Re: [ubl-security] Draft 10 of the UBL Digital Signature Profile for review

[Oriol Bausą Peris <oriol@invinet.org>]

Thank you Andrea,

I think this is a good job. Unfortunately, we've got too much technical overhead under my point of view. We could have avoided the scaffolding releasing a simpler solution.

Regards
Oriol


El 18/04/2011, a las 00:15, Andrea Caccia escribió:

> Sorry for this long delay, I attach here a PDF with comments, deleted (barred) and added text (in red). It addresses also Ken's question.
> Thank you for al the corrections and fixes.
> 
> Andrea
> <cd10-UBL-DSig-1.0+ac.pdf>
> 
> Il giorno 12/apr/2011, alle ore 16.17, Jon Bosak ha scritto:
> 
>> Hello Andrea,
>> 
>> Have you had a chance to look at Ken's question yet?
>> 
>> Jon
>> 
>> Andrea Caccia wrote:
>>> I apologize too for not reacting yet, I'll do by the end of this week.
>>> Andrea
>>> Il giorno 04/apr/2011, alle ore 03.12, G. Ken Holman ha scritto:
>>>> At 2011-03-19 21:49 -0400, Jon Bosak wrote:
>>>>> Please review this new draft carefully, keeping in mind that the editor
>>>>> (me) has very little knowledge of digital signature technology and can
>>>>> easily introduce technical errors in the process of working with the
>>>>> language.
>>>> I found something I didn't see before: Both the Terms and Definitions
>>>> (1.1.1) and section 2.2 make reference to an enveloping signature,
>>>> yet we don't provide a profile for such.  Should we explicitly
>>>> acknowledge (perhaps in section 2.4) that we are not providing a
>>>> profile for such (so the reader realizes nothing is inadvertently
>>>> missing), or change the existing text to say something along the
>>>> lines of "Two of the ways an XML Signature may be described are as
>>>> detached and enveloped."?  It might be enough that in 2.4 we alread
>>>> say "specifies two profiles..." so the reader knows nothing is
>>>> missing.
>>>> 
>>>>> This document is intended to form part of UBL 2.1 and will be included
>>>>> in UBL 2.1 PRD2.  In order to keep to our projected schedule for PRD2, I
>>>>> am setting a one-week review cycle for the draft attached.  If any
>>>>> member of the Security SC sees something that needs to be corrected or
>>>>> added to this draft, please register the change to this mail list before
>>>>> COB Sunday 27 March 2011.
>>>> Please forgive me that my leave of absence prevented me from submitting my comments in a timely fashion.
>>>> 
>>>> The document looks good to me, Jon ... thank you for your efforts.
>>>> 
>>>> I hope this helps.
>>>> 
>>>> . . . . . . . . . . Ken
>>>> 
>>>> --
>>>> Contact us for world-wide XML consulting & instructor-led training
>>>> Crane Softwrights Ltd.          http://www.CraneSoftwrights.com/o/
>>>> G. Ken Holman                 mailto:gkholman@CraneSoftwrights.com
>>>> Legal business disclaimers:  http://www.CraneSoftwrights.com/legal
>>>> 
>>>> 
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe from this mail list, you must leave the OASIS TC that
>>>> generates this mail.  Follow this link to all your TCs in OASIS at:
>>>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
>>> ---------------------------------------------------------------------
>>> To unsubscribe from this mail list, you must leave the OASIS TC that
>>> generates this mail.  Follow this link to all your TCs in OASIS at:
>>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
>> 
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php