Progressing XML Signature Properties draft - next steps?

The next logical step for the XML Signature Properties draft [1] is to progress it to CR in conjunction with the other 1.1 drafts. This document completed Last Call 18 March 2010. Comments were received and addressed with additional revisions to the draft [2].

The XML Signature Properties draft is normatively  referenced by the W3C Web Applications WG [3] Widget Signature specification [4]. This specification is in CR [4]. According to the test report, there are currently no test results [5].

Given the dependency of Widget Signature on Signature Properties, it seems logical to advance XML Signature Properties to CR and keep it in CR until the exit criteria are met.   It might be the case that this CR could be long. Advancing to W3C Note does not seem appropriate given that an existing CR draft normatively references it.

I'm not aware of plans to implement certain features in Signature Properties, in particular for the Created, Expires and ReplayProtect  properties. Thus these could be marked as "at risk" or removed now from the specification. (Widget Signature uses the Identifier, Profile and Role properties.)  Given the current reported lack of implementation for the properties used by Widget Signature, the remaining properties might also be at risk, but it is probably more appropriate to simply remain at CR until the criteria are met.

I suggest we mark the Created/Expires/ReplayProtect properties as "at risk" and move the entire Signature Properties document to CR along with the other 1.1 CR drafts.

Comment or suggestions?

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG

[1] http://www.w3.org/2008/xmlsec/Drafts/xmldsig-properties/Overview.html

[2] http://www.w3.org/2006/02/lc-comments-tracker/42458/WD-xmldsig-properties-20100204/doc/

[3] http://www.w3.org/2008/webapps/

[4] http://www.w3.org/TR/2010/CR-widgets-digsig-20100624/ 

[5] http://dev.w3.org/2006/waf/widgets-digsig/imp-report/


For tracker, this should complete ACTION-700

Received on Monday, 10 January 2011 16:45:57 UTC