Hi Dennis,
On 04/30/10 23:44, dennis.hamilton@acm.org wrote:
> The document named OFFICE-2656 Demonstration of documentsignature.xml
> (OFFICE-2656-documentsignature.zip) has been submitted by Dennis Hamilton
> to the OASIS Open Document Format for Office Applications (OpenDocument) TC
> document repository.
>
> Document Description:
> This Zip package contains an extract of a META-INF/documentsignature.xml
> file.
>
> 1. In the only known-to-me established implementation of ODF 1.2 package
> signatures, a bug in how URIs of the form "#fragment" should
> fail, since the correct URI is
> "#META-INF/documentsignature.xml#fragment"
Why do you think that would be the correct URI? We don't have any
specific rules about fragment URIs. A "#fragment" references the id
"fragment". I fail to see why the URI should look like the one you
suggest. Where in the specification did you find rules that say so?
>
> 2. Demonstration that the references to resources that are part of the
> signed material are always references to the extracted file streams and not
> the compressed (or encrypted) Zip content. In particular, the references
> to fragments could not possibly be usable in that case, including
> cross-references in package file META-INF/documentsignature.xml itself.
Can you please explain what you mean by that? What in file demonstrates
that references always unencrypted uncompressed data?
Thank you
Michael
>
> View Document Details:
> http://www.oasis-open.org/committees/document.php?document_id=37563
>
> Download Document:
> http://www.oasis-open.org/committees/download.php/37563/OFFICE-2656-documentsignature.zip
>
>
> PLEASE NOTE: If the above links do not work for you, your email application
> may be breaking the link into two pieces. You may be able to copy and paste
> the entire link address into the address field of your web browser.
>
> -OASIS Open Administration
--
Michael Brauer, Technical Architect Software Engineering
StarOffice/OpenOffice.org
Sun Microsystems GmbH Nagelsweg 55
D-20097 Hamburg, Germany michael.brauer@sun.com
http://sun.com/staroffice +49 40 23646 500
http://blogs.sun.com/GullFOSS
Sitz der Gesellschaft: Sun Microsystems GmbH, Sonnenallee 1,
D-85551 Kirchheim-Heimstetten
Amtsgericht Muenchen: HRB 161028
Geschaeftsfuehrer: Jürgen Kunz