Re: Poll on Exclusive Canonicalization

If you have a URI="" Reference in a Signature, you must have a transform
to avoid the signature trying to sign itself. Otherwise, for any normal
algorithms, it will fail.

Thanks,
Donald

From:  "KOBZAR,IGOR (HP-Cupertino,ex1)" <igor_kobzar@hp.com>
Message-ID:  <A5374D237E78D41195810090279CC91A014886B3@xcup04.cup.hp.com>
To:  w3c-ietf-xmldsig@w3.org
Date:  Mon, 2 Jul 2001 19:41:13 -0700 

>I have a question regarding the expected behavior for caclulating the digest
>value of the null URI (URI="") in case if reference does not contain a
>Transforms element.  URI="" identifies the nodeset (minus any comment nodes)
>of the XML resource containing the signature.  The Transforms element is
>optional.  Does application that calculates a digest value has to skip this
>reference from calculation, or skip the digest value element, or skip the
>text of the digest value element, or indicate an error/warning?  Is the test
>for such expected behavior a part of the compatibility tests?  Any reply is
>appreciated.
>
>___________________________________________
>Igor Kobzar
>Software Design Engineer
>Hewlett-Packard Company
>Phone: (408) 343 6150
>Fax:   (408) 343 6777
> 
>

Received on Tuesday, 3 July 2001 09:25:41 UTC