Re: Poll (Was: Question for Implementors (Was: Schema Validation Transform))

I concur with Don.  However, I would certainly be interested in arguments
in favour of options 1 or 2.

Ed

-- Original Message --

>
>Speaking just as a WG member, Option 1 leads to the longest delays in
>achieving higher standards levels.  The key phrase is "wait for
>Interoperability".
>
>Option 2 seems a bit flakey. There is a risk the higher approval
>bodies will decide this is really just a variation of 1 and impose
>delay. A better subvariation of option 2 would be to move them to an
>informational Appendex but see 3 / 4 below.
>
>Option 3 (labeled 2) and 4 seem best from the point of view of
>advancing the XMLDSIG spec. And if we think we know what we want to
>say about these transforms, which I believe we do, then putting them
>in the additional URIs/algorithms informational document seems like it
>adds value.
>
>So I think option 4 is the best way to go.
>
>Thanks,
>Donald
>
>From:  Joseph Reagle <reagle@w3.org>
>Reply-To:  reagle@w3.org
>Organization:  W3C
>To:  "Gregor Karlinger" <gregor.karlinger@iaik.at>,
>            "merlin" <merlin@baltimore.ie>, <Petteri.Stenius@done360.com>,
>            <harada@prs.cs.fujitsu.co.jp>, <bdournaee@rsasecurity.com>,
>            <sugiyama@isd.nec.co.jp>, <bal@microsoft.com>, <kent@trl.ibm.co.jp>
>Date:  Wed, 19 Sep 2001 17:38:42 -0400
>Cc:  "XMLSigWG" <w3c-ietf-xmldsig@w3.org>, "Eastlake" <dee3@torque.pothole.com>
>References:  <LBEPJAONIMDADHFHAEAOKEABCJAA.gregor.karlinger@iaik.at>
>In-Reply-To:  <LBEPJAONIMDADHFHAEAOKEABCJAA.gregor.karlinger@iaik.at>
>Message-Id:  <20010919213843.4E05787561@policy.w3.org>
>
>>On Tuesday 18 September 2001 05:33, Gregor Karlinger wrote:
>>> we (IAIK) have not yet implemented XML and schema validation transform.
>>
>>My rough tally then is 5 implementors have responded that they do not
have
>
>>immediate plans to implement XML or Schema validation as a Signature 
>>transform. Baltimore has some support for both [1,2]. This is fine, no
one
>
>>is advocating these features as requirements. Folks will get to them in
>due 
>>time. However, our problem is that folks *will* get to them, and they'll
>
>>wonder how to do it properly. This question has already identified a few
>
>>ambiguities in our spec that we've been able to fix.
>>
>>The immediate question facing us then is what to do with these parts of
>the 
>>spec in the mean time? Please send your response (particularly from 
>>implementors) by the end this week. Should we:
>>
>>1. Retain the sections [3] as is and wait for interop.
>>2. Retain the sections  [3]in a modified form and argue they are merely
>
>>INFORMATIONAL. Neither transform requires much by way of a specified 
>>feature. If we eliminated the porting of a schema as a child of the 
>><Transform Algorithm="&schema;"/>, all we are doing is agreeing upon the
>
>>algorithm URI, and repeating what the XML and schema inputs/outputs to
the
>
>>vaidation are from their own specs.
>>2. Remove the sections (but continue to leave hints that schema and XML
>
>>validation should be treated as transforms).
>>4. Remove the sections and place them in the Auxillary Algorithms draft?
>>
>>Whatever we do, we *might* have to bounce back down to a last call or
CR
>
>>before going to REC for a few weeks, but I'm less concerned with that
then
>
>>getting consensus on a good decision on our options above.
>>
>>[1] 
>>http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001JulSep/0219.html
>>[2] 
>>http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001JulSep/0225.html
>>[3] 
>>http://www.w3.org/Signature/Drafts/xmldsig-core/Overview.html#sec-XMLValidation
>>http://www.w3.org/Signature/Drafts/xmldsig-core/Overview.html#sec-SchemaValidation
>>
>
>

-----------------------------------------------------------------------------------------------
Ed Simon
XMLsec Inc.

Interested in XML Security Training and Consulting services?  Visit "www.xmlsec.com".

Received on Friday, 21 September 2001 10:59:49 UTC