Re: [ebxml-msg] ds:Signature Algorithm

[Doug Bunting <dougb62@yahoo.com>]

David,

Are we really deciding to exclude ALL signature elements?  I can see some
very good use cases (validating someone else's signature for example) for
signing a previous signature.

Separately, when was that decision made?

thanx,
    doug

----- Original Message -----
From: "David Fischer" <david@drummondgroup.com>
To: "Christopher Ferris (E-mail)" <chris.ferris@east.sun.com>
Cc: "ebXML Msg" <ebxml-msg@lists.oasis-open.org>
Sent: Tuesday, 23 October 2001 15:04
Subject: [ebxml-msg] ds:Signature Algorithm


Chris,

Since we are deciding to exclude ALL signature elements, shouldn't we get
rid of
the
http://www.w3.org/2000/09/xmldsig#enveloped-signature algorithm and just
use:

   <XPath> not(ancestor-or-self::ds:Signature) </XPath>

which would exclude ALL ds:Signature elements?  Or better yet:

   <XPath> not(ancestor-or-self::ds:Signature |

ancestor-or-self::*[@soap:actor="http://oasis-open.org/committees/ebxml-msg/
next
MSH"] |
ancestor-or-self::*[@soap:actor="http://schemas.xmlsoap.org/soap/actor/next"
] )
</XPath>

Regards,

David Fischer
Drummond Group.


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>