Re: PASWA, canonicalization, and signatures

> 1. Who is expected to invent the c14n algorithm to be used when
>    signing the "value space"?

It's not clear that there needs to be one.  If it's binary data -- such
as a JPEG or PDF -- then specify specify no transform.  If it's XML, then
(sigh) re-serialize the infoset according to one of the several c14n
methods that are already out there.

>    Note that the W3C XML Signature and XML Encryption activities
>    closed in May 2003. [2]

Irrelevent; since Transform/@Algorithm is a URI, anyone can develop
a C14N spec.  UDDI has an XSD-based one, for example.

>    SOAP message as binary content" and that it's only "inefficient
>    implementations" that will add attachments as "base64 encoded
>    content"?

Or that that wish, e.g., to work over existing transports.
        /r$

Received on Tuesday, 10 June 2003 14:05:44 UTC