Signature Portabilit, CanonicalizationMethod, etc.

Hi,

Attached are two hunks of HTML.

One is a replacement for Section 4.3.1: The CanonicalizationMethod
Element. It adjusts it for the removal of MinimalCanonicalization from
the document and has an added security warning about allowing arbitrary
CanonicalizationMethod functions.

The second is a replacement for Section 7.3: Namespace Context and
Portable Signatures.

While I have more or less followed the trend of recent discussion in
editing these sections,  the more I think about it the more it seems to
me that, unless it mandates the implementation of a canonicalization
that substantially divorces the canonicalizaed XML from its context,
XMLDSIG fails to provide interoperable signatures for protocol applications.

Thanks,
Donald

Received on Tuesday, 12 June 2001 12:37:03 UTC