RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded

[John Messing <jmessing@law-on-line.com>]

Works for me. Thanks.

> -------- Original Message --------
> Subject: RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature
> Profile WD   (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> From: "Nick Pope" <pope@secstan.com>
> Date: Tue, November 08, 2005 12:34 pm
> To: <legalxml-courtfiling@lists.oasis-open.org>, <jcabral@mtgmc.com>
> 
> I attach a revised version of the XML signature profile as discussed at
> today's call.
> 
> Nick
> 
> > -----Original Message-----
> > From: Nick Pope [mailto:pope@secstan.com]
> > Sent: 08 November 2005 18:00
> > To: John Messing
> > Cc: legalxml-courtfiling@lists.oasis-open.org; jcabral@mtgmc.com
> > Subject: RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML
> Signature
> > Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc)
> uploaded
> >
> >
> > John,
> >
> > I recognise that other mechanisms may be used to provide the
> signature.
> > However, I would expect it to be a part of the signing mechanisms
> > to provide
> > a means of identification.
> >
> > The W3C SignatureProterties provides the basis of the signing time
> use in
> > the ETSI spec.  However, this is further refined in this spec to
> clarify
> > that this is the Signing Time, and requires that this as a signed
> > property.
> >
> > One further point the ETSI specification also defines support for
> > different
> > forms of multiple signatures: independent where each signature is
> > independently applied to the signed data, and embedded where
> > signatures are
> > applied to signed data and previous signatures.
> >
> > Nick
> >
> > > -----Original Message-----
> > > From: John Messing [mailto:jmessing@law-on-line.com]
> > > Sent: 08 November 2005 16:19
> > > To: Nick Pope
> > > Cc: legalxml-courtfiling@lists.oasis-open.org; jcabral@mtgmc.com
> > > Subject: RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML
> Signature
> > > Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc)
> uploaded
> > >
> > >
> > > If ECF 3.0 is not at the point of adopting X-509 digital
> certificates as
> > > a requirement, then it seems SignerName may serve a useful
> function.
> > > Section 3.3 of the W3C xmldsig spec makes clear that more than
> > > asymmetric signatures with digital certificates are supported when
> it
> > > states : "The specification must permit arbitrary cryptographic
> > > signature and message authentication algorithms, symmetric and
> > > asymmetric authentication schemes, and key agreement methods.
> [Brown]"
> > >
> > > http://www.w3.org/TR/xmldsig-core/#sec-SignatureProperties does
> include
> > > the date and time as a signature property.  "Additional
> information
> > > items concerning the generation of the signature(s) can be placed
> in a
> > > SignatureProperty element (i.e., date/time stamp or the serial
> number
> > > of cryptographic hardware used in signature generation)."
> > >
> > > > -------- Original Message --------
> > > > Subject: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML
> Signature
> > > > Profile WD
> > (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> > > > From: "Nick Pope" <pope@secstan.com>
> > > > Date: Tue, November 08, 2005 7:11 am
> > > > To: <legalxml-courtfiling@lists.oasis-open.org>,
> <jcabral@mtgmc.com>
> > > >
> > > > Apologies for the late submission but I have the following
> > > comment on this signature profile.
> > > >
> > > > 1) SignedDate defined in this profile already exist as
> > > SigningTime in the ETSI Specification TS 101 933
> > > (http://pda.etsi.org/pda/home.asp?wki_id=D1D9dRmxtkBDBGEEDkxEm)
> > > which has also been published as a W3C note
> > > (http://www.w3.org/TR/XAdES/) for which electronic signature
> > > implementations exist.  This element is specifically defined for
> > > supporting the non-repudiation threat identified.
> > > >
> > > > This existing SigningTime element places the time within the
> > > <SignedSignatureProperties> element within the existing
> > > <ds:Object> element.  This approach specifically designed for
> > > such extensions to signatures, to avoid the necessity to define
> > > new signature types than defining a new type of signature.
> > > >
> > > > 2) It is strongly recommended that rather than definining a new
> > > type of signature the same approach is taken with other signature
> > > properties that may be considered necessary for court filing.
> > > W3C, ETSI and OASIS DSS are adopting this approach as a means of
> > > assigning new properties to XML Signatures.  Defining a new
> > > SignatureType element for each variation of electronic signatures
> > > will lead to fragmentation of solutions in this area.  I am happy
> > > to assist the editor in completing the technical details.
> > > >
> > > > 3) It is not clear what the role of SignerName.  If X.509 based
> > > signatures are to be employed then this is already given in the
> > > signing certificates.  If the two names (X.509 certified name and
> > > SignerName) exist which is to be taken to be the real name?  If
> > > they are different abiguity will exist.
> > > >
> > > > Nick
> > > >
> > > > > -----Original Message-----
> > > > > From: jcabral@mtgmc.com [mailto:jcabral@mtgmc.com]
> > > > > Sent: 07 November 2005 05:52
> > > > > To: legalxml-courtfiling@lists.oasis-open.org
> > > > > Subject: [legalxml-courtfiling] Groups - ECF 3.0 XML
> > Signature Profile
> > > > > WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> > > > >
> > > > >
> > > > > The document named ECF 3.0 XML Signature Profile WD
> > > > > (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) has been
> > > > > submitted by Mr.
> > > > > James Cabral to the OASIS LegalXML Electronic Court Filing
> > TC document
> > > > > repository.
> > > > >
> > > > > Document Description:
> > > > > This is a working draft of the XML Document Signature Profile
> > > > >
> > > > > View Document Details:
> > > > >
> http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > > > > document.php?document_id=15218
> > > > >
> > > > > Download Document:
> > > > >
> http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > > > >
> download.php/15218/legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc
> > > > >
> > > > >
> > > > > PLEASE NOTE:  If the above links do not work for you, your
> email
> > > > > application
> > > > > may be breaking the link into two pieces.  You may be able to
> > > > > copy and paste
> > > > > the entire link address into the address field of your web
> browser.
> > > > >
> > > > > -OASIS Open Administration
> > > > >
> > > >
> > > >
> > > >
> ---------------------------------------------------------------------
> > > > To unsubscribe from this mail list, you must leave the OASIS TC
> that
> > > > generates this mail.  You may a link to this group and all your
> > > TCs in OASIS
> > > > at:
> > > >
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
> > >
> > >
> > >
> >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe from this mail list, you must leave the OASIS TC that
> > generates this mail.  You may a link to this group and all your
> > TCs in OASIS
> > at:
> >
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
> >
> >
> >
> 
> ---------------------------------------------------------------------
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your TCs in
> OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php