Signing a wsa header - use Xpath?

Am I correct that WS-Addressing does not allow an id type attribute on
the wsa: header elements, so if I want to include one in a ds:Reference
an Xpath expression is required?

Instead of (this is all in the soap header, ds:Reference inside a
Signature inside wsse:Security header)

<wsa:MessageId id="foo">...</wsa:MessageId>
...
<ds:Reference URI="#foo">

What is needed is

<wsa:MessageId>...<wsa:MessageId>
...
<ds:Reference URI=''>
  <ds:Transforms>
       <ds:Transform
Algorithm='http://www.w3.org/2002/06/xmldsig-filter2'
 
xmlns:dsxp='http://www.w3.org/2002/06/xmldsig-filter2'>
         <dsxp:XPath
Filter='intersect'>/soap:Envelope/soap:Header/wsa:MessaegId</dsxp:XPath>
        </ds:Transform>


Is this correct?

Thanks 

regards, Frederick

Frederick Hirsch
Nokia

Received on Friday, 5 August 2005 19:16:10 UTC