Service schemas
This is a short summary of DSS-related schemas included in the service definition and what they are used for:
oasis-dss-core-schema-v1.0-os
https://docs.oasis-open.org/dss/v1.0/oasis-dss-core-schema-v1.0-os.xsd
It contains the definition of the request and response protocols for signing and verifying the signature of XML documents and other data. It also defines an XML timestamp format, and an XML signature property for use with these protocols. Finally it defines how the transport and security of the protocols should be.
Redtrust's service covers the signature generation part without taking into account verification and timestamping, which are scheduled for future development.
oasis-dss-vissig-schema-v1.0-cd1
https://docs.oasis-open.org/dss-x/profiles/visualsig/v1.0/cd01/oasis-dss-vissig-schema-v1.0-cd1.xsd
It contains the profile definition for the visual representation of the signature. It contains the profile definition for the visual representation of the signature. The visual signature representation allows embedding visible signature features in documents during signing and validating them during verification.
Redtrust's service provides for embedding the visual representation of the signature in PDF documents, regardless of verification.
oasis-dssx-1.0-profiles-sigpolicy-schema-cd01
Signatures can include explicit signature policy identifiers that define the rules for generating and verifying signatures. This profile extends the core protocol by defining the operations required to apply those rules.
The Redtrust service covers the signature protocol part of the profile without taking into account the signature verification.
oasis-dssx-1.0-profiles-vr-cd1
https://docs.oasis-open.org/dss-x/profiles/verificationreport/oasis-dssx-1.0-profiles-vr-cd1.xsd
It defines the protocol and processing rules for the DSS Verification Protocol, as specified in Section 4 of the core profile. It allows returning individual verification reports for each signature in a verification request, including detailed information about the verification steps performed.
The Redtrust service doesn't provide for this profile, it's included for future developments where verification will be included as part of the service features.