- From: Pratik Datta <pratik.datta@oracle.com>
- Date: Sun, 01 Feb 2009 22:30:43 -0800
- To: XMLSec WG Public List <public-xmlsec@w3.org>
Here is a list of changes that I made
Changes that we had not discussed, or just alluded to.
---------------
1) Added details about the "sign what is seen" requirement. i.e. the
requirement to convert the xml to a html using XSLT and decrypt transform
a) Section 2 bullet 4
b) Added a new <Transforms> element in between <Selection> and
<Canonicalization>
c) section 4.3
2) Clarified the requirements in section 3 - there are 4 bullets, and
each is expanded out
in detail in section 3.1 (determine what is signed), 3.2
(performance), 3.3 (security) and 3.4 (canonicalization)
Section 3.1.1. and 3.1.2 is new material - talks about problems in
determining what is signed
Section 3.2.1 and 3.2.3 are also new - talks about performance problems.
Section 3.3 is also new - security- it is basically all the DoS problems
listed in the best requirements doc. the requirement is to solve them
3) Removed Section 4, as that was overlapping with requirements and
design. Problems in old spec is now part of requirements.
4) Added some more properties to Section 4.4 canonicalization
serialization="EXI/XML" , sortAttributes="true/false",
preserverPrefixes="true/false"
Changes that were discussed
-------------
1) added me as an Author
2) incorporated both of Frederick's emails
3) incorporated introductory text from Scott
4) incorporated , no entity expansion in C14N from Brad
5) Section 3.4 is canonicalization - it has been removed from the
requirements document, and placed here
It split up into 3.4.1 historical requirements, and 3.4.2 : modified
requirements. Modified requiremens is what we discussed in F2F
6) Split up the deisgn into a section by element
4.2 <Selection> 4.3 <Transforms> 4.4 <Canonicalization>
Pratik Datta wrote:
>
> I have updated the transform notes with all the discussions that we
> had during the Redwood City F2F.
>
> http://www.w3.org/2008/xmlsec/Drafts/transform-note/Overview.html
>
> This closes ACTION-169
>
Received on Monday, 2 February 2009 06:31:16 UTC