RE: [wss] Proposed text on C14N

[<Frederick.Hirsch@nokia.com>]

Merlin

Thanks I think you expressed it well. I think I meant the same as you with my original wording -  that inclusive is safer from a security point if you can use it.

In your last paragraph you raise an interesting point - is it unique to SOAP signing?
Aren't ids also an issue if I put a pure XML Digital Signature signed document fragment into another document? I guess most use cases involving XML context change are around messaging.

regards, Frederick
 
Frederick Hirsch
Nokia Mobile Phones