W3C home > Mailing lists > Public > public-xmlsec@w3.org > November 2010

ACTION-638: high level reorg suggestions

From: Cantor, Scott E. <cantor.2@osu.edu>
Date: Tue, 23 Nov 2010 02:46:39 +0000
To: "public-xmlsec@w3.org (public-xmlsec@w3.org)" <public-xmlsec@w3.org>
Message-ID: <7EE86E89365CA94F8E7B8251F9260710EB44@CIO-KRC-D1MBX01.osuad.osu.edu>
As a first stab at this action, I looked over the sections and organization of the current draft, and have the following suggestions. These are some new ways to organize the sections and move some of the text around.

Currently we're distinguishing the old and new approaches by referring to the old approach as a Transform and the new approach as Selection. I think it would be cleaner to organize things in a more consistent way, and move much of section 4.4.3 (see below for specifics) into a retitled section 6.7 that defines the single 2.0 Mode Transform algorithm.

I suggest the following new organization for section 4.4.3:

4.4.3.1 Signature Modes (as now)
4.4.3.2 The URI Attribute (as now)
4.4.3.3 The "Compatibility Mode" Reference Processing Model (as now)
4.4.3.4 "Compatibility Mode" Same-Document URI-References (as now)
4.4.3.5 The Transforms Element (as now)
4.4.3.6 The "Compatibility Mode" Transforms Processing Model (as now)
4.4.3.7 The "2.0 Mode" Transforms Processing Model (as now, but I suggest striking the final sentence with a reference to section 6.7.

4.4.3.8 - 4.4.3.12, I suggest moving to section 6.7 as outlined below.

4.4.3.13 The DigestMethod Element (as now)
4.4.3.14 The DigestValue Element (as now)

I would then revise section 6.7 at a high level as follows:
------
6.7 "2.0 Mode" Transform Algorithm

Only a single Transform algorithm of "http://www.w3.org/2010/xmldsig2#transform" is defined for "2.0 Mode" signatures.

This transform consists of a  required dsig2:Selection element followed by an optional CanonicalizationMethod element and an optional dsig2:Verification element.

6.7.1 The dsig2:Selection Element

(content from sections 4.4.3.8, 4.4.3.10, 4.4.3.11)

(content from current sections 6.7.1-6.7.3 as new subsections of 6.7.1

6.7.2 The dsig2:Verification Element

(content from section 4.4.3.9)
------

Some final points:

The content of 6.7.1 will need some reorganizing, and some of the material there on XPath probably needs to be placed after some new sections that define the IncludedXPath and ExcludedXPath elements. I have an action to propose that text, but I would like to see things reorg'd first so I have a better sense of how to do that.

I'd be ok with making these changes to the source document but I couldn't find it in the part of cvs I have access to (or appear to), so I thought I would try and outline the ideas first.

-- Scott
Received on Tuesday, 23 November 2010 02:47:15 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 23 November 2010 02:47:18 GMT