Issue Tracker] Commented: (EMFW-13) DE 2.0 Signing - any ## other is missing from root element for signing


    [ http://tools.oasis-open.org/issues/browse/EMFW-13?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=29750#action_29750 ] 

Martena Gooch commented on EMFW-13:
-----------------------------------

What type of signing is appropriate for the DE 2.0 and is the location of ##other sufficient to enable this? 

The consensus was that the signing component of the DE should allow for
signing the entire message when the EDXLDistribution wrapper element is
used. 

Signing ensures receivers can verify the integrity of an entire DE
message; however, signing of content objects themselves should be left to
the creators of those content objects and enabled by the corresponding
content object schema, not the DE 2.0. The location of ##other needs
further review to determine whether it is in the correct spot in the
schema. 

Our intent is to allow signing of the entire DE 2.0 when
the EDXLDistribution wrapper is used, but otherwise content providers are
responsible for their own signing and encryption of their content objects
and if DE 2.0 components, like Content, are used with other wrappers then
the user is responsible for signing using whatever mechanisms are provided
by the other wrapper.

Reference: 03-06-12-Minutes-IF-Subcommittee Meeting Notes 

----- 
No Action Items for the IF Committee 

Our intent is to allow signing of the entire DE 2.0 when
the EDXLDistribution wrapper is used, but otherwise content providers are
responsible for their own signing and encryption of their content objects
and if DE 2.0 components, like Content, are used with other wrappers then
the user is responsible for signing using whatever mechanisms are provided
by the other wrapper.


> DE 2.0 Signing - any ## other is missing from root element for signing
> ----------------------------------------------------------------------
>
>                 Key: EMFW-13
>                 URL: http://tools.oasis-open.org/issues/browse/EMFW-13
>             Project: OASIS EDXL Distribution Element
>          Issue Type: Bug
>          Components: Schema
>    Affects Versions: csprd01 - Public Review Draft #1
>         Environment: Mitre-Don McGarry
>            Reporter: Martena Gooch
>            Priority: Minor
>             Fix For: csprd01 - Public Review Draft #1
>
>
> Any ##other is missing from root element for signing of the entire DE message

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]