index.html
16.8 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IETF/W3C XML-DSig Working Group</title>
<link rel="stylesheet" type="text/css" href="WG.css" />
<style type="text/css">
<!--
-->
</style>
</head>
<body xml:lang="en" lang="en">
<h1><a href="http://www.ietf.org"><img
src="http://ietf.org/images/ietflogo2e.gif" alt="IETF" border="0" height="48"
width="92" /></a> <a href="http://www.w3.org/"><img
src="http://www.w3.org/Icons/WWW/w3c_home" alt="W3C" border="0" height="48"
width="72" /></a> XML Signature WG <small><small>[ <a
href="http://cgi.w3.org/cgi-bin/html2txt?url=http://www.w3.org/Signature/Overview.html">text</a>]</small></small></h1>
<dl>
<dt>On this page:</dt>
<dd><a href="#Mission">Mission</a> | <a href="#CurrentWork">Current
Drafts</a> | <a href="#Code">Code & Toolkits</a> | <a
href="#responsibilities">The Chairs</a> | <a
href="#Meetings">Meetings&Calls</a> | <a
href="#Background">Background Reading</a></dd>
<dt>Nearby:</dt>
<dd><a href="charter-20020607">Charter</a> | <a href="#email">List
Archive</a> | <a href="Deliverables.html">Older Drafts</a> | <a
href="Participants.html">Participants</a> | <a
href="Contributor.html">Contributor Policies</a> | <a
href="Disclosures.html">Patent Disclosures</a> | <a
href="/1999/05/XML-DSig-CFP-990521.html">Briefing Package</a> | <a
href="Activity.html">W3C Activity Statement</a></dd>
<dt>Chair(s):</dt>
<dd>Donald Eastlake 3rd <<a
href="mailto:d3e3e3@gmail.com">d3e3e3@gmail.com</a>></dd>
<dd><a href="http://www.w3.org/People/Reagle/">Joseph Reagle</a> Jr.
<<a href="mailto:reagle@w3.org">reagle@w3.org</a>></dd>
<dt><a id="email" name="email">Mailing Lists</a> ( <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/1999AprJun/0001.html">Help</a>)</dt>
<dd>General Discussion: <a
href="mailto:w3c-ietf-xmldsig@w3.org">w3c-ietf-xmldsig@w3.org</a></dd>
<dd>Subscribe: <a
href="mailto:w3c-ietf-xmldsig-request@w3.org">w3c-ietf-xmldsig-request@w3.org</a></dd>
<dd> In Subject: (un)subscribe</dd>
<dd>Archive: <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/">http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/</a></dd>
</dl>
<h2><a id="recent" name="recent">Recent Work</a></h2>
<ul>
<li><a href="/2007/xmlsec/">2007/2008 XML Security Specifications Maintenance WG</a></li>
<li><a href="/2008/xmlsec/">2008/2010 XML Security Working Group</a></li>
</ul>
<h2><a id="Mission" name="Mission">Mission Statement</a></h2>
<p>The mission of this working group is to develop an XML compliant syntax
used for representing the signature of Web resources and portions of protocol
messages (anything referencable by a URI) and procedures for computing and
verifying such signatures. This is a joint Working Group of the <a
href="http://www.ietf.org">IETF</a> and <a href="http://www.w3.org">W3C</a>.
W3C is hosting the email list and WG site publicly in accordance with IETF
procedure. Please see the <a href="charter-20020607">Charter</a> for further
information on the constitution of this WG. This WG <em>does not</em> address
broader <a
href="http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/xml_security.html">XML
security</a> issues including <a
href="http://lists.w3.org/Archives/Public/xml-encryption/">XML encryption</a>
and authorization.<strong>This WG has successfully advanced all chartered
deliverables to their final state and the charter has expired; presently the
mailing list may be used to ask questions about the specifications or interop
report.</strong></p>
<p>If you want to join, or are new to the working group you should understand
how to <a href="Contributor.html">contribute</a>, how to <a
href="#responsibilities">work with the chairs</a>, when the next <a
href="#Meetings">meetings</a> is, and catch up on some <a
href="#Background">background reading</a>. Otherwise, just start
participating on the list!</p>
<p>If you are interested in a light-weight introduction to XML Signatures,
you may want to review the <a href="#primers">primer background
reading</a>.</p>
