RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded

["Nick Pope" <pope@secstan.com>]

Where a human user signs XML which is transformed using an XSLT style sheet
I would include in the signature (e.g. via a manifest):

- The XML original and the XSLT style sheet

rather than:

- The XML original transformed using the XSLT style sheet (plus the XSLT as
Gregor points out) and depend on the verifier applying the style sheet to
the XML original in exactly the same way as the signer.

Nick





> -----Original Message-----
> From: Anthony Nadalin [mailto:drsecure@us.ibm.com]
> Sent: 31 March 2003 14:22
> To: dss@lists.oasis-open.org
> Subject: RE: [dss] Groups - dss-requirements-1.0-draft-02.doc uploaded
>
>
>
>
>
>
> >I personally believe, however, that rather than apply the
> signature to the
> >transformed data it would be better to sign the original XML and
> the style
> >sheet.
>
> Please explain
>
> Anthony Nadalin | work 512.436.9568 | cell 512.289.4122
>
>
>