- From: Magnus Nystrom <mnystrom@microsoft.com>
- Date: Tue, 18 Jan 2011 14:53:53 +0000
- To: "Frederick.Hirsch@nokia.com" <Frederick.Hirsch@nokia.com>
- CC: "public-xmlsec@w3.org" <public-xmlsec@w3.org>
Looks good to me. -- Magnus > -----Original Message----- > From: Frederick.Hirsch@nokia.com [mailto:Frederick.Hirsch@nokia.com] > Sent: Tuesday, January 18, 2011 6:48 AM > To: Magnus Nystrom > Cc: Frederick.Hirsch@nokia.com; public-xmlsec@w3.org > Subject: Re: ACTION-767: Review references etc. > > I have updated the XML Encryption editors draft to refer to SP800-67 as a > reference rather than TRIPLEDES. > > Specifically, it now says in section 5.2.2, > http://www.w3.org/2008/xmlsec/Drafts/xmlenc-core-11/Overview.html#sec- > tripledes-cbc : > > "NIST SP800-67 [SP800-67] specifies three sequential FIPS 46-3 [DES] > operations." > > and the reference is: > > [SP800-67] > Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher, > Revised 19 May 2008. SP800-67 Version 1.1. U.S. Department of > Commerce/National Institute of Standards and Technology. URL: > http://csrc.nist.gov/publications/nistpubs/800-67/SP800-67.pdf > > Does this look correct? > > I believe the only document that needed this change is XML Encryption 1.1 > > Thanks > > regards, Frederick > > Frederick Hirsch > Nokia > > > > On Jan 17, 2011, at 8:23 PM, ext Magnus Nystrom wrote: > > > Actually X9.52 has been withdrawn. A better reference might be NIST SP 800- > 67: > > > > http://csrc.nist.gov/publications/nistpubs/800-67/SP800-67.pdf > > > > -- Magnus > > > > > >> -----Original Message----- > >> From: Frederick.Hirsch@nokia.com [mailto:Frederick.Hirsch@nokia.com] > >> Sent: Monday, January 17, 2011 11:25 AM > >> To: Magnus Nystrom > >> Cc: Frederick.Hirsch@nokia.com; public-xmlsec@w3.org > >> Subject: Re: ACTION-767: Review references etc. > >> > >> Magnus > >> > >> I cannot find a direct link for this one, do you have a URL: > >> > >>> - The reference for ANSI X9.52 should be linked as the reference for > >>> ANSI > >> X9.44. As it is right now, one only gets to the generic ANSI home page. > >> > >> > >> Thanks > >> > >> regards, Frederick > >> > >> Frederick Hirsch > >> Nokia > >> > >> > >> > >> On Jan 17, 2011, at 11:54 AM, ext Magnus Nystrom wrote: > >> > >>> Frederick, All,, > >>> This is in response to ACTION-767 assigned to me last week. > >>> > >>> I don't know where the references are stored any longer so I have > >>> not done > >> any changes in the sources themselves but I did note the following: > >>> > >>> XML Encryption 1.1: > >>> ------------------------- > >>> - The reference for NFC: The URL should be preceded by the string > >>> "URL:" as > >> for other references > >>> - The reference for ANSI X9.52 should be linked as the reference for > >>> ANSI > >> X9.44. As it is right now, one only gets to the generic ANSI home page. > >>> - The link to XML Signature Syntax and Processing Version 1.1 will > >>> need to be > >> updated eventually; same for XML Encryption Syntax and Processing 1.1. > >>> - For [ECC-ALGS], we should check if it has been given an RFC number > >>> yet. I will > >> follow up on this. I believe it should still be informative in this document. > >>> > >>> Outside of the references: > >>> - Section 5.1.1: Should probably be consistent in how we reference > >>> the > >> "with"/"omit" comments; sometimes we write "(omit comments)" and > >> sometimes "with comments" (i.e. without parenthesis) and sometimes > >> "comments" is spelled with a capital "C". > >>> - Section 8.2, replace "they will be" with "there will be" > >>> > >>> Explain: > >>> ----------- > >>> - My affiliation should be changed to Microsoft. > >>> - 3.3: Change "Clarify" to "Clarified that" > >>> - 5.4.2: That change is not relative to 1.0 and so I am not sure it > >>> should be in > >> here. > >>> - "Message Authentication ..." - change "200900602" to "20090602" > >>> - 8.2: Change description of first change to: "Changed "MIME media > >>> type > >> name" to " Type name" and "MIME subtype name" to "Subtype name" > >>> > >>> Generic Hybrid Ciphers: > >>> ----------------------------- > >>> - Section 9, "Acknowledgements" is empty; in line with the other > >>> documents I > >> suggest removing this section altogether and instead creating a > >> Section 1.2 "Acknowledgements" with the following text: > >>> > >>> The contributions of the following Working Group members to this > >> specification are gratefully acknowledged in accordance with the > >> contributor policies and the active WG roster: Frederick Hirsch, > >> Brian LaMacchia, Thomas Roessler, Magnus Nyström, Bruce Rich, Scott > >> Cantor, Hal Lockhart, Cynthia Martin, Ed Simon, Pratik Datta and Meiko > Jensen. > >>> > >>> Additionally, we thank Burt Kaliski of EMC for his comments during > >>> and > >> subsequent to Last Call. > >>> > >>> - In Appendix A, the URL to [XMLENC-CORE1] and [XMLDSIG-CORE1] > >>> should be > >> updated, eventually, just as for XML Encryption 1.1. > >>> > >>> Requirements > >>> ----------------- > >>> (I was not sure what to do here, but I did check the references > >>> section as per > >> below:) > >>> - [C14N-REQS]: The URL is different between the hyperlink in the > >>> title and the > >> explicit URL. > >>> - [C14N11]: Same as previous comment > >>> - [EXI]: Missing hyperlink in title > >>> - [Gajek]: Missing hyperlink in title > >>> - [Infoset]: Missing hyperlink in title > >>> - [McIntoshAustel] - Missing URL altogether. A possible URL is: > >> http://portal.acm.org/citation.cfm?doid=1103022.1103026 > >>> - PKCS #5: Missing hyperlink in title > >>> - RFC 2633 is obsoleted by RFC 3851 > >>> - SigProp: Different URL for title than for explicit URL. > >>> - XMLDsig2nd: Missing hyperlink in title > >>> > >>> Best, > >>> -- Magnus > >>> > >>> > >> > > >
Received on Tuesday, 18 January 2011 14:54:35 UTC