CMPWG Nov-8-2012:

The last two paragraphs of OpenSecureChannel description are:

"The OpenSecureChannel request and response Messages shall be signed with the sender's Certificate. These Messages shall always be encrypted. If the transport layer does not provide encryption, then these Messages shall be encrypted with the receiver's Certificate.

The Certificates used in the OpenSecureChannel service shall be the application instance Certificates. Clients and Servers shall verify that the same Certificates were used in the CreateSession and ActivateSession services."

The first paragraph is plainly wrong. In addition, two interpretations directly within the CMPWG on the word "transport" caused confusion; is this the ACTUAL on-the-wire transport, or the UA protocol (Bin/Http etc.)?

The second paragraph is actually OK, but additional commentary is needed to put context on the security policy.

On a larger scale... the UA Spec parts 3, 4, 6, and perhaps 7 should be overhauled to ensure that all areas that cover certificate-exchange are revised per the new behavior.