RE: [dss] Signature/Properties QName issue

[<Frederick.Hirsch@nokia.com>]

Rich

I thought the issue was

<Properties>
<Identifier>
foo:bar OR http://abc.org/bar
</Identifier>
</Properties>

-----Original Message-----
From: ext Rich Salz [mailto:rsalz@datapower.com]
Sent: Monday, February 09, 2004 11:20 AM
To: Hirsch Frederick (Nokia-TP/Boston)
Cc: trevp@trevp.net; dss@lists.oasis-open.org
Subject: Re: [dss] Signature/Properties QName issue


I'm a little late to this discussion (and was hacking a little too late 
last night), so I'm confused.

If the issue is
    <dss:property type="tns:myname">
than I totally agree with Frederick -- using a QName in an attribute 
value is evil.  DSIG and XML-Enc don't do that, and as of two weeks ago, 
WS-Security doesn't do it either (Frederick and W3C TAG Member Dave 
Orchard helped lead the fight to make this important last-minute change; 
I helped, too.)

If, however, the issue is that the element name identifies the property 
-- which is what I thought the current schema has:
    <tns:myname>...special property content...</tns:myname>
than all is well.

Can someone clarify?  Thanks.
	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html