<h2><a id="CurrentWork" name="CurrentWork">Current Deliverables</a></h2>
<dl>
<dt>Signature Syntax and Processing (<a
href="http://www.w3.org/Signature/2001/04/05-xmldsig-interop.html">interop-report</a>)</dt>
<dd>REC: <a
href="http://www.w3.org/TR/xmldsig-core/">http://www.w3.org/TR/xmldsig-core/</a></dd>
<dd>Draft Standard: <a
href="http://www.ietf.org/rfc/rfc3275.txt">http://www.ietf.org/rfc/rfc3275.txt</a></dd>
<dt>Canonical XML (<a
href="2000/10/10-c14n-interop.html">Interop-report</a>)<br />
</dt>
<dd>REC: <a
href="http://www.w3.org/TR/xml-c14n">http://www.w3.org/TR/xml-c14n</a></dd>
<dd>Informational: <a
href="http://www.ietf.org/rfc/rfc3076.txt">RFC3076</a></dd>
<dt>Exclusive Canonical XML (<a
href="2002/02/01-exc-c14n-interop.html">interop-report</a>)</dt>
<dd>REC: <a
href="http://www.w3.org/TR/xml-exc-c14n">http://www.w3.org/TR/xml-exc-c14n</a></dd>
<dd>Informational: <a href="http://www.ietf.org/rfc/rfc3741.txt">http://www.ietf.org/rfc/rfc3741.txt</a></dd>
<dt>XPath Filter (<a
href="http://www.w3.org/Signature/2002/05/xmldsig-filter2-interop">interop-report</a>)</dt>
<dd>REC: <a
href="http://www.w3.org/TR/xmldsig-filter2/">http://www.w3.org/TR/xmldsig-filter2/</a></dd>
<dt>Additional XML Security URIs</dt>
<dd>Informational: <a
href="http://www.ietf.org/rfc/rfc4051.txt">http://www.ietf.org/rfc/rfc4051.txt</a></dd>
<dt>XML Signature Requirements</dt>
<dd>Note: <a
href="http://www.w3.org/TR/xmldsig-requirements">http://www.w3.org/TR/xmldsig-requirements</a></dd>
<dd>Informational: <a
href="http://www.ietf.org/rfc/rfc2807.txt">http://www.ietf.org/rfc/rfc2807.txt</a></dd>
</dl>
<p>See <a id="Past" href="Deliverables.html" name="Past">previous
deliverables</a> for previous drafts and their interoperability matrices and
histories.</p>
<h2><a id="Code" name="Code">Publicly Available Code, Tool Kits &
SDKs</a></h2>
<p>The software below is not normative. It is provided for illustration
only.</p>
<p>Source</p>
<ul>
<li><a href="http://xml.apache.org/security/index.html">Apache XML
Security</a> for Java, Christian Geuer-Pollmann (BSD License)</li>
<li><a href="http://gapxse.sourceforge.net">GapXse</a> for Java, University
of Pisa (LGPL License)</li>
<li><a href="http://dev.w3.org/cvsweb/2001/xmlsec-python/">Canonical XML
and Exclusive Canonical XML for Python</a>, Joseph Reagle and Richard
Salz (W3C and Python Licenses)</li>
<li><a href="http://tjmather.com/xml-canonical/">Canonical XML for
Perl</a>, T.J. Mather (Perl License)</li>
<li><a href="http://www.aleksey.com/xmlsec/">XML Security Library</a>,
Aleksey Sanin (MIT License)</li>
</ul>
<br />
<p>Toolkits, SDKs, and Products</p>
<ul>
<li><del>Baltimore</del></li>
<li><a href="http://www.datapower.com/products/xs40.html">DataPower</a></li>
<li><a
href="http://www.entrust.com/developer/java/index.htm">Entrust/Toolkit™
; for Java™</a></li>
<li><a
href="http://jcewww.iaik.tu-graz.ac.at/products/ixsil/index.php">IAIK XML
Signature Library (IXSIL)</a></li>
<li><a href="http://www.alphaworks.ibm.com/tech/xmlsecuritysuite">IBM XML
Security Suite</a></li>
<li><a href="http://www.infomosaic.net/">Infomosaic</a></li>
<li><a href="http://msdn.microsoft.com/netframework/">Microsoft</a></li>
<li><a href="http://www.sw.nec.co.jp/soft/xml_s/appform_e.html">NEC
XMLDSIG</a></li>
<li><a href="http://www.phaos.com/e_security/prod_xml.html">Phaos</a></li>
<li><a href="http://www.ponton-consulting.de/english/index_en.html">Ponton
Consulting</a></li>
<li><a href="http://www.rsasecurity.com/products/bsafe/certj.html">RSA
BSAFE Cert-J</a></li>
<li><a href="http://www.setcce.org/xsign.htm">SETCCE</a></li>
<li><a
href="http://www.ubisecure.com/index.php?page=ubisignature">Ubisecure</a></li>
<li><a
href="http://www.xmltrustcenter.org/xmlsig/developer/verisign/index.htm">Verisign</a><br
/>
</li>
<li><a href="http://www.wedgetail.com/xmlsecurity/">Wedgetail</a></li>
</ul>
<br />
<p>Test Vectors</p>
<ul>
<li><a href="2001/04/05-xmldsig-interop.html">XML Signature Syntax and
Processing Interop Matrix</a> (small set to demonstrate feature
