W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > April to June 2002

RE: Question on canonicalization and namespaces

From: Christian Geuer-Pollmann <geuer-pollmann@nue.et-inf.uni-siegen.de>
Date: Mon, 10 Jun 2002 17:36:12 +0200
To: "Spielman, Terence" <TSpielma@inovant.com>, "'w3c-ietf-xmldsig@w3.org'" <w3c-ietf-xmldsig@w3.org>
Cc: "'reagle@w3.org'" <reagle@w3.org>
Message-ID: <36459475.1023730572@pinkpanther>



--On Montag, 10. Juni 2002 08:29 -0700 "Spielman, Terence" 
<TSpielma@inovant.com> wrote:

>
> Thank you for the reply.
>
> If anyone could quickly answer the following yes/no questions as
> well, I would appreciate it.  Based on my readings of the specs
> (XML, Namespaces, XMLDSIG), my answers are in square brackets.
>
> 1) Is it required that the Signature element have a namespace
>    node with a value of "http://www.w3.org/2000/09/xmldsig#"?
>    [No if the XML need only be well-formed and Yes otherwise]

Yes. The Signature element must be bound to that namespace. This can look 
like this:

<Signature xmlns="http://www.w3.org/2000/09/xmldsig#" >...</Signature>

<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
>...</ds:Signature>

or even

<doc xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
   <ds:Signature>....</ds:Signature>
</doc>

In the latter case, there is no DOM node (no 'Attribute') in the 
ds:Signature element, but the namespace is in scope.

> 2) Does this namespace attribute have to be declared in the
>    Signature element itself?
>    [No, it can be declared higher in the DOM, see example 3]

Right. See above.

> 3) Is it possible to declare a non-default namespace node for
>    the xmldsig elements prior to the Signature element?
>    [Yes, the following is legal]
>    e.g.
>    <SomeElement xmlns="http://foo.com/#bar"
> 		xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
>    ....
>      <dsig:Signature>
>        <dsig:SignedInfo>
>        ...
>        </dsig:SignedInfo>
>       </dsig:Signature>
>     ...
>     </SomeElement>

Yes.
Received on Monday, 10 June 2002 11:36:20 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:16 GMT