OASIS Open Document Format for Office Applications (OpenDocument) TC

  • 1.  [OASIS Issue Tracker] Created: (OFFICE-3030) Public Comment:Comments on Digital Signatures in ODF 1.2 Part 3

    Posted 07-25-2010 16:57 
    Public Comment: Comments on Digital Signatures in ODF 1.2 Part 3
----------------------------------------------------------------

                 Key: OFFICE-3030
                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-3030
             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
          Issue Type: Bug
            Reporter: Robert Weir 


Copied from office-comment list

Original author: "MURATA Makoto (FAMILY Given)"


  • 2.  RE: [office] [OASIS Issue Tracker] Created: (OFFICE-3030) PublicComment: Comments on Digital Signatures in ODF 1.2 Part 3

    Posted 07-27-2010 01:24 
    I need to straighten out my logon stuff, but I wanted to give this a response on the list and ask for opinions from the board.

The question is why we don't use xmldsig 1.1 vs. xmldsig 1.0, and why we don't use XML signature properties?

Both of these are in draft form right now, and I don't want to incorporate something from a draft into a final standard. If the draft changes, it could render the final standard invalid. I also don't think there is any prohibition on using these draft versions or extensions, so an implementer could use them if they liked.

Do the other members agree with this? If not, then let's discuss it.

BTW, the XML signature properties will give a standard way to express the signing time if you're not using XAdES, and I almost listed it as one of the ways to supply a signing time, but then reconsidered on the basis that it is a draft.


    
                                                
    
					
                                                    

        
                                                
				
    
                                                
    
                                                    
                                                        
                                                        Original Message


  • 3.  Re: [office] [OASIS Issue Tracker] Created: (OFFICE-3030) PublicComment: Comments on Digital Signatures in ODF 1.2 Part 3

    Posted 07-28-2010 06:01 
    Hi David,

David LeBlanc wrote:
> I need to straighten out my logon stuff, but I wanted to give this a response on the list and ask for opinions from the board.
> 
> The question is why we don't use xmldsig 1.1 vs. xmldsig 1.0, and why we don't use XML signature properties?
> 
> Both of these are in draft form right now, and I don't want to incorporate something from a draft into a final standard. If the draft changes, it could render the final standard invalid. I also don't think there is any prohibition on using these draft versions or extensions, so an implementer could use them if they liked.
> 
> Do the other members agree with this? If not, then let's discuss it.

I agree to this. Referencing drafts is a risk. Not only because the 
draft may change, but also because drafts may be withdrawn. This for 
instance happened to the CSS3 Text Module, that before it has been 
withdrawn, had the "Candidate Recommendation" status.

Further, as far as I know, ISO and maybe also OASIS does not allow us to 
reference drafts in a normative way.

Best regards

Michael


> 
> BTW, the XML signature properties will give a standard way to express the signing time if you're not using XAdES, and I almost listed it as one of the ways to supply a signing time, but then reconsidered on the basis that it is a draft.
> 
> 
    
                                                
    
					
                                                    

        
                                                
				
    
                                                
    
                                                    
                                                        
                                                        Original Message


  • 4.  RE: [office] [OASIS Issue Tracker] Created: (OFFICE-3030) PublicComment: Comments on Digital Signatures in ODF 1.2 Part 3

    Posted 07-28-2010 07:07 
    OK, thanks - good feedback to know.


    
                                                
    
					
                                                    

        
                                                
				
    
                                                
    
                                                    
                                                        
                                                        Original Message


Related Content