[OASIS Issue Tracker] Commented: (OFFICE-2315) Public Comment: ODF1.2 part 1 cd03 - 3.16 digital sig, certificate chain (CLONE)

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ http://tools.oasis-open.org/issues/browse/OFFICE-2315?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18761#action_18761 ] 

Malte Timmermann commented on OFFICE-2315:
------------------------------------------

Hi Dennis, sorry when I was wrong about the meaning of SHOULD. If it's a recommendation, than it fine, but in the end I still think it doesn't need to be listed explicitly, because XMLDSIG already supports this on it's own.

And yes, it's a requirement that all files are signed, and only the signature file itself might be excluded.

Current wording in odf1.2 part1 cd04 is:
"A document signature is a digital signature that is applied to all files in the zip archive of the package. This implies the document files, as well as the files which are part of the package format, such as mimetype, manifest.xml, additional signature files,etc. Only the file containing the document signature may be excluded from the signature"

I suggest to keep everything as it is w/o applying any of the suggested changes, and to close this issue.

> Public Comment: ODF 1.2 part 1 cd03 - 3.16 digital sig, certificate chain (CLONE)
> ---------------------------------------------------------------------------------
>
>                 Key: OFFICE-2315
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-2315
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: ODF 1.2 Part 1 CD 4 
>         Environment: This issue applies to OpenDocument-v1.2-part1-cd04 and Public Review of that document.
>            Reporter: Robert Weir 
>            Priority: Blocker
>
> Copied from office-comment list
> Original author: Hanssens Bart <Bart.Hanssens@fedict.be> 
> Original date: 24 Dec 2009 13:37:19 -0000
> Original URL: http://lists.oasis-open.org/archives/office-comment/200912/msg00023.html

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira