RE: XForms and XML Signatures : How to get the presentation layer?

Hello,

What we do for digital sig is to create a bitmap image of the screen to be
signed, apply the corresponding algorithms and save it in an instance. We
can do it because, in our processor, we support what we call extended
actions (not in the standard) that consist in calling external routines and
communicate them with the Xforms processor through the model.

The screens should be "clean" in the sense that there should not be
scrolling or anything that does not show at the moment to capture the
screen.

Regards,

Rafael Benito
Satec

> -----Mensaje original-----
> De: www-forms-request@w3.org 
> [mailto:www-forms-request@w3.org] En nombre de David Landwehr
> Enviado el: miércoles, 20 de junio de 2007 14:26
> Para: duryodhan
> CC: www-forms@w3.org
> Asunto: Re: XForms and XML Signatures : How to get the 
> presentation layer?
> 
> 
> Well for what you are asking I certainly have no answer. This 
> is mostly a question about what you can achieve with the 
> implementation you are using. Certainly there are 
> implementations with support for signing, Dr. 
> Boyers implementation is such an implementation and all 
> implementations would in one way or another be able to 
> provide signing.
> 
> I think John Boyer is the best capacity in the Working Group 
> with regards to xml signatures so I bet he can give you much 
> better advice compared to me.
> 
> Best regards,
> David
> 
> 
> duryodhan skrev:
> >
> > Hey,
> > Well my basic question still hasn't been answered! :)
> >
> > What should I ask the user to sign?
> > the whole XHTML Doc? Or is there some magical XSL transform 
> that will 
> > let me store the whole presentation layer + instance data to a XML 
> > doc?
> >
> > Again, if I sign the XHTML doc , there could be changes to the 
> > external stylesheet ...
> >
> > Now, I know what the problems are and why we all are stuck. I think 
> > that right now there really isn't a method to enable really strong 
> > signatures that can't be repudiated by any human (like saying the 
> > "virus did it" or "you could cover it with some other label and it 
> > wouldn't matter" etc.), but my question is about what is maximally 
> > technically feasible as of now? What is the strongest digital 
> > signature you can generate right now? Also, is there any form of 
> > XForms + XHTML Signing being used anywhere ? (like the e.g 
> in "Secure 
> > web forms with Client side signatures" by Mikko Honkala )
> >
> > Once again, I could be wrong , so please correct me if that 
> is the case .
> >
> > Regards,
> > duryodhan
> >
> 
> 
> --
> David Landwehr
> Senior Product Architect
> PicoForms
> web:    http://www.picoforms.com
> e-mail: david.landwehr@picoforms.com
> phone:  +45 24 27 55 18
>

Received on Friday, 22 June 2007 12:23:49 UTC