[OASIS Issue Tracker] Commented: (OFFICE-3652) Public Comment:Comments on use of Signatures in ODF

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ http://tools.oasis-open.org/issues/browse/OFFICE-3652?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=23887#action_23887 ] 

David LeBlanc commented on OFFICE-3652:
---------------------------------------

The issue with Reference elements that refer to a file contained within the package has been the topic of several discussions. There is not currently a standardized way to specify an XPath which has the root of a package as the root of the path.

A perhaps cleaner approach, which is to use a Manifest element, where we can then specify exact rules for processing Reference elements contained within the Manifest, did not gain support during the creation of this draft specification. An existing implementation just put all the Reference elements for Reference elements that refer to data within the signature, Reference elements that refer to files (and potentially portions of files) within the package, and Reference elements that could refer to completely external data all together in the SignedInfo.

As such, there is then an ambiguity as to whether an XPath refers to some other element where the root is considered the XML document that contains the Signature elements, or whether the root is considered to be the root of the package. The wording is intended to disambiguate these two possible conditions, and yes, if an implementer did not understand section 3.7, then they would not be able to correctly resolve Reference elements. While I don't consider this resolution to be ideal, it does seem to be a reasonable and workable approach.

BTW, I do not know the exact protocol for responding to Nick Pope and Juan Carlos Cruellas on the e-mail thread. If someone would please let me know how that works, I'd appreciate it.



> Public Comment: Comments on use of Signatures in ODF
> ----------------------------------------------------
>
>                 Key: OFFICE-3652
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-3652
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Bug
>    Affects Versions: ODF 1.2 CD 06
>            Reporter: Robert Weir 
>            Priority: Trivial
>
> Copied from office-comment list
> Original author: "Pope, Nick" <Nick.Pope@thales-esecurity.com> 
> Original date: 27 Dec 2010 12:17:10 -0000
> Original URL: http://lists.oasis-open.org/archives/office-comment/201012/msg00081.html

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira