Re: Single Key in Originator Information

>Signing XML is not a fundamental and different problem.  We have many
>worked examples to learn from like: X.410, X.509, PEM, MOSS, DNS Sec, SDSI,
>SPKI, PGP, DMS, and DSig 1.0.
<snip/>
>So, hopefully we will be able learn from these past efforts.

Signing XML is a fundamentally different problem.  We do not need to learn
from these past efforts if we do not try to duplicate them, as would be the
case if signed XML meant "sign XML then express signature in XML".  Signing
XML only requires us to define an interface to call upon these technologies.
As the cryptography experts learn from their past efforts and put out new
standards, our interface will be able to call on the technology that
implements the new standards.  All without changing our spec, DTDs, and
software.


John Boyer
Software Development Manager
UWI.Com -- The Internet Forms Company
jboyer@uwi.com

Received on Wednesday, 21 April 1999 18:34:23 UTC