RE: [ebxml-msg] What Next?

From
Dick Brooks <>
Date
2002-04-11T17:32:14+00:00
ID
Thread
RE: [ebxml-msg] What Next?
Title: RE: [ebxml-msg] What Next?

David,

 

I'm 
unclear why encapsulation is necessary to encrypt entire messages, especially if 
a payload item is already encrypted. It seems SSL would provide sufficient 
encryption of an entire message, including MIME headers. 

 

I 
could see using S/MIME of OpenPGP to digitally sign an entire message, 
but SSL should be sufficient for encryption 
purposes.

 

Am I 
missing something?

Dick Brooks
Systrends, Inc
7855 South River Parkway, Suite 
111
Tempe, Arizona 85284
Web: www.systrends.com <http://www.systrends.com>
Phone:480.756.6777,Mobile:205-790-1542,eFax:240-352-0714
  

  
-----Original Message-----
From: David Fischer 
  [mailto:]
Sent: Wednesday, April 10, 2002 
  10:06 AM
To: ; 
  
Subject: RE: [ebxml-msg] What 
  Next?

  
We need to consider Encapsulation again.  This has a 
  number of potential uses: 

  
        Encryption (encrypt 
  the entire document including MIME headers) 
  
        Forwarding/Multi-hop (especially with the identified problems with 
  Signatures) 
        Third-Party Processing (Intermediate Timestamps...) 
  
        Chunking (sending 
  extremely large files in pieces) 

  
I am sure there will be others. 

  
We used this concept in the UCC Interop test to do encryption 
  and it worked 
quite well.  See document 
  attached. 

  
Regards, 

  
David Fischer 
Drummond Group. 
  

  
-----Original Message----- 
From: 
   [mailto:] 
  
Sent: Wednesday, April 10, 2002 9:52 AM 
To:  
Subject: 
  [ebxml-msg] What Next? 

  
Team, 

  
        I hope you have all 
  had a pleasant break over the last couple of 
weeks.  As the title says what do we do next?  It is up to 
  you, but here are 
some ideas to start with. 

  
1 - we MUST capture, answer and resolve any question and 
  issues during the 3 
month public review of version 
  2.0 
2 - The IIC TC would like to produce a conformance 
  test/suite/documentation 
for version 2.0, they will 
  obvious need help from us to do this. 
3 - The Business 
  interface layer has never been written - do we need it? 
4 - A primer/introduction to the messaging service 
5 - A document to describe the minimum implementation.  This may 
  be linked 
to the IIC TC point above. 

  
Question: - Do we still have outstanding requirements that 
  still need to be 
addressed? i.e. a definable business 
  need for them. 

  
        Over to all of you 
  for comments. 

  
Ian Jones 
Chair OASIS ebXML Messaging 
  Services TC 

  
Email:  

  
---------------------------------------------------------------- 
  
To subscribe or unsubscribe from this elist use the 
  subscription 
manager: <http://lists.oasis-open.org/ob/adm.pl>