Re: [office] encryption - signature

[Michael Stahl <Michael.Stahl@cib.de>]

On 07.07.19 20:03, Regina Henschel wrote:

Regina Henschel schrieb am 07-Jul-19 um 19:54:

Hi all,

it seems to be related to https://issues.oasis-open.org/browse/OFFICE-3708

And to https://issues.oasis-open.org/browse/OFFICE-3702 ?

Perhaps add a note somewhere?

apparently this was previously discussed...

[office] ODF Teleconference 15 August 2016 - chat log

https://lists.oasis-open.org/archives/office/201608/msg00006.html

Patrick: https://issues.oasis-open.org/browse/OFFICE-3702
Patrick: Close with no action, there is no benefit to using the correct
URL - would cause unnecessary work and effort, plus possibly break prior
applications -
Jos van den Oever: Calligra uses '"http://www.w3.org/2000/09/xmldsig#sha1";'
Jos van den Oever: but not sha256

the situation is that the URL is for SHA256 is incorrect, but OpenOffice.org writes this incorrect URL since 2011 and thus all existing ODF 1.2 documents that make use of SHA256 have this incorrect URL... this is unfortunate but it's a bit late to prevent it now.

(LibreOffice can consume the correct URL in addition to the incorrect one since 2016, 1015d35f2362953f415804476037d4f162eb49b5)

we could either leave this as it is, or require that consumers recognize the correct URL in addition to the incorrect one.

(note that producers and consumers are technically allowed to use any URL they please anyway by the schema.)

regards,

Âmichael

-- 
Michael Stahl
Senior Software-Entwickler LibreOffice
âââ
CIB software GmbH
GeschÃftsstelle Hamburg
Flachsland 10
22083 Hamburg
âââ
T +49 (40) / 28 48 42 -296
F +49 (40) / 28 48 42 -100
Michael.Stahl@cib.de
www.cib.de
âââ
Sitz: MÃnchen
Registergericht MÃnchen, HRB 123286
GeschÃftsfÃhrer: Dipl.-Ing. Ulrich Brandner