RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded

[John Messing <jmessing@law-on-line.com>]

If ECF 3.0 is not at the point of adopting X-509 digital certificates as
a requirement, then it seems SignerName may serve a useful function.
Section 3.3 of the W3C xmldsig spec makes clear that more than
asymmetric signatures with digital certificates are supported when it
states : "The specification must permit arbitrary cryptographic
signature and message authentication algorithms, symmetric and
asymmetric authentication schemes, and key agreement methods. [Brown]"

http://www.w3.org/TR/xmldsig-core/#sec-SignatureProperties does include
the date and time as a signature property.  "Additional information
items concerning the generation of the signature(s) can be placed in a
SignatureProperty element (i.e., date/time stamp or the serial number
of cryptographic hardware used in signature generation)."

> -------- Original Message --------
> Subject: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature
> Profile WD   (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> From: "Nick Pope" <pope@secstan.com>
> Date: Tue, November 08, 2005 7:11 am
> To: <legalxml-courtfiling@lists.oasis-open.org>, <jcabral@mtgmc.com>
> 
> Apologies for the late submission but I have the following comment on this signature profile.
> 
> 1) SignedDate defined in this profile already exist as SigningTime in the ETSI Specification TS 101 933 (http://pda.etsi.org/pda/home.asp?wki_id=D1D9dRmxtkBDBGEEDkxEm) which has also been published as a W3C note (http://www.w3.org/TR/XAdES/) for which electronic signature implementations exist.  This element is specifically defined for supporting the non-repudiation threat identified.  
> 
> This existing SigningTime element places the time within the <SignedSignatureProperties> element within the existing <ds:Object> element.  This approach specifically designed for such extensions to signatures, to avoid the necessity to define new signature types than defining a new type of signature.
> 
> 2) It is strongly recommended that rather than definining a new type of signature the same approach is taken with other signature properties that may be considered necessary for court filing.  W3C, ETSI and OASIS DSS are adopting this approach as a means of assigning new properties to XML Signatures.  Defining a new SignatureType element for each variation of electronic signatures will lead to fragmentation of solutions in this area.  I am happy to assist the editor in completing the technical details.
> 
> 3) It is not clear what the role of SignerName.  If X.509 based signatures are to be employed then this is already given in the signing certificates.  If the two names (X.509 certified name and SignerName) exist which is to be taken to be the real name?  If they are different abiguity will exist.
> 
> Nick
> 
> > -----Original Message-----
> > From: jcabral@mtgmc.com [mailto:jcabral@mtgmc.com]
> > Sent: 07 November 2005 05:52
> > To: legalxml-courtfiling@lists.oasis-open.org
> > Subject: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature Profile
> > WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> > 
> > 
> > The document named ECF 3.0 XML Signature Profile WD
> > (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) has been 
> > submitted by Mr.
> > James Cabral to the OASIS LegalXML Electronic Court Filing TC document
> > repository.
> > 
> > Document Description:
> > This is a working draft of the XML Document Signature Profile
> > 
> > View Document Details:
> > http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > document.php?document_id=15218
> > 
> > Download Document:  
> > http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > download.php/15218/legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc
> > 
> > 
> > PLEASE NOTE:  If the above links do not work for you, your email 
> > application
> > may be breaking the link into two pieces.  You may be able to 
> > copy and paste
> > the entire link address into the address field of your web browser.
> > 
> > -OASIS Open Administration
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php