W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > July to September 2000

Re: XML Processing in Current Implementations

From: TAMURA Kent <kent@trl.ibm.co.jp>
Date: Sat, 29 Jul 2000 23:21:43 +0900
Message-Id: <200007291421.XAA23296@ns.trl.ibm.com>
To: "IETF/W3C XML-DSig WG" <w3c-ietf-xmldsig@w3.org>

In message "XML Processing in Current Implementations"
    on 00/07/28, "Joseph M. Reagle Jr." <reagle@w3.org> writes:
> 1. If the document has Canonical XML applied, is the Infoset availble
> through DOM/SAX that of the example XML instance with a PI Infoset node, or
> the resulting (transformed) instance? If the infoset includes the changes,
> we can easily satisfy the security requirements above be recommending
> canonicalization.

Infoset of the document is not changed if the document has an
xml-stylesheet PI.

> 2. Otherwise, we'd have to recommend that 'http://foo.example.com/bar.xslt'
> also be included in a Signature Reference if we  want to get bit by having
> foo.example.com changing the stylesheet to affect the result after the
> signature.

I agree.

-- 
TAMURA Kent @ Tokyo Research Laboratory, IBM
Received on Saturday, 29 July 2000 10:22:18 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:10 GMT