Re: form solutions

In a message dated 14/04/2003 10:28:13 GMT Daylight Time, CSioulis@dsa.gr 
writes:


> 
> 
>     I am not a 'technician' (I am just a lawyer interesting in IT 
> evolution)
> and I am not an 'XML expert', but I keep 'watching' this mail list since
> 12-11-02 (396 messages till now!), waiting to see if the 'issue' of 
> 'Digital
> Signature' will be discussed in this forum! (especially from the point of
> view of the very prescriptive approach of the *european legislation* and 
> the
> corresponding standardization that has been done -until now- by ETSI & CEN
> in ths context of EESS Initiative).
>     I can understand that X-Forms is a very useful tool/method to 'collect,
> transfer & manage specific data/declarations' ('instances'!) through
> different devices using XML technology (-am I wrong?) but what about the
> authentication, the integrity and the non repudiation of these
> 'data/instances' ??? (in the 'home page' of the X-Forms
> project -http://www.w3.org/MarkUp/Forms/- I haven't seen any relationship
> with other WG which are working on these issues!)


Christos,

I think I asked the WG a similar question on the list a very long time ago. 
My hazy recollection of the answer is that XML security standards weren't 
going to be included in XForms 1.0. You may want to check the list archives.

There is a new XForms Activity Statement on the W3C site. Currently it is 
pretty uninformative, but that isn't surprising given that XForms 1.0 has 
still to be finalised.

Andrew Watt

> My questions:
> - Has anybody of this team read the ETSI TS 101 903 'XML Advanced 
> Electronic
> Signatures' (XAdES) document and looked for any relationship of X-Forms 
> with
> the other similar 'tecnical specifications' of ETSI/ESI
> (http://portal.etsi.org/esi/el-sign.asp) and CEN/ISSS WS/E-Sign
> (http://www2.ni.din.de/index.php?lang=en)?
> - Does anybody of this team care if X-Forms could be 'encorporated' in
> solutions/application *compliant* with the European Directive 99/93/EC 
> rules
> for 'qualified electronic signatures'? (it would be very intersting to see
> i.e., how the 'WYSIWYSign' requirement could be approached using X-Forms!)
> :-)
> [I understand that most of you belong in different 'legal enviroment'
> (common law/contract based), but I think that there are european & other IT
> industries that would like to use X-Forms in applications that conform to
> the above standards  for 'secure (signed) e-transactions' (in civil
> law/prescriptive regulation context)!]
> 
> Thank for your attention,
> 
> Christos Sioulis
> Athens Lawyer - IT Law Consultant
>