RE: XMLDSIG Interop in connection with 48th IETF

>  >We are just using the DTD out of the latest draft. (broken as it is
> compared
>  >to the schema)
> How do you mean broken? Kevin has pointed out one problem 
> [1] 

Thats the one, aside from Merlins comments.

> I think for the purposes of Interop, it would make sense to create an
> application DTD with Signature+application declarations by which we can
> enveloped and enveloping Signatures. Do you already have one?

I am in the process of embedding the DTD into another for signing - with
that experience I'll put together another example (embedded/embedding) and
post it.

One comment I do have, is that XML-based applications requiring DTD
validation find it convenient to embed the entire DTD in a DOCTYPE element
in the XML directly - (rather than a reference) so that only the .xml file
need be passed around.
A restriction on doing this is that you can't have variable declarations a
<!ENTITY % Object.ANY...>
in the DTD.

For such an application, I have to take the DSIG DTD, search-replace all the
variables, then embed it in the app DTD before embedding that in the xml.

Do people think this is an acceptable process for that situation? I guess it
has to be.


Owen Roberts
Toolkits Architect
Baltimore Technologies, Dublin

Received on Wednesday, 19 July 2000 05:43:11 UTC