atom feed63 messages in org.oasis-open.lists.dssRE: [dss] Groups - dss-requirements-1...
FromSent OnAttachments
robe...@entrust.comMar 24, 2003 12:58 pm 
Gregor KarlingerMar 25, 2003 7:34 am.bin
Trevor PerrinMar 25, 2003 11:30 am 
Nick PopeMar 25, 2003 11:35 am 
Nick PopeMar 25, 2003 12:23 pm 
Trevor PerrinMar 25, 2003 12:29 pm 
Trevor PerrinMar 25, 2003 12:33 pm 
jmessingMar 25, 2003 12:36 pm 
Trevor PerrinMar 25, 2003 1:18 pm 
Nick PopeMar 25, 2003 1:21 pm 
Nick PopeMar 25, 2003 1:21 pm 
Nick PopeMar 26, 2003 1:21 am 
kare...@esat.kuleuven.ac.beMar 26, 2003 4:02 am 
Nick PopeMar 26, 2003 5:22 am 
jmessingMar 26, 2003 5:26 am 
Trevor PerrinMar 26, 2003 10:49 am 
jmessingMar 26, 2003 10:57 am 
Trevor PerrinMar 26, 2003 11:11 am 
Rich SalzMar 26, 2003 11:24 am 
Trevor PerrinMar 26, 2003 1:15 pm 
Greg AlvordMar 27, 2003 4:37 am 
Gregor KarlingerMar 27, 2003 9:01 am.bin
Trevor PerrinMar 27, 2003 1:17 pm 
Nick PopeMar 28, 2003 3:54 am 
Trevor PerrinMar 28, 2003 1:52 pm 
Nick PopeMar 29, 2003 9:35 am 
Rich SalzMar 29, 2003 10:10 am 
Trevor PerrinMar 29, 2003 10:14 am 
Rich SalzMar 29, 2003 10:36 am 
jmessingMar 29, 2003 11:19 am 
Rich SalzMar 29, 2003 11:26 am 
Trevor PerrinMar 29, 2003 11:46 am 
jmessingMar 29, 2003 12:31 pm 
Rich SalzMar 29, 2003 3:35 pm 
Trevor PerrinMar 30, 2003 1:49 am 
Gregor KarlingerMar 30, 2003 10:50 am.bin
Gregor KarlingerMar 30, 2003 11:07 am.bin
Gregor KarlingerMar 30, 2003 11:18 am.bin
Gregor KarlingerMar 30, 2003 11:23 am.bin
Gregor KarlingerMar 30, 2003 11:31 am.bin
Gregor KarlingerMar 30, 2003 11:47 am.bin
Gregor KarlingerMar 30, 2003 11:58 am.bin
Gregor KarlingerMar 30, 2003 12:14 pm.bin
Gregor KarlingerMar 30, 2003 12:23 pm.bin
Rich SalzMar 30, 2003 2:25 pm 
Gregor KarlingerMar 30, 2003 11:14 pm.bin
Gregor KarlingerMar 30, 2003 11:20 pm.bin
Gregor KarlingerMar 30, 2003 11:26 pm.bin
Gregor KarlingerMar 30, 2003 11:30 pm.bin
Gregor KarlingerMar 30, 2003 11:37 pm.bin
Trevor PerrinMar 31, 2003 1:41 am 
Gregor KarlingerMar 31, 2003 1:48 am.bin
Gregor KarlingerMar 31, 2003 1:56 am.bin
Nick PopeMar 31, 2003 4:02 am 
Anthony NadalinMar 31, 2003 5:15 am 
Karel WoutersMar 31, 2003 6:30 am 
Gregor KarlingerMar 31, 2003 7:22 am.bin
Trevor PerrinMar 31, 2003 8:46 am 
Gregor KarlingerMar 31, 2003 1:20 pm.bin
Nick PopeApr 1, 2003 1:32 am 
Karel WoutersApr 1, 2003 2:52 am 
Nick PopeApr 1, 2003 2:52 am 
Nick PopeApr 1, 2003 3:03 am 
Subject:RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded
From:Gregor Karlinger (greg@cio.gv.at)
Date:Mar 30, 2003 11:37:29 pm
List:org.oasis-open.lists.dss
Attachments:
bin00019.bin - 13k

All,

-----Original Message----- From: jmessing [mailto:jmes@law-on-line.com] Sent: Saturday, March 29, 2003 9:37 PM To: Rich Salz; Trevor Perrin Cc: ds@lists.oasis-open.org Subject: RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded

As I understand it, Rich Salz just did an XML-DSIG interop report for the W3C XML-DSIG list. Perhaps Rich can enlighten us whether he agrees with this suggested resolution. Personally, I have doubts. Either XML-DSIG works as intended with transforms, cannonicalization and signatures, or, as has been suggested, there may be problems in the implementations. If we have to worry about white spaces and line feed/carriage returns creeping back in for verifications, such that "what was seen was signed" may or may not be reconstructible and verifiable, then can we simply treat it as an XML-DSIG issue and move on?

I *stronly* agree with John; if XMLDSIG transforms produce different results in different implementations, this is an XMLDSIG interop problem.

/Gregor

Anyways, I just worry that this is more a general XML-DSIG issue than a DSS issue, and so we shouldn't expend too much effort trying to solve it, unless we can do it very simply.

In addition to the fact that not all transforms will even *BE* signable

Hunh? How so? Are you saying the stylesheet is private? /r$

A transform (according to XML-DSIG 4.3.3.4) could be just about any algorithm, it doesn't have to be XSLT. The approach I suggested would work with any transform, not just those that are representable in XML like XSLT.

Trevor