Re: [legalxml-enotary] Groups - ENML Security Implications v1.2 (ENML-Security-Implications-v1.2.pdf) uploaded

[Arshad Noor <arshad.noor@strongauth.com>]

Thank you, Mark.  I appreciate your point of view on the technology
vs. policy focus.  I agree with you that they are separate "legs"
even though they are joined at the hip.

Since the policy choice does have implications on the XML and the
consequent security of the eNotarized documents, would you - or the
TC - have objections to maintaining this security document in the
eNotary TC Repository for those who want to learn about the security
implications related to ENML?

While software developers have no choice but to implement the entire
specification to conform with the standard (another topic for us to
discuss in January: conformance), policy-makers might find it useful
to learn how their decisions can impact the security of the documents;
unfortunately, without such an appendix, the ENML specification would
be silent on that subject.

Arshad

Mark Ladd wrote:
> I have finally had the opportunity to review the security document.  First, let me commend Arshad for his efforts in this regard.  Much thought and effort went into the drafting of this paper.
> 
> In my opinion, this document deals with some of the controversial policy issues that are currently being debated at many levels.  To-date the eNotary TC has focused on XML technology, avoiding policy debates whenever possible.  I believe the debate needs to take place but personally, I do not think the LegalXML eNotary standard and supporting documentation is the proper venue for that discussion.
> 
> While I appreciate the spirit of the document, it is not something that I believe the TC should include as part of the specification at this time.  We can discuss this further on the next TC conference call.
> 
> Have a Safe & Happy New Year, everyone!
> 
> 
> Mark Ladd
> PRIA Consultant
>  
> 262-498-0850
> mladd@pria.us 
>  
>  
> 
> 
> -----Original Message-----
> From: arshad.noor@strongauth.com [mailto:arshad.noor@strongauth.com] 
> Sent: Monday, December 08, 2008 2:30 PM
> To: legalxml-enotary@lists.oasis-open.org
> Subject: [legalxml-enotary] Groups - ENML Security Implications v1.2 (ENML-Security-Implications-v1.2.pdf) uploaded
> 
> Thanks to Marc Aronson, this document is clearer and easier to read.  Other
> inputs are welcome.
> 
> 
> 
>  -- Arshad Noor*
> 
> The document named ENML Security Implications v1.2
> (ENML-Security-Implications-v1.2.pdf) has been submitted by Arshad Noor* to
> the OASIS LegalXML eNotarization TC document repository.
> 
> Document Description:
> Security implications of the eNotarization Markup Language 1.0.
> 
> View Document Details:
> http://www.oasis-open.org/committees/document.php?document_id=30320
> 
> Download Document:  
> http://www.oasis-open.org/committees/download.php/30320/ENML-Security-Implications-v1.2.pdf
> 
> 
> PLEASE NOTE:  If the above links do not work for you, your email application
> may be breaking the link into two pieces.  You may be able to copy and paste
> the entire link address into the address field of your web browser.
> 
> -OASIS Open Administration
> 
>