RE: [dss] Signature Verification Output

[Rich Salz <rsalz@datapower.com>]

> I am not sure if you would be happy if I sent you an XML signature
> with a dsig:Reference containing a - possibly long and complicated -
> chain of transforms; and your client application tells you: "Well,
> Gregor sent you a signed message; the signature seems to be valid.
> However I cannot tell you what the content of the message is about,
> since I have no means to process the transforms specified in the
> signature" ...

If you can't process the transforms than you can't validate the signature.

But that point aside, yes, I would be happy. I don't expect CryptoAPI to
be able to render HTML ...
	/r$