Hi,
Differences between DOMSEC 07 and DOMSEC 08
1) A few typos.
2) Russ Housley's comments made in message "Re: WG Last Call:
draft-ietf-smime-domsec-07.txt" 9th January 2001. Including extra text else
where in the draft to support some of these comments.
3) Added text in section 5, point 3) a), sub point five, "If local policy
requires the message to be encrypted using S/MIME encryption before leaving
the domain then encapsulate ...".
Also, added the paragraph: -
"If local policy does not require the message to be encrypted using S/MIME
encryption but there is an envelopedData at a lower level within the message
then the 'domain signature' MUST be encapsulated by an envelopedData as
described above"
This is because a MLA will strip off the outer signatures down to the
enveloped data thereby removing the domain signature.
Also added the paragraph: -
"An example when it may not be local policy to require S/MIME encryption is
when there is a link crypto present."
4) Section 5 point 5) added the paragraph: -
"If local policy does not require the message to be encrypted using S/MIME
encryption but there is an envelopedData at a lower level within the message
then the 'domain signature'MUST be encapsulated by an envelopedData as
described above"
5) Section 5.1. Added the statement: -
"All of the signedData objects are valid and none of them are a domain
signature. If a signedData object was a domain signature then it would not
be necessary to validate any further signedData objects."
6) Section 5.1, examples 4) and 6). Added text to cover situation where
local policy does not require S/MIME encryption.
7) Section 5.1. A new example 7) to show how a message with two
envelopedData objects is handled.
Bill
"The Information contained in this E-Mail and any subsequent
correspondence is private and is intended solely for the intended
recipient(s). For those other than the intended recipient any
disclosure, copying, distribution, or any action taken or omitted to
be taken in reliance on such information is prohibited and may be
unlawful."
____________________________________________________
William Ottaway BSc Hons CEng MBCS,
Woodward B009, Tel: +44 (0) 1684 894079
DERA Malvern, Fax: +44 (0) 1684 896660
St. Andrews Road, email:
w(_dot_)ottaway(_at_)eris(_dot_)dera(_dot_)gov(_dot_)uk
Malvern,
Worcs,
WR14 3PS
All opinions are my own.