Re: [ebxml-msg] ds:Signature Algorithm

From
Doug Bunting <>
Date
2001-10-23T22:20:06+00:00
ID
007701c15c10$7ebfb690$879712c0@immd
Thread
Re: [ebxml-msg] ds:Signature Algorithm
David,

Are we really deciding to exclude ALL signature elements?  I can see some
very good use cases (validating someone else's signature for example) for
signing a previous signature.

Separately, when was that decision made?

thanx,
    doug

----- Original Message -----
From: "David Fischer" <>
To: "Christopher Ferris (E-mail)" <>
Cc: "ebXML Msg" <>
Sent: Tuesday, 23 October 2001 15:04
Subject: [ebxml-msg] ds:Signature Algorithm


Chris,

Since we are deciding to exclude ALL signature elements, shouldn't we get
rid of
the
http://www.w3.org/2000/09/xmldsig#enveloped-signature algorithm and just
use:

   <XPath> not(ancestor-or-self::ds:Signature) </XPath>

which would exclude ALL ds:Signature elements?  Or better yet:

   <XPath> not(ancestor-or-self::ds:Signature |

ancestor-or-self::*[@soap:actor="http://oasis-open.org/committees/ebxml-msg/
next
MSH"] |
ancestor-or-self::*[@soap:actor="http://schemas.xmlsoap.org/soap/actor/next"
] )
</XPath>

Regards,

David Fischer
Drummond Group.


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>