CfC: remove OCSPResponse from XML SIgnature 1.1; please respond by 18 Sept

This is a Call for Consensus (CfC) to remove the OCSPResponse element from XML Signature 1.1 [1]. The reason is that we do not seem to have interest in interop testing this element and so should remove it so we can progress XML Signature 1.1 toward REC.

A positive response (+1) is preferred - silence is considered to be agreement.

Please respond by 18 Sept 2012 (before our next call on Tuesday 19 Sept).

Thanks

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG

[1] http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview.src.html

Specifically, we will remove

1. the bullet in section 4.5.4  The X509Data element (and thus the corresponding OCSP reference as well)


  *   The dsig11:OCSPResponse element contains a base64-encoded OCSP response in DER encoding. [OCSP<http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview.src.html#bib-OCSP>].

2. The line in the schema snippet,

      <!-- <element ref="dsig11:OCSPResponse"/> -->

also change the schema snippet line

      <!-- OCSPResponse and X509Digest elements (XMLDsig 1.1) will use the any element -->

to


      <!-- The X509Digest element (XMLDSig 1.1) will use the any element -->


 also remove the lines


<element name="OCSPResponse" type="base64Binary" />


Also make these changes to XML Signature 2.0, and remove OCSPResponse from the XML Signature 1.1 interop test report

Received on Wednesday, 12 September 2012 19:33:43 UTC