XML for forms

[Rob McDougall]

Gavin's intent is clearer in its original context than in the heavily edited
one you provide.

Signing and persistence are two separate issues.  Yes, the signing of a form
must include the presentation and the content, but no, the two do not need
to be persisted together.  The signature (which can include the
presentation's fingerprint) + the data is sufficient to determine if the
correct presentation is being subsequently used.

If the signature includes the presentation in its digest then it will not
verify with a different presentation.  One can persist the data and
presentation separately with all the attendant savings.

Were these legal agents you speak of apprised of this option?

Rob


-----Original Message-----
From: Barclay Blair [mailto:barclay at uwi.com]
Sent: July 13, 1999 5:21 PM
To: Gavin McKenzie; 'Tim Bray'; 'David Megginson'; xml-dev at ic.ac.uk
Subject: RE: XML for forms


Gavin,

I'm interested to know from where you are deriving your opinion that
"persisting presentation and data together isn't required or necessary,"
when legal experts have stated differently.  I'd been interested in any
information that you could provide from legal experts who say that it is
better, or even good practice, to separate the questions and answers of
a form.

Barclay

 ============================================
    Barclay Blair -- Industry Relations
    UWI.Com -- The InternetForms Company
  v: 250-479-8334 x161   fx: 250-479-3772
 barclay at uwi.com	       www.uwi.com
============================================

-----Original Message-----
From: owner-xml-dev at ic.ac.uk [mailto:owner-xml-dev at ic.ac.uk]On Behalf Of
Gavin McKenzie
Sent: Monday, July 05, 1999 1:31 PM
To: 'Tim Bray'; 'David Megginson'; 'xml-dev at ic.ac.uk'
Subject: RE: XML for forms

When I said, "It requires that..." I was not speaking of XFDL, which I
cannot speak for.  Rather, I was generally stating that "Non-repudiation
(often) requires that the context and presentation be signed...".

People (customers) have a wide range of requirements that are not best
served by a single simple solution.  Persisting presentation and data
together isn't required or necessary.


xml-dev: A list for W3C XML Developers. To post, mailto:xml-dev at ic.ac.uk
Archived as: http://www.lists.ic.ac.uk/hypermail/xml-dev/ and on CD-ROM/ISBN 981-02-3594-1
To (un)subscribe, mailto:majordomo at ic.ac.uk the following message;
(un)subscribe xml-dev
To subscribe to the digests, mailto:majordomo at ic.ac.uk the following message;
subscribe xml-dev-digest
List coordinator, Henry Rzepa (mailto:rzepa at ic.ac.uk)