Steve,
One of my principal objections to the current MIME-PEM
proposal is that it has the flavor of "there is a baisc capability to
do a wide range of things; we have defined one example; other examples
may come along 9or we may already have them in mind but we aren't
telling you) and we'll figure out what the semantics is when we get
there (or when we decide to tell you)." The idea that the semantics
of multiple signatures applied to an object is up to the recipient
stikes me as complete foolishness! The signer(s) should have a means
of expressing the sematics to verifiers in an unabmiguous fashion, so
that two different verifiers don't interpret the signatures
differently.
Steve