RE: [legalxml-courtfiling] Strawman non-repudiation issues

MHonArc v2.5.0b2 -->

legalxml-courtfiling message

[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]

Subject: RE: [legalxml-courtfiling] Strawman non-repudiation issues

From: "Scott Came" <>

To: 

Date: Fri, 29 Apr 2005 09:12:04 -0700 (PDT)

Hi Nick,

Doesn't the timestamping feature in WSS and WS-I BSP address the "time factor"
requirement?� (See WSS SOAP Message Security, v. 1.0, sec. 10, and WS-I DSP sec. 5.3).

Agreed with your
second point...WSS and WS-I BSP handle signing and encrypting of attachments just fine.� This has matured since we
last looked at it on the requirements subcommittee.

Thanks.
--Scott

> Scott,
>
> I see a key difference between simple data origin authentication as provided
> by digitial
signatures on their own and non-repudiation is the time factor.
> To achieve non-repudiation there needs to be
proof of time of the signature
> independent of the originator.   The signatures used for data origin
> authentication are checked at the time of the transaction, whilst for
> non-repudiation the information
is to be used for evidence after the event.
> Also, I suggest that the proof needs to be linked to evidence of
receipt so
> that there there is no a dispute over whether data has been sent but was
> never
received.
>
> Provided the definition of the use of signatures is within our control the
>
inclusion of attatchment is no great difficulty with XML signatures, and is
> independent of whether data
origin authentication or non-repuidation
> services are provided.
>
> Nick
>
>
>