RE: [security-services] AI-37 DSig Core change proposal

[Scott Cantor <cantor.2@osu.edu>]

> Thanks for another excellent document. I have a couple of 
> questions and comments. 

Just to note, most of these are from the SAML 1.0 text that I left intact in the first few sections.

> 5) 5.4.3
> Should we remove this:
> "Profiles MAY permit other methods, or recommend that 
> specific methods be used or omitted, if it can be assumed 
> that processing will not be affected in the application of 
> the profile"
> 
> or do we want to say that canonicalization must allow 
> signature verification outside the original XML context?

I don't feel strongly about keeping it. I figured people might want to leave an "out" for profiles that wanted to define their own
rules for efficiency or whatever. I'm not sure it's really needed, since the profile here is close to maximal efficiency anyway.

-- Scott