> According to some users of XAdES, it is more secure > as you also sign the hash of the signer's certificate in > order to thwart changing this element. > > Any thoughts on why this presumably good solution > is not a part of XML Dsig? You can do this now, by adding a Reference that points to the cert and including the cert in the Signature. I don't think anything special is needed. /r$ -- Rich Salz, Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.htmlReceived on Wednesday, 10 March 2004 10:03:32 GMT
This archive was generated by hypermail 2.2.0 + w3c-0.29 : Thursday, 13 January 2005 12:10:18 GMT