Public Comment

[comment-form@oasis-open.org]

Comment from: peter.hendry@capeclear.com

Name: Peter Hendry
Title: Principal Engineer
Organization: Cape Clear Software Inc.
Regarding Specification: http://www.oasis-open.org/committees/download.php/15251/oasis-wss-soap-message-security-1.1.pdf

The specification states in section 8.5 

  "/wsse11:SignatureConfirmation/@Value
    This optional attribute contains the contents of a <ds:SignatureValue>"

but in the schema the Value attribute is defined as "required".

Second, in the same section 

  "/wsse11:SignatureConfirmation/@wsu:Id
    ...This attribute MUST be present so that un-ambiguous references can be made to this <wsse11:SignatureConfirmation> element"

The wsu:Id attribute is defined in the schema for SignatureConfirmation as "optional". I assume if this id is only to identify the signature confirmation it should be optional as there should be no need to make it required in the case there is no refefence to the element.