[OASIS Issue Tracker] Commented: (OFFICE-2656) Clarify whensignatures operate on encrypted and when on unencrypted files.

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ http://tools.oasis-open.org/issues/browse/OFFICE-2656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19011#action_19011 ] 

Dennis Hamilton commented on OFFICE-2656:
-----------------------------------------

I object to this hack..  See <http://lists.oasis-open.org/archives/office/201004/msg00487.html>.

 1. I don't think it works as XML DSig is used and as DIgital Signatures are currently defined (and implemented in certain places).

 2. I don't think it should be made to work either.  This seems to paint us into a corner and it also doesn't seem to be in the spirit of XML Dsig and certainly not the XaDES work (based on my superficial appraisal of that).

 3. There is enough room to deal with encrypted signature files and unencrypted signature files as never signing encrypted data and never signing the compressed form either.   This is good enough to procede with ODF 1.2 Packaging and allow practice to develop.



> Clarify when signatures operate on encrypted and when on unencrypted files.
> ---------------------------------------------------------------------------
>
>                 Key: OFFICE-2656
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-2656
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Sub-task
>            Reporter: Michael Brauer
>            Assignee: Michael Brauer
>
> The ODF 1.2 part 3 CD01 specification currently does not explicitly state how references to encrypted files are handled.
> There are two uses cases:
> a) A signature is applied to an encrypted document. In this case, the signature would operate on the encrypted files.
> b) A signed document is encrypted. In this case, the signature would operate on the unencrypted files.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira