Signature Transforms

[David Fischer <david@drummondgroup.com>]

Hi Ralph,

Remember in Vienna when we went back and forth on whether it is necessary to
create a transform to exclude the Signature element?  I'm still not sure. . .

http://www.w3.org/TR/2001/PR-xmldsig-core-20010820/

       <Reference URI="">
         <Transforms>
           <Transform
             Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
             <XPath xmlns:dsig="&dsig;">

not(ancestor-or-self::dsig:Signature)
             </XPath>
           </Transform>
         </Transforms>
         <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
         <DigestValue>. . .</DigestValue>
       </Reference>

This seems to have a Transform excluding the Signature element.  However, in our
example on page 54 we have:

       <ds:Reference URI="">
            <Transforms>
                <Transform
Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                  <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
                              not(ancestor-or-self::eb:TraceHeaderList or
                      ancestor-or-self::eb:Via)
                 </XPath>
                 </Transform>
             </Transforms>
         <ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
         <ds:DigestValue>...</ds:DigestValue>
       </ds:Reference>

We don't exclude the Signature in the Transform.  In Vienna, we decided that
this happened automatically, can you confirm?

Regards,

David Fischer
Drummond Group.