W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > January to March 2000

Comments on Canonical XML

From: Joseph M. Reagle Jr. <reagle@w3.org>
Date: Fri, 18 Feb 2000 19:00:23 -0500
Message-Id: <3.0.5.32.20000218190023.00a0a7f0@localhost>
To: www-xml-canonicalization-comments@w3.org
Cc: "IETF/W3C XML-DSig WG" <w3c-ietf-xmldsig@w3.org>
http://www.w3.org/Signature/2000/02/CanonicalXML-comments.html

Canonical XML-comments

   Author(s):
          Ed Simon, Entrust <ed.simon@entrust.com>

   The [3]XML Signature WG has reviewed the [4]19 January 2000 draft of
   Canonical XML. Though we have
   some non-mandatory concerns about normalizing character encodings, we
   feel the draft meets our requirements for doing "XML aware
   canonicalization." (We will also specify a minimal [5]canonicalization
   that treats the content as text only.)

    For the record, this note includes a summary of our discussions
    regarding two topics related to Canonical XML. The first topic
    is the character encoding one just mentioned; the second deals
    with the treatment of serializing XPath returns.

        Normalization of character encoding ([6]section 5.1 of
        Canonical XML issued 19 Jan 2000):
          The XML Signature WG sees no signature or security implications
          with respect to the normalization of character representation.
          However, as a community of XML application developers we are
          concerned that requiring implementors to do such normalization
          may be introducing more complexity than is reasonable for the
          stated benefit. No Working Group member has advocated the
          character normalization as specified and a few members have
          expressed concern about its requirements on limited processors.

       Canonicalization of XML Fragments:
          The XML Signature WG discussed whether our requirement to
          serialize and canonicalize the results of XPath expressions
          (particularly node-set results) should be met by Canonical XML.
          We determined that if even if the serialization and
          canonicalization of XPath results is an issue for the XML
          Signature WG, it needs to be resolved by the XML Signature WG
          and is not an issue for the Canonical XML WG.

   In summary, we thank the Canonical XML WG for their efforts and look
   forward to further implementation experience and reports -- both from
   our own community and others.
    


_________________________________________________________
Joseph Reagle Jr.   
Policy Analyst           mailto:reagle@w3.org
XML-Signature Co-Chair   http://www.w3.org/People/Reagle/
Received on Friday, 18 February 2000 19:00:26 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:09 GMT