Re: Next steps for xmldsig

On Thursday 11 April 2002 00:31, Aleksey Sanin wrote:
>  From my point of view, it's very difficult to prove one point of view
> or another using
> any examples. I have feeling that real performance will significanty
> depend on a few
> different factors we don't know about (for example, XPath engine
> optimization).

Hi Aleksey,

You're right that it's difficult to prove anything given different 
processing scenarios, and there are questions of optimizing an XPath 
processor versus coming up with an optimized  "profile" akin to what we are 
doing. Our answers to these questions are driven by operational experience 
and it's the sub-tree case that we found needs to be addressed. For 
example, people want to easily isolate multiple signatures or a SOAP 
payload. These are our real world requirements.

That isn't to say the example you gave is unimportant, but absent a bunch 
of folks saying "hey, I have a critical problem in this application" I 
expect to publish this as a W3C Working Draft. We can continue the 
discussion and tests, and I certainly welcome proposed text to make the 
issue more clear to readers of the spec.

Received on Friday, 12 April 2002 15:41:02 UTC