[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [ubl-security] New draft (UBL-XAdES-Profile 1.0-20100321)
Oriol Bausà Peris ha scritto:
21444F8C-4731-4946-B19E-B7E961138CA8@invinet.org" type="cite">This is requested by CODICE in Spain ?Hi Andrea, We have been working with the document in CODICE and there are some issues that I've tried to arise in the release I am currently attaching to this document. 1) When using enveloped signature, it is not mandatory using a cac:Signature element. You can optionally provide for it, but you are not mandated to do so. 21444F8C-4731-4946-B19E-B7E961138CA8@invinet.org" type="cite">if we follow any local request we will end to be unable to obtain interoperability.This means that you will be able to sign with this profile any kind of UBL document, despite the fact modellers added this structure to the document model. I mean that one thing is the data model of the document, and another thing are the legal provisions that require a signature to be placed there. That's why I recommend to change MUST for MAY when talking about enveloped signataure and cac:Signature element. The reason we provide an UBL profile for signatures is to achieve interop. If CODICE do not want to use the UBL profile then it will be not interoperable with other implementers. I told Andrea to use the ext:ExtensionURI to indicate the UBL Profile URI on the extension, so maybe we can say the cac:Signature is not necessary if the ext:ExtensionURI is valorized. ext:ExtensionReasonCode could be also used if necessary to identify the purpose of the signature: payment authorization (for direct Debit) or the signature of the invoice issuer. 21444F8C-4731-4946-B19E-B7E961138CA8@invinet.org" type="cite">2) I think there are some mistakes, talking about enveloping instead of enveloped signatures during the document. 3) I haven't added nothing about this yet, but there is a requirement for unsigned data, a placeholder where people can add stuff after having signed the document. I'll come back to you with this issue later on. I've made some modifications in the document according to the first two points. I 'd like to get feedback from the other security subgroup members. Thank you Oriol --
JAVEST by Roberto Cisternino * Document Engineering Services Ltd. - Alliance Member * UBL Italian Localization SubCommittee (ITLSC), co-Chair * UBL Online Community editorial board member (ubl.xml.org) * Italian UBL Advisor Roberto Cisternino
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]