OASIS ebXML Messaging Services TC

RE: [ebxml-msg] security problem with ebXML MS

  • 1.  RE: [ebxml-msg] security problem with ebXML MS

    Posted 11-07-2001 16:02
    Chris, I didn't take this to mean NOT have MIME headers on the payloads but just to copy them (Suresh used the word 'Repeat'). This presents two possibilities, either the ebXML signature verification must compare the signed MIME headers in the Manifest to the ones on the payloads to make sure they have not changed, OR, I suppose the ebXML processor could dispatch off of the headers in the Manifest (except that some headers might not be there - like CTE headers). I didn't understand this as any change to the existing payload MIME headers. Regards, David Fischer Drummond Group.