60 likes | 173 Vues
This document, authored by Jim Schaad, Russ Housley, and Sean Turner, provides crucial insights into managing multiple levels of signatures in CMS systems, focusing on non-S/MIME issues. It addresses how to handle parallel and nested signatures, delineates four levels of information, and discusses error classification, including strict errors, possible errors, and warnings. The document emphasizes the need for clear rules and policies regarding signature combinations within and between levels, ensuring robust verification processes and effective error management.
E N D
Multiple Levels of Signatures Jim Schaad Chehalem Uplands Inc.
Direction • New document • Authors: Jim Schaad, Russ Housley and Sean Turner • Document to be written against CMS not S/MIME
Issues to Cover • What to do with multiple parallel signatures • What to do with nested signatures
Approach • Four levels of information • Strict Error • Forces this specific signature to fail verification • Possible Error • Can be treated as Strict Error or Warning by admin control • Warning • Non fatal problem with specific signature • No Problem
Rules and Policies • Need to layout criteria for assigning to classification • Need to specify rules for combination of information • Within specific signature • Between signatures on same level • Between signatures on different levels