Re: [ubl-security] UBL Profile for XML Digital Signatures and XAdES implementation V.01

[Oriol Bausā <ORIOL@INVINET.ORG>]

Hi Andrea,

The point is providing for both enveloped and detached signature, not  
just enveloped.

I would suggest a new table of contents for section3:

3 XML Digital Signature  of UBL Documents
3.1 Requirements for Digital Signature in UBL
3.2 Enveloped Digital Signature
3.2.1 XML Signature method
3.2.2 Use of UBL cac:Signature element
3.2.3 Specific signature verification controls
3.3 Detached Digital Signature
3.3.1 XML Signature method
	comment: No specific method for UBL when creating detached signatures
3.3.2 Use of UBL cac:Signature element
	How the detached file can be referred from the ExternalReference/URI
3.3.3 Specific signature verification controls
	As required...

I think this is another way to create valid signatures for UBL  
messages so I think we should identify this possibility in our report.


Regards, Oriol

El 01/10/2009, a las 17:12, Andrea Caccia escribiķ:

> It seems interesting.
> Can you explain better the scenario?
> You mean also in this case inserting the signature in an UBL  
> extension or
> how the message and related signature can be tied together?
>
> Regards,
> Andrea
>
>
> --------
> This message is sent to one or more specific recipient. If you are  
> not the
> intended recipient, please notify the sender and delete this message.
> --------
> Questo messaggio č inviato a specifici destinatari. Se non siete i
> destinatari, siete pregati di informare il mittente e cancellare  
> questo
> Messaggio.
>
>
> -----Original Message-----
> From: Oriol Bausā [mailto:ORIOL@INVINET.ORG]
> Sent: Thursday, October 01, 2009 9:15 AM
> To: ubl-security@lists.oasis-open.org
> Subject: Re: [ubl-security] UBL Profile for XML Digital Signatures  
> and XAdES
> implementation V.01
>
> Dear all,
>
> I've been thinking on the UBL Profile for XML Digital Signatures
> document and I think there is an improvement we can consider to add.
> The point is that we have covered enveloped digital signatures inside
> UBL Extensions. My point now is that we could also easily provide for
> Detached Signatures with a little effort.
>
> What do you think about this?
>
> Regards, Oriol
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>