Re: [wss] Regarding Issue 173 and references to SOAP

[Rich Salz <rsalz@datapower.com>]

> SOAP n11n can break signatures using the standard c14n or exc-c14n if the
> n11n is applied after signing.  The breakage  can be avoided by n11n before
> signing, or define new c14n algorithm including the n11n.

I don't think I understand you.  SOAP 1.2 normalization is intended to
be a canonicalization mechanism.  I think we're in agreement:  if you're
signing more than a single part of a SOAP message, you have to have two
transforms: first normalization, and then the appropriate c14n mech.
	/r$
--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html