ds:Reference Type Attribute [E05 XMLDsig Errata]

Source: http://www.w3.org/2007/xmlsec/Drafts/xmldsig-core/#sec-URI

If the |URI| attribute is omitted altogether, the receiving application 
is expected to know the identity of the object. For example, a 
lightweight data protocol might omit this attribute given the identity 
of the object is part of the application context. This attribute may be 
omitted from at most one |Reference| in any particular |SignedInfo|, or 
|Manifest|.

The optional Type attribute contains information about the type of 
object being signed after all |ds:Reference| transforms have been 
applied %% E05 2002-05-08 %%. This is represented as a URI. For example:

|Type="http://www.w3.org/2000/09/xmldsig#Object" 
<http://www.w3.org/2000/09/xmldsig#Object>
Type="http://www.w3.org/2000/09/xmldsig#Manifest" 
<http://www.w3.org/2000/09/xmldsig#Manifest>|

The Type attribute applies to the item being pointed at, not its 
contents. For example, a reference that identifies an |Object| element 
containing a |SignatureProperties| element is still of type |#Object|. 
The type attribute is advisory. No validation of the type information is 
required by this specification.

------------  Potential solutions --------------

The

<klanz2> The optional Type attribute denotes the item, not its contents.
<klanz2> The optional Type attribute denotes the item (post transform), 
not its contents.
<klanz2> The optional Type attribute denotes the item (post transform if 
any), not it's contents.
<klanz2> The optional Type attribute denotes the actually digested item, 
not it's contents.

or even ...

The optional Type attribute denotes the actually digested item (element, 
binary object), not it's contents.


Konrad  

Received on Thursday, 3 May 2007 13:37:52 UTC