new ISSUE-162: signature 2.0, can Object type and encoding be determined reliably? from Frederick Hirsch on 2010-01-05 (public-xmlsec@w3.org from January 2010)

From: Frederick Hirsch <frederick.hirsch@nokia.com>
Date: Tue, 5 Jan 2010 11:40:02 -0500
To: XMLSec WG Public List <public-xmlsec@w3.org>
Cc: Frederick Hirsch <frederick.hirsch@nokia.com>
Message-Id: <3D2BAA2B-2111-46A8-B9EF-544B3E9E6D4A@nokia.com>

ISSUE-162

Will reliable determination of Object element type and encoding be  
possible under 2.0 Transform?
  In XML Signature 1.1 the following discussion is relevant: http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview.htm#sec-Object
  specifically,
[[ Applications which require normative type and encoding information  
for signature validation should specify Transforms with well defined  
resulting types and/or encodings. ]]
The Signature 2.0 will only have one transform, so transforms will  
typically not be used to determine type and encoding for Object.  
Another means should be provided, or normative language updated  
appropriately.

regards, Frederick

Frederick Hirsch
Nokia

This should partially close ACTION-480

Received on Tuesday, 5 January 2010 16:42:39 UTC