Re: Determining the presence of an XML signature

Hi,

There is no correct model.

If you are of the extreme protocol point of view, b is always right
and your protocol specification should tell you where signature(s)
should be.  If you are of the extreme document persuation, you
obviously have to search for Signature elements. For what I mean by
protocol/document, see
<ftp://ftp.ietf.org/internet-drafts/draft-eastlake-proto-doc-pov-04.txt>.

As for which is more prevalent, I don't know right now. It is possible
that some document uses may be very "important". But if XMLDSIG is
used in instant messaging or protocols like that, I would guess that
the number of b cases would eventually be orders of magnitude larger
than the number of "a" cases.

Thanks,
Donald

From:  Sekhar Vajjhala - Sun Microsystems <sekhar.vajjhala@sun.com>
Message-ID:  <3BE1D8CB.96BF9945@sun.com>
Date:  Thu, 01 Nov 2001 18:20:43 -0500
To:  w3c-ietf-xmldsig@w3.org

>When a recipient receives an XML document containing a signature -
>perhaps
>containing an envloped signature, how does the recipient know there
>is an XML Signature in the content. Either the recipient can 
>
>a. search for a <ds:Signature> element in the XML document
>b. or know that there is a XML Signature through some other
>   mechanism.
>
>Which of the above two is the correct or prevalent model ?
>
>Thanks.
>
>Sekhar
>

Received on Friday, 2 November 2001 09:10:48 UTC