Trust Service - Revision history

Tom: /* German Proposal for Identity and Trust Services */

2023-11-21T04:55:39Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2023-07-27T19:56:29Z

‎German Proposal for Identity and Trust Services

Tom: /* Reference */

2019-02-15T06:37:10Z

‎Reference

Tom: /* German Proposal for Identity and Trust Services */

2018-12-11T22:41:02Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-16T17:24:37Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-16T17:17:44Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-16T17:16:01Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-16T17:13:29Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-16T17:11:04Z

‎German Proposal for Identity and Trust Services

Tom: /* German Proposal for Identity and Trust Services */

2018-11-15T19:28:30Z

‎German Proposal for Identity and Trust Services

@@ Line 27: / Line 27: @@
 * Para 9 1 - Only the trust service operators that have passed an independent audit of compliance shall have the right to provide trust services.
 * Para 9 2 - The bodies or institutions authorized in accordance with the procedure established by the Coordinating Council may carry out the compliance auditing.
-* Para 9 3 - The trust service operators provide civil liability insurance in accordance with the requirements established by the Coordinating Council.
+* Para 9 3 - The trust service operators provide civil [[Liability]] insurance in accordance with the requirements established by the Coordinating Council.
 * Para 14 - Users are required to make their own provisions for compliance of the software and hardware used in the transboundary electronic interaction with the requirements of the trust service operators. (pure evil - this will enable the relying party to blame the user for all security lapses)
 * Para 19 1 - contents of cert (this seems be be single level - no concept of chain of trust)

@@ Line 20: / Line 20: @@
 * Para 1 3 - The transboundary environment of trust includes the following segments: Centralized, Self-regulating.
 * Para 2 1(1) - “Participants in the transboundary environment of trust” means public authorities, the Coordinating Council, trust service operators, distributed databases operators, and individuals and organizations;
-* Para 2 1(6) - “Trust services” mean services which confirm the veracity and genuineness of electronic documents and/or their details, including but not limited to services related to the creation and use of electronic signatures, electronic seals, electronic timestamps, electronic delivery and authentication of websites.
+* Para 2 1(6) - “Trust services” mean services which confirm the [[Veracity]] and genuineness of electronic documents and/or their details, including but not limited to services related to the creation and use of electronic signatures, electronic seals, electronic timestamps, electronic delivery and authentication of websites.
 * Para 2 1(10) - “Trust service operator” means an individual or a legal entity which complies with the requirements established by the Coordinating Council, holds a confirmation of compliance obtained through a procedure established by the Coordinating Council, and provides trust services within the centralized segment of the transboundary environment of trust;
 * Para 2 1(12) - “User” means a public authority, an individual, or an organization which is a sender or a receiver of electronic messages and/or electronic documents, including those sent through the services provided within the self-regulatory segment of the transboundary environment of trust

← Older revision		Revision as of 06:37, 15 February 2019
Line 45:		Line 45:
	[[Category:Identity]]		[[Category:Identity]]
	[[Category:Profile]]		[[Category:Profile]]
		+	[[Category:Trust]]

@@ Line 15: / Line 15: @@
 ===German Proposal for Identity and Trust Services===
 *[http://undocs.org/en/A/CN.9/WG.IV/WP.155 Draft Instrument on Cross-Border Legal Recognition of Identity Management and Trust Services — Proposal by Germany] (2018-11)
-*There was a lot of irrelevant stuff from a technological standpoint, including a clueless attempt to encompass block chain. The following seems to map to the technology:
+*There was a lot of irrelevant stuff from a technological standpoint, including a clueless attempt to encompass [[Block Chain]]. The following seems to map to the technology:
 *Extract from Pramble:
 <blockquote> Assuming that uniform rules shall be based on respect for the freedom of parties to choose appropriate media, technologies, identification and trust services, taking into account the principles of technological neutrality and functional equivalence, to the extent in which the means selected by the parties are relevant to the purpose of the existing law; Recognizing the opportunity and feasibility of both centralized and decentralized systems of trust, and their utilization to accelerate progress and digital economy, including the trusted implementation of e-commerce and transport, electronic dispute settlement, creation of e-government and electronic public services, development of online training courses, e-healthcare, various electronic registries, electronic financial services</blockquote>

@@ Line 29: / Line 29: @@
 * Para 9 3 - The trust service operators provide civil liability insurance in accordance with the requirements established by the Coordinating Council.
 * Para 14 - Users are required to make their own provisions for compliance of the software and hardware used in the transboundary electronic interaction with the requirements of the trust service operators. (pure evil - this will enable the relying party to blame the user for all security lapses)
-* Para 19 1 - contents of cert
+* Para 19 1 - contents of cert (this seems be be single level - no concept of chain of trust)
 # purpose is clear - to authn the web site
 # trust service operator (aka the issuer)

@@ Line 31: / Line 31: @@
 * Para 19 1 - contents of cert
 # purpose is clear - to authn the web site
-# trust service operator
+# trust service operator (aka the issuer)
-# subject identifier
+# subject identifier (aka the web site authority)
 # official address (not at all clear if it needs to be validated)
 # domain name (this should be the URN rather than the URL - the spec is unclear)
 # start & end datetime
 # id of cert
-# signature (including kid - which is bound to the issuer and the site authority)
+# signature (including kid - which is thereby bound to the issuer and the site authority)
 # validation URL (like ocsp, or the federation validation URL)