Re: Call for Consensus: Approve Errata for XML Signature 1.1 to correct referenced schema files; please respond by 15 July 2015

+1

Bruce A Rich
brich at-sign us dot ibm dot com




From:   Frederick Hirsch <w3c@fjhirsch.com>
To:     "public-xmlsec@w3.org List Public" <public-xmlsec@w3.org>
Cc:     Wendy Seltzer <wseltzer@w3.org>, Juan Carlos Cruellas 
<cruellas@ac.upc.edu>
Date:   06/24/2015 04:10 PM
Subject:        Call for Consensus: Approve Errata for XML Signature 1.1 
to correct referenced schema files; please respond by 15 July 2015



This is a Call for Consensus (CfC) to add the following two errata items 
to the errata list for XML Signature 1.1 at 
http://www.w3.org/2008/xmlsec/errata/xmldsig-core-11-errata.html

Please note that there is no change required to the specification itself; 
the change is to referenced schema files that require updates.

Please note that these can be classified as informative changes which do 
not affect conformance, as they fix a typo for schema URLs for schemas 
that can be obtained by other means (and cached) and add a schemaLocation 
for clarity.

The two errata items to add to the XML Signature 1.1 errata file are as 
follows (apart from formatting):

---- 
E02:  Fix typo within Schema driver file referenced in Section 9.1

Added: 2015-06-24 fjh
Accepted: XML Security WG <link call for consensus conclusion>
Raised: 8 June 2015 (linked to 
https://lists.w3.org/Archives/Public/public-xmlsec/2015Jun/0000.html )
Class: informative 
Affects conformance: No 

Section 9.1 (XSD schema) includes a  link to the "XML Signature 1.1 Schema 
Driver" at   http://www.w3.org/TR/xmldsig-core1/xmldsig1-schema.xsd

That file has the line
[[
<include schemaLocation="
http://www.w3.org/TR/2008/REC-xmldsig-core-20080610/xmldsig-core.xsd"/>
]]

It should be replaced with the line
[[
<include schemaLocation="
http://www.w3.org/TR/2008/REC-xmldsig-core-20080610/xmldsig-core-schema.xsd
" />
]]

Note that implementations are able to cache the correct schema file 
without relying on the schemaLocation but the URL should be corrected in 
this file. Note that applications should not routinely retrieve the schema 
using this URL.

This file is also referenced by the XML Security 2.0 Note, 
http://www.w3.org/TR/2013/NOTE-xmldsig-core2-20130411/#sec-xsdSchema
---

E03: Add schemaLocation to Schema driver file referenced in Section 9.1

Added: 2015-06-24 fjh
Accepted: XML Security WG <link call for consensus conclusion>
Raised: 8 June 2015 (linked to 
https://lists.w3.org/Archives/Public/public-xmlsec/2015Jun/0000.html )
Class: informative 
Affects conformance: No 
 
Section 9.1 (XSD schema) includes a  link to the "XML Signature 1.1 Schema 
Instance" at  
http://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/xmldsig11-schema.xsd

The element containing
[[
<import namespace="http://www.w3.org/2000/09/xmldsig#"/>
]]
does not have a schemaLocation.

Add the following line before the noted import line:

<include schemaLocation="
http://www.w3.org/TR/2008/REC-xmldsig-core-20080610/xmldsig-core-schema.xsd
" />

Note that implementations are able to cache the correct schema file 
without relying on the schemaLocation. Note that applications should not 
routinely retrieve the schema using the URL.

This file is also referenced by the XML Security 2.0 Note, 
http://www.w3.org/TR/2013/NOTE-xmldsig-core2-20130411/#sec-xsdSchema
----

Please respond to this CfC on the public list by 15 July 2015 (3 weeks) 
indicating support (a +1 will do) or any concern. Please suggest any 
required wording changes if needed (and reference the previous list 
discussion for additional context).

Although silence will be taken as agreement, given that this group is 
inactive a positive response is greatly preferred. 
 
Thanks

regards, Frederick

Frederick Hirsch
Chair, W3C XML Security WG

www.fjhirsch.com
@fjhirsch