W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > October to December 2003

Validating "profiled" XML DSig

From: Anders Rundgren <anders.rundgren@telia.com>
Date: Tue, 16 Dec 2003 16:49:18 +0100
Message-ID: <014101c3c3ec$2ac13870$0500a8c0@arport>
To: <w3c-ietf-xmldsig@w3.org>

I hope this question is not too "newbe-like".

As it seems there are many XML DSig users and they have all
made their own choices of what properties etc. to use.  This is
the dark side of a having a flexible standard :-|

Is there a recommendable way to validate that an XML Signature
follows a certain profile without doing a "me-too" XML Signature
schema?

I have found one way but it is ugly and that is to have a generic
XML Dsig validator and then programatically check that you got
what you consider the "right" set of options.  Besides being
a bit on the complex side, the diagnostics you would get for
PGP keys in an X509-shop is probably not that great.

Although this question is really an XML Schema issue, I have
seen few examples of XML Schemas having this kind of
flexibility.

thanx
Anders Rundgren
Received on Tuesday, 16 December 2003 10:54:23 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:18 GMT