W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > October to December 2000

Closing on Whitespace and Examples 3.4 and 3.7

From: Joseph M. Reagle Jr. <reagle@w3.org>
Date: Wed, 22 Nov 2000 11:15:51 -0500
Message-Id: <4.3.2.7.2.20001122110815.01f51cc8@rpcp.mit.edu>
To: Kevin Regan <kevinr@valicert.com>, "John Boyer" <jboyer@PureEdge.com>, "TAMURA Kent" <kent@trl.ibm.co.jp>, "merlin" <merlin@baltimore.ie>, "Donald Eastlake" <dee3@torque.pothole.com>
Cc: "IETF/W3C XML-DSig WG" <w3c-ietf-xmldsig@w3.org>
During the conversation [1] Kevin Regan and Tamura Kent argued for a change 
to the spec; Merlin Hughes, John Boyer, and Donald Eastlake argued not to 
change. So just given the numbers, I'd recognize that's not consensus to 
change the spec and momentum carries the day. The substantive result is that 
we need to ensure non-validating parsers (including Xerces) do the right 
thing with respect to white-space. Merlin has suggested a patch but received 
no feedback. Could other implementors also send in a comment? Are there 
other parsers we need to identify and ensure work the right way?

[1] My confused little summary of the discussion is below: <smile>

Kevin noted that such white space might be altered in processing or
transport and why is it considered a substantive variance under
canonical equivalence? John responded that we do this for
interoperability with non-validating parsers. The XML specification says
ALL processors must be capable of providing this information and validating 
parsers must provide information as to whether it was
significant. Applications that want to minimize white space could do it
themselves prior to signing. If this isn't the case, when used with
validating processor, the DTD can be tweaked. When used with a
non-validating parser it should do the right thing -- as that's why we
went down this path in the first place and unfortunately, as Kent noted,
that Xerces-J's DOM does not do this (so examples 3.4 and 3.7 throw
errors). Don argued this fact should not force us to require validating
processors. Instead, as John pointed out, we should get the
non-validating parsers to do the right thing. Merlin said he's gotten
Xerces to work right with a simple patch but they've been unresponsive.

__
Joseph Reagle Jr.
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/People/Reagle/
Received on Wednesday, 22 November 2000 11:17:33 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:11 GMT