> Here's the re-worked proposal…dropping the <wsa:RefPs> element as per > Jonathan [1] +1 As for the security issues, they're not that big a deal. It means taht under some circumstances, signing a refp element will require that the signature reference (dsig:Reference element) use an XPath transformation to omit the attribute when signing the element. And since the refps are now "generically visible," this addresses the security concerns I've been raising. /r$ -- Rich Salz, Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.htmlReceived on Wednesday, 15 December 2004 18:45:20 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 2 June 2009 18:35:00 GMT