RE: [legalxml-courtfiling] A question from LegalXML-OASIS CourtFiling

[John Messing <jmessing@law-on-line.com>]

I recall that there is an attack possible in the sign and encrypt scenario and that the order of signing and
encrypting makes a difference but I will have to refresh myself on the details and get back to the list. I had
not understood this was part of the problem being discussed.

As for the encryption and encoding, I believe it may not be as straightforward as you have put forth, but I
will need to find out if I am correct.

Thanks for your input.

Internet communications are insecure. If you would like to initiate secure communications, these can be made
available upon request.

The information contained in this message may be legally privileged and confidential.  It is intended to be
read only by the individual or entity to whom it is addressed or by their designee. If the reader of this
message is not the intended recipient, you are on notice that any distribution of this message, in any form, is
strictly prohibited. 

If you have received this e-mail in error, please immediately notify the sender by "Reply" command and/or John
H. Messing, P.C. by telephone at (520) 547-7933 and permanently delete the original and any copies or printouts
thereof. Although this email and any attachments are believed to be free of any virus or other defect, it is
the responsibility of the recipient to ensure that a message is virus free. John H. Messing, John H. Messing PC
and Law-on-Line Inc. take no responsibility for any loss or damage.


> -------- Original Message --------
> Subject: RE: [legalxml-courtfiling] A question from LegalXML-OASIS
> CourtFiling
> From: "Cabral, James E." <JCabral@mtgmc.com>
> Date: Mon, May 17, 2004 2:42 pm
> To: "John Messing" <jmessing@law-on-line.com>,
> legalxml-courtfiling@lists.oasis-open.org
> 
> John,
> 
> I recall part of the question was whether you sign it before you
> encrypt
> it or vice versa? 
> 
> BTW, if the document is attached as an additional MIME Part, the mime
> tools will do the encoding when the document is attached so you will
> be
> forced to do the encryption first.
> 
> Jim Cabral 
> 
> 
> -----Original Message-----
> From: John Messing [mailto:jmessing@law-on-line.com] 
> Sent: Monday, May 17, 2004 1:13 PM
> To: legalxml-courtfiling@lists.oasis-open.org
> Subject: [legalxml-courtfiling] A question from LegalXML-OASIS
> CourtFiling
> 
> In New Orleans, I was tasked to contact the W3C XML encryption list or
> if that is not active any more, some of the more knowledgeable members
> about technical issues involving encryption, for use with court orders
> in Blue.
> Here is a draft for consideration and comment by the TC before I send
> it.
> ------------------------------------------------------------------------
> ------------------------------------------------
> 
> I have been asked to pose a question to the xmlenc list. The
> LegalXML-OASIS CourtFiling TC is exploring the use of XMLEnc for
> redacting orders and pleadings or portions of orders and pleadings in
> cases where confidentiality is required.
> 
> The questions are based upon the hypothetical example of an XML
> document
> which is treated as a binary and converted to BASE64 encoding for
> transmission in an XML envelope or container. 
> 
> 1. If it is to be encrypted, should XMLEnc or simply S-MIME encryption
> be used? 
> 2. Regardless of the answer to 1, should the BASE64 encoding precede
> the
> encryption, or the reverse? 
> 3. Does the answer to 2 change if only parts of the document are to be
> encrypted rather than the whole document, and if so, in what way(s)?
> 
> Thanks for beforehand. Best regards.
> etc.
> 
> ------------------------------------------------------------------------
> -----------------------------------------------
> Internet communications are insecure. If you would like to initiate
> secure communications, these can be made available upon request.
> 
> The information contained in this message may be legally privileged
> and
> confidential.  It is intended to be read only by the individual or
> entity to whom it is addressed or by their designee. If the reader of
> this message is not the intended recipient, you are on notice that any
> distribution of this message, in any form, is strictly prohibited. 
> 
> If you have received this e-mail in error, please immediately notify
> the
> sender by "Reply" command and/or John H. Messing, P.C. by telephone at
> (520) 547-7933 and permanently delete the original and any copies or
> printouts thereof. Although this email and any attachments are
> believed
> to be free of any virus or other defect, it is the responsibility of
> the
> recipient to ensure that a message is virus free. John H. Messing,
> John
> H. Messing PC and Law-on-Line Inc. take no responsibility for any loss
> or damage.
> 
> To unsubscribe from this mailing list (and be removed from the roster
> of
> the OASIS TC), go to
> http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/member
> s/leave_workgroup.php.