The aim of the profile is to allow the establishment secure communications between a service resource and a client by 
transmitting the materials required to securely establish communications from the resource to the client using the 
resource’s EPR. The security of the connection relies on the transmitted materials and so the integrity of the 
transmitted materials must be guaranteed for there to be any confidence in the security of the communications. Section 6
 address this issue by describing how the relevant parts of the EPR can be digitally signed. Unfortunately the related 
conformance statement (C0302) makes digital signing optional and not mandatory. This means that profile conformant EPRs 
may not contain material that a client can trust. This weakens the effectiveness of the profile. Making the requirement 
mandatory does not restrict the profile’s scope as client are not required to check the signature. That is, a more 
effective wording would be to require a digital signature of the material but add a new conformance statement so that 
clients SHOULD check the signature.