W3C home > Mailing lists > Public > public-xmlsec@w3.org > January 2010

new ISSUE-162: signature 2.0, can Object type and encoding be determined reliably?

From: Frederick Hirsch <frederick.hirsch@nokia.com>
Date: Tue, 5 Jan 2010 11:40:02 -0500
Message-Id: <3D2BAA2B-2111-46A8-B9EF-544B3E9E6D4A@nokia.com>
To: XMLSec WG Public List <public-xmlsec@w3.org>
Cc: Frederick Hirsch <frederick.hirsch@nokia.com>
ISSUE-162

Will reliable determination of Object element type and encoding be  
possible under 2.0 Transform?
  In XML Signature 1.1 the following discussion is relevant: http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview.htm#sec-Object
  specifically,
[[ Applications which require normative type and encoding information  
for signature validation should specify Transforms with well defined  
resulting types and/or encodings. ]]
The Signature 2.0 will only have one transform, so transforms will  
typically not be used to determine type and encoding for Object.  
Another means should be provided, or normative language updated  
appropriately.

regards, Frederick

Frederick Hirsch
Nokia

This should partially close ACTION-480
Received on Tuesday, 5 January 2010 16:42:39 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 5 January 2010 16:42:40 GMT