OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

wss message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: RE: [wss] Proposed text on C14N


>  The application might not care about the tag, but only about
> the text("foo").

Then the application can use an XPath transform to get just the
text node(s) in cares about.

> If the application cares about the tag, then the
> original message should have contained
>
>       <i:innermost xmlns:i="foo.com" ID="foo">foo</i:innermost>

This would require applications to rewrite their documents so that
any possible subset that someone might ever want to sign has all the
necessary namespace declarations.  That imposes an impossible
burden on anyone creating an XML document, and on anyone signing
any XML content.

You might find it worthwhile to skim through the XML DSIG requirements
document, http://www.w3.org/TR/xmldsig-requirements, as well.

        /r$

--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]