OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]

Subject: [security-services] FW: New specs: Exclusive C14N REC; and XPathFilter2 CR (fwd)

Of note to the issues raised regarding signature use in SAML, Exclusive
C14N is now a W3C REC, and the easiest Transform to use that doesn't
require a SAML schema change to permit ID attributes is now a Committee

-- Scott

-----Original Message-----
From: Christian Geuer-Pollmann
Sent: Thursday, July 18, 2002 11:27 AM
To: security-dev@xml.apache.org
Subject: New specs: Exclusive C14N REC; and XPath Filter2 CR (fwd)

Hi all,



---------- Forwarded Message ----------
Date: Donnerstag, 18. Juli 2002 11:21 -0400
From: Joseph Reagle <reagle@w3.org>
To: "XML Signature (W3C/IETF)" <w3c-ietf-xmldsig@w3.org>
Subject: New specs: Exclusive C14N REC; and XPath Filter2 CR

Congratulations and thanks to everyone that has contributed to these
specifications! Next steps? See if we can get one more interop report on
the XPath Filter2, publish it as a Proposed Recommendation in August,
and a Recommendation soon afterwards.

   Canonical XML [XML-C14N] specifies a standard serialization of XML
   that, when applied to a subdocument, includes the subdocument's
   ancestor context including all of the namespace declarations and
   attributes in the "xml:" namespace. However, some applications
   a method which, to the extent practical, excludes ancestor context
   a canonicalized subdocument. For example, one might require a digital
   signature over an XML payload (subdocument) in an XML message that
   not break when that subdocument is removed from its original message
   and/or inserted into a different context. This requirement is
   by Exclusive XML Canonicalization.

   XML Signature [XML-DSig] recommends a standard means for specifying
   information content to be digitally signed and for representing the
   resulting digital signatures in XML. Some applications require the
   ability to specify a subset of a given XML document as the
   content to be signed. The XML Signature specification meets this
   requirement with the XPath transform. However, this transform can be
   difficult to implement efficiently with existing technologies. This
   specification defines a new XML Signature transform to facilitate the
   development of efficient document subsetting implementations that
   interoperate under similar performance profiles.


Joseph Reagle Jr.                 http://www.w3.org/People/Reagle/
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/Signature/
W3C XML Encryption Chair          http://www.w3.org/Encryption/2001/

---------- End Forwarded Message ----------

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]

Powered by eList eXpress LLC