RE: [wss] Recently discover WSS security threat

[Rich Salz <rsalz@datapower.com>]

> So whatever transform you use, the *output* of the transform has to look
> like:
> <soap:Envelope>
>   <soap:Header>
>     <my:header wsu:id="abc">
>        ...
>     </my:header>
>   </soap:Header>
>   <soap:Body>
>     ...
>   </soap:Body>
> </soap:Envelope>

I just re-read the sectin of the spec you linked to.

Are you trying to protect against a stand-alone signature on a header
element being re-used?

	/r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html