OASIS ebXML Messaging Services TC

Re: [ebxml-msg] ebXML Security

  • 1.  Re: [ebxml-msg] ebXML Security

    Posted 12-10-2001 14:53
     MHonArc v2.5.2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    ebxml-msg message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Subject: Re: [ebxml-msg] ebXML Security


    Title: Reliable / Duplicate / Message Order Inconsistencies
    Bob,
     
    It is completely within the purview of the ebXML-msh specification to describe how XML DSIG should be (must be) used in a conforming message.  If the current specification attempts to redefine XML DSIG, we should correct those errors.  What you're saying implies we shouldn't even say what XML DSIG features should be used in a conforming message.
     
    The current specification allows parallel running of the "eb" and "ds" namespace handlers and doesn't say much about how errors in each are distributed to the other.  (That seems to be an implementation issue beyond our scope.)  I believe the current text allows an implementation as you describe below except the ebXML handler should be made aware of (should be able to query) the invocation and success of the XML DSIG handler.
     
    With regards to "ds" being a foreign namespace, our comments on foreign namespaces apply only to such content within ebXML elements.  The only time we embed security data from a foreign namespace is the ds:Reference elements in the eb:Acknowledgment.  That's not handled using a wildcard and is described as a required aspect of signing an acknowledgment message.
     
    thanx,
        doug