W3C home > Mailing lists > Public > public-xmlsec-maintwg@w3.org > May 2007

ds:Reference Type Attribute [E05 XMLDsig Errata]

From: Konrad Lanz <Konrad.Lanz@iaik.tugraz.at>
Date: Thu, 03 May 2007 15:37:33 +0200
Message-ID: <4639E59D.1080400@iaik.tugraz.at>
To: public-xmlsec-maintwg@w3.org
Source: http://www.w3.org/2007/xmlsec/Drafts/xmldsig-core/#sec-URI

If the |URI| attribute is omitted altogether, the receiving application 
is expected to know the identity of the object. For example, a 
lightweight data protocol might omit this attribute given the identity 
of the object is part of the application context. This attribute may be 
omitted from at most one |Reference| in any particular |SignedInfo|, or 
|Manifest|.

The optional Type attribute contains information about the type of 
object being signed after all |ds:Reference| transforms have been 
applied %% E05 2002-05-08 %%. This is represented as a URI. For example:

|Type="http://www.w3.org/2000/09/xmldsig#Object" 
<http://www.w3.org/2000/09/xmldsig#Object>
Type="http://www.w3.org/2000/09/xmldsig#Manifest" 
<http://www.w3.org/2000/09/xmldsig#Manifest>|

The Type attribute applies to the item being pointed at, not its 
contents. For example, a reference that identifies an |Object| element 
containing a |SignatureProperties| element is still of type |#Object|. 
The type attribute is advisory. No validation of the type information is 
required by this specification.

------------  Potential solutions --------------

The

<klanz2> The optional Type attribute denotes the item, not its contents.
<klanz2> The optional Type attribute denotes the item (post transform), 
not its contents.
<klanz2> The optional Type attribute denotes the item (post transform if 
any), not it's contents.
<klanz2> The optional Type attribute denotes the actually digested item, 
not it's contents.

or even ...

The optional Type attribute denotes the actually digested item (element, 
binary object), not it's contents.


Konrad  





Received on Thursday, 3 May 2007 13:37:52 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:21:59 GMT