ietf-smime
[Top] [All Lists]

RE: Comments on CMS-03

1998-02-25 07:15:52
John:

Here is the replacement sentence that I will include in CMS-04:
If the eContent value within EncapsulatedContentInfo is absent, then the
signatureValue is calculated and the eContentType is assigned as though the
eContent value was present. 
Russ

At 04:38 PM 2/24/98 -0500, John Pawling wrote:
Jim,

I agree.  Recommend that CMS Sec 5.1, next to last para, last sent should be
deleted.  Also recommend that the preceding sentence should be changed to:
"If the eContent value within EncapsulatedContentInfo is absent, then the
signatureValue is calculated and the eContentType is set as though the
eContent value is present."

- John Pawling


At 12:39 PM 2/24/98 -0800, Jim Schaad (Exchange) wrote:
John,

I'm sorry but I disagree.  Yes there must be an OID in the eContentType
field, however the absense of of the eContent field does not change what
you place into the eContentType field.  The content type is still the
OID which describes the content which you are going to be signing (i.e.
data, a receipt).  There is no need for an id-absent-conent OID

jim

-----Original Message-----
From: jsp(_at_)jgvandyke(_dot_)com
[<mailto:jsp(_at_)jgvandyke(_dot_)com%5D>mailto:jsp(_at_)jgvandyke(_dot_)com]
Sent: Tuesday, February 24, 1998 5:17 AM
To: Jim Schaad (Exchange)
Cc: Ietf-Smime (E-mail)
Subject: Re: Comments on CMS-03


Jim,

I agree with your comments except that I have the following comment:

You wrote:
2.  Section 5.1  Since we are now octet encoding the eContent field, I
don't see any reason to say that for "external signatures" that the
content type must be id-data.  Recommend we delete this sentence

EncapsulatedContentInfo eContentType is not an optional field, so there
must
be an OID populated in the field.  When signedData is used to support
the
"external signatures" feature, there needs to be an OID in the
eContentType
field that indicates that the eContent field is absent.  Recommend that
Russ
should define an id-absent-content OID.

================================
John Pawling   
jsp(_at_)jgvandyke(_dot_)com                             
J.G. Van Dyke & Associates, Inc.           
================================


 

<Prev in Thread] Current Thread [Next in Thread>