Peter (and friends),
I agree with your recommendation. This results in a change to my comment to
CMS-06 to read as follows:
5) Sec 11.4, Countersignature: Please change as follows:
OLD: "A countersignature attribute can have multiple attribute values."
NEW: "The UnsignedAttributes syntax is defined as a SET OF Attribute.
The UnsignedAttributes in a signerInfo MUST NOT include multiple
instances of the countersignature attribute. The Attribute syntax defines
attrValues as a SET OF AttributeValue. A countersignature attribute
MAY include one or more instances of AttributeValue. There MUST NOT
be zero instances of AttributeValue present in the attrValues SET
OF AttributeValue."
Does anybody disagree with this recommendation???
- John Pawling