Re: Content-free Header and Body elements

Marc Hadley wrote:
> One solution to this would be to leave part 1 unchanged and update the 
> SOAP message normalization note[1], adding removal of empty Header 
> elements to the algorithm.

That removes the ambiguity for signing, but if the original message but 
it doesn't allow anyone to add a header if the original message has no 
Header EII, as Gudge pointed out.  His belief is that this is not the 
intent.
	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology         http://www.datapower.com
XS40 XML Security Gateway    http://www.datapower.com/products/xs40.html