RE: How much XML Signature is mature?

> Why in the world would a merchant want to pull down their
> system for even ten minutes so XML experts can sleep at night?

Because maybe they'd like to avoid vendor lock-in?
Because maybe, e.g., they'd like standard MSFT .NET tools to be able to
verify 3DSecure signatures?  Or IBM Websphere?  Etc...
	/r$
--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html