W3C home > Mailing lists > Public > public-xmlsec-maintwg@w3.org > October 2007

RE: Initial thoughts on chartering

From: Anthony Nadalin <drsecure@us.ibm.com>
Date: Mon, 29 Oct 2007 10:59:19 -0500
To: "Hallam-Baker, Phillip" <pbaker@verisign.com>
Cc: public-xmlsec-maintwg@w3.org, public-xmlsec-maintwg-request@w3.org, "Thomas Roessler" <tlr@w3.org>
Message-ID: <OF0C097EF3.926E605A-ON86257383.0057A727-86257383.0057D45F@us.ibm.com>

So I think there are cases where C14N is not needed at all (as you point
out) and there are cases where we can limit this to the sender and
eliminate from the receiver. So I would like to see these topics on the
charter discussions.

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122


|------------>
| From:      |
|------------>
  >------------------------------------------------------------------------------------------------------------------------------------------|
  |"Hallam-Baker, Phillip" <pbaker@verisign.com>                                                                                             |
  >------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| To:        |
|------------>
  >------------------------------------------------------------------------------------------------------------------------------------------|
  |Anthony Nadalin/Austin/IBM@IBMUS, "Thomas Roessler" <tlr@w3.org>                                                                          |
  >------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Cc:        |
|------------>
  >------------------------------------------------------------------------------------------------------------------------------------------|
  |<public-xmlsec-maintwg@w3.org>, <public-xmlsec-maintwg-request@w3.org>                                                                    |
  >------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Date:      |
|------------>
  >------------------------------------------------------------------------------------------------------------------------------------------|
  |10/29/2007 10:34 AM                                                                                                                       |
  >------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Subject:   |
|------------>
  >------------------------------------------------------------------------------------------------------------------------------------------|
  |RE: Initial thoughts on chartering                                                                                                        |
  >------------------------------------------------------------------------------------------------------------------------------------------|





How little canonicalization do you want to do?

If we have a signature that is a referenced document that just happens to
be XML encoded there is absolutely no need for c14n.

If we have a signature that is wrapped around the signed object the process
is slightly trickier, if the signature is inside the signed object its
harder still.

I certainly agree that there are many cases where c14n is unnecessary. I
suspect however that to make it work well in the last two cases we will
have to specify the enveloping mechanism more tightly than we do with XSL
transformations. and the like.

From: public-xmlsec-maintwg-request@w3.org on behalf of Anthony Nadalin
Sent: Mon 29/10/2007 9:36 AM
To: Thomas Roessler
Cc: public-xmlsec-maintwg@w3.org; public-xmlsec-maintwg-request@w3.org
Subject: Re: Initial thoughts on chartering



So one item missing from list is ways not to have to use C14N (of any type)

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122

Inactive hide details for Thomas Roessler ---10/29/2007 08:21:24 AM---As a
reminder, some initial thoughts on chartering of folThomas Roessler
---10/29/2007 08:21:24 AM---As a reminder, some initial thoughts on
chartering of follow-up work
                                                                           
                                                                           
 From:                      Thomas Roessler <tlr@w3.org>                   
                                                                           
                                                                           
 To:                        public-xmlsec-maintwg@w3.org                   
                                                                           
                                                                           
 Date:                      10/29/2007 08:21 AM                            
                                                                           
                                                                           
 Subject:                   Initial thoughts on chartering                 
                                                                           






As a reminder, some initial thoughts on chartering of follow-up work
are here:

 http://www.w3.org/2007/xmlsec/wiki/charter

This is mostly an initial list of tasks.  It would be useful to have
this reviewed in time for the call tomorrow, as this document is on
the agenda for it.

Regards,
--
Thomas Roessler, W3C  <tlr@w3.org>

(See attached file: graycol.gif)(See attached file: ecblank.gif)






graycol.gif
(image/gif attachment: graycol.gif)

ecblank.gif
(image/gif attachment: ecblank.gif)

graycol.gif
(image/gif attachment: 03-graycol.gif)

ecblank.gif
(image/gif attachment: 04-ecblank.gif)

Received on Monday, 29 October 2007 16:02:00 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:22:02 GMT