- From: Donald E. Eastlake 3rd <dee3@torque.pothole.com>
- Date: Fri, 21 Sep 2001 10:18:39 -0400
- To: reagle@w3.org
- cc: "XMLSigWG" <w3c-ietf-xmldsig@w3.org>, Donald.Eastlake@motorola.com
Speaking just as a WG member, Option 1 leads to the longest delays in achieving higher standards levels. The key phrase is "wait for Interoperability". Option 2 seems a bit flakey. There is a risk the higher approval bodies will decide this is really just a variation of 1 and impose delay. A better subvariation of option 2 would be to move them to an informational Appendex but see 3 / 4 below. Option 3 (labeled 2) and 4 seem best from the point of view of advancing the XMLDSIG spec. And if we think we know what we want to say about these transforms, which I believe we do, then putting them in the additional URIs/algorithms informational document seems like it adds value. So I think option 4 is the best way to go. Thanks, Donald From: Joseph Reagle <reagle@w3.org> Reply-To: reagle@w3.org Organization: W3C To: "Gregor Karlinger" <gregor.karlinger@iaik.at>, "merlin" <merlin@baltimore.ie>, <Petteri.Stenius@done360.com>, <harada@prs.cs.fujitsu.co.jp>, <bdournaee@rsasecurity.com>, <sugiyama@isd.nec.co.jp>, <bal@microsoft.com>, <kent@trl.ibm.co.jp> Date: Wed, 19 Sep 2001 17:38:42 -0400 Cc: "XMLSigWG" <w3c-ietf-xmldsig@w3.org>, "Eastlake" <dee3@torque.pothole.com> References: <LBEPJAONIMDADHFHAEAOKEABCJAA.gregor.karlinger@iaik.at> In-Reply-To: <LBEPJAONIMDADHFHAEAOKEABCJAA.gregor.karlinger@iaik.at> Message-Id: <20010919213843.4E05787561@policy.w3.org> >On Tuesday 18 September 2001 05:33, Gregor Karlinger wrote: >> we (IAIK) have not yet implemented XML and schema validation transform. > >My rough tally then is 5 implementors have responded that they do not have >immediate plans to implement XML or Schema validation as a Signature >transform. Baltimore has some support for both [1,2]. This is fine, no one >is advocating these features as requirements. Folks will get to them in due >time. However, our problem is that folks *will* get to them, and they'll >wonder how to do it properly. This question has already identified a few >ambiguities in our spec that we've been able to fix. > >The immediate question facing us then is what to do with these parts of the >spec in the mean time? Please send your response (particularly from >implementors) by the end this week. Should we: > >1. Retain the sections [3] as is and wait for interop. >2. Retain the sections [3]in a modified form and argue they are merely >INFORMATIONAL. Neither transform requires much by way of a specified >feature. If we eliminated the porting of a schema as a child of the ><Transform Algorithm="&schema;"/>, all we are doing is agreeing upon the >algorithm URI, and repeating what the XML and schema inputs/outputs to the >vaidation are from their own specs. >2. Remove the sections (but continue to leave hints that schema and XML >validation should be treated as transforms). >4. Remove the sections and place them in the Auxillary Algorithms draft? > >Whatever we do, we *might* have to bounce back down to a last call or CR >before going to REC for a few weeks, but I'm less concerned with that then >getting consensus on a good decision on our options above. > >[1] >http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001JulSep/0219.html >[2] >http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001JulSep/0225.html >[3] >http://www.w3.org/Signature/Drafts/xmldsig-core/Overview.html#sec-XMLValidation >http://www.w3.org/Signature/Drafts/xmldsig-core/Overview.html#sec-SchemaValidation >
Received on Friday, 21 September 2001 10:20:32 UTC