- From: TAMURA Kent <kent@trl.ibm.co.jp>
- Date: Sat, 29 Jul 2000 23:21:43 +0900
- To: "IETF/W3C XML-DSig WG" <w3c-ietf-xmldsig@w3.org>
In message "XML Processing in Current Implementations"
on 00/07/28, "Joseph M. Reagle Jr." <reagle@w3.org> writes:
> 1. If the document has Canonical XML applied, is the Infoset availble
> through DOM/SAX that of the example XML instance with a PI Infoset node, or
> the resulting (transformed) instance? If the infoset includes the changes,
> we can easily satisfy the security requirements above be recommending
> canonicalization.
Infoset of the document is not changed if the document has an
xml-stylesheet PI.
> 2. Otherwise, we'd have to recommend that 'http://foo.example.com/bar.xslt'
> also be included in a Signature Reference if we want to get bit by having
> foo.example.com changing the stylesheet to affect the result after the
> signature.
I agree.
--
TAMURA Kent @ Tokyo Research Laboratory, IBM
Received on Saturday, 29 July 2000 10:22:18 UTC