ZIP version used for OPC

[MURATA Makoto]

Alfred,

First, I strongly think that digital signatures of OPC have
to be significantly extended. XAdES EN, XML DSig 1.1, and
SHA 256 are strongly required.  But WG4 has agreed not to
do so in this revision.  One reason is that the revision of
ISO 14533-2:2012 (XAdES Profile) has not been completed
yet.  After the current revision of OPC is completed, I
hope to start an amendment project for digital signatures.

Second, it is not only OPC that uses DEFLATE and
nothing else.  EPUB does the same thing.  I believe
that other compression methods as documented in
PKWARE Appnote require license fee to PKWARE.

Regards,
Makoto

2019年1月25日(金) 6:08 Alfred Hellstern <Alfred.Hellstern at microsoft.com>:

> Hello all,
>
> The Visual Studio team is looking into the OPC review, but in the meantime
> they were wondering about the ZIP compression format:
>
>
>
> “What is of more concern to me is no movement forward to support newer,
> better compression algorithms (i.e. based still on ZIP, which itself is
> limited to fairly light compression), and signature requirements to use
> only SHA1 which is no longer considered secure. Is the WG considering
> addressing these specifications while modernizing the OPC protocols? I
> appreciate that changing the container format is a daunting and perhaps
> irreconcilable task, but adding support for SHA256 or even dual-signing
> should be supported given that the signed XML specification that OPC uses
> has supported multiple signature algorithms for a very long time.”
>
>
>
> What’s our take on moving forward from the current ZIP version we’re
> using? I suspect this also has to do with the version of ZIP that Windows
> itself uses in its Compressed Folders feature (and see this blog post
> https://blogs.msdn.microsoft.com/oldnewthing/20180515-00/?p=98755
>  indicating that’s not going to -ever- change.
>
>
>
> Alfred
>
>
> Click here <https://www.mailcontrol.com/sr/MZbqvYs5QwJvpeaetUwhCQ==> to
> report this email as spam.
>
>
> This message has been scanned for malware by Forcepoint.
> www.forcepoint.com
>


-- 

Praying for the victims of the Japan Tohoku earthquake

Makoto
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20190125/ebc4b7ce/attachment-0001.html>