While working on profiles for Part 83, we realized that Part 83 needs to have more explicit statement related to security (signing of document). There are no shall or even shoulds in this section. The entire section is more general statements.

The section should make a reference to Part 4 for the validation steps for a certificate (table 106 in part 4 if you want to check them) . I would expand a little on the validation check (host name and URI don't apply as stated to a descriptor, but maybe part 83 should define something (the company that owns the descriptor? or some other setting).

The Conformance Unit for this probably needs to split one for the certificate validation and one describing the use of the certificate for signing it (which I believe is from the open packaging convention document). In general the reference section 9.2.4 needs some help (looking at the document some of the items might be described in other sections, but then they should be linked.