5.1.7 State required attachment transform for encryption

XMLWordPrintable

    • Type: Improvement
    • Resolution: Fixed
    • Priority: Major
    • Component/s: AS4 Profile
    • None
    • Hide

      Replace the text of Profile Rule (a) in section 5.1.7 with:
      "AS4 MSH implementations are REQUIRED to use the Attachment-Content-Only transform as defined in [WSS-SWA] when encrypting SOAP with Attachments messages [SOAPATTACH]. The Attachment-Complete transform is not supported by this profile."

      This also requires adding [WSS-SWA] to section 1.3 (Normative references)

      Show
      Replace the text of Profile Rule (a) in section 5.1.7 with: "AS4 MSH implementations are REQUIRED to use the Attachment-Content-Only transform as defined in [WSS-SWA] when encrypting SOAP with Attachments messages [SOAPATTACH] . The Attachment-Complete transform is not supported by this profile." This also requires adding [WSS-SWA] to section 1.3 (Normative references)

      Section 5.1.7 does not mention which transforms must be supported. Similar to signing (see also issue 25) the AS4 profile should require support only for the Content-Only transform (indicated by URI : http://docs.oasis-open.org/wss/oasis-wss-SwAProfile-1.1#Attachment-Content-Only).

            Assignee:
            Unassigned
            Reporter:
            Sander Fieten
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: