Re: XML Processing in Current Implementations

In message "XML Processing in Current Implementations"
    on 00/07/28, "Joseph M. Reagle Jr." <reagle@w3.org> writes:
> 1. If the document has Canonical XML applied, is the Infoset availble
> through DOM/SAX that of the example XML instance with a PI Infoset node, or
> the resulting (transformed) instance? If the infoset includes the changes,
> we can easily satisfy the security requirements above be recommending
> canonicalization.

Infoset of the document is not changed if the document has an
xml-stylesheet PI.

> 2. Otherwise, we'd have to recommend that 'http://foo.example.com/bar.xslt'
> also be included in a Signature Reference if we  want to get bit by having
> foo.example.com changing the stylesheet to affect the result after the
> signature.

I agree.

-- 
TAMURA Kent @ Tokyo Research Laboratory, IBM

Received on Saturday, 29 July 2000 10:22:18 UTC