- From: Donald E. Eastlake 3rd <dee3@torque.pothole.com>
- Date: Tue, 03 Jul 2001 09:24:34 -0400
- To: "KOBZAR,IGOR (HP-Cupertino,ex1)" <igor_kobzar@hp.com>
- cc: w3c-ietf-xmldsig@w3.org
If you have a URI="" Reference in a Signature, you must have a transform to avoid the signature trying to sign itself. Otherwise, for any normal algorithms, it will fail. Thanks, Donald From: "KOBZAR,IGOR (HP-Cupertino,ex1)" <igor_kobzar@hp.com> Message-ID: <A5374D237E78D41195810090279CC91A014886B3@xcup04.cup.hp.com> To: w3c-ietf-xmldsig@w3.org Date: Mon, 2 Jul 2001 19:41:13 -0700 >I have a question regarding the expected behavior for caclulating the digest >value of the null URI (URI="") in case if reference does not contain a >Transforms element. URI="" identifies the nodeset (minus any comment nodes) >of the XML resource containing the signature. The Transforms element is >optional. Does application that calculates a digest value has to skip this >reference from calculation, or skip the digest value element, or skip the >text of the digest value element, or indicate an error/warning? Is the test >for such expected behavior a part of the compatibility tests? Any reply is >appreciated. > >___________________________________________ >Igor Kobzar >Software Design Engineer >Hewlett-Packard Company >Phone: (408) 343 6150 >Fax: (408) 343 6777 > >
Received on Tuesday, 3 July 2001 09:25:41 UTC