Re: EPUB3 Digital Signatures Use Case

+1

On Wed, Mar 6, 2013 at 9:46 PM, Alex Milowski <alex@milowski.com> wrote:
> EPUB3 defines "EPUB Open Container Format (OCF) 3.0" [1] that has a concrete
> representation of a zip file.  Within that zip file, a single XML document
> (META-INF/signatures.xml, see [2]) can contain digital signatures, as
> defined by "XML Signature Syntax and Processing" [3], for any entry within
> the container.
>
> When packaging an EPUB3 book, one can imagine a pipeline that generates a
> zip file containing a generated META-INF/signatures.xml which contains the
> signatures for a number of packaged parts (e.g. other XML documents).
>
> I believe the step used in Use Case 5.10 and the proposed zip steps can be
> used to do this.  It would be a good test of the design of both the zip
> steps and a proposed signature step that we can construct a pipeline that
> produces valid OCF output with signatures contained within.
>
> We may want to consider a note for digital signatures steps.
>
> [1] http://idpf.org/epub/30/spec/epub30-ocf.html
> [2]
> http://idpf.org/epub/30/spec/epub30-ocf.html#sec-container-metainf-signatures.xml
> [3] http://www.w3.org/TR/xmldsig-core/
>
> --
> --Alex Milowski
> "The excellence of grammar as a guide is proportional to the paucity of the
> inflexions, i.e. to the degree of analysis effected by the language
> considered."
>
> Bertrand Russell in a footnote of Principles of Mathematics



-- 
Innovimax SARL
Consulting, Training & XML Development
9, impasse des Orteaux
75020 Paris
Tel : +33 9 52 475787
Fax : +33 1 4356 1746
http://www.innovimax.fr
RCS Paris 488.018.631
SARL au capital de 10.000 €

Received on Monday, 22 April 2013 12:14:19 UTC