[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [wss] SwA Profile draft 15 vote Dec 14
The transform does not modify the message, rather it
produces output that can be used as input to reference digest operation. I don't
understand the issue of angle bracket removal.
regards, Frederick From: ext Ramana Turlapati [mailto:ramana.rao.turlapati@oracle.com] Sent: Thursday, December 09, 2004 3:23 PM To: Hirsch Frederick (Nokia-TP/Boston); Ramana RaoTurlapati; wss@lists.oasis-open.org Subject: Re: [wss] SwA Profile draft 15 vote Dec 14 Frederick,
There is no
argument on what needs to be signed. The doc makes it very clear why "<>"
need to be included for the attachment complete transform. My dilemma is about
what should be the receiver (or security processing layer on the receiver side)
doing after the verification of the signature. Should it restore the original
content-id (without "<>") or leave them "<>" as they are? If
it removes them and there are swa-refs to the same attachment, swa-ref
processing will fail. If it leaves them as is and there are no swa-refs, getting
the attachment using original "content-id" will
fail.
/t$r
(Ramana Turlapati)
regards, Frederick
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]