- From: Bugbee, Larry <Larry.Bugbee@PSS.Boeing.com>
- Date: Wed, 16 Jun 1999 12:03:13 -0700
- To: "'reagle@w3.org'" <reagle@w3.org>
- Cc: "'w3c-ietf-xmldsig@w3.org'" <w3c-ietf-xmldsig@w3.org>
I've recently been asked to participate in this signed XML effort, so please excuse me if I'm not up on all the history.
Most of my questions have been addressed very nicely, but a few remain. You may have already considered these, but I've gotta ask.
1. If person A signs a portion of a document and it is
altered and signed by B, will you be able to later
know what A signed?
2. Are there plans to incorporate timestamps stronger
than a simple ASCII date/time? (3rd party notaries)
3. Does this activity plan to address the encryption of
selected XML content? Should it? Or should there
be an explicit statement that confidentiality is not
being addressed?
Ref:
http://www.w3.org/Signature/Drafts/xml-dsig-requirements-990601.html
http://search.ietf.org/internet-drafts/draft-brown-xml-dsig-00.txt
Larry Bugbee
Digital Signatures and Computing Security Architecture
Technical Disciplines & Architecture
Boeing Commercial Airplane Group
425-234-8667
Takeoffs are optional, landings are mandatory. - James McLaughlin
Received on Wednesday, 16 June 1999 15:03:31 UTC