Re: Omitting Location and Transforms from SignedInfo

> This is quite problematic.  Our core processing rules state that we verify
> SignedInfo, then we verify the digest values of the ObjectReferences.  HOW
> IS CORE BEHAVIOR GOING TO DO THIS IF CORE BEHAVIOR DOESN'T KNOW HOW TO
> RETRIEVE THE DATA?

I am still wondering if this is a typical case. How often do you find a
signature somewhere on the floor where you then need to get the data you
want to verify? Most of the time you will get the signature with the data
anyway. Somtimes you will have the data and look for a signature. And then,
any name is sufficient, need not be a location in the first place.

Peter