RE: Call for Consensus: Approve Errata for XML Signature 1.1 to correct referenced schema files; please respond by 15 July 2015

+1

Hal

> -----Original Message-----
> From: Frederick Hirsch [mailto:w3c@fjhirsch.com]
> Sent: Wednesday, June 24, 2015 5:09 PM
> To: public-xmlsec@w3.org List Public
> Cc: Wendy Seltzer; Juan Carlos Cruellas
> Subject: Call for Consensus: Approve Errata for XML Signature 1.1 to
> correct referenced schema files; please respond by 15 July 2015
> 
> This is a Call for Consensus (CfC) to add the following two errata
> items to the errata list for XML Signature 1.1 at
> http://www.w3.org/2008/xmlsec/errata/xmldsig-core-11-errata.html
> 
> Please note that there is no change required to the specification
> itself; the change is to referenced schema files that require updates.
> 
> Please note that these can be classified as informative changes which
> do not affect conformance, as they fix a typo for schema URLs for
> schemas that can be obtained by other means (and cached) and add a
> schemaLocation for clarity.
> 
> The two errata items to add to the XML Signature 1.1 errata file are as
> follows (apart from formatting):
> 
> ----
> E02:  Fix typo within Schema driver file referenced in Section 9.1
> 
> Added: 2015-06-24 fjh
> Accepted: XML Security WG <link call for consensus conclusion>
> Raised: 8 June 2015 (linked to
> https://lists.w3.org/Archives/Public/public-xmlsec/2015Jun/0000.html )
> Class: informative
> Affects conformance: No
> 
> Section 9.1 (XSD schema) includes a  link to the "XML Signature 1.1
> Schema Driver" at   http://www.w3.org/TR/xmldsig-core1/xmldsig1-
> schema.xsd
> 
> That file has the line
> [[
> <include schemaLocation="http://www.w3.org/TR/2008/REC-xmldsig-core-
> 20080610/xmldsig-core.xsd"/>
> ]]
> 
> It should be replaced with the line
> [[
> <include schemaLocation="http://www.w3.org/TR/2008/REC-xmldsig-core-
> 20080610/xmldsig-core-schema.xsd" /> ]]
> 
> Note that implementations are able to cache the correct schema file
> without relying on the schemaLocation but the URL should be corrected
> in this file. Note that applications should not routinely retrieve the
> schema using this URL.
> 
> This file is also referenced by the XML Security 2.0 Note,
> http://www.w3.org/TR/2013/NOTE-xmldsig-core2-20130411/#sec-xsdSchema
> ---
> 
> E03: Add schemaLocation to Schema driver file referenced in Section 9.1
> 
> Added: 2015-06-24 fjh
> Accepted: XML Security WG <link call for consensus conclusion>
> Raised: 8 June 2015 (linked to
> https://lists.w3.org/Archives/Public/public-xmlsec/2015Jun/0000.html )
> Class: informative
> Affects conformance: No
> 
> Section 9.1 (XSD schema) includes a  link to the "XML Signature 1.1
> Schema Instance" at  http://www.w3.org/TR/2013/REC-xmldsig-core1-
> 20130411/xmldsig11-schema.xsd
> 
> The element containing
> [[
> <import namespace="http://www.w3.org/2000/09/xmldsig#"/>
> ]]
> does not have a schemaLocation.
> 
> Add the following line before the noted import line:
> 
> <include schemaLocation="http://www.w3.org/TR/2008/REC-xmldsig-core-
> 20080610/xmldsig-core-schema.xsd" />
> 
> Note that implementations are able to cache the correct schema file
> without relying on the schemaLocation. Note that applications should
> not routinely retrieve the schema using the URL.
> 
> This file is also referenced by the XML Security 2.0 Note,
> http://www.w3.org/TR/2013/NOTE-xmldsig-core2-20130411/#sec-xsdSchema
> ----
> 
> Please respond to this CfC on the public list by 15 July 2015 (3 weeks)
> indicating support (a +1 will do) or any concern. Please suggest any
> required wording changes if needed (and reference the previous list
> discussion for additional context).
> 
> Although silence will be taken as agreement, given that this group is
> inactive a positive response is greatly preferred.
> 
> Thanks
> 
> regards, Frederick
> 
> Frederick Hirsch
> Chair, W3C XML Security WG
> 
> www.fjhirsch.com
> @fjhirsch
> 
> 
> 
>

Received on Thursday, 25 June 2015 13:46:40 UTC