W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > July to September 2000

TALLY and New POLL: Fwd: Proposal RE: Poll: Relative URIs and Strings in xmlns attributes

From: Joseph M. Reagle Jr. <reagle@w3.org>
Date: Fri, 22 Sep 2000 16:28:39 -0400
Message-Id: <4.3.2.7.2.20000922160651.035af568@rpcp.mit.edu>
To: "IETF/W3C XML-DSig WG" <w3c-ietf-xmldsig@w3.org>
Cc: "Donald Eastlake" <dee3@torque.pothole.com>, <lde008@dma.isg.mot.com>
So the results of recent discussion on this topic were rather muddled/mixed 
which is not surprising given the state of the issue <smile>. Our own 
discussion was split [2] with some confusion regarding the meaning of 
"unspecified". Additionally, the brief discussion at the XML Plenary meeting 
didn't give us an inescapable argument either [1].

However, I think John's recently analysis [2,c] is delightfully unmuddled 
(just two variables and their enumeration). I'm not of a strong technical 
opinion either way (I've flip-flopped a few times), and my interest in this 
is much more at the meta-level that the following two requirements be met:

1. That the conformance requirements and expectations regarding Canonical 
XML and its applications be straightforward. Even if this means being 
aggressive with considering things in or out of scope we need to ensure a 
developer can understand and implement the spec in an interoperable way as 
easily as possible.
2. The way in which we should respect the Plenary Decision is by not 
requiring XML processors to do things counter to the Plenary Decision.

Consequently, from a procedural point of view, in order to bring this issue 
to a close, we need to opt for one of these options and ask for opposition. 
So given the previous discussion and John's proposal of:

         go with Choice #1 as it is specified above, i.e. REQUIRE
         implementers to A) not use Type 1 processors, B) generate
         errors if Type 2 processor used and non-absolute namespace
         URI found, or C) use a Type 3 processor.
         [2,c]

please express your acceptance of this proposal or opposition (and reason 
why) by Wednesday October 27th.

[1] http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0517.html
[2] Tally
Option 1 Undefined (does that mean not signed or not interop)
a. Martin Duerst (adhere to plenary decision and motivation)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0503.html
b. Mark Bartel (2 adds extra requirements)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0504.html
    However, also states that this doesn't require a fail, just that it
    won't interoperate.
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0509.html
c. Boyer (Easiest on implementation/conformance front)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0521.html

Option 2 Interpret as String.
a. Petteri Stenius (Meaning we don't try to interprate the values)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0505.html
b. Gregor Karlinger (We don't bother with URIs beyond treating
    them as string)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0506.html
c. Merlin Hughes (1 requires us to understand what a URI is)
    http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0507.html
d. Donald Eastlake (give "suitable warnings that realtive URI
     namespaces are flakey"
     http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0520.html

__
Joseph Reagle Jr.
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/People/Reagle/
Received on Friday, 22 September 2000 16:29:05 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:11 GMT