Re: [office] Digital Signature proposal

From
"Cob Kolliffe"
Date
2008-07-30T11:52:54+00:00
ID
Thread
Re: [office] Digital Signature proposal
Hi Ming

Thanks for raising these issues.  Taking you comments in reverse order:

2.  I agree we need to understand the W3C/ETSI relationship better.  The XAdES proposal was made as a result of requirements for use in Brazil.  I think we need to ask Jomar to tell us what the current status of XAdES implementation is there.   

1.  Agreed.  But there is a considerable scope for signing and validation tools outside of traditional "office products".   For example, the current specification allows for the signing of document fragments using XMLDsig.  There are no current office applications which do this, but it is still useful.  We are working on one such implementation for validating signatures in our workflows in the document management system.  Of course it would be great for office applications to support signing of a text section, but if they don't yet do this its not a disaster.  As long as those existing applications don't trash the signatures they don't understand or care about.

Regards
Bob

2008/7/30 Ming Fei Jia <>

I have 2 questions about this proposal:

1)As I know, currently no office products support XAdES. So I would like to know the maturity of this ETSI specification in the market place. ODF is a practical standard that many office products are following up. If ODF introduces and depends on an external immature or unstable specification, this will bring confusion or difficulty for current office product implementations. I only get some experimental results from this link http://www.etsi.org/Application/Search/?search=XAdES.

2)This proposal adopts the XAdES version on W3C(http://www.w3.org/TR/2003/NOTE-XAdES-20030220/), which was submitted on the year 2003, but now still is in status of NOTE made available for W3C discussion only, and the copyright is hold by ETSI. So I would like to know what relationship between ETSI and W3C, and whether this relationship will bring some IP issues for ODF.

Best Regards,

Mingfei Jia(樂隴滄)

IBM Lotus Symphony Development

IBM China Software Development LAB, Beijing

Tel: 86-10-82452493   Fax: 86-10-82452887

NOTES:Ming Fei Jia/China/IBM   E-mail: 

Address: 4/F, DeShi Building No.9, East Road, ShangDi, Haidian District, Beijing 100085, PRC

Bob Jolliffe ---07/28/2008 04:41:55 AM---Greetings

From:

Bob Jolliffe <>

To:

Jomar Silva <>

Cc:

office TC <>

Date:

07/28/2008 04:41 AM

Subject:

Re: [office] Digital Signature proposal

Greetings

Given the recent discussions and consensus around workflow of proposals on the TC I would like to try and propose some kind of reasonable timeline for this one.

Can I suggest that 

(1) those who are interested try, during the course of this week ahead, to take a look at what is being proposed and return comments to the mailing list

(2) on the basis of the above, we schedule an agenda item for discussion in two weeks - ie 11 August

My understanding is that what is being proposed should not be too controversial or disruptive so it is my hope that we do have some consensus by then.

There is an open question raised by Rob Weir around the status of XaDes.  Jomar, can you tell us what is being referenced in Brazil?

Kind regards

Bob

----- Jomar Silva <> wrote:

> Greetings.

> 

> I've published today at the wiki 

> (http://wiki.oasis-open.org/office/DSigProposal) a proposal regarding 

> the Digital Signature support on ODF 1.2, basically expanding the 

> existing XMLDSIG proposal to also support XAdES.

> 

> This proposal was developed by me and Bob Joliffe, as he previously 

> announced on the list 

> (http://lists.oasis-open.org/archives/office/200804/msg00216.html).

> 

> I'm waiting your comments.

> 

> Best Regards,

> 

> Jomar

> 

> ---------------------------------------------------------------------

> To unsubscribe from this mail list, you must leave the OASIS TC that

> generates this mail.  Follow this link to all your TCs in OASIS at:

> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 

> 

> 

---------------------------------------------------------------------

To unsubscribe from this mail list, you must leave the OASIS TC that

generates this mail.  Follow this link to all your TCs in OASIS at:

https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php