implementation and interoperation.)</li>
<li><a
href="http://cvs.apache.org/viewcvs.cgi/xml-security/data/">Christian
Geuer-Pollmann's collection of test vectors</a> including those of <a
href="http://cvs.apache.org/viewcvs.cgi/xml-security/data/ie/baltimore/merlin-examples/">Merlin
Hughes (Baltimore)</a> and <a
href="http://cvs.apache.org/viewcvs.cgi/xml-security/data/at/iaik/">Gregor
Karlinger (IAIK)</a>.</li>
<li><a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2002AprJun/0006.html">Infomosaic's
SecureXMLVerify() web service</a>. (<a
href="http://www.infomosaic.net/XMLSign/SecureXMLVerifyWS.htm">web
form</a>)</li>
</ul>
<p></p>
<p>Miscellaneous</p>
<ul>
<li><a href="http://www.oasis-open.org/committees/relax-ng/">RelaxNG</a> <a
href="2002/07/xmldsig-core-schema.rng">Schema for xmldsig-core</a></li>
</ul>
<h2><a id="Meetings" name="Meetings">Meetings</a> and Teleconferences</h2>
<p>Minutes are produced in accordance with <a
href="http://www.ietf.org/instructions/minutes.html">IETF Minute
Policy.</a></p>
<h3>Face-to-Face Announce and Minutes</h3>
<ul>
<li>IETF (48), Pittsburgh, USA. <a
href="Minutes/000803-Pittsburgh/">Minutes</a> & <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JulSep/0157.html">Agenda.</a></li>
<li>Victoria CA. Thursday, April 20, 2000. <a
href="Minutes/000420-Victoria/Overview.html">Minutes,</a> <a
href="http://www.pureedge.com/about/dsig/index.htm">Logistics</a> and <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000AprJun/0027.html">Agenda</a>.</li>
<li>IETF (47), Adelaide, Australia. Monday, March 27, 2000. <a
href="Minutes/000327-Adelaide/Overview.html">Minutes</a> & <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JanMar/0228.html">Agenda</a>.</li>
<li>San Jose, CA. Friday, January 21, 2000. <a
href="Minutes/SanJose/Overview.html">Minutes</a> & <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2000JanMar/0051.html">Agenda</a>.</li>
<li>IETF (46), Washington, DC. November 7-12 1999. <a
href="Minutes/DC-Minutes/Overview.html">Minutes</a> & <a
href="Minutes/DC-Agenda.html">Agenda</a>.</li>
<li><a href="Minutes/Irvine-Logistics.html">UCI, Irvine</a>. August 30-31,
1999. <a href="Minutes/Irvine-Minutes.html">Minutes</a> & <a
href="Minutes/Irvine-Agenda.html">Agenda</a></li>
<li>IETF (45), Oslo, July 1999: <a
href="Minutes/990713-oslo.html">Minutes</a> & <a
href="Minutes/Oslo-Agenda.html">Agenda</a></li>
</ul>
<h3>Telecon Minutes</h3>
<p>Optional teleconferences happen every other week (or week depending on
schedule) on Thursdays at 12ET. See the <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/">archive</a> for
the latest teleconference announcement. Minutes are posted to the list; WG
members are obligated to review, correct, or counter any proposals or
consensus achieved on the call on the list.</p>
<ul>
<li><a href="Minutes/010730-tele.html">010730-tele |</a> <a
href="Minutes/000907-tele.html">000907-tele</a> | <a
href="Minutes/00817-tele.html">000817-tele</a>| <a
href="Minutes/000302-tele.html">000302-tele</a></li>
<li><a href="Minutes/000217-tele.html">000217-tele</a> | <a
href="Minutes/000203-tele.html">000203-tele</a> | <a
href="Minutes/000106-tele.html">000106-tele</a> | <a
href="Minutes/991216-tele.html">991216-tele</a></li>
<li><a href="Minutes/991209-tele.html">991209-tele</a> | <a
href="Minutes/991202-tele.html">991202-tele</a> | <a
href="Minutes/991118-tele.html">991118-tele</a> | <a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/1999OctDec/0244.html">991104-tele</a></li>
<li><a href="Minutes/991028-tele.html">991028-tele</a> | <a
href="Minutes/991021a-tele.html">991021-tele</a> | <a
href="Minutes/991014-tele.html">991014-tele</a> | <a
href="Minutes/991007-tele.html">991007-tele</a></li>
<li><a href="Minutes/990930-tele.html">990930-tele</a> | <a
href="Minutes/990923-tele.html">990923-tele</a> | <a
href="Minutes/990909-tele.html">990909-tele</a> | <a
href="Minutes/990820-tele.html">990820-tele</a></li>
<li><a
