Definitions of <SignatureObject> in Core-27

[Paul Madsen <p.madsen@entrust.com>]

In Core -27, the <SignatureObject> is defined generically and in the context of <SignResponse> as, respectively:

359: The <SignatureObject> element contains a signature or timestamp of some sort.

553: The resultant signature or timestamp, if the request succeeds. This MUST NOT contain a <SignaturePtr>; it MUST contain an entire signature or timestamp.

Both definitions imply that the <SignatureObject> can only contain a <Signature> or <Timestamp> element directly.

The WSS profile (and perhaps others?) uses the <SignatureObject> in a <SignResponse> to return a revised document into which the created signature has been inserted, rather than the signature directly.

Additional text along the lines of '(whether directly or embedded)' would clarify.

Paul

-----------------------------------------------------------------

Paul Madsen

e:  p.madsen@entrust.com

p:  613-270-2632

c:  613-799-2632

Entrust