[Fwd: [members] Public Review of Emergency Management EDXL-DE v1.0Specification]

[Arshad Noor <arshad.noor@strongauth.com>]

FYI, this standard has one element (name="embeddedXMLContent") that
allows for signed and/or encrypted messages.  However, the standard
makes it optional to do so.

I have submitted a comment to this TC, that given the context under
which the EDXL-DE standard will be used (probably life-and-death
situations), digitally signed messages should be mandatory.

Emulex, a publicly traded company lost nearly $2.5B in market cap.
because of a false press release in 2000 
(http://news.com.com/2100-1033-244975.html?legacy=cnet).  While
most of the market cap came back, some investors surely did not
recover from the hoax.

I do not believe that emergency messages sent between systems (that
will most likely be used by law-enforcement, DHS, FEMA and other
similar agencies) should be unauthenticated - there is too much
potential for creating public chaos under the right circumstances
and have said so in a public comment to this TC.

Others from the PKI-TC who believe the same, should also comment
on this before 10/28.

Arshad Noor
StrongAuth, Inc.


-------- Original Message --------
Subject: [members] Public Review of Emergency Management EDXL-DE v1.0 
Specification
Date: Mon, 29 Aug 2005 23:08:35 -0400
From: Mary McRae <mary.mcrae@oasis-open.org>
Reply-To: mary.mcrae@oasis-open.org
Organization: OASIS
To: tc-announce@lists.oasis-open.org, members@lists.oasis-open.org

To: OASIS members, public announce lists

The OASIS Emergency Management TC has recently approved
the following specification as a Public Review Draft:

Emergency Data Exchange Language (EDXL) Distribution Element v1.0

The public review starts today, 29 August 2005 and ends
28 October 2005.

Public review from potential users, developers and stakeholders
is an important part of the OASIS process to assure interoperability
and quality. Comments are solicited from all interested parties.
Please feel free to forward this message to other appropriate
lists and/or post this information on your organization's web
site. Comments may be submitted to the TC by any person via a
web form found on the TC's web page at
http://www.oasis-open.org/committees/emergency. Click the button
for "Send A Comment" at the top of the page. Direct access to
the comment form is at:
http://www.oasis-open.org/committees/comments/form.php?wg_abbrev=emergency

Submitted comments (for this work as well as other works of
the Emergency Management TC) are publicly archived and can be viewed at 
http://lists.oasis-open.org/archives/emergency-comment/.

A summary and the file location follow below.

Mary P McRae
Manager of TC Administration, OASIS
mary.mcrae@oasis-open.org


Summary
-----------

This Distribution Element specification describes a standard
message distribution framework for data sharing among emergency
information systems using the XML-based Emergency Data Exchange
Language (EDXL). This format may be used over any data
transmission system, including but not limited to the SOAP HTTP
binding. The primary purpose of the Distribution Element is
to facilitate the routing of any properly formatted XML emergency
message to recipients. The Distribution Element may be thought
of as a "container". It provides the information to route
"payload" message sets (such as Alerts or Resource Messages),
by including key routing information such as distribution type,
geography, incident, and sender/recipient ID's.


Files
-----

The file is available here:

Emergency Data Exchange Language (EDXL) Distribution Element v1.0

http://www.oasis-open.org/committees/download.php/14163/EDXL_DE_Spec_v1.0.html


---------------------------------------------------------------------

This email list is used solely by OASIS for official consortium 
communications. Opt-out requests may be sent to 
member_services@oasis-open.org, however, all members are strongly 
encouraged to maintain a subscription to this list.