[EBXMLMSG-28] 5.1.7 State required attachment transform for encryption - OASIS Technical Committees Issue Tracker

XML

Word

Printable

Proposal:

Hide

Replace the text of Profile Rule (a) in section 5.1.7 with:
"AS4 MSH implementations are REQUIRED to use the Attachment-Content-Only transform as defined in [WSS-SWA] when encrypting SOAP with Attachments messages [SOAPATTACH]. The Attachment-Complete transform is not supported by this profile."

This also requires adding [WSS-SWA] to section 1.3 (Normative references)

Show
Replace the text of Profile Rule (a) in section 5.1.7 with: "AS4 MSH implementations are REQUIRED to use the Attachment-Content-Only transform as defined in [WSS-SWA] when encrypting SOAP with Attachments messages [SOAPATTACH] . The Attachment-Complete transform is not supported by this profile." This also requires adding [WSS-SWA] to section 1.3 (Normative references)

Section 5.1.7 does not mention which transforms must be supported. Similar to signing (see also issue 25) the AS4 profile should require support only for the Content-Only transform (indicated by URI : http://docs.oasis-open.org/wss/oasis-wss-SwAProfile-1.1#Attachment-Content-Only).