href="http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/1999JulSep/0145.html">990805-tele</a></li>
<li><a href="Minutes/990722-tele.html">990722-tele</a></li>
</ul>
<h2>Chair <a id="responsibilities"
name="responsibilities">Responsibilities</a></h2>
<p>Any correspondence to either Chair in that capacity should include both
email addresses in the distribution. Any technical question, proposal, or
discussion must be distributed to the list. An email to a Chair that does not
include the list in the distribution may be considered private correspondence
and might not be added to the agenda for WG consideration; we need public
records of proposals, consideration, and re-consideration as we move forward
in achieving a group consensus.</p>
<p>Presently, the chair responsibilities are divided as shown below. As
already stated, requests on these topics should be directed to the specified
owner with the other chair or the WG list cc'd as appropriate.</p>
<p><a id="reagle" href="http://www.w3.org/People/Reagle/"
name="reagle">Joseph Reagle</a></p>
<ol>
<li>Manage Web site and smart-list.</li>
<li>Facilitate WG consensus on <a
href="http://www.w3.org/TR/xmldsig-requirements">XML Signature
Requirements</a> document.</li>
</ol>
<p><a id="eastlake" name="eastlake">Don Eastlake</a></p>
<ol>
<li>Moderate mailing list discussion and teleconferences.</li>
<li>Facilitate WG consensus XML Signature specification.</li>
</ol>
<h2><a id="Background" name="Background">Background</a></h2>
<h3><a id="primers" name="primers">Primers and Guides</a></h3>
<ul>
<li><a href="http://www.xml.com/pub/a/2001/08/08/xmldsig.html">An
Introduction to XML Digital Signatures</a>.</li>
<li><a
href="http://www-106.ibm.com/developerworks/xml/library/s-xmlsec.html/index.html">An
Introduction to XML Encryption and XML Signature</a></li>
<li><a
href="http://msdn.microsoft.com/webservices/understanding/xmlfundamentals/default.aspx?pull=/library/en-us/dnwebsrv/html/underxmldigsig.asp">Understanding
XML Digital Signature</a></li>
</ul>
<h3><a id="required" name="required">Required Technical Reading</a></h3>
<ul>
<li><a href="ftp://ftp.isi.edu/in-notes/rfc1958.txt">Architectural
Principles of the Internet</a> (RFC1958)</li>
<li><a href="http://www.w3.org/DesignIssues/Architecture.html">Web
Architecture from 50,000 feet.</a></li>
</ul>
<ul>
<li><a href="http://www.w3.org/TR/REC-xml">Extensible Markup Language (XML)
1.0 Specification</a>, Recommendation</li>
<li><a href="/TR/REC-xml-names/">Namespaces in XML</a>, Recommendation</li>
<li><a href="http://www.w3.org/TR/xmlschema-1/">XML Schema</a>, Working
Draft</li>
<li><a id="xpath" href="http://www.w3.org/TR/xpath" name="xpath">XML Path
Language (XPath) Version 1.0</a>, Recommendation</li>
</ul>
<h3><a id="optional" name="optional">Optional Technical Reading</a></h3>
<ul>
<li><a href="http://www.w3.org/DSig/signed-XML99/Overview.html">The W3C
Signed XML Workshop Report and Summary</a></li>
<li><a href="/TR/WD-xptr">XML Pointer language (XPointer)</a></li>
<li><a href="http://www.w3.org/TR/xml-infoset/">XML Information Set</a></li>
<li><a href="ftp://ftp.isi.edu/in-notes/rfc1847.txt">RFC1847. S/MIME</a>
(CMS)</li>
</ul>
<h3><a id="process" name="process">Process Reading</a></h3>
<ul>
<li>IETF: <a href="http://www.ietf.org/rfc/rfc2026.txt">Internet Standards
Process -- Revision 3</a> (<a
href="http://asg.web.cmu.edu/rfc/rfc2026.html">html</a>) and <a
href="http://www.ietf.org/rfc/rfc2418.txt">Working Group Guidelines and
Procedures</a>.</li>
<li>W3C: <a href="http://www.w3.org/Consortium/Process/">Process
Document</a> and <a
href="http://www.w3.org/Guide/Overview.html">Guidebook for Working Group
Chairs</a></li>
<li>Reagle: <a
href="http://www.w3.org/People/Reagle/work-style.html">workstyle</a>.</li>
</ul>
<hr />
<address>
Donald Eastlake 3rd < <a
href="mailto:d3e3e3@gmail.com">d3e3e3@gmail.com</a>><br />
Joseph Reagle <<a href="mailto:reagle@w3.org">reagle@w3.org</a>>
</address>
<p>Last revised by $Author: roessler $ $Date: 2008/06/02 11:54:23 $</p>
</body>
